0073564d38840300", 0x23, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) [ 2187.303461][ T6066] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2187.312819][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.320986][ T6066] usb 2-1: Product: syz [ 2187.325422][ T6066] usb 2-1: Manufacturer: syz [ 2187.330151][ T6066] usb 2-1: SerialNumber: syz 01:51:49 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x14, &(0x7f0000000000)={0x81}, 0x8) [ 2187.536516][ T6066] cdc_ether: probe of 2-1:1.0 failed with error -22 01:51:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 01:51:49 executing program 4: syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1802000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2187.665754][ T7214] loop5: detected capacity change from 0 to 252287 [ 2187.744314][T29455] usb 2-1: USB disconnect, device number 73 01:51:50 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r1, r0) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) 01:51:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x290}, 0x98) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000640)={0x10, 0x2}, 0x10) 01:51:50 executing program 2: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) 01:51:50 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300", 0x23, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:50 executing program 0: r0 = socket(0x2, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x6) 01:51:50 executing program 4: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, &(0x7f0000000040), &(0x7f0000000100)=0x90) [ 2188.455456][ T7230] loop5: detected capacity change from 0 to 252287 01:51:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@un=@abs={0x8}, 0x8) 01:51:50 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) shutdown(r0, 0x0) 01:51:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000200), 0x90) 01:51:50 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300", 0x23, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) bind$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 01:51:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f00000002c0), &(0x7f0000000300)=0x18) [ 2189.065881][ T7251] loop5: detected capacity change from 0 to 252287 01:51:51 executing program 1: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) sendmsg$inet_sctp(r0, &(0x7f00000019c0)={&(0x7f0000001440)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=[@sndrcv={0x2c}], 0x2c}, 0x0) 01:51:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x4}, 0x8) 01:51:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40043) 01:51:51 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100", 0x34, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:51 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = dup2(r4, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x31, &(0x7f0000000000)={r6}, &(0x7f0000000200)=0x8) 01:51:51 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 01:51:51 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000100)=@abs={0x8}, 0x8) 01:51:51 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) recvmsg(r1, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x83) 01:51:51 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0xfd27) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 2189.827713][ T7271] loop5: detected capacity change from 0 to 252287 01:51:52 executing program 4: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r2 = dup2(r1, r0) shutdown(r2, 0x0) 01:51:52 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100", 0x34, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:52 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001480)={0x1c, 0x1c, 0x2}, 0x15) 01:51:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), &(0x7f0000000140)=0x90) 01:51:52 executing program 0: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000040)=0x98) 01:51:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000280)={0x0, 0x220}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0) [ 2190.736221][ T7303] loop5: detected capacity change from 0 to 252287 01:51:53 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x107, &(0x7f0000000040), &(0x7f00000000c0)=0x18) 01:51:53 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100", 0x34, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000280)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 01:51:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000040), &(0x7f0000000100)=0x4) 01:51:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r3}, &(0x7f0000000400)=0x10) 01:51:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000880), 0x4) [ 2191.407848][ T7319] loop5: detected capacity change from 0 to 252287 01:51:53 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, 0x0, 0x0) 01:51:53 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100526549734572334673", 0x3d, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:53 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000180)='htcp\x00', 0x5) 01:51:53 executing program 1: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r2 = dup2(r1, r0) sendmsg$inet_sctp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c}, 0x20109) 01:51:54 executing program 0: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000100), &(0x7f00000001c0)=0x90) 01:51:54 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000380)='cubic\x00', 0x6) [ 2192.130123][ T7342] loop5: detected capacity change from 0 to 252287 [ 2192.226133][ T7342] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2192.240625][ T7342] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 2192.325829][ T7342] REISERFS (device loop5): using ordered data mode [ 2192.332763][ T7342] reiserfs: using flush barriers 01:51:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x14) [ 2192.392040][ T7342] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 2192.482438][ T7342] REISERFS (device loop5): checking transaction log (loop5) 01:51:54 executing program 1: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000005c0), 0xc) 01:51:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000003c0)={0x0, @in, 0x0, 0x8d6, 0x111}, 0x98) 01:51:54 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) [ 2192.747410][ T7342] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one -1 [ 2192.758726][ T7342] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 2192.770483][ T7342] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 01:51:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) 01:51:55 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000003c0)={0x1c, 0x1c, 0x3}, 0x1c) 01:51:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}, 0xb) 01:51:55 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100526549734572334673", 0x3d, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:55 executing program 3: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000)={0x0, 0x7fff}, 0x8) 01:51:55 executing program 4: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 01:51:55 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 01:51:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 01:51:55 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) [ 2193.851876][ T7384] loop5: detected capacity change from 0 to 252287 01:51:56 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0xffffffffffffffff}, 0x1c) 01:51:56 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0x1c}, 0x1c) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000001240)={r3, 0x2}, 0x8) [ 2193.963764][ T7384] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2193.977111][ T7384] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 2194.107556][ T7384] REISERFS (device loop5): using ordered data mode [ 2194.114486][ T7384] reiserfs: using flush barriers [ 2194.156506][ T7384] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 01:51:56 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) shutdown(r0, 0x1) 01:51:56 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040), 0x10) [ 2194.303379][ T7384] REISERFS (device loop5): checking transaction log (loop5) [ 2194.382059][ T7384] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one -1 [ 2194.394042][ T7384] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 2194.405149][ T7384] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 01:51:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x4220}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 01:51:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000180), &(0x7f0000000240)=0x98) 01:51:57 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100526549734572334673", 0x3d, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:57 executing program 4: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000140), &(0x7f0000000180)=0xc) 01:51:57 executing program 1: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 01:51:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) 01:51:57 executing program 3: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 01:51:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = fcntl$dupfd(r2, 0x0, r1) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 01:51:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)=0x8) 01:51:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x8) [ 2195.450202][ T7428] loop5: detected capacity change from 0 to 252287 01:51:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000340)={0xffffff86, 0x2}, 0x63) [ 2195.628363][ T7428] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2195.641865][ T7428] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 2195.685464][ T7428] REISERFS (device loop5): using ordered data mode [ 2195.692646][ T7428] reiserfs: using flush barriers [ 2195.763011][ T7428] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 01:51:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x105, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x4220}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000e40)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@sndinfo={0x1c}], 0x1c}, 0x0) 01:51:57 executing program 2: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000001c0)="bac7d5c3bce84763fe00c5edfcb0daceef7f44e9068e6415354c5892129e31da4103fd55305e6b83c1ac18b1a9395ab5ccd762aff20c5ad9b9f23252d165e7c815219064aa0a64cd8195630e994608f215311c3c1c0b61bd2b328fb684a429bc57351d41fdc0d13e856164a5ba971bf9c11a614442129b551f598f5992085c92782d7f0011a2814fd91956577e2609813a52be02799145314138744aa0c899a51b46df2cc59385", 0xa7}, {&(0x7f0000000080)="ca800d488dfc2ddbd28b3db5379bbf755dfd181e3e196be20b273dbb15b3bdad76950169706b4f61d9c857ace8d73dd88b987acf6fbe23c421ae447a84bf6bb801b79ad2a3dfac3601fd4add1c1eb263eea9", 0x52}, {&(0x7f0000000280)="bdee829099cbb564d476efa2e8e2e3c0cb88920179db94d3dc8f1fdc91d6b1a6fd23fbe514e34b935576107120ee0738a5a7f051e32672cbd861a78d8de1f3b46cd4bcaf6a2d7582086f51eb99606582351259d23d873de2cf9df0a81631f881a3cf5c92be565ac2e71f16ccce51b0dc7882da991a7cde9afa058c189cd8ef15e37cb63a90ceae891fc31c72c44a0e018a4da82f34e44997df7f0b265b976fe2a2d22748cffee17d0f4acbedeef1f49b376b79745bc248bc5e9e229badb77d42f87635", 0xc3}, {&(0x7f0000000380)="f543f6c6c9d05939e6bc74c40f48be1be3427535263a5cad714f46e0eb7105dd8394582aa292ed1ff97c1f5ff46244c57c9f29dc52154c599b2afb1c9fa6a633eb52dcc690b857adbb04c0161031e565c7016474c26c9d0e64da6eb524fb55dd8dc16aafabd5cc4ead40d3fef45b071b851a5c173b7f64cca051fd5d390da74758f89c9a9db3dd2cf1d5f8f6e3a01a5f39b6cbeeb9aafcc3c40c3dfce71d8e26cfa0e1cf63dea5c60cc670221346984cbb70f83377a9de6d838a1d7c8030c978e7625ba61d3ec1d532a5e1bbdf662d9c28874312f66f442931d716acde0dda3f49171875e31abfa1a061f8d4ef6465da609ea941d98271921bb1f36d88bb721b938642bf03c75644d2770412d879248e5b4b635056226261957934a143105a609c321b8f8b7eb883b6f289989eeeeb9722b4d5909eed33b5b89e98663e2128d84a19357ba6d32295e69757d7ef2ae45b6b871251238ed075ecd570a221386fa07b7abe11eb576e077fd029cf8eec5302c565ff433a444f9bbd6b63971fa3a0829f44851419f319377080fd345f3658856476aaff89460137efaec47b877d6cd0c30d2cbb90a28cdf838f95cffe61f823f9ab3000abf4b5566d09ea6b082729e4e010e708a59897e6a528310ecd64563c44c0c40334aa1fb5899f799e6a4994a31f31f795fe8fd0aaab66ea707f1b94172118b4091ef94cb72243315466adbbc09c47bec00ea8d3216f9434cd06a33851b68e8bcfd79f9f465ab6f3bb4d6847d2177b0e7fc31a6c716220c7ddd178f4a3f87cb227b5e715286559c4b1e16deccc1532ffa07d8ddf2851ef0912da99e37095a8b75717538aa0d8df0e8db86aeada9e614ddb217cc7b731609980ebdf5353e3f0b0e54c4704df57c5b0154194c9d7961d8fa2d627634818dcca58fa64681d21c920d82a664cb5616b9d9dda056a44d7403d3bb7e0f4bd3bafc5d4ac6de333d12882ee282eb0f0baf145b9cb533e85e4645bdbd5774262964007dec71043affe3c2822870a653737a3866b1b75acae35e05b61b712d7118a82955c3e84a9cd59eb1fb03ffa5295b6e863d28d0e4164b802e717e8c3c0587e9366459afffa7631947b356aec1557ac8c10b5fdcf1b20b31235a90d9974d2eb3b71d3217b05705a5b8d05ef07439e4979cda5eaabb73dba11f195427488b68a5d2eb41546484c6abf73d922ee1ffad9445c92cd4cb477f6d768bb1e6d985d17dcf1e606dcf9462602b2a3fd83dd5d306502dd904540ef86fe7f3c6305cbbbd2e15e4e032c2bec8b6bae2e8f0add1ce7b0420979223cb3365744c7ab4dfc334cb9428cc8bf60d5cbea9160c98855e092ac52e60c1c0e5eae8f3a6d4696362fc1e3c0d3a61f5504ebe4a7951f251300cefad827826792e3f384514115a141d5b735d7e5a174fa1025e0dfe4a8b949c6c04ffd1ddaab546cdb85a6b052cbd9d6254cb8613386313b10e803930b9d192d6268ff6e6cc4e3da87189d20ce01d3bb80de9bde1a530c60e077156a542d4efe7164d9db1db51e24a151f08b94bfb2ef0534e94dc17fc2d9556f1b0f8f8e2cabf9bbb29562d007e594287f8282f6108e8e0d116335059d6a0582a63f5bbeb3f2130b973f4e4dae10c1358275bd6af5407ef742d35684e8386c38263523792d301597923fbceff8411e8b0c2bbb6e322e0bf1c21da25d92d15beeae5c1b36edd4125b46fbf7b39aff3719c5b2dd913f86412c2c3dc6606ff14f5f7486b54b758df571f801686ff6ec227b867ebd836e2bdd9952d28bea84b4ac135d7ca86256a34054d2b2ea0bb8d250621b97c59c7685768524aa8abddf25955e74cedf03bc93c86a0684b5720c169f6bc3d90b4effb06e6a47c67eb073e117af3a252a33390b5f0649b753c60241403cd8cd7c2b3ed98007c1185fc683770fc1022f85e75469d86806775b03e37bdc3d8603d350e6ab3f5f004d945c4738790f5ee96f984ebd1b9fc30f335125517d3b2bb4d9d0919f2d85deb9ba53be096c4f3a717d01093fb94b9d2d7e0ec2a34a5ece68aaac30b78e434ba886043c630092642f1adb690b736884906a57d488a9c4a9cdc9b39304b104414dd7f0f9c001e9bcc336baee6fec4309bc820650f6efcf9bd88c8006486f53c0fb2e935c8258d0a916889b9f56dc1fa2ccf4c89dba0bf1db08c9a495a35d83e19b714be084bce2c2e51f1a7c0931c86c31c6981b8db5cfccba6515337e77893eaca40b77f7fb4601e3fe1f4eceaa4691c92e1193676569f150c66c08f04036ecea2b4ed7272120218086c6f2fe297d259bc3b3335ffdb67255fb5fbe79b591ca3afd8d3ef363dfd192a0ed7e49133ece6d127737ce50172f2deb4253cf9bb67ddd633fb206c992a580e228ce03030760fb6fd878605a5ddbce302ff10f73a3985fac41e71712656e5df6d657297240d8ad798de9d08b8014e6262b6af81985cbb99608c2da0b4f04058c7da5a7104843909b8601bbf5835e7a2e2cfa6d672f165f416b3fbc2e1604bf52b9b11bdf01927deb26d57a0d64fc6585bbcaaa479f3d4529879af9a8ba4df63eb678a8fea37ed94e0b4a179d82959f765ea1bd355d053391368a6aed2a568105dba328ef6f8ba61b9bf7997282c5bf676d4a2b67fd181db4b2c53f7bc2e599b21d0f494513e8d6f6e420288a3db8e61dfc4b68844d27b058a2d9c8be71855158b8f386e4bb157fac09a3de5f27b8dde0a09decb35a054c1d86584e7d8b3c5a60244db2d6e56dd0a36680f243a16021ac21014e0ac520c0c1f25088215c8d61b68598c978791bf46290bcc455986841aedd819789728d6d09c0c563e0ea69837e75e88597dc94fe0bbc593f153604ddd51d1cd32cee02fde4598f6e0a2ff4db7c386bb4b9045d956d030e8a1afc7eae6b82703f5f2aa919812889d50c72941740efc73d13cb2fa79dfe1043bd528717a9d2bb2aac3ff056ca47cc4b015a46cb5a65ce8e013f19883ae12c7a398902e2020c23127caf6bb93a771d4f6a1c984d5a06c3264b0aca0de5526cd03156cbae3e48c06ccc27ae5a22d768dd0a4c22d8019a057c31f07fee4874308e988a2ceb678b366b0f2267ba8a23019e25600bb7fc2f6f48324424335db0edbeb86fdc03c769158ee9c2d0991f7b8da2136422e6e79e202acb3060e474f4524d3f93b288c174ff4e5a42b31881a18320a4272b092e2c2695d558dfa0e4408e167b101755c6d244843c14b9f83dbdc222d2bab7e705a32020db8cea71d65cb9eacbe6fe250b6d47de57526309d6551b20ef885a7484c3ace38038d722a66bf815552158bb42aae7e0c2de85c6b05fd91b93c25714954e79cb73efcf8bddcc02c1ce5fd574f855d336be179e5bf3799e5b903e48559cb32802140f2c56df0ff22bb367811e0924b10ac5884ff494804c158a7f4c0a65b7f0be104b00fc666cef065f9fec9937a3583bd937231024d2df1eb8ef0b32c60bb426db9ac8835581bd7421ea1f7224475ad6454b62d8e623f068819d098f20d6b25aa2d299c67e40a417dfcc4b40e33207a478f3e0b9874dbd10bfc4e50a41b5fae40a70c26022257fe2485d040caacb18d9efdba4fd263d8f0ca2b86a787913851a69aae55d5ebeb005c432dc630807f22be5fb4dac6426e4da475847b5aba437bf577246c699931a71b958ca0851065a36560ea5e1e36bcfd9ffbfa4d7302b307ebd57dc9182099fee52989f2c31b221a5ba75ecb4e56d3a0df1c33b51ac63098c3a1bac0c5e0103b9570eecb3d70df3872cbe28ae7f69e4ff9e487ec20ed062c4d6f530ecf2a5c309671296f5dc21e19cfe01a2cb4432b8f060a56b47ff0532597af3bf5df2514d19a7bbd20d3fe91e30d6465302fb73d12790b9387a79e76da6e00f58482a52f322be4d4c47d7e1437f82512cbb9de61daf6402a44ddae9af3995f8e1292db8dc569aecaf4c9678200a06722a4d8423c4a5435314013b19134b1e140f02ae13fc477c7ebb32e28ea26edd3a4304d9ec60c46ae719c4012832be5c46e0c1a1b774236ef9e10829abf292020b8bc8681db3be98e461f835779b308e36ae8a2271824be917146aa974af6d937750194e442c71a9097fa4d052d2fd32a5e6c2109e5705f3f0e946bff34161de9e2583627921f342b282717784f073c004e1ce1a787e3a20f703c06df5b125a25bbbe14cccc056cbbe262b4456ec548bce8d7f9747f38650351a639cd23cf070194eb3d791acdd57ef106ec167ec323f039d3311ee9f858f12d8419e2bf2332f3004edc876687ea10a58b1fec79f54cb834d92278ded7c4e519cdbf032248870b90906fc0cd69545a61f76584a9ffba5cff580cf4197e58f63c6394895f0599780ecf5259f7c7ee5850ddc0995e945417601c1447d044090b627fcf709cdaab13cff670f5ec733e8530423be248ffc02c46caeede800fb1c9df00cc44e518b0b3333d5c7b27e2403538f8d7e2f8f191778d5aed8ff4af1a4866d87acc27eb8f87f514be9f5799f5e3ba594ebf6b399d42465be167debdb4b0cbad477d1ba468165e6c43aea517dfac4ce33eb9d746e7c7fec3eeaebba13ef6beb58dd66fca7c9788272ecd154e54a8b87c6c6a55e760c1d26acb4db4a04eb43a3e87bb4ef19f067b21c9cf6ed3dcd0dd4e61101efc829601df6938b80cf90370034d2df649e556d4e92c5e07d4e22ba989ce1228b9e7c2f16fb5749257e5117b45e60767a7542f8d1f1f3a069289fc7dd3f21b63bd069efc8174819c13bcb31cde4bd4c146b966d319ea8622c6943350302e5a64263a393652c1fecb4622098a09a9bde2e966e2d11f0d2b18d434f319f2b25d8996f9f1a35e1e9c3f9faa2be86711c219e6c545a7daf9b39c3b5d9bd4a6eb0de81dafed841f2025d19e8983f44ce3fdd88b5a55feccedcca3c83bfad04f04c1301487c30ef0936bc353a950e2f78a89b0a07e6cc993b83175c641c6e10bbabb0632e4cb03b931144d648d533d246ba08073d1531a08826d6cf8cb66eb51a6c6c28af1ed235cc941a310d34d1ce41dcc2269224e54169c354e24c8eb763448bbf34f06ce3ece5d9b967cd843c1e356f1d13fcb8cae2ee8d03267d6d628676c64ca8b978df2ce3e09325f83a78097c6a13ea6b016ddd908eb097624623e2ccac5da1e0eee400592c96de7bbadf10f3340a2fb21cac996139f681fa093f0ef8e43bd9d36564aee0316a971da7156ae7c1153230f08c105b806541de80b09a8f070566dfe2551cc22ca079546b00ba42787e893216fd405151ca90013b9d6202f3ced98b79110edab6dcc65821b0bac93e9d9e0c7baf05b7bbb4e0388e249cada738b5217fbb7b713ace0801eb89f6bc7e29695cae9efc24888be435837ac8bd3d6da2db617bf0b70612b11a9871422cec27b2aa1504966fb7e6982bd20305b9df5031a21211232c547e67d1b8791041ab8767fd69ee55d9b62e9eb1590b03e5dace941f19de7797cad70811c0114a022bb56599212afcc8dacdd0f3050f5f1b7d5adc14cb1e64701c0e80289a4658b5ac11fbf64d3c76c539a9e40136537bf216bfa8abe233a8f0aa5f74d212bd9d6f6e5fb01bcc3756a1809b9236e584558c9efde69b20b8a3587441a00d104d9558db1b70fc4c14f4c5245909bc896e039fe8bae12cc57c2a603d062db19adc37fee0226448b98b01e08c44201589c0dcdfa2d70c3e27b191ee7bb5af83f71496b8cf45a4097cfc6a17aafe83e2be36f8a79aff046735f091fe81a1737d74c849079bc523473b4e49cc81429571c89d618e40ed702fda050dcc2cec202d", 0x1000}, {&(0x7f0000001380)="ad55e957176fab4ca743b1e28440c834bbf10eb6b4aea481671e8d7673e52c52bdede20baa50ba679e6e9963be7f752cb76e5365836b57f791e30cdb05c4d3513bdea3ed00fa0c8827c4ff5b0ee0fd8be374e00267d93a21507fa177683e5488ea0f29bc6076c52135f4d1dce234983463bb171829fbf81a3634a6", 0x7b}, {&(0x7f0000001400)="ee00c09f8968e809fe4931080ca4e630f21942b57cfc5ee14d6e205b03d5c49c9a6237aa186dfed85fde6356be0136f0a9d41b39baf6caac676b334a2361c72bf4a89ef5d408fcca370d1154bd942f3392a39ebe3524875e99be97b72453efe37878712523311a657541e3c912a3af1ad7ca3cd675509c58492800a9479ab62282679f2bdffaebdee0bcc8810c25ae52d7af23e60b0bd7d3eb1d87754cb3ce0e3685b2e45b6b6452aac80af202c2", 0xae}, {&(0x7f00000014c0)="e98f2b8fbd6c2540726db020b3fc30c2a218df21fe7b8802c6ae777c38ad09c98d308c0f46ff111d38dda52cd01387f03f366bdbdd6b562f14d77e1d52d074413963b8a448d53fed5deb0cfce39df37f9a5f1921b03a53f7c1f504059999dc0d0a7e1a7b9d33066e6e654088343e2d89a7c553b073499b5713a8c93f040b18188c78f752c35031805088c2ca9113f48e18437aead5c2010309eccedc59474c8080469cdc7029b56d908153f4ca", 0xad}, {&(0x7f0000001580)="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", 0xc5f}], 0x8}, 0x0) [ 2195.932650][ T7428] REISERFS (device loop5): checking transaction log (loop5) [ 2195.964849][ T7428] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one -1 [ 2195.976106][ T7428] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 2195.988770][ T7428] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 01:51:58 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 01:51:58 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc030200010052654973457233467300000003", 0x41, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:58 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) r2 = dup2(r0, r1) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)=ANY=[], &(0x7f0000001700)=0x8) 01:51:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x24, &(0x7f0000000040), &(0x7f0000000140)=0x98) 01:51:58 executing program 2: r0 = socket(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x24, &(0x7f0000000040), &(0x7f0000000140)=0x98) 01:51:58 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0xc0) 01:51:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x111}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x388}, 0x98) 01:51:58 executing program 2: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000), 0x8) 01:51:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}, 0x10) 01:51:59 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc030200010052654973457233467300000003", 0x41, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:51:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x5, 0x0, 0x11}, 0x98) 01:51:59 executing program 0: r0 = socket(0x1c, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000040), &(0x7f0000000100)=0x90) 01:51:59 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000100), &(0x7f0000000140)=0x8) 01:51:59 executing program 2: setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) [ 2197.438753][ T7480] loop5: detected capacity change from 0 to 252287 01:51:59 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000680)={0x1c, 0x1c, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) [ 2197.529585][ T7480] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2197.543577][ T7480] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 2197.573102][ T7480] REISERFS (device loop5): using ordered data mode [ 2197.579927][ T7480] reiserfs: using flush barriers [ 2197.589997][ T7480] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 2197.712184][ T7480] REISERFS (device loop5): checking transaction log (loop5) [ 2197.769765][ T7480] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one -1 [ 2197.781303][ T7480] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 2197.792904][ T7480] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 01:51:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000080), &(0x7f0000000000)=0x98) 01:52:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000080)="d0", 0x1}], 0x1, &(0x7f0000002580)=ANY=[@ANYBLOB="1c"], 0x80}, 0x0) 01:52:00 executing program 0: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000001880), 0x8) 01:52:00 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000002c0)={0x1c, 0x1c, 0x3}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) 01:52:00 executing program 3: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x24, &(0x7f0000000040), &(0x7f0000000140)=0x98) 01:52:00 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc030200010052654973457233467300000003", 0x41, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:52:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) 01:52:00 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0)={0x6, 0x4}, 0x8) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r1, r0) 01:52:00 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000380), &(0x7f0000000440)=0x98) [ 2198.679209][ T7514] loop5: detected capacity change from 0 to 252287 01:52:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x388}, 0x98) 01:52:00 executing program 4: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r1) dup2(r0, r2) fcntl$getown(r2, 0x5) [ 2198.836556][ T7514] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2198.852538][ T7514] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal 01:52:00 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x903e, 0x211}, 0x98) connect$inet6(r2, &(0x7f00000001c0)={0x1c}, 0x1c) [ 2198.950012][ T7514] REISERFS (device loop5): using ordered data mode [ 2198.956944][ T7514] reiserfs: using flush barriers [ 2198.975828][ T7514] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 2199.020461][ T7514] REISERFS (device loop5): checking transaction log (loop5) [ 2199.125861][ T7514] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one -1 [ 2199.137049][ T7514] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 2199.148095][ T7514] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 01:52:01 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000100)="8b", 0x1}], 0x1}, 0x0) 01:52:01 executing program 3: r0 = socket(0x1c, 0x5, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000080)=@un=@abs={0x8}, 0x8) 01:52:01 executing program 0: r0 = socket(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000040)=0x98) 01:52:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x6, 0x0, 0x8000, 0x51e7}, 0x8) 01:52:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 01:52:01 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100526549734572334673000000030000", 0x43, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:52:02 executing program 0: semctl$SEM_INFO(0x0, 0x0, 0x12, 0xffffffffffffffff) 01:52:02 executing program 1: syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x900000000000000, &(0x7f00000003c0), 0x0, &(0x7f0000000440)) 01:52:02 executing program 3: select(0x40, &(0x7f0000001d00), 0x0, &(0x7f0000001d80)={0x8000}, &(0x7f0000001dc0)={0x77359400}) 01:52:02 executing program 4: syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={[{@noadinicb}]}) 01:52:02 executing program 0: syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x6c00000000000000, &(0x7f00000003c0), 0x0, &(0x7f00000000c0)=ANY=[]) 01:52:02 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100526549734572334673000000030000", 0x43, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:52:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x6, 0x4) 01:52:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs, 0xfffffffffffffda1) [ 2200.546927][ T7565] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2200.555014][ T7565] UDF-fs: Scanning with blocksize 512 failed 01:52:02 executing program 1: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) [ 2200.607101][ T7565] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2200.615125][ T7565] UDF-fs: Scanning with blocksize 1024 failed [ 2200.653822][ T7565] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2200.661552][ T7565] UDF-fs: Scanning with blocksize 2048 failed [ 2200.733572][ T7565] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2200.741106][ T7565] UDF-fs: Scanning with blocksize 4096 failed 01:52:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x0, 0xfa7b}, 0x8) [ 2200.905849][ T7572] loop5: detected capacity change from 0 to 252287 01:52:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000080)) 01:52:03 executing program 3: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 01:52:03 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:52:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil}) [ 2201.173075][ T7572] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2201.186943][ T7572] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal 01:52:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x1e, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "7339325c0eba44aa8d8363b9cbeb41d3c6ce0e07f17ac87fc1b861e8f5e80b00e297b6d4f39ed6dd665b3a1e5be03fe0ae4af2c32bcdcb85e87280e7e8d9dde2f436f7d377aa0886202e997e0cf451d3"}, 0xd8) [ 2201.261710][ T7572] REISERFS (device loop5): using ordered data mode [ 2201.269167][ T7572] reiserfs: using flush barriers [ 2201.294484][ T7572] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 2201.358333][ T7572] REISERFS (device loop5): checking transaction log (loop5) [ 2201.424496][ T7572] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one -1 [ 2201.436161][ T7572] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 2201.447593][ T7572] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 01:52:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x8, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "7339325c0eba44aa8d8363b9cbeb41d3c6ce0e07f17ac87fc1b861e8f5e80b00e297b6d4f39ed6dd665b3a1e5be03fe0ae4af2c32bcdcb85e87280e7e8d9dde2f436f7d377aa0886202e997e0cf451d3"}, 0xd8) 01:52:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x5452, &(0x7f0000000880)) 01:52:04 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100526549734572334673000000030000", 0x43, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:52:04 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x414801) 01:52:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) 01:52:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 01:52:04 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) 01:52:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 01:52:04 executing program 1: unshare(0x6c060000) unshare(0x10020c00) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffe) unshare(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='D', 0x1, 0x4000085, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f415, 0x0) 01:52:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfcc9, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x80045518, 0x0) 01:52:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfcc9, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:52:04 executing program 4: syz_clone(0x59080100, 0x0, 0x0, 0x0, 0x0, 0x0) 01:52:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfcc9, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x8108551b, &(0x7f0000000040)={0x0, "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"}) 01:52:04 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc030200010052654973457233467300000003000000", 0x44, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:52:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfcc9, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="c5"}) 01:52:04 executing program 0: syz_clone(0x1082d180, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2202.864992][ T7619] loop5: detected capacity change from 0 to 252287 [ 2202.900426][ T7619] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2202.914616][ T7619] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal 01:52:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfcc9, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x80005520, 0x0) 01:52:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfcc9, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x80045518, &(0x7f0000000040)={0x0, "d8cafc0c3238877150c5c9494d45a8058b3478adb5e31324b19449469316f82bea1d18ab203ba81145bd04ee02a8cf73529f95c224147bc4065b7bdc82dcd19893d7e8306d8f65a682e30a74dedf3200167e2d0e04cc327d307e23a08c5c207afe2786e0b7deb1ab4709eb92a8aa1a723c6e3cbac290932490e2418e7b54ca56f12fafadcfa5d2abebbdee470bf0b134ab32b128a2a6e1c67c228e17257d652d97a8a62347a69270777056814cda611f28d4ba38a6cf6c1acdbaaf8faff4da95d73f528b8a89f5f0d898f0d5b34db7260d9c6670c56d62cf0d99a4c4d225cd0dc36a654d13d20cda3ec289ce7686264f8423000424360e49b465e7c5236175fe"}) [ 2203.010449][ T7619] REISERFS (device loop5): using ordered data mode [ 2203.017439][ T7619] reiserfs: using flush barriers [ 2203.043916][ T7619] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 01:52:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000340)='./file0/file1\x00') lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) [ 2203.171444][ T7619] REISERFS (device loop5): checking transaction log (loop5) [ 2203.251374][ T7619] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one -1 [ 2203.262904][ T7619] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 2203.274027][ T7619] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 01:52:05 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000740)=@raw=[@generic, @jmp={0x5, 0x0, 0x8}, @func], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000440), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000400)="331f151bde7ac9d90e6599a2a0b4ccb1f29ae81f883838b3f62470812982cb858a63e12ff0e4aca74293a4aaae5d1547aa", 0x31}, {&(0x7f0000000440)="4e0483bd8853c81c31c01762ef0c13f13c82898b7eb491a69f3ab62798822a49f4c68788b9f4c4ad4ec24aa8a1834382aedfee16178c7cb4bc121a6453b79a742b132e953aba4bd49646ab9690d97f230a5fe5ed52e129c06fa8e6009423398d0c204a", 0x63}, {&(0x7f0000000500)="5d8c499d7d077615e41d96a4cd02e770d1c5fb11fa61fdd2", 0x18}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000400000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000030000000100000002000000828e23a95047c91243ab65e436dc4813c879d5c66678e82caa25bb34c2beb7b8895771c416da46e4f6426a3376e64f9a0e8ed53addf5cad51e768652f3e32740c042fa480d3af5052f00000000a5e2619d5782544b4b70638bd1634ca56e2f872bb61d5dc42ac3c7fce37ed79bc4adf4974fbe63100836244b771bf3109e", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4004000}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000000c40)=@file={0x0, './bus\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)="35f95c09935811b1c687235e6182e4701c3c01b8fadaf59724bd4b4c70c385e21aa63f280c214bbac3cb20c216482a3ebf817dbaaab802a6605f8e53db7a8cf11817b55a8c5d84ad4cafb2d77881e5787d4af4c92a8932088ad3212ee5caa660d5ba0487ab4fe14ab4cc123414fc2f6f95c42d53d99b8c0df8241f9191969439136a9c1282b7331b7bb55a", 0x8b}], 0x1, &(0x7f0000003200)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040840}}], 0x5, 0x48004) sched_rr_get_interval(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000340)='./file0/file1\x00') lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 01:52:05 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x2, &(0x7f0000000740)=@raw=[@generic, @jmp={0x5, 0x0, 0x8}], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x22, 0x0, 0x0) 01:52:05 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc030200010052654973457233467300000003000000", 0x44, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) [ 2204.050843][ T7647] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:52:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) 01:52:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000400)="331f151bde7ac9d90e6599a2a0b4ccb1f29ae81f883838b3f62470812982cb858a63e12ff0e4aca74293a4aaae5d1547aa", 0x31}, {&(0x7f0000000440)="4e0483bd8853c81c31c01762ef0c13f13c82898b7eb491a69f3ab62798822a49f4c68788b9f4c4ad4ec24aa8a1834382aedfee16178c7cb4bc121a6453b79a742b132e953aba4bd49646ab9690d97f230a5fe5ed52e129c06fa8e6009423398d0c204a", 0x63}, {&(0x7f0000000500)="5d8c499d7d077615e41d96a4cd02e770d1c5fb11fa61fdd2", 0x18}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000400000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000030000000100000002000000828e23a95047c91243ab65e436dc4813c879d5c66678e82caa25bb34c2beb7b8895771c416da46e4f6426a3376e64f9a0e8ed53addf5cad51e768652f3e32740c042fa480d3af5052f00000000a5e2619d5782544b4b70638bd1634ca56e2f872bb61d5dc42ac3c7fce37ed79bc4adf4974fbe63100836244b771bf3109e", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4004000}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000000c40)=@file={0x0, './bus\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)="35f95c09935811b1c687235e6182e4701c3c01b8fadaf59724bd4b4c70c385e21aa63f280c214bbac3cb20c216482a3ebf817dbaaab802a6605f8e53db7a8cf11817b55a8c5d84ad4cafb2d77881e5787d4af4c92a8932088ad3212ee5caa660d5ba0487ab4fe14ab4cc123414fc2f6f95c42d53d99b8c0df8241f9191969439136a9c1282b7331b7bb55a", 0x8b}], 0x1, &(0x7f0000003200)}}, {{&(0x7f0000001380)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040840}}], 0x5, 0x48004) sched_rr_get_interval(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) 01:52:06 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc030200010052654973457233467300000003000000", 0x44, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:52:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000340)='./file0/file1\x00') 01:52:06 executing program 2: socket$inet(0x2, 0x73775170d0086319, 0x0) 01:52:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000400)="331f151bde7ac9d90e6599a2a0b4ccb1f29ae81f883838b3f62470812982cb858a63e12ff0e4aca74293a4aaae5d1547aa", 0x31}, {&(0x7f0000000440)="4e0483bd8853c81c31c01762ef0c13f13c82898b7eb491a69f3ab62798822a49f4c68788b9f4c4ad4ec24aa8a1834382aedfee16178c7cb4bc121a6453b79a742b132e953aba4bd49646ab9690d97f230a5fe5ed52e129c06fa8e6009423398d0c204a", 0x63}, {&(0x7f0000000500)="5d8c499d7d077615e41d96a4cd02e770d1c5fb11fa61fdd2", 0x18}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000400000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000030000000100000002000000828e23a95047c91243ab65e436dc4813c879d5c66678e82caa25bb34c2beb7b8895771c416da46e4f6426a3376e64f9a0e8ed53addf5cad51e768652f3e32740c042fa480d3af5052f00000000a5e2619d5782544b4b70638bd1634ca56e2f872bb61d5dc42ac3c7fce37ed79bc4adf4974fbe63100836244b771bf3109e", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4004000}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000000c40)=@file={0x0, './bus\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)="35f95c09935811b1c687235e6182e4701c3c01b8fadaf59724bd4b4c70c385e21aa63f280c214bbac3cb20c216482a3ebf817dbaaab802a6605f8e53db7a8cf11817b55a8c5d84ad4cafb2d77881e5787d4af4c92a8932088ad3212ee5caa660d5ba0487ab4fe14ab4cc123414fc2f6f95c42d53d99b8c0df8241f9191969439136a9c1282b7331b7bb55a", 0x8b}], 0x1, &(0x7f0000003200)}}, {{&(0x7f0000001380)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040840}}], 0x5, 0x48004) sched_rr_get_interval(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2204.587240][ T7661] loop5: detected capacity change from 0 to 252287 [ 2204.850759][ T7661] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2204.864217][ T7661] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 2204.913410][ T7661] REISERFS (device loop5): using ordered data mode [ 2204.920229][ T7661] reiserfs: using flush barriers [ 2205.043437][ T7661] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 2205.155943][ T7661] REISERFS (device loop5): checking transaction log (loop5) [ 2205.243703][ T7661] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one -1 [ 2205.255037][ T7661] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 2205.266233][ T7661] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 2205.661438][ T7644] not chained 1380000 origins [ 2205.666499][ T7644] CPU: 0 PID: 7644 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2205.676623][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2205.686725][ T7644] Call Trace: [ 2205.690020][ T7644] [ 2205.692989][ T7644] dump_stack_lvl+0x1c8/0x256 [ 2205.697892][ T7644] dump_stack+0x1a/0x1c [ 2205.702092][ T7644] kmsan_internal_chain_origin+0x78/0x120 [ 2205.707855][ T7644] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2205.713967][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.719122][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2205.725409][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.730563][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2205.736421][ T7644] ? __get_compat_msghdr+0x5b/0x750 [ 2205.741666][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.746819][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2205.752694][ T7644] ? should_fail+0x3f/0x7e0 [ 2205.757222][ T7644] ? __stack_depot_save+0x21/0x4b0 [ 2205.762373][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.767531][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2205.773815][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.778965][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2205.784817][ T7644] __msan_chain_origin+0xbd/0x140 [ 2205.789886][ T7644] __get_compat_msghdr+0x514/0x750 [ 2205.795067][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2205.799956][ T7644] ? ___sys_recvmsg+0xa9/0x870 [ 2205.804758][ T7644] ? do_recvmmsg+0x63a/0x10a0 [ 2205.809482][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2205.814401][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.819571][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2205.825515][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.830668][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2205.836529][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2205.841085][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.846247][ T7644] ? __sys_recvmmsg+0x52/0x450 [ 2205.851063][ T7644] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2205.857534][ T7644] __sys_recvmmsg+0x113/0x450 [ 2205.862251][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2205.867422][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2205.873784][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2205.878846][ T7644] ? exit_to_user_mode_prepare+0x119/0x220 [ 2205.884702][ T7644] do_fast_syscall_32+0x33/0x70 [ 2205.889607][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2205.894143][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2205.900517][ T7644] RIP: 0023:0xf7fc9549 [ 2205.904600][ T7644] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2205.924243][ T7644] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2205.932789][ T7644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2205.940823][ T7644] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2205.948810][ T7644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2205.956794][ T7644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2205.964778][ T7644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2205.972777][ T7644] [ 2205.980719][ T7644] Uninit was stored to memory at: [ 2205.986825][ T7644] __get_compat_msghdr+0x514/0x750 [ 2205.991998][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2205.997015][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2206.001740][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2206.006401][ T7644] __sys_recvmmsg+0x113/0x450 [ 2206.011117][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2206.017516][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2206.022675][ T7644] do_fast_syscall_32+0x33/0x70 [ 2206.027567][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2206.032134][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2206.038595][ T7644] [ 2206.040928][ T7644] Uninit was stored to memory at: [ 2206.046113][ T7644] __get_compat_msghdr+0x514/0x750 [ 2206.051290][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2206.056276][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2206.060999][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2206.065633][ T7644] __sys_recvmmsg+0x113/0x450 [ 2206.070357][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2206.076748][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2206.081817][ T7644] do_fast_syscall_32+0x33/0x70 [ 2206.086814][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2206.091362][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2206.097926][ T7644] [ 2206.100275][ T7644] Uninit was stored to memory at: [ 2206.105460][ T7644] __get_compat_msghdr+0x514/0x750 [ 2206.110625][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2206.115682][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2206.120410][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2206.125121][ T7644] __sys_recvmmsg+0x113/0x450 [ 2206.129850][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2206.136306][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2206.141375][ T7644] do_fast_syscall_32+0x33/0x70 [ 2206.146432][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2206.150984][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2206.157556][ T7644] [ 2206.159885][ T7644] Uninit was stored to memory at: [ 2206.165157][ T7644] __get_compat_msghdr+0x514/0x750 [ 2206.170313][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2206.175361][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2206.180089][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2206.184807][ T7644] __sys_recvmmsg+0x113/0x450 [ 2206.189535][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2206.195991][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2206.201065][ T7644] do_fast_syscall_32+0x33/0x70 [ 2206.206124][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2206.210670][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2206.217203][ T7644] [ 2206.219534][ T7644] Uninit was stored to memory at: [ 2206.224778][ T7644] __get_compat_msghdr+0x514/0x750 [ 2206.229967][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2206.235029][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2206.239757][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2206.244465][ T7644] __sys_recvmmsg+0x113/0x450 [ 2206.249199][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2206.255660][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2206.260732][ T7644] do_fast_syscall_32+0x33/0x70 [ 2206.265776][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2206.270339][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2206.276873][ T7644] [ 2206.279198][ T7644] Uninit was stored to memory at: [ 2206.284384][ T7644] __get_compat_msghdr+0x514/0x750 [ 2206.289556][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2206.294615][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2206.299338][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2206.304038][ T7644] __sys_recvmmsg+0x113/0x450 [ 2206.308780][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2206.315228][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2206.320295][ T7644] do_fast_syscall_32+0x33/0x70 [ 2206.325344][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2206.329894][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2206.336432][ T7644] [ 2206.338772][ T7644] Uninit was stored to memory at: [ 2206.344073][ T7644] __get_compat_msghdr+0x514/0x750 [ 2206.349251][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2206.354306][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2206.359050][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2206.363870][ T7644] __sys_recvmmsg+0x113/0x450 [ 2206.368627][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2206.375096][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2206.380242][ T7644] do_fast_syscall_32+0x33/0x70 [ 2206.385324][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2206.389896][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2206.396444][ T7644] [ 2206.398800][ T7644] Local variable msg_sys created at: [ 2206.404244][ T7644] do_recvmmsg+0x5f/0x10a0 [ 2206.408718][ T7644] __sys_recvmmsg+0x113/0x450 [ 2206.849921][ T7644] not chained 1390000 origins [ 2206.855029][ T7644] CPU: 1 PID: 7644 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2206.865131][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2206.875204][ T7644] Call Trace: [ 2206.878493][ T7644] [ 2206.881442][ T7644] dump_stack_lvl+0x1c8/0x256 [ 2206.886181][ T7644] dump_stack+0x1a/0x1c [ 2206.890381][ T7644] kmsan_internal_chain_origin+0x78/0x120 [ 2206.896161][ T7644] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2206.902286][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2206.907481][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2206.913793][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2206.918957][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2206.925003][ T7644] ? __get_compat_msghdr+0x5b/0x750 [ 2206.930264][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2206.935452][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2206.941318][ T7644] ? should_fail+0x3f/0x7e0 [ 2206.945854][ T7644] ? __stack_depot_save+0x21/0x4b0 [ 2206.951012][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2206.956174][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2206.962473][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2206.967640][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2206.973498][ T7644] __msan_chain_origin+0xbd/0x140 [ 2206.978573][ T7644] __get_compat_msghdr+0x514/0x750 [ 2206.983767][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2206.988663][ T7644] ? ___sys_recvmsg+0xa9/0x870 [ 2206.993560][ T7644] ? do_recvmmsg+0x63a/0x10a0 [ 2206.998287][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.003029][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.008186][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2207.014043][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.019202][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2207.025065][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.029630][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.034800][ T7644] ? __sys_recvmmsg+0x52/0x450 [ 2207.039593][ T7644] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.046047][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.050750][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.055901][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.062218][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.067287][ T7644] ? exit_to_user_mode_prepare+0x119/0x220 [ 2207.073150][ T7644] do_fast_syscall_32+0x33/0x70 [ 2207.078031][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2207.082554][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.088906][ T7644] RIP: 0023:0xf7fc9549 [ 2207.092978][ T7644] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2207.112613][ T7644] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2207.121063][ T7644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2207.129055][ T7644] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2207.137060][ T7644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2207.145041][ T7644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2207.153033][ T7644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2207.161042][ T7644] [ 2207.166801][ T7644] Uninit was stored to memory at: [ 2207.171897][ T7644] __get_compat_msghdr+0x514/0x750 [ 2207.177517][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2207.182528][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.187601][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.192360][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.197083][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.203509][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.208575][ T7644] do_fast_syscall_32+0x33/0x70 [ 2207.213592][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2207.218136][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.224640][ T7644] [ 2207.226969][ T7644] Uninit was stored to memory at: [ 2207.232055][ T7644] __get_compat_msghdr+0x514/0x750 [ 2207.237329][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2207.242321][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.247042][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.251586][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.256425][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.262804][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.267888][ T7644] do_fast_syscall_32+0x33/0x70 [ 2207.272905][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2207.277531][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.284029][ T7644] [ 2207.286354][ T7644] Uninit was stored to memory at: [ 2207.291436][ T7644] __get_compat_msghdr+0x514/0x750 [ 2207.296711][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2207.301614][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.306463][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.311012][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.315934][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.322345][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.327426][ T7644] do_fast_syscall_32+0x33/0x70 [ 2207.332623][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2207.337174][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.343761][ T7644] [ 2207.346093][ T7644] Uninit was stored to memory at: [ 2207.351189][ T7644] __get_compat_msghdr+0x514/0x750 [ 2207.356555][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2207.361454][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.366376][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.370928][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.375854][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.382156][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.387420][ T7644] do_fast_syscall_32+0x33/0x70 [ 2207.392541][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2207.397090][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.403659][ T7644] [ 2207.405995][ T7644] Uninit was stored to memory at: [ 2207.411071][ T7644] __get_compat_msghdr+0x514/0x750 [ 2207.416404][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2207.421304][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.426179][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.430732][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.435634][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.441929][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.447158][ T7644] do_fast_syscall_32+0x33/0x70 [ 2207.452050][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2207.456713][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.463296][ T7644] [ 2207.465621][ T7644] Uninit was stored to memory at: [ 2207.470690][ T7644] __get_compat_msghdr+0x514/0x750 [ 2207.476006][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2207.480901][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.485820][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.490437][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.495327][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.501618][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.507199][ T7644] do_fast_syscall_32+0x33/0x70 [ 2207.512092][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2207.516770][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.523256][ T7644] [ 2207.525583][ T7644] Uninit was stored to memory at: [ 2207.530657][ T7644] __get_compat_msghdr+0x514/0x750 [ 2207.535994][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2207.540891][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.545808][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.550360][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.555261][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.561553][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.566741][ T7644] do_fast_syscall_32+0x33/0x70 [ 2207.571630][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2207.576292][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.582762][ T7644] [ 2207.585088][ T7644] Local variable msg_sys created at: [ 2207.590373][ T7644] do_recvmmsg+0x5f/0x10a0 [ 2207.595159][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.779149][ T7644] not chained 1400000 origins [ 2207.783962][ T7644] CPU: 1 PID: 7644 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2207.794041][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2207.804124][ T7644] Call Trace: [ 2207.807504][ T7644] [ 2207.810432][ T7644] dump_stack_lvl+0x1c8/0x256 [ 2207.815138][ T7644] dump_stack+0x1a/0x1c [ 2207.819315][ T7644] kmsan_internal_chain_origin+0x78/0x120 [ 2207.825059][ T7644] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2207.831149][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.836280][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2207.842555][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.847710][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2207.853570][ T7644] ? __get_compat_msghdr+0x5b/0x750 [ 2207.858814][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.863970][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2207.869812][ T7644] ? should_fail+0x3f/0x7e0 [ 2207.874320][ T7644] ? __stack_depot_save+0x21/0x4b0 [ 2207.879467][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.884616][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2207.890916][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.896068][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2207.901942][ T7644] __msan_chain_origin+0xbd/0x140 [ 2207.907019][ T7644] __get_compat_msghdr+0x514/0x750 [ 2207.912168][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2207.917046][ T7644] ? ___sys_recvmsg+0xa9/0x870 [ 2207.921833][ T7644] ? do_recvmmsg+0x63a/0x10a0 [ 2207.926556][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2207.931275][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.936416][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2207.942260][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.947424][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2207.953306][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2207.957851][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.963014][ T7644] ? __sys_recvmmsg+0x52/0x450 [ 2207.967803][ T7644] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.974255][ T7644] __sys_recvmmsg+0x113/0x450 [ 2207.978963][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2207.984122][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2207.990409][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2207.995470][ T7644] ? exit_to_user_mode_prepare+0x119/0x220 [ 2208.001335][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.006231][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.010774][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.017146][ T7644] RIP: 0023:0xf7fc9549 [ 2208.021212][ T7644] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2208.040836][ T7644] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2208.049262][ T7644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2208.057259][ T7644] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2208.065243][ T7644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2208.073225][ T7644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2208.081208][ T7644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2208.089204][ T7644] [ 2208.095370][ T7644] Uninit was stored to memory at: [ 2208.100478][ T7644] __get_compat_msghdr+0x514/0x750 [ 2208.106227][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2208.111134][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2208.116009][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2208.120556][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.125413][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.131708][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2208.136978][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.141868][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.146561][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.153033][ T7644] [ 2208.155361][ T7644] Uninit was stored to memory at: [ 2208.160446][ T7644] __get_compat_msghdr+0x514/0x750 [ 2208.165786][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2208.170701][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2208.175550][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2208.180093][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.184984][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.191278][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2208.196482][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.201753][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.206417][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.212900][ T7644] [ 2208.215226][ T7644] Uninit was stored to memory at: [ 2208.220313][ T7644] __get_compat_msghdr+0x514/0x750 [ 2208.225704][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2208.230598][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2208.235491][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2208.240041][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.244933][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.251228][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2208.256434][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.261326][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.266023][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.272490][ T7644] [ 2208.274825][ T7644] Uninit was stored to memory at: [ 2208.279910][ T7644] __get_compat_msghdr+0x514/0x750 [ 2208.285207][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2208.290101][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2208.294939][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2208.299484][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.304384][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.310684][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2208.315892][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.320781][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.325437][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.331813][ T7644] [ 2208.334314][ T7644] Uninit was stored to memory at: [ 2208.339403][ T7644] __get_compat_msghdr+0x514/0x750 [ 2208.344776][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2208.349776][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2208.354703][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2208.359254][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.364229][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.370531][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2208.375782][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.380683][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.385403][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.391876][ T7644] [ 2208.394381][ T7644] Uninit was stored to memory at: [ 2208.399471][ T7644] __get_compat_msghdr+0x514/0x750 [ 2208.404819][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2208.409714][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2208.414675][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2208.419231][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.424136][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.430436][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2208.435670][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.440564][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.445256][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.451629][ T7644] [ 2208.454136][ T7644] Uninit was stored to memory at: [ 2208.459228][ T7644] __get_compat_msghdr+0x514/0x750 [ 2208.464573][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2208.469469][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2208.474388][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2208.479055][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.483944][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.490250][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2208.495586][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.500585][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.505261][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.511639][ T7644] [ 2208.514153][ T7644] Local variable msg_sys created at: [ 2208.519441][ T7644] do_recvmmsg+0x5f/0x10a0 [ 2208.524097][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.721609][ T7644] not chained 1410000 origins [ 2208.726726][ T7644] CPU: 0 PID: 7644 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2208.737007][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2208.747091][ T7644] Call Trace: [ 2208.750391][ T7644] [ 2208.753340][ T7644] dump_stack_lvl+0x1c8/0x256 [ 2208.758070][ T7644] dump_stack+0x1a/0x1c [ 2208.762278][ T7644] kmsan_internal_chain_origin+0x78/0x120 [ 2208.768064][ T7644] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2208.774184][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.779461][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2208.785779][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.791055][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2208.796908][ T7644] ? __get_compat_msghdr+0x5b/0x750 [ 2208.802177][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.807326][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2208.813176][ T7644] ? should_fail+0x3f/0x7e0 [ 2208.817740][ T7644] ? __stack_depot_save+0x21/0x4b0 [ 2208.822898][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.828075][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2208.834350][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.839509][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2208.845354][ T7644] __msan_chain_origin+0xbd/0x140 [ 2208.850441][ T7644] __get_compat_msghdr+0x514/0x750 [ 2208.855624][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2208.860543][ T7644] ? ___sys_recvmsg+0xa9/0x870 [ 2208.865366][ T7644] ? do_recvmmsg+0x63a/0x10a0 [ 2208.870095][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2208.874815][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.879984][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2208.885859][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.891029][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2208.896886][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2208.901621][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.906767][ T7644] ? __sys_recvmmsg+0x52/0x450 [ 2208.911564][ T7644] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.918022][ T7644] __sys_recvmmsg+0x113/0x450 [ 2208.922748][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2208.927928][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2208.934220][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2208.939592][ T7644] ? exit_to_user_mode_prepare+0x119/0x220 [ 2208.945453][ T7644] do_fast_syscall_32+0x33/0x70 [ 2208.950347][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2208.954877][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2208.961252][ T7644] RIP: 0023:0xf7fc9549 [ 2208.965323][ T7644] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2208.984973][ T7644] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2208.993538][ T7644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2209.001552][ T7644] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2209.009544][ T7644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2209.017638][ T7644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2209.025650][ T7644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2209.033671][ T7644] [ 2209.038465][ T7644] Uninit was stored to memory at: [ 2209.043824][ T7644] __get_compat_msghdr+0x514/0x750 [ 2209.048982][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2209.053979][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2209.058778][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2209.063500][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.068230][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.074615][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2209.079683][ T7644] do_fast_syscall_32+0x33/0x70 [ 2209.084669][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2209.089213][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2209.095693][ T7644] [ 2209.098020][ T7644] Uninit was stored to memory at: [ 2209.103203][ T7644] __get_compat_msghdr+0x514/0x750 [ 2209.108359][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2209.113351][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2209.118081][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2209.122845][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.127593][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.134043][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2209.139109][ T7644] do_fast_syscall_32+0x33/0x70 [ 2209.144155][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2209.148692][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2209.155215][ T7644] [ 2209.157544][ T7644] Uninit was stored to memory at: [ 2209.162787][ T7644] __get_compat_msghdr+0x514/0x750 [ 2209.167940][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2209.172984][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2209.177707][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2209.182391][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.187115][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.193564][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2209.198634][ T7644] do_fast_syscall_32+0x33/0x70 [ 2209.203681][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2209.208218][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2209.214724][ T7644] [ 2209.217052][ T7644] Uninit was stored to memory at: [ 2209.222122][ T7644] __get_compat_msghdr+0x514/0x750 [ 2209.227367][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2209.232374][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2209.237097][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2209.241644][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.246464][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.253351][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2209.258445][ T7644] do_fast_syscall_32+0x33/0x70 [ 2209.263487][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2209.268032][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2209.274542][ T7644] [ 2209.276870][ T7644] Uninit was stored to memory at: [ 2209.281943][ T7644] __get_compat_msghdr+0x514/0x750 [ 2209.287188][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2209.292088][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2209.296951][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2209.301506][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.306396][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.312786][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2209.317862][ T7644] do_fast_syscall_32+0x33/0x70 [ 2209.322910][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2209.327469][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2209.334143][ T7644] [ 2209.336475][ T7644] Uninit was stored to memory at: [ 2209.341563][ T7644] __get_compat_msghdr+0x514/0x750 [ 2209.346820][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2209.351736][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2209.356608][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2209.361164][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.366063][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.372475][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2209.377671][ T7644] do_fast_syscall_32+0x33/0x70 [ 2209.382722][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2209.387268][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2209.393793][ T7644] [ 2209.396124][ T7644] Uninit was stored to memory at: [ 2209.401210][ T7644] __get_compat_msghdr+0x514/0x750 [ 2209.406527][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2209.411426][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2209.416299][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2209.420849][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.425731][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.432047][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2209.437262][ T7644] do_fast_syscall_32+0x33/0x70 [ 2209.442151][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2209.446788][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2209.453255][ T7644] [ 2209.455585][ T7644] Local variable msg_sys created at: [ 2209.460862][ T7644] do_recvmmsg+0x5f/0x10a0 [ 2209.465455][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.743403][ T7644] not chained 1420000 origins [ 2209.748144][ T7644] CPU: 0 PID: 7644 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2209.758245][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2209.768330][ T7644] Call Trace: [ 2209.771619][ T7644] [ 2209.774560][ T7644] dump_stack_lvl+0x1c8/0x256 [ 2209.779289][ T7644] dump_stack+0x1a/0x1c [ 2209.783503][ T7644] kmsan_internal_chain_origin+0x78/0x120 [ 2209.789279][ T7644] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2209.795401][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.800568][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2209.806872][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.812043][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2209.817905][ T7644] ? __get_compat_msghdr+0x5b/0x750 [ 2209.823153][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.828312][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2209.834171][ T7644] ? should_fail+0x3f/0x7e0 [ 2209.838704][ T7644] ? __stack_depot_save+0x21/0x4b0 [ 2209.843870][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.849025][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2209.855314][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.860471][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2209.866337][ T7644] __msan_chain_origin+0xbd/0x140 [ 2209.871405][ T7644] __get_compat_msghdr+0x514/0x750 [ 2209.876575][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2209.881468][ T7644] ? ___sys_recvmsg+0xa9/0x870 [ 2209.886279][ T7644] ? do_recvmmsg+0x63a/0x10a0 [ 2209.891006][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2209.895750][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.900996][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2209.906855][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.912015][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2209.917874][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2209.922440][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.927604][ T7644] ? __sys_recvmmsg+0x52/0x450 [ 2209.932408][ T7644] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.938880][ T7644] __sys_recvmmsg+0x113/0x450 [ 2209.943607][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2209.948776][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2209.955077][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2209.960141][ T7644] ? exit_to_user_mode_prepare+0x119/0x220 [ 2209.966010][ T7644] do_fast_syscall_32+0x33/0x70 [ 2209.970902][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2209.975447][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2209.981821][ T7644] RIP: 0023:0xf7fc9549 [ 2209.985907][ T7644] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2210.005587][ T7644] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2210.014051][ T7644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2210.022053][ T7644] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2210.030062][ T7644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2210.038149][ T7644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2210.046145][ T7644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2210.054160][ T7644] [ 2210.058714][ T7644] Uninit was stored to memory at: [ 2210.064123][ T7644] __get_compat_msghdr+0x514/0x750 [ 2210.069277][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2210.074290][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2210.079021][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2210.083683][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.088412][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.094822][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2210.099900][ T7644] do_fast_syscall_32+0x33/0x70 [ 2210.104981][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2210.109555][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2210.116106][ T7644] [ 2210.118439][ T7644] Uninit was stored to memory at: [ 2210.123684][ T7644] __get_compat_msghdr+0x514/0x750 [ 2210.128836][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2210.133889][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2210.138625][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2210.143339][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.148060][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.154521][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2210.159589][ T7644] do_fast_syscall_32+0x33/0x70 [ 2210.164652][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2210.169192][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2210.175733][ T7644] [ 2210.178063][ T7644] Uninit was stored to memory at: [ 2210.183301][ T7644] __get_compat_msghdr+0x514/0x750 [ 2210.188454][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2210.193503][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2210.198227][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2210.202925][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.207652][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.214112][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2210.219186][ T7644] do_fast_syscall_32+0x33/0x70 [ 2210.224261][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2210.228810][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2210.235381][ T7644] [ 2210.237720][ T7644] Uninit was stored to memory at: [ 2210.242979][ T7644] __get_compat_msghdr+0x514/0x750 [ 2210.248135][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2210.253196][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2210.257925][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2210.262669][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.267391][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.273866][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2210.278958][ T7644] do_fast_syscall_32+0x33/0x70 [ 2210.284027][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2210.288576][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2210.295128][ T7644] [ 2210.297460][ T7644] Uninit was stored to memory at: [ 2210.302693][ T7644] __get_compat_msghdr+0x514/0x750 [ 2210.307851][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2210.312903][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2210.317632][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2210.322182][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.327103][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.333568][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2210.338642][ T7644] do_fast_syscall_32+0x33/0x70 [ 2210.343707][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2210.348250][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2210.354790][ T7644] [ 2210.357118][ T7644] Uninit was stored to memory at: [ 2210.362208][ T7644] __get_compat_msghdr+0x514/0x750 [ 2210.367520][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2210.372556][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2210.377278][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2210.381853][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.386774][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.393176][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2210.398251][ T7644] do_fast_syscall_32+0x33/0x70 [ 2210.403289][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2210.407829][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2210.414307][ T7644] [ 2210.416635][ T7644] Uninit was stored to memory at: [ 2210.421727][ T7644] __get_compat_msghdr+0x514/0x750 [ 2210.427046][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2210.431949][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2210.436918][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2210.441466][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.446349][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.452737][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2210.458007][ T7644] do_fast_syscall_32+0x33/0x70 [ 2210.463075][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2210.467622][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2210.474168][ T7644] [ 2210.476503][ T7644] Local variable msg_sys created at: [ 2210.481792][ T7644] do_recvmmsg+0x5f/0x10a0 [ 2210.486451][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.758884][ T7644] not chained 1430000 origins [ 2210.763942][ T7644] CPU: 0 PID: 7644 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2210.774050][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2210.784161][ T7644] Call Trace: [ 2210.787464][ T7644] [ 2210.790407][ T7644] dump_stack_lvl+0x1c8/0x256 [ 2210.795131][ T7644] dump_stack+0x1a/0x1c [ 2210.799321][ T7644] kmsan_internal_chain_origin+0x78/0x120 [ 2210.805092][ T7644] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2210.811216][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.816375][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2210.822667][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.827828][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2210.833694][ T7644] ? __get_compat_msghdr+0x5b/0x750 [ 2210.838939][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.844101][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2210.849963][ T7644] ? should_fail+0x3f/0x7e0 [ 2210.854501][ T7644] ? __stack_depot_save+0x21/0x4b0 [ 2210.859660][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.864819][ T7644] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2210.871112][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.876271][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2210.882130][ T7644] __msan_chain_origin+0xbd/0x140 [ 2210.887203][ T7644] __get_compat_msghdr+0x514/0x750 [ 2210.892400][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2210.897299][ T7644] ? ___sys_recvmsg+0xa9/0x870 [ 2210.902130][ T7644] ? do_recvmmsg+0x63a/0x10a0 [ 2210.906857][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2210.911595][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.916754][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2210.922699][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.927968][ T7644] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2210.933853][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2210.938430][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.943608][ T7644] ? __sys_recvmmsg+0x52/0x450 [ 2210.948432][ T7644] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.954916][ T7644] __sys_recvmmsg+0x113/0x450 [ 2210.959654][ T7644] ? kmsan_get_metadata+0x33/0x220 [ 2210.964838][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2210.971155][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2210.976235][ T7644] ? exit_to_user_mode_prepare+0x119/0x220 [ 2210.982110][ T7644] do_fast_syscall_32+0x33/0x70 [ 2210.987009][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2210.991556][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2210.997936][ T7644] RIP: 0023:0xf7fc9549 [ 2211.002035][ T7644] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2211.021700][ T7644] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2211.030155][ T7644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2211.038156][ T7644] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2211.046152][ T7644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2211.054142][ T7644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2211.062130][ T7644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2211.070138][ T7644] [ 2211.074600][ T7644] Uninit was stored to memory at: [ 2211.079697][ T7644] __get_compat_msghdr+0x514/0x750 [ 2211.085110][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2211.090033][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2211.094858][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2211.099403][ T7644] __sys_recvmmsg+0x113/0x450 [ 2211.104224][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.110523][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2211.115760][ T7644] do_fast_syscall_32+0x33/0x70 [ 2211.120653][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2211.125356][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2211.131731][ T7644] [ 2211.134204][ T7644] Uninit was stored to memory at: [ 2211.139295][ T7644] __get_compat_msghdr+0x514/0x750 [ 2211.144609][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2211.149507][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2211.154392][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2211.158942][ T7644] __sys_recvmmsg+0x113/0x450 [ 2211.163820][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.170119][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2211.175341][ T7644] do_fast_syscall_32+0x33/0x70 [ 2211.180239][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2211.184939][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2211.191321][ T7644] [ 2211.193813][ T7644] Uninit was stored to memory at: [ 2211.198901][ T7644] __get_compat_msghdr+0x514/0x750 [ 2211.204214][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2211.209108][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2211.214173][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2211.218730][ T7644] __sys_recvmmsg+0x113/0x450 [ 2211.223617][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.229911][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2211.235132][ T7644] do_fast_syscall_32+0x33/0x70 [ 2211.240027][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2211.244757][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2211.251215][ T7644] [ 2211.253731][ T7644] Uninit was stored to memory at: [ 2211.258827][ T7644] __get_compat_msghdr+0x514/0x750 [ 2211.264143][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2211.269046][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2211.274149][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2211.278799][ T7644] __sys_recvmmsg+0x113/0x450 [ 2211.283687][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.289984][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2211.295213][ T7644] do_fast_syscall_32+0x33/0x70 [ 2211.300111][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2211.304819][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2211.311191][ T7644] [ 2211.313679][ T7644] Uninit was stored to memory at: [ 2211.318772][ T7644] __get_compat_msghdr+0x514/0x750 [ 2211.324093][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2211.328997][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2211.333880][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2211.338472][ T7644] __sys_recvmmsg+0x113/0x450 [ 2211.343354][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.349646][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2211.354826][ T7644] do_fast_syscall_32+0x33/0x70 [ 2211.359729][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2211.364446][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2211.370931][ T7644] [ 2211.373453][ T7644] Uninit was stored to memory at: [ 2211.378551][ T7644] __get_compat_msghdr+0x514/0x750 [ 2211.383872][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2211.388775][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2211.393664][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2211.398213][ T7644] __sys_recvmmsg+0x113/0x450 [ 2211.403097][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.409565][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2211.415084][ T7644] do_fast_syscall_32+0x33/0x70 [ 2211.419985][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2211.424683][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2211.431059][ T7644] [ 2211.433562][ T7644] Uninit was stored to memory at: [ 2211.438655][ T7644] __get_compat_msghdr+0x514/0x750 [ 2211.443970][ T7644] get_compat_msghdr+0x8c/0x1c0 [ 2211.448879][ T7644] ___sys_recvmsg+0x19d/0x870 [ 2211.453764][ T7644] do_recvmmsg+0x63a/0x10a0 [ 2211.458313][ T7644] __sys_recvmmsg+0x113/0x450 [ 2211.463184][ T7644] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2211.469479][ T7644] __do_fast_syscall_32+0x95/0xf0 [ 2211.474699][ T7644] do_fast_syscall_32+0x33/0x70 [ 2211.479603][ T7644] do_SYSENTER_32+0x1b/0x20 [ 2211.484322][ T7644] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2211.490705][ T7644] [ 2211.493191][ T7644] Local variable msg_sys created at: [ 2211.498480][ T7644] do_recvmmsg+0x5f/0x10a0 [ 2211.503094][ T7644] __sys_recvmmsg+0x113/0x450 01:52:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x19, 0x0, 0x0) 01:52:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="b479329f372b"}, 0x0, {0x2, 0x0, @multicast2}, 'netdevsim0\x00'}) 01:52:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000340)=@deltfilter={0xe8c, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe8c}}, 0x0) 01:52:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000400)="331f151bde7ac9d90e6599a2a0b4ccb1f29ae81f883838b3f62470812982cb858a63e12ff0e4aca74293a4aaae5d1547aa", 0x31}, {&(0x7f0000000440)="4e0483bd8853c81c31c01762ef0c13f13c82898b7eb491a69f3ab62798822a49f4c68788b9f4c4ad4ec24aa8a1834382aedfee16178c7cb4bc121a6453b79a742b132e953aba4bd49646ab9690d97f230a5fe5ed52e129c06fa8e6009423398d0c204a", 0x63}, {&(0x7f0000000500)="5d8c499d7d077615e41d96a4cd02e770d1c5fb11fa61fdd2", 0x18}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000400000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000030000000100000002000000828e23a95047c91243ab65e436dc4813c879d5c66678e82caa25bb34c2beb7b8895771c416da46e4f6426a3376e64f9a0e8ed53addf5cad51e768652f3e32740c042fa480d3af5052f00000000a5e2619d5782544b4b70638bd1634ca56e2f872bb61d5dc42ac3c7fce37ed79bc4adf4974fbe63100836244b771bf3109e", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4004000}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000000c40)=@file={0x0, './bus\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)="35f95c09935811b1c687235e6182e4701c3c01b8fadaf59724bd4b4c70c385e21aa63f280c214bbac3cb20c216482a3ebf817dbaaab802a6605f8e53db7a8cf11817b55a8c5d84ad4cafb2d77881e5787d4af4c92a8932088ad3212ee5caa660d5ba0487ab4fe14ab4cc123414fc2f6f95c42d53d99b8c0df8241f9191969439136a9c1282b7331b7bb55a", 0x8b}], 0x1, &(0x7f0000003200)}}, {{&(0x7f0000001380)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040840}}], 0x5, 0x48004) sched_rr_get_interval(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:13 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:52:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xf, 0x0, 0x0) [ 2211.833687][ T7678] loop5: detected capacity change from 0 to 252287 01:52:14 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) 01:52:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007700)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028000000a", @ANYRES32, @ANYBLOB="1d3c052b127e7931b909353b5e9f7660038f6412edd1fbd83ace609222f2e1a5ac086b9b"], 0x40}}, 0x0) 01:52:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460009fe00b8b775fd00000000000000000000000000000000000000000000004679211ddb39d4f9d6df4f277396470000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000aa9d00"/120], 0x78) sendmmsg$unix(r0, &(0x7f0000003b40)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{0x0}, {&(0x7f00000023c0)}], 0x2, &(0x7f0000002500)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002640)="ab221c7599e3b956b92645075845ff82f20916b94f53ed86c95653581ad9bfa085cce63a65beb9f0a6f324e09c42843671135c947310c720ba621d1b98c06b0c98ec945e167f4b2c053ec3ae55e5138230516d27dc1297ec3e714f09b9e8d0ae593a3b24004fee647c7ba73b5d5e1352fb86cb769f131c87d3985e1d668c3144062502df2d78b1", 0x87}, {0x0}, {&(0x7f0000002800)="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", 0x8c6}, {&(0x7f0000003800)}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000300000000000000001000000010000003abc8dae08916ace03257d9fe7c6078a606e5fabaa74820fc2318b1eff195779b2abc6c418e9bcd11b0d3d703cd9117c287db0bcbeea5e56e613ec3ca0aa3e94db941f70afe5805cfa95f116c3d931b87852c132f984816c796271f0d323b77a925bb7f7962f9d641e37dce5f3844023b6bd979c23a745a01cca917c98bc0bde8afc25358c6f8fc1aca06d5a1acc42a5d37c6d50ff8572161779577f3f04d2d01c190c12b774694cbf3a67cb17a937e188e55c6b0d3639bc3fe216e49a92d81ea89957fe7562afabf3bbe40bfa2ffdee430fc500e13c", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x58, 0x24004000}}], 0x2, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 01:52:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000400)="331f151bde7ac9d90e6599a2a0b4ccb1f29ae81f883838b3f62470812982cb858a63e12ff0e4aca74293a4aaae5d1547aa", 0x31}, {&(0x7f0000000440)="4e0483bd8853c81c31c01762ef0c13f13c82898b7eb491a69f3ab62798822a49f4c68788b9f4c4ad4ec24aa8a1834382aedfee16178c7cb4bc121a6453b79a742b132e953aba4bd49646ab9690d97f230a5fe5ed52e129c06fa8e6009423398d0c204a", 0x63}, {&(0x7f0000000500)="5d8c499d7d077615e41d96a4cd02e770d1c5fb11fa61fdd2", 0x18}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000400000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000030000000100000002000000828e23a95047c91243ab65e436dc4813c879d5c66678e82caa25bb34c2beb7b8895771c416da46e4f6426a3376e64f9a0e8ed53addf5cad51e768652f3e32740c042fa480d3af5052f00000000a5e2619d5782544b4b70638bd1634ca56e2f872bb61d5dc42ac3c7fce37ed79bc4adf4974fbe63100836244b771bf3109e", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4004000}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000000c40)=@file={0x0, './bus\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)="35f95c09935811b1c687235e6182e4701c3c01b8fadaf59724bd4b4c70c385e21aa63f280c214bbac3cb20c216482a3ebf817dbaaab802a6605f8e53db7a8cf11817b55a8c5d84ad4cafb2d77881e5787d4af4c92a8932088ad3212ee5caa660d5ba0487ab4fe14ab4cc123414fc2f6f95c42d53d99b8c0df8241f9191969439136a9c1282b7331b7bb55a", 0x8b}], 0x1, &(0x7f0000003200)}}, {{&(0x7f0000001380)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040840}}], 0x5, 0x48004) sched_rr_get_interval(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:14 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) 01:52:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460009fe00b8b775fd00000000000000000000000000000000000000000000004679211ddb39d4f9d6df4f277396470000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000aa9d00"/120], 0x78) syz_clone3(0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0x0) sendmmsg$unix(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000002800)}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="00000000300000000000000001000000010000003abc8dae08916ace03257d9fe7c6078a606e5fabaa74820fc2318b1eff195779b2abc6c418e9bcd11b0d3d703cd9117c287db0bcbeea5e56e613ec3ca0aa3e94db941f70afe5805cfa95f116c3d931b87852c132f984816c796271f0d3", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 01:52:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000340)='./file0/file1\x00') lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 01:52:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) [ 2212.427209][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2212.546578][ T7700] loop5: detected capacity change from 0 to 252287 01:52:14 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, &(0x7f0000000580)=ANY=[]) [ 2212.908485][ T7701] not chained 1440000 origins [ 2212.913511][ T7701] CPU: 1 PID: 7701 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2212.923624][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2212.933712][ T7701] Call Trace: [ 2212.937014][ T7701] [ 2212.939976][ T7701] dump_stack_lvl+0x1c8/0x256 [ 2212.944809][ T7701] dump_stack+0x1a/0x1c [ 2212.949009][ T7701] kmsan_internal_chain_origin+0x78/0x120 [ 2212.954794][ T7701] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2212.960924][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2212.966091][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2212.972432][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2212.977609][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2212.983484][ T7701] ? __get_compat_msghdr+0x5b/0x750 [ 2212.988734][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2212.993900][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2212.999863][ T7701] ? should_fail+0x3f/0x7e0 [ 2213.004403][ T7701] ? __stack_depot_save+0x21/0x4b0 [ 2213.009570][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2213.014825][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2213.021133][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2213.026304][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2213.032201][ T7701] __msan_chain_origin+0xbd/0x140 [ 2213.037311][ T7701] __get_compat_msghdr+0x514/0x750 [ 2213.042673][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2213.047586][ T7701] ? ___sys_recvmsg+0xa9/0x870 [ 2213.052406][ T7701] ? do_recvmmsg+0x63a/0x10a0 [ 2213.057142][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2213.061890][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2213.067066][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2213.072938][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2213.078110][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2213.083979][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2213.088642][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2213.093826][ T7701] ? __sys_recvmmsg+0x52/0x450 [ 2213.098644][ T7701] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.105167][ T7701] __sys_recvmmsg+0x113/0x450 [ 2213.109901][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2213.115074][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.121382][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2213.126453][ T7701] ? exit_to_user_mode_prepare+0x119/0x220 [ 2213.132318][ T7701] do_fast_syscall_32+0x33/0x70 [ 2213.137217][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2213.141763][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2213.148140][ T7701] RIP: 0023:0xf7fc9549 [ 2213.152247][ T7701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2213.172846][ T7701] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2213.181294][ T7701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2213.189637][ T7701] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2213.197637][ T7701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2213.205724][ T7701] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2213.213723][ T7701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2213.221736][ T7701] [ 2213.227763][ T7701] Uninit was stored to memory at: [ 2213.233729][ T7701] __get_compat_msghdr+0x514/0x750 [ 2213.238893][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2213.243928][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2213.248652][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2213.253320][ T7701] __sys_recvmmsg+0x113/0x450 [ 2213.258049][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.264479][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2213.269554][ T7701] do_fast_syscall_32+0x33/0x70 [ 2213.274632][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2213.279178][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2213.285759][ T7701] [ 2213.288091][ T7701] Uninit was stored to memory at: [ 2213.293348][ T7701] __get_compat_msghdr+0x514/0x750 [ 2213.298507][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2213.303579][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2213.308319][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2213.312984][ T7701] __sys_recvmmsg+0x113/0x450 [ 2213.317714][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.324260][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2213.329358][ T7701] do_fast_syscall_32+0x33/0x70 [ 2213.334440][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2213.338998][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2213.345572][ T7701] [ 2213.347909][ T7701] Uninit was stored to memory at: [ 2213.353157][ T7701] __get_compat_msghdr+0x514/0x750 [ 2213.358315][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2213.363419][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2213.368159][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2213.372928][ T7701] __sys_recvmmsg+0x113/0x450 [ 2213.377808][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.384320][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2213.389397][ T7701] do_fast_syscall_32+0x33/0x70 [ 2213.394529][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2213.399084][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2213.405762][ T7701] 01:52:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007700)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) 01:52:15 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000007000000000000000000000005001a67"], 0x38}}, 0x0) 01:52:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460009fe00b8b775fd00"/30], 0x78) syz_clone3(&(0x7f00000006c0)={0x1020000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x13}, &(0x7f00000003c0)=""/189, 0xbd, &(0x7f0000000480)=""/192, &(0x7f0000000540)=[0x0], 0x1}, 0x58) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000003980)={'bridge_slave_0\x00'}) sendmmsg$unix(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002640)="ab221c7599e3b956b92645075845ff82f20916b94f53ed86c95653581ad9bfa085cce63a65beb9f0a6f324e09c42843671135c947310c720ba621d1b98c06b0c98ec945e167f4b2c053ec3ae55e5138230516d27dc1297ec3e714f09b9e8d0ae593a3b24004fee647c7ba73b5d5e1352fb86cb769f131c87d3985e1d668c3144062502df2d78", 0x86}, {0x0}, {&(0x7f0000002800)}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="00000000300000000000000001000000010000003abc8dae08916ace03257d9fe7c6078a606e5fabaa74820fc2318b1eff195779b2abc6c418e9bcd11b0d3d703cd9117c287db0bcbeea5e56e613ec3ca0aa3e94db941f70afe5805cfa95f116c3d931b87852c132f984816c796271f0d3", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 2213.408131][ T7701] Uninit was stored to memory at: [ 2213.413408][ T7701] __get_compat_msghdr+0x514/0x750 [ 2213.418584][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2213.423696][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2213.428420][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2213.433102][ T7701] __sys_recvmmsg+0x113/0x450 [ 2213.437831][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.444268][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2213.449335][ T7701] do_fast_syscall_32+0x33/0x70 [ 2213.454359][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2213.458927][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2213.465595][ T7701] [ 2213.467927][ T7701] Uninit was stored to memory at: [ 2213.473132][ T7701] __get_compat_msghdr+0x514/0x750 [ 2213.478287][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2213.483326][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2213.488050][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2213.492721][ T7701] __sys_recvmmsg+0x113/0x450 [ 2213.497448][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.503905][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2213.508984][ T7701] do_fast_syscall_32+0x33/0x70 [ 2213.514024][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2213.518580][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2213.525095][ T7701] [ 2213.527418][ T7701] Uninit was stored to memory at: [ 2213.532638][ T7701] __get_compat_msghdr+0x514/0x750 [ 2213.537809][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2213.542861][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2213.547586][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2213.552154][ T7701] __sys_recvmmsg+0x113/0x450 [ 2213.557060][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.563551][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2213.568639][ T7701] do_fast_syscall_32+0x33/0x70 [ 2213.573713][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2213.578263][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2213.584843][ T7701] [ 2213.587183][ T7701] Uninit was stored to memory at: [ 2213.592444][ T7701] __get_compat_msghdr+0x514/0x750 [ 2213.597608][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2213.602639][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2213.607372][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2213.611955][ T7701] __sys_recvmmsg+0x113/0x450 [ 2213.616878][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2213.623281][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2213.628359][ T7701] do_fast_syscall_32+0x33/0x70 [ 2213.633445][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2213.638010][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2213.644569][ T7701] [ 2213.646911][ T7701] Local variable msg_sys created at: [ 2213.652204][ T7701] do_recvmmsg+0x5f/0x10a0 [ 2213.656822][ T7701] __sys_recvmmsg+0x113/0x450 01:52:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) [ 2213.902144][ T7717] loop5: detected capacity change from 0 to 252287 01:52:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000040100000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000380)) 01:52:16 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x0, &(0x7f0000000580)=ANY=[]) [ 2214.053524][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2214.063124][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 01:52:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev\x00') read$char_usb(r0, &(0x7f00000001c0)=""/233, 0xfffffde2) 01:52:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x8) [ 2214.374176][ T7730] loop5: detected capacity change from 0 to 252287 [ 2214.452714][ T7730] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2214.466493][ T7730] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 2214.484639][ T7730] REISERFS (device loop5): using ordered data mode [ 2214.491509][ T7730] reiserfs: using flush barriers [ 2214.500616][ T7730] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 2214.531154][ T7730] REISERFS (device loop5): checking transaction log (loop5) [ 2214.587729][ T7730] REISERFS (device loop5): Using r5 hash to sort names [ 2214.595004][ T7730] REISERFS (device loop5): using 3.5.x disk format [ 2214.626340][ T7730] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 2214.866898][ T7718] not chained 1450000 origins [ 2214.871892][ T7718] CPU: 1 PID: 7718 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2214.881997][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2214.892080][ T7718] Call Trace: [ 2214.895374][ T7718] [ 2214.898318][ T7718] dump_stack_lvl+0x1c8/0x256 [ 2214.903042][ T7718] dump_stack+0x1a/0x1c [ 2214.907237][ T7718] kmsan_internal_chain_origin+0x78/0x120 [ 2214.913008][ T7718] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2214.919121][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2214.924277][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2214.930571][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2214.935728][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2214.941583][ T7718] ? __get_compat_msghdr+0x5b/0x750 [ 2214.946825][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2214.951998][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2214.957857][ T7718] ? should_fail+0x3f/0x7e0 [ 2214.962402][ T7718] ? __stack_depot_save+0x21/0x4b0 [ 2214.967561][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2214.972712][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2214.979003][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2214.984155][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2214.990007][ T7718] __msan_chain_origin+0xbd/0x140 [ 2214.995073][ T7718] __get_compat_msghdr+0x514/0x750 [ 2215.000260][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2215.005237][ T7718] ? ___sys_recvmsg+0xa9/0x870 [ 2215.010040][ T7718] ? do_recvmmsg+0x63a/0x10a0 [ 2215.014764][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2215.019497][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2215.024652][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2215.030502][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2215.035654][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2215.041508][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2215.046058][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2215.051216][ T7718] ? __sys_recvmmsg+0x52/0x450 [ 2215.056015][ T7718] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.062483][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.067199][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2215.072356][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.078653][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2215.083804][ T7718] do_fast_syscall_32+0x33/0x70 [ 2215.088688][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2215.093224][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2215.099592][ T7718] RIP: 0023:0xf7fc2549 [ 2215.103685][ T7718] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2215.123321][ T7718] RSP: 002b:00000000f7f9c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2215.131776][ T7718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2215.139765][ T7718] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2215.147840][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2215.155824][ T7718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2215.163805][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2215.171803][ T7718] [ 2215.178050][ T7718] Uninit was stored to memory at: [ 2215.183545][ T7718] __get_compat_msghdr+0x514/0x750 [ 2215.188710][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2215.193754][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2215.198487][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2215.203171][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.207908][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.214342][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2215.219418][ T7718] do_fast_syscall_32+0x33/0x70 [ 2215.224459][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2215.229298][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2215.235809][ T7718] [ 2215.238143][ T7718] Uninit was stored to memory at: [ 2215.243330][ T7718] __get_compat_msghdr+0x514/0x750 [ 2215.248489][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2215.253503][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2215.258288][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2215.262979][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.267704][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.274125][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2215.279191][ T7718] do_fast_syscall_32+0x33/0x70 [ 2215.284208][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2215.288753][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2215.295258][ T7718] [ 2215.297586][ T7718] Uninit was stored to memory at: [ 2215.302770][ T7718] __get_compat_msghdr+0x514/0x750 [ 2215.307924][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2215.312934][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2215.317661][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2215.322213][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.327072][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.333540][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2215.338618][ T7718] do_fast_syscall_32+0x33/0x70 [ 2215.343637][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2215.348180][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2215.354680][ T7718] [ 2215.357020][ T7718] Uninit was stored to memory at: [ 2215.362127][ T7718] __get_compat_msghdr+0x514/0x750 [ 2215.367413][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2215.372435][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2215.377185][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2215.381744][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.386615][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.393020][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2215.398112][ T7718] do_fast_syscall_32+0x33/0x70 [ 2215.403243][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2215.407799][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2215.414306][ T7718] [ 2215.416637][ T7718] Uninit was stored to memory at: [ 2215.421727][ T7718] __get_compat_msghdr+0x514/0x750 [ 2215.427025][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2215.431937][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2215.436807][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2215.441375][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.446279][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.452683][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2215.457759][ T7718] do_fast_syscall_32+0x33/0x70 [ 2215.462791][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2215.467338][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2215.473913][ T7718] [ 2215.476249][ T7718] Uninit was stored to memory at: [ 2215.481341][ T7718] __get_compat_msghdr+0x514/0x750 [ 2215.486710][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2215.491618][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2215.496568][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2215.501141][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.506091][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.512511][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2215.517599][ T7718] do_fast_syscall_32+0x33/0x70 [ 2215.522730][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2215.527329][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2215.533920][ T7718] [ 2215.536312][ T7718] Uninit was stored to memory at: [ 2215.541408][ T7718] __get_compat_msghdr+0x514/0x750 [ 2215.546772][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2215.551674][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2215.556613][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2215.561194][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.566112][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2215.572528][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2215.577634][ T7718] do_fast_syscall_32+0x33/0x70 [ 2215.582743][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2215.587297][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2215.593884][ T7718] [ 2215.596221][ T7718] Local variable msg_sys created at: [ 2215.601507][ T7718] do_recvmmsg+0x5f/0x10a0 [ 2215.606187][ T7718] __sys_recvmmsg+0x113/0x450 [ 2215.826872][ T7701] not chained 1460000 origins [ 2215.831764][ T7701] CPU: 0 PID: 7701 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2215.841866][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2215.852046][ T7701] Call Trace: [ 2215.855344][ T7701] [ 2215.858292][ T7701] dump_stack_lvl+0x1c8/0x256 [ 2215.863022][ T7701] dump_stack+0x1a/0x1c [ 2215.867245][ T7701] kmsan_internal_chain_origin+0x78/0x120 [ 2215.873018][ T7701] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2215.879141][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2215.884305][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2215.890624][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2215.895794][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2215.901665][ T7701] ? __get_compat_msghdr+0x5b/0x750 [ 2215.906918][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2215.912085][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2215.917952][ T7701] ? should_fail+0x3f/0x7e0 [ 2215.922505][ T7701] ? __stack_depot_save+0x21/0x4b0 [ 2215.927668][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2215.932828][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2215.939121][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2215.944282][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2215.950141][ T7701] __msan_chain_origin+0xbd/0x140 [ 2215.955224][ T7701] __get_compat_msghdr+0x514/0x750 [ 2215.960405][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2215.965304][ T7701] ? ___sys_recvmsg+0xa9/0x870 [ 2215.970121][ T7701] ? do_recvmmsg+0x63a/0x10a0 [ 2215.974853][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2215.979596][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2215.984786][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2215.990652][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2215.995818][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2216.001678][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2216.006238][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2216.011398][ T7701] ? __sys_recvmmsg+0x52/0x450 [ 2216.016199][ T7701] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.022666][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.027381][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2216.032641][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.038935][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2216.043997][ T7701] ? exit_to_user_mode_prepare+0x119/0x220 [ 2216.049946][ T7701] do_fast_syscall_32+0x33/0x70 [ 2216.054851][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2216.059390][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.065758][ T7701] RIP: 0023:0xf7fc9549 [ 2216.069837][ T7701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2216.089473][ T7701] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2216.097911][ T7701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2216.105903][ T7701] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2216.113892][ T7701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2216.121879][ T7701] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2216.129877][ T7701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2216.137877][ T7701] [ 2216.142931][ T7701] Uninit was stored to memory at: [ 2216.148035][ T7701] __get_compat_msghdr+0x514/0x750 [ 2216.154356][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2216.159348][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2216.164383][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2216.168931][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.173758][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.180051][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2216.185219][ T7701] do_fast_syscall_32+0x33/0x70 [ 2216.190131][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2216.194776][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.201150][ T7701] [ 2216.203587][ T7701] Uninit was stored to memory at: [ 2216.208678][ T7701] __get_compat_msghdr+0x514/0x750 [ 2216.213935][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2216.218834][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2216.223652][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2216.228218][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.233100][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.239399][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2216.244634][ T7701] do_fast_syscall_32+0x33/0x70 [ 2216.249527][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2216.254237][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.260612][ T7701] [ 2216.263044][ T7701] Uninit was stored to memory at: [ 2216.268131][ T7701] __get_compat_msghdr+0x514/0x750 [ 2216.273381][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2216.278280][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2216.283103][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2216.287648][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.292455][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.298753][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2216.303943][ T7701] do_fast_syscall_32+0x33/0x70 [ 2216.308867][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2216.313493][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.319877][ T7701] [ 2216.322202][ T7701] Uninit was stored to memory at: [ 2216.327376][ T7701] __get_compat_msghdr+0x514/0x750 [ 2216.332639][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2216.337534][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2216.342343][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2216.346892][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.351615][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.358098][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2216.363258][ T7701] do_fast_syscall_32+0x33/0x70 [ 2216.368154][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2216.372847][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.379223][ T7701] [ 2216.381553][ T7701] Uninit was stored to memory at: [ 2216.386799][ T7701] __get_compat_msghdr+0x514/0x750 [ 2216.391953][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2216.397023][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2216.401753][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2216.406461][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.411182][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.417645][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2216.422802][ T7701] do_fast_syscall_32+0x33/0x70 [ 2216.427695][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2216.432229][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.438748][ T7701] [ 2216.441074][ T7701] Uninit was stored to memory at: [ 2216.446318][ T7701] __get_compat_msghdr+0x514/0x750 [ 2216.451474][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2216.456526][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2216.461252][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2216.465954][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.470679][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.477161][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2216.482400][ T7701] do_fast_syscall_32+0x33/0x70 [ 2216.487298][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2216.491852][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.498388][ T7701] [ 2216.500722][ T7701] Uninit was stored to memory at: [ 2216.505973][ T7701] __get_compat_msghdr+0x514/0x750 [ 2216.511128][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2216.516199][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2216.520929][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2216.525651][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.529925][ T7718] not chained 1470000 origins [ 2216.530372][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.530441][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2216.535360][ T7718] CPU: 1 PID: 7718 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2216.541538][ T7701] do_fast_syscall_32+0x33/0x70 [ 2216.546552][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2216.546580][ T7718] Call Trace: [ 2216.546593][ T7718] [ 2216.546608][ T7718] dump_stack_lvl+0x1c8/0x256 [ 2216.546665][ T7718] dump_stack+0x1a/0x1c [ 2216.556797][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2216.561551][ T7718] kmsan_internal_chain_origin+0x78/0x120 [ 2216.571731][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.574877][ T7718] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2216.574944][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.577886][ T7701] [ 2216.577896][ T7701] Local variable msg_sys created at: [ 2216.582549][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2216.582617][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.586794][ T7701] do_recvmmsg+0x5f/0x10a0 [ 2216.591284][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2216.597148][ T7701] __sys_recvmmsg+0x113/0x450 [ 2216.603360][ T7718] ? __get_compat_msghdr+0x5b/0x750 [ 2216.603426][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.658600][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2216.664472][ T7718] ? should_fail+0x3f/0x7e0 [ 2216.669054][ T7718] ? __stack_depot_save+0x21/0x4b0 [ 2216.674211][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.679368][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2216.685658][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.690823][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2216.696725][ T7718] __msan_chain_origin+0xbd/0x140 [ 2216.701821][ T7718] __get_compat_msghdr+0x514/0x750 [ 2216.706998][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2216.711896][ T7718] ? ___sys_recvmsg+0xa9/0x870 [ 2216.716708][ T7718] ? do_recvmmsg+0x63a/0x10a0 [ 2216.721436][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2216.726225][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.731390][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2216.737254][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.742418][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2216.748283][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2216.752854][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.758019][ T7718] ? __sys_recvmmsg+0x52/0x450 [ 2216.762829][ T7718] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.769302][ T7718] __sys_recvmmsg+0x113/0x450 [ 2216.774026][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2216.779194][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.785534][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2216.790611][ T7718] do_fast_syscall_32+0x33/0x70 [ 2216.795509][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2216.800051][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.806429][ T7718] RIP: 0023:0xf7fc2549 [ 2216.810520][ T7718] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2216.830164][ T7718] RSP: 002b:00000000f7f9c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2216.838613][ T7718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2216.846616][ T7718] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2216.854611][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2216.862606][ T7718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2216.870598][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2216.878604][ T7718] [ 2216.884572][ T7718] Uninit was stored to memory at: [ 2216.889674][ T7718] __get_compat_msghdr+0x514/0x750 [ 2216.895298][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2216.900198][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2216.905037][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2216.909586][ T7718] __sys_recvmmsg+0x113/0x450 [ 2216.914444][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.920749][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2216.926036][ T7718] do_fast_syscall_32+0x33/0x70 [ 2216.930930][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2216.935661][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2216.942034][ T7718] [ 2216.944554][ T7718] Uninit was stored to memory at: [ 2216.949645][ T7718] __get_compat_msghdr+0x514/0x750 [ 2216.954984][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2216.959879][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2216.960404][ T7701] not chained 1480000 origins [ 2216.964760][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2216.964817][ T7718] __sys_recvmmsg+0x113/0x450 [ 2216.964872][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2216.970585][ T7701] CPU: 0 PID: 7701 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2216.974173][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2216.978716][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2216.985040][ T7718] do_fast_syscall_32+0x33/0x70 [ 2216.994978][ T7701] Call Trace: [ 2216.994992][ T7701] [ 2216.995012][ T7701] dump_stack_lvl+0x1c8/0x256 [ 2216.995069][ T7701] dump_stack+0x1a/0x1c [ 2217.000082][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2217.011684][ T7701] kmsan_internal_chain_origin+0x78/0x120 [ 2217.011748][ T7701] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2217.016714][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.019883][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.022920][ T7718] [ 2217.027503][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2217.031672][ T7718] Uninit was stored to memory at: [ 2217.031745][ T7718] __get_compat_msghdr+0x514/0x750 [ 2217.036163][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.036235][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2217.036305][ T7701] ? __get_compat_msghdr+0x5b/0x750 [ 2217.042101][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2217.048161][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.048226][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2217.048293][ T7701] ? should_fail+0x3f/0x7e0 [ 2217.054720][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2217.059710][ T7701] ? __stack_depot_save+0x21/0x4b0 [ 2217.062021][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2217.068246][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.068311][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2217.073439][ T7718] __sys_recvmmsg+0x113/0x450 [ 2217.078450][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.083647][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.089331][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2217.094613][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2217.099341][ T7701] __msan_chain_origin+0xbd/0x140 [ 2217.104566][ T7718] do_fast_syscall_32+0x33/0x70 [ 2217.110260][ T7701] __get_compat_msghdr+0x514/0x750 [ 2217.114854][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2217.119420][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2217.124596][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.128984][ T7701] ? ___sys_recvmsg+0xa9/0x870 [ 2217.134186][ T7718] [ 2217.140304][ T7701] ? do_recvmmsg+0x63a/0x10a0 [ 2217.140367][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2217.145680][ T7718] Uninit was stored to memory at: [ 2217.150682][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.157059][ T7718] __get_compat_msghdr+0x514/0x750 [ 2217.162676][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2217.162743][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.167764][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2217.172771][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2217.172841][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2217.177697][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2217.182887][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.182956][ T7701] ? __sys_recvmmsg+0x52/0x450 [ 2217.187474][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2217.192316][ T7701] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.192389][ T7701] __sys_recvmmsg+0x113/0x450 [ 2217.198720][ T7718] __sys_recvmmsg+0x113/0x450 [ 2217.203462][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2217.203532][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.205871][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.210537][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2217.215300][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2217.220201][ T7701] ? exit_to_user_mode_prepare+0x119/0x220 [ 2217.225391][ T7718] do_fast_syscall_32+0x33/0x70 [ 2217.230384][ T7701] do_fast_syscall_32+0x33/0x70 [ 2217.236269][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2217.241261][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2217.246337][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.252026][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.256619][ T7718] [ 2217.261176][ T7701] RIP: 0023:0xf7fc9549 [ 2217.266363][ T7718] Uninit was stored to memory at: [ 2217.271011][ T7701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2217.275674][ T7718] __get_compat_msghdr+0x514/0x750 [ 2217.281894][ T7701] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 [ 2217.286654][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2217.291209][ T7701] ORIG_RAX: 0000000000000151 [ 2217.296410][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2217.302527][ T7701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2217.302560][ T7701] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2217.302588][ T7701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2217.302614][ T7701] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2217.308838][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2217.313844][ T7701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2217.313887][ T7701] [ 2217.315607][ T7701] Uninit was stored to memory at: [ 2217.318948][ T7718] __sys_recvmmsg+0x113/0x450 [ 2217.325131][ T7701] __get_compat_msghdr+0x514/0x750 [ 2217.329798][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.334711][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2217.339221][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2217.343788][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2217.350097][ T7718] do_fast_syscall_32+0x33/0x70 [ 2217.356494][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2217.358832][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2217.362960][ T7701] __sys_recvmmsg+0x113/0x450 [ 2217.367966][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.387669][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.392866][ T7718] [ 2217.392876][ T7718] Uninit was stored to memory at: [ 2217.398913][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2217.403911][ T7718] __get_compat_msghdr+0x514/0x750 [ 2217.408571][ T7701] do_fast_syscall_32+0x33/0x70 [ 2217.413325][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2217.421263][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2217.429327][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2217.437339][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.445425][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2217.449905][ T7701] [ 2217.449914][ T7701] Uninit was stored to memory at: [ 2217.457957][ T7718] __sys_recvmmsg+0x113/0x450 [ 2217.461012][ T7701] __get_compat_msghdr+0x514/0x750 [ 2217.466060][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.470687][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2217.475877][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2217.482079][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2217.487028][ T7718] do_fast_syscall_32+0x33/0x70 [ 2217.492005][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2217.496760][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2217.501572][ T7701] __sys_recvmmsg+0x113/0x450 [ 2217.506156][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.510611][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.515363][ T7718] [ 2217.521651][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2217.527988][ T7718] Uninit was stored to memory at: [ 2217.530300][ T7701] do_fast_syscall_32+0x33/0x70 [ 2217.535463][ T7718] __get_compat_msghdr+0x514/0x750 [ 2217.540395][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2217.545589][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2217.550408][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.555374][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2217.559929][ T7701] [ 2217.559943][ T7701] Uninit was stored to memory at: [ 2217.560019][ T7701] __get_compat_msghdr+0x514/0x750 [ 2217.564743][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2217.571056][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2217.575665][ T7718] __sys_recvmmsg+0x113/0x450 [ 2217.577985][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2217.583092][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.587754][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2217.592954][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2217.599157][ T7701] __sys_recvmmsg+0x113/0x450 [ 2217.604100][ T7718] do_fast_syscall_32+0x33/0x70 [ 2217.609084][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.613825][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2217.618652][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2217.623241][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.627722][ T7701] do_fast_syscall_32+0x33/0x70 [ 2217.632499][ T7718] [ 2217.638810][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2217.645135][ T7718] Local variable msg_sys created at: [ 2217.647424][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.652520][ T7718] do_recvmmsg+0x5f/0x10a0 [ 2217.657536][ T7701] [ 2217.657544][ T7701] Uninit was stored to memory at: [ 2217.662463][ T7718] __sys_recvmmsg+0x113/0x450 [ 2217.667598][ T7701] __get_compat_msghdr+0x514/0x750 [ 2217.812412][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2217.817319][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2217.822045][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2217.826677][ T7701] __sys_recvmmsg+0x113/0x450 [ 2217.831397][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.837792][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2217.842940][ T7701] do_fast_syscall_32+0x33/0x70 [ 2217.847849][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2217.852467][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.858845][ T7701] [ 2217.861177][ T7701] Uninit was stored to memory at: [ 2217.866360][ T7701] __get_compat_msghdr+0x514/0x750 [ 2217.871511][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2217.876499][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2217.881219][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2217.885915][ T7701] __sys_recvmmsg+0x113/0x450 [ 2217.890640][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.897028][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2217.902101][ T7701] do_fast_syscall_32+0x33/0x70 [ 2217.907080][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2217.911634][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2217.918102][ T7701] [ 2217.920470][ T7701] Uninit was stored to memory at: [ 2217.923453][ T7718] not chained 1490000 origins [ 2217.925643][ T7701] __get_compat_msghdr+0x514/0x750 [ 2217.930165][ T7718] CPU: 1 PID: 7718 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2217.935351][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2217.945309][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2217.945335][ T7718] Call Trace: [ 2217.945349][ T7718] [ 2217.945365][ T7718] dump_stack_lvl+0x1c8/0x256 [ 2217.950214][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2217.960261][ T7718] dump_stack+0x1a/0x1c [ 2217.960308][ T7718] kmsan_internal_chain_origin+0x78/0x120 [ 2217.963678][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2217.966524][ T7718] ? propagate_entity_load_avg+0x32/0x1450 [ 2217.971178][ T7701] __sys_recvmmsg+0x113/0x450 [ 2217.975842][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2217.975902][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2217.975970][ T7718] ? update_load_avg+0x7dd/0xf70 [ 2217.980134][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2217.985837][ T7718] ? __get_compat_msghdr+0x5b/0x750 [ 2217.985896][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2217.990392][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2217.996176][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2217.996246][ T7718] ? should_fail+0x3f/0x7e0 [ 2218.000925][ T7701] do_fast_syscall_32+0x33/0x70 [ 2218.006017][ T7718] ? __stack_depot_save+0x21/0x4b0 [ 2218.006081][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2218.011873][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2218.016814][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2218.016882][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2218.023225][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.028309][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2218.033473][ T7701] [ 2218.038399][ T7718] __msan_chain_origin+0xbd/0x140 [ 2218.044256][ T7701] Uninit was stored to memory at: [ 2218.048665][ T7718] __get_compat_msghdr+0x514/0x750 [ 2218.053635][ T7701] __get_compat_msghdr+0x514/0x750 [ 2218.058862][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2218.064017][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2218.068428][ T7718] ? ___sys_recvmsg+0xa9/0x870 [ 2218.074754][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2218.079741][ T7718] ? do_recvmmsg+0x63a/0x10a0 [ 2218.086131][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2218.091838][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2218.094222][ T7701] __sys_recvmmsg+0x113/0x450 [ 2218.099160][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2218.104227][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.109243][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2218.114409][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2218.119162][ T7718] ? __cond_resched+0x1f/0x40 [ 2218.124094][ T7701] do_fast_syscall_32+0x33/0x70 [ 2218.128737][ T7718] ? preempt_schedule_common+0x117/0x180 [ 2218.133464][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2218.138047][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2218.142622][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.147217][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2218.151861][ T7701] [ 2218.151870][ T7701] Local variable msg_sys created at: [ 2218.156957][ T7718] ? __sys_recvmmsg+0x52/0x450 [ 2218.157023][ T7718] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.163322][ T7701] do_recvmmsg+0x5f/0x10a0 [ 2218.169037][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.174145][ T7701] __sys_recvmmsg+0x113/0x450 [ 2218.178706][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2218.247165][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.253488][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2218.258563][ T7718] do_fast_syscall_32+0x33/0x70 [ 2218.263469][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2218.268012][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.274386][ T7718] RIP: 0023:0xf7fc2549 [ 2218.278476][ T7718] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2218.298125][ T7718] RSP: 002b:00000000f7f9c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2218.306575][ T7718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2218.314576][ T7718] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2218.322571][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2218.330568][ T7718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2218.338569][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2218.346579][ T7718] [ 2218.352699][ T7718] Uninit was stored to memory at: [ 2218.357802][ T7718] __get_compat_msghdr+0x514/0x750 [ 2218.364051][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2218.368993][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2218.373850][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2218.378397][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.383254][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.389550][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2218.394753][ T7718] do_fast_syscall_32+0x33/0x70 [ 2218.399649][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2218.404322][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.410703][ T7718] [ 2218.413148][ T7718] Uninit was stored to memory at: [ 2218.418238][ T7718] __get_compat_msghdr+0x514/0x750 [ 2218.423593][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2218.428500][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2218.433413][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2218.437970][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.442808][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.449097][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2218.454354][ T7718] do_fast_syscall_32+0x33/0x70 [ 2218.459250][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2218.463962][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.470338][ T7718] [ 2218.472852][ T7718] Uninit was stored to memory at: [ 2218.477950][ T7718] __get_compat_msghdr+0x514/0x750 [ 2218.483397][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2218.488311][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2218.493183][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2218.497743][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.502641][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.508962][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2218.514574][ T7718] do_fast_syscall_32+0x33/0x70 [ 2218.519468][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2218.524188][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.530574][ T7718] [ 2218.533062][ T7718] Uninit was stored to memory at: [ 2218.538158][ T7718] __get_compat_msghdr+0x514/0x750 [ 2218.543493][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2218.548394][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2218.553253][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2218.557806][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.562703][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.569002][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2218.574183][ T7718] do_fast_syscall_32+0x33/0x70 [ 2218.579070][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2218.583715][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.590088][ T7718] [ 2218.592596][ T7718] Uninit was stored to memory at: [ 2218.597687][ T7718] __get_compat_msghdr+0x514/0x750 [ 2218.603015][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2218.607911][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2218.612822][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2218.617370][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.622088][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.628587][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2218.633757][ T7718] do_fast_syscall_32+0x33/0x70 [ 2218.635010][ T7701] not chained 1500000 origins [ 2218.638645][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2218.643614][ T7701] CPU: 0 PID: 7701 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2218.647955][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.657999][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2218.658026][ T7701] Call Trace: [ 2218.658040][ T7701] [ 2218.658059][ T7701] dump_stack_lvl+0x1c8/0x256 [ 2218.658116][ T7701] dump_stack+0x1a/0x1c [ 2218.664522][ T7718] [ 2218.674476][ T7701] kmsan_internal_chain_origin+0x78/0x120 [ 2218.674545][ T7701] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2218.677845][ T7718] Uninit was stored to memory at: [ 2218.677918][ T7718] __get_compat_msghdr+0x514/0x750 [ 2218.680765][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.685523][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2218.689556][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2218.691874][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2218.697750][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.697813][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2218.704044][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2218.708930][ T7701] ? __get_compat_msghdr+0x5b/0x750 [ 2218.714190][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.719135][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.724086][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.730303][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2218.735072][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2218.740056][ T7701] ? should_fail+0x3f/0x7e0 [ 2218.745940][ T7718] do_fast_syscall_32+0x33/0x70 [ 2218.750319][ T7701] ? __stack_depot_save+0x21/0x4b0 [ 2218.755597][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2218.760155][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.765344][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.771467][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2218.777364][ T7718] [ 2218.782263][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.782326][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2218.786825][ T7718] Uninit was stored to memory at: [ 2218.786900][ T7718] __get_compat_msghdr+0x514/0x750 [ 2218.791655][ T7701] __msan_chain_origin+0xbd/0x140 [ 2218.796849][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2218.801230][ T7701] __get_compat_msghdr+0x514/0x750 [ 2218.806424][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2218.812655][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2218.812715][ T7701] ? ___sys_recvmsg+0xa9/0x870 [ 2218.818949][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2218.821260][ T7701] ? do_recvmmsg+0x63a/0x10a0 [ 2218.826459][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.832226][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2218.832303][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.837326][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.842423][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2218.842489][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.842554][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2218.847544][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2218.852378][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2218.852451][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.857566][ T7718] do_fast_syscall_32+0x33/0x70 [ 2218.862243][ T7701] ? __sys_recvmmsg+0x52/0x450 [ 2218.862303][ T7701] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.867173][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2218.871924][ T7701] __sys_recvmmsg+0x113/0x450 [ 2218.876524][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.881097][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2218.885879][ T7718] [ 2218.890444][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2218.895631][ T7718] Local variable msg_sys created at: [ 2218.901758][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2218.907833][ T7718] do_recvmmsg+0x5f/0x10a0 [ 2218.912822][ T7701] ? exit_to_user_mode_prepare+0x119/0x220 [ 2218.912895][ T7701] do_fast_syscall_32+0x33/0x70 [ 2218.918706][ T7718] __sys_recvmmsg+0x113/0x450 [ 2218.923714][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2218.923766][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.923827][ T7701] RIP: 0023:0xf7fc9549 [ 2219.023631][ T7701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2219.043290][ T7701] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2219.051752][ T7701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2219.059763][ T7701] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2219.067938][ T7701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2219.075945][ T7701] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2219.083948][ T7701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2219.092003][ T7701] [ 2219.100175][ T7701] Uninit was stored to memory at: [ 2219.106337][ T7701] __get_compat_msghdr+0x514/0x750 [ 2219.111509][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2219.116515][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2219.121270][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2219.125945][ T7701] __sys_recvmmsg+0x113/0x450 [ 2219.130673][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.137080][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2219.142159][ T7701] do_fast_syscall_32+0x33/0x70 [ 2219.147154][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2219.151703][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.158192][ T7701] [ 2219.160550][ T7701] Uninit was stored to memory at: [ 2219.165748][ T7701] __get_compat_msghdr+0x514/0x750 [ 2219.170910][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2219.176014][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2219.180750][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2219.185414][ T7701] __sys_recvmmsg+0x113/0x450 [ 2219.190181][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.196679][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2219.201758][ T7701] do_fast_syscall_32+0x33/0x70 [ 2219.206757][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2219.211307][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.217859][ T7701] [ 2219.220197][ T7701] Uninit was stored to memory at: [ 2219.225487][ T7701] __get_compat_msghdr+0x514/0x750 [ 2219.230659][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2219.235733][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2219.240472][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2219.245204][ T7701] __sys_recvmmsg+0x113/0x450 [ 2219.249932][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.256404][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2219.261482][ T7701] do_fast_syscall_32+0x33/0x70 [ 2219.266555][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2219.271135][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.277696][ T7701] [ 2219.280046][ T7701] Uninit was stored to memory at: [ 2219.285408][ T7701] __get_compat_msghdr+0x514/0x750 [ 2219.290580][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2219.295655][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2219.300388][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2219.305109][ T7701] __sys_recvmmsg+0x113/0x450 [ 2219.309848][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.316323][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2219.321401][ T7701] do_fast_syscall_32+0x33/0x70 [ 2219.326475][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2219.331046][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.337600][ T7701] [ 2219.339931][ T7701] Uninit was stored to memory at: [ 2219.345186][ T7701] __get_compat_msghdr+0x514/0x750 [ 2219.350348][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2219.355409][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2219.360140][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2219.364862][ T7701] __sys_recvmmsg+0x113/0x450 [ 2219.369586][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.376058][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2219.381132][ T7701] do_fast_syscall_32+0x33/0x70 [ 2219.386193][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2219.390740][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.397286][ T7701] [ 2219.399619][ T7701] Uninit was stored to memory at: [ 2219.404870][ T7701] __get_compat_msghdr+0x514/0x750 [ 2219.410023][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2219.415095][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2219.419828][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2219.424548][ T7701] __sys_recvmmsg+0x113/0x450 [ 2219.429280][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.435754][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2219.440837][ T7701] do_fast_syscall_32+0x33/0x70 [ 2219.446191][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2219.450760][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.457238][ T7701] [ 2219.459568][ T7701] Uninit was stored to memory at: [ 2219.464746][ T7701] __get_compat_msghdr+0x514/0x750 [ 2219.469900][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2219.474879][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2219.479616][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2219.484273][ T7701] __sys_recvmmsg+0x113/0x450 [ 2219.488993][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.495378][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2219.500443][ T7701] do_fast_syscall_32+0x33/0x70 [ 2219.505451][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2219.507889][ T7718] not chained 1510000 origins [ 2219.510032][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.514934][ T7718] CPU: 1 PID: 7718 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2219.521197][ T7701] [ 2219.521207][ T7701] Local variable msg_sys created at: [ 2219.531255][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2219.531280][ T7718] Call Trace: [ 2219.531294][ T7718] [ 2219.531310][ T7718] dump_stack_lvl+0x1c8/0x256 [ 2219.533728][ T7701] do_recvmmsg+0x5f/0x10a0 [ 2219.538926][ T7718] dump_stack+0x1a/0x1c [ 2219.549102][ T7701] __sys_recvmmsg+0x113/0x450 [ 2219.552256][ T7718] kmsan_internal_chain_origin+0x78/0x120 [ 2219.552323][ T7718] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2219.584920][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.590089][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2219.596385][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.601545][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.607412][ T7718] ? __get_compat_msghdr+0x5b/0x750 [ 2219.612665][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.617827][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.623716][ T7718] ? should_fail+0x3f/0x7e0 [ 2219.628258][ T7718] ? __stack_depot_save+0x21/0x4b0 [ 2219.633417][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.638581][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2219.644885][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.650047][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.655928][ T7718] __msan_chain_origin+0xbd/0x140 [ 2219.661001][ T7718] __get_compat_msghdr+0x514/0x750 [ 2219.666173][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2219.671072][ T7718] ? ___sys_recvmsg+0xa9/0x870 [ 2219.675919][ T7718] ? do_recvmmsg+0x63a/0x10a0 [ 2219.680650][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2219.685405][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.690567][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.696431][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.701588][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.707461][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2219.712023][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.717188][ T7718] ? __sys_recvmmsg+0x52/0x450 [ 2219.721998][ T7718] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.728468][ T7718] __sys_recvmmsg+0x113/0x450 [ 2219.733192][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2219.738366][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.744758][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2219.749830][ T7718] do_fast_syscall_32+0x33/0x70 [ 2219.754724][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2219.759267][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.765640][ T7718] RIP: 0023:0xf7fc2549 [ 2219.769813][ T7718] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2219.789462][ T7718] RSP: 002b:00000000f7f9c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2219.797915][ T7718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2219.805946][ T7718] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2219.813941][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2219.815966][ T7701] not chained 1520000 origins [ 2219.822015][ T7718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2219.834668][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2219.842660][ T7718] [ 2219.845684][ T7701] CPU: 0 PID: 7701 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2219.848580][ T7718] Uninit was stored to memory at: [ 2219.855778][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2219.855806][ T7701] Call Trace: [ 2219.855820][ T7701] [ 2219.855833][ T7701] dump_stack_lvl+0x1c8/0x256 [ 2219.855895][ T7701] dump_stack+0x1a/0x1c [ 2219.855940][ T7701] kmsan_internal_chain_origin+0x78/0x120 [ 2219.856012][ T7701] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2219.856075][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2219.856139][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2219.856211][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2219.856269][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.856336][ T7701] ? __get_compat_msghdr+0x5b/0x750 [ 2219.856394][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2219.856452][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.856518][ T7701] ? should_fail+0x3f/0x7e0 [ 2219.861589][ T7718] __get_compat_msghdr+0x514/0x750 [ 2219.871585][ T7701] ? __stack_depot_save+0x21/0x4b0 [ 2219.871649][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2219.871708][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2219.875091][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2219.877912][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2219.882666][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2219.886716][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.892537][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2219.898496][ T7701] __msan_chain_origin+0xbd/0x140 [ 2219.903696][ T7718] __sys_recvmmsg+0x113/0x450 [ 2219.909814][ T7701] __get_compat_msghdr+0x514/0x750 [ 2219.915039][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.920737][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2219.926024][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2219.930999][ T7701] ? ___sys_recvmsg+0xa9/0x870 [ 2219.936902][ T7718] do_fast_syscall_32+0x33/0x70 [ 2219.941273][ T7701] ? do_recvmmsg+0x63a/0x10a0 [ 2219.946498][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2219.951515][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2219.956705][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2219.962837][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2219.962902][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.967731][ T7718] [ 2219.967741][ T7718] Uninit was stored to memory at: [ 2219.972820][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2219.972881][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2219.977733][ T7718] __get_compat_msghdr+0x514/0x750 [ 2219.983465][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2219.983537][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2219.988047][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2219.993080][ T7701] ? __sys_recvmmsg+0x52/0x450 [ 2219.993144][ T7701] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2219.997833][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2220.003017][ T7701] __sys_recvmmsg+0x113/0x450 [ 2220.003078][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2220.009350][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2220.014191][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.014273][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2220.019288][ T7718] __sys_recvmmsg+0x113/0x450 [ 2220.024035][ T7701] ? exit_to_user_mode_prepare+0x119/0x220 [ 2220.024112][ T7701] do_fast_syscall_32+0x33/0x70 [ 2220.028971][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.033636][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2220.033689][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.038203][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2220.042876][ T7701] RIP: 0023:0xf7fc9549 [ 2220.042908][ T7701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2220.042962][ T7701] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2220.049284][ T7718] do_fast_syscall_32+0x33/0x70 [ 2220.054375][ T7701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2220.054409][ T7701] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2220.054436][ T7701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2220.054463][ T7701] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2220.054489][ T7701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2220.060274][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2220.062604][ T7701] [ 2220.062717][ T7701] Uninit was stored to memory at: [ 2220.067681][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.072922][ T7701] __get_compat_msghdr+0x514/0x750 [ 2220.078661][ T7718] [ 2220.078670][ T7718] Uninit was stored to memory at: [ 2220.083830][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2220.088395][ T7718] __get_compat_msghdr+0x514/0x750 [ 2220.093515][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2220.098363][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2220.103187][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2220.109602][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2220.114340][ T7701] __sys_recvmmsg+0x113/0x450 [ 2220.119040][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2220.124207][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.128715][ T7718] __sys_recvmmsg+0x113/0x450 [ 2220.135010][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2220.140127][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.144771][ T7701] do_fast_syscall_32+0x33/0x70 [ 2220.150579][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2220.155499][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2220.161731][ T7718] do_fast_syscall_32+0x33/0x70 [ 2220.166293][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.172715][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2220.177717][ T7701] [ 2220.177726][ T7701] Uninit was stored to memory at: [ 2220.181780][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.201529][ T7701] __get_compat_msghdr+0x514/0x750 [ 2220.209991][ T7718] [ 2220.214883][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2220.222946][ T7718] Uninit was stored to memory at: [ 2220.223017][ T7718] __get_compat_msghdr+0x514/0x750 [ 2220.230907][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2220.238975][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2220.246993][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2220.255071][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2220.259531][ T7701] __sys_recvmmsg+0x113/0x450 [ 2220.262621][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2220.267622][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.274030][ T7718] __sys_recvmmsg+0x113/0x450 [ 2220.279100][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2220.281413][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.286495][ T7701] do_fast_syscall_32+0x33/0x70 [ 2220.291348][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2220.296518][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2220.301196][ T7718] do_fast_syscall_32+0x33/0x70 [ 2220.306106][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.310609][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2220.315396][ T7701] [ 2220.315409][ T7701] Uninit was stored to memory at: [ 2220.315494][ T7701] __get_compat_msghdr+0x514/0x750 [ 2220.320088][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.324694][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2220.330958][ T7718] [ 2220.330971][ T7718] Uninit was stored to memory at: [ 2220.335749][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2220.340845][ T7718] __get_compat_msghdr+0x514/0x750 [ 2220.347179][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2220.352029][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2220.357119][ T7701] __sys_recvmmsg+0x113/0x450 [ 2220.361622][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2220.366531][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.372938][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2220.377557][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2220.379883][ T7718] __sys_recvmmsg+0x113/0x450 [ 2220.385027][ T7701] do_fast_syscall_32+0x33/0x70 [ 2220.391347][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.396530][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2220.398881][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2220.403796][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.408813][ T7718] do_fast_syscall_32+0x33/0x70 [ 2220.413988][ T7701] [ 2220.413998][ T7701] Uninit was stored to memory at: [ 2220.414079][ T7701] __get_compat_msghdr+0x514/0x750 [ 2220.418671][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2220.423587][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2220.428274][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.433016][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2220.437697][ T7718] [ 2220.437705][ T7718] Uninit was stored to memory at: [ 2220.442178][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2220.448597][ T7718] __get_compat_msghdr+0x514/0x750 [ 2220.453150][ T7701] __sys_recvmmsg+0x113/0x450 [ 2220.458154][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2220.464453][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.469307][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2220.474391][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2220.478897][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2220.483830][ T7701] do_fast_syscall_32+0x33/0x70 [ 2220.490138][ T7718] __sys_recvmmsg+0x113/0x450 [ 2220.494706][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2220.497127][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.502131][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.507368][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2220.513856][ T7701] [ 2220.513868][ T7701] Uninit was stored to memory at: [ 2220.513945][ T7701] __get_compat_msghdr+0x514/0x750 [ 2220.518782][ T7718] do_fast_syscall_32+0x33/0x70 [ 2220.521112][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2220.526222][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2220.530970][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2220.536179][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.540813][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2220.545746][ T7718] [ 2220.550394][ T7701] __sys_recvmmsg+0x113/0x450 [ 2220.555179][ T7718] Uninit was stored to memory at: [ 2220.561469][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.566125][ T7718] __get_compat_msghdr+0x514/0x750 [ 2220.571061][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2220.575873][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2220.580778][ T7701] do_fast_syscall_32+0x33/0x70 [ 2220.587372][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2220.591851][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2220.596960][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2220.603340][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.608168][ T7718] __sys_recvmmsg+0x113/0x450 [ 2220.610480][ T7701] [ 2220.610489][ T7701] Uninit was stored to memory at: [ 2220.615593][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.620894][ T7701] __get_compat_msghdr+0x514/0x750 [ 2220.625415][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2220.630221][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2220.636634][ T7718] do_fast_syscall_32+0x33/0x70 [ 2220.641274][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2220.643663][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2220.648664][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2220.653252][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.658410][ T7701] __sys_recvmmsg+0x113/0x450 [ 2220.663189][ T7718] [ 2220.668006][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.674332][ T7718] Local variable msg_sys created at: [ 2220.678969][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2220.684073][ T7718] do_recvmmsg+0x5f/0x10a0 [ 2220.688555][ T7701] do_fast_syscall_32+0x33/0x70 [ 2220.693469][ T7718] __sys_recvmmsg+0x113/0x450 [ 2220.698129][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2220.922144][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.928619][ T7701] [ 2220.930949][ T7701] Uninit was stored to memory at: [ 2220.936132][ T7701] __get_compat_msghdr+0x514/0x750 [ 2220.941283][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2220.946261][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2220.950982][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2220.955638][ T7701] __sys_recvmmsg+0x113/0x450 [ 2220.960362][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2220.966750][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2220.971820][ T7701] do_fast_syscall_32+0x33/0x70 [ 2220.976891][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2220.981435][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2220.987899][ T7701] [ 2220.990229][ T7701] Local variable msg_sys created at: [ 2220.995608][ T7701] do_recvmmsg+0x5f/0x10a0 [ 2221.000076][ T7701] __sys_recvmmsg+0x113/0x450 [ 2221.126631][ T7718] not chained 1530000 origins [ 2221.131349][ T7718] CPU: 1 PID: 7718 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2221.141471][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2221.151553][ T7718] Call Trace: [ 2221.154844][ T7718] [ 2221.157786][ T7718] dump_stack_lvl+0x1c8/0x256 [ 2221.162516][ T7718] dump_stack+0x1a/0x1c [ 2221.166713][ T7718] kmsan_internal_chain_origin+0x78/0x120 [ 2221.172498][ T7718] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2221.178628][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.183787][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2221.190083][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.195246][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.201111][ T7718] ? __get_compat_msghdr+0x5b/0x750 [ 2221.206458][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.211638][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.217523][ T7718] ? should_fail+0x3f/0x7e0 [ 2221.222077][ T7718] ? __stack_depot_save+0x21/0x4b0 [ 2221.227252][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.232411][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2221.238732][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.244244][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.250121][ T7718] __msan_chain_origin+0xbd/0x140 [ 2221.255194][ T7718] __get_compat_msghdr+0x514/0x750 [ 2221.260458][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2221.265362][ T7718] ? ___sys_recvmsg+0xa9/0x870 [ 2221.270174][ T7718] ? do_recvmmsg+0x63a/0x10a0 [ 2221.274908][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2221.279661][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.284825][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.290691][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.295853][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.301717][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2221.306281][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.311448][ T7718] ? __sys_recvmmsg+0x52/0x450 [ 2221.316262][ T7718] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.322733][ T7718] __sys_recvmmsg+0x113/0x450 [ 2221.327457][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2221.332626][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.338936][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2221.344022][ T7718] do_fast_syscall_32+0x33/0x70 [ 2221.348920][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2221.353486][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2221.359887][ T7718] RIP: 0023:0xf7fc2549 [ 2221.363989][ T7718] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2221.378347][ T7701] not chained 1540000 origins [ 2221.383636][ T7718] RSP: 002b:00000000f7f9c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2221.383688][ T7718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2221.383718][ T7718] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2221.383746][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2221.383772][ T7718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2221.383798][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2221.383839][ T7718] [ 2221.386472][ T7718] Uninit was stored to memory at: [ 2221.388951][ T7701] CPU: 0 PID: 7701 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2221.397868][ T7718] __get_compat_msghdr+0x514/0x750 [ 2221.405353][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2221.405382][ T7701] Call Trace: [ 2221.405396][ T7701] [ 2221.405412][ T7701] dump_stack_lvl+0x1c8/0x256 [ 2221.405470][ T7701] dump_stack+0x1a/0x1c [ 2221.413525][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2221.421398][ T7701] kmsan_internal_chain_origin+0x78/0x120 [ 2221.429467][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2221.437406][ T7701] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2221.437474][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.440529][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2221.445551][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2221.445620][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.455799][ T7718] __sys_recvmmsg+0x113/0x450 [ 2221.460792][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.470941][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.474111][ T7701] ? __get_compat_msghdr+0x5b/0x750 [ 2221.474171][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.477146][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2221.481787][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.486023][ T7718] do_fast_syscall_32+0x33/0x70 [ 2221.490760][ T7701] ? should_fail+0x3f/0x7e0 [ 2221.496558][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2221.501115][ T7701] ? __stack_depot_save+0x21/0x4b0 [ 2221.507265][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2221.512254][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.512317][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2221.516814][ T7718] [ 2221.516823][ T7718] Uninit was stored to memory at: [ 2221.523036][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.523104][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.528299][ T7718] __get_compat_msghdr+0x514/0x750 [ 2221.532908][ T7701] __msan_chain_origin+0xbd/0x140 [ 2221.532976][ T7701] __get_compat_msghdr+0x514/0x750 [ 2221.533052][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2221.538850][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2221.545079][ T7701] ? ___sys_recvmsg+0xa9/0x870 [ 2221.545140][ T7701] ? do_recvmmsg+0x63a/0x10a0 [ 2221.545202][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2221.550394][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2221.555501][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.555564][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.560600][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2221.566386][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.566448][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2221.571321][ T7718] __sys_recvmmsg+0x113/0x450 [ 2221.575823][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2221.575896][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.580414][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.585517][ T7701] ? __sys_recvmmsg+0x52/0x450 [ 2221.585578][ T7701] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.591922][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2221.597020][ T7701] __sys_recvmmsg+0x113/0x450 [ 2221.597086][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2221.603421][ T7718] do_fast_syscall_32+0x33/0x70 [ 2221.605664][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.610660][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2221.615765][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2221.615820][ T7701] ? exit_to_user_mode_prepare+0x119/0x220 [ 2221.621641][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2221.626737][ T7701] do_fast_syscall_32+0x33/0x70 [ 2221.626793][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2221.626845][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2221.631844][ T7718] [ 2221.631853][ T7718] Uninit was stored to memory at: [ 2221.636936][ T7701] RIP: 0023:0xf7fc9549 [ 2221.636968][ T7701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2221.637013][ T7701] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2221.641929][ T7718] __get_compat_msghdr+0x514/0x750 [ 2221.646696][ T7701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2221.646730][ T7701] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2221.646757][ T7701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2221.646784][ T7701] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2221.646811][ T7701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2221.651544][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2221.656213][ T7701] [ 2221.657759][ T7701] Uninit was stored to memory at: [ 2221.660966][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2221.665940][ T7701] __get_compat_msghdr+0x514/0x750 [ 2221.670845][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2221.676736][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2221.681237][ T7718] __sys_recvmmsg+0x113/0x450 [ 2221.686428][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2221.692229][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.696968][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2221.701461][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2221.706629][ T7701] __sys_recvmmsg+0x113/0x450 [ 2221.712947][ T7718] do_fast_syscall_32+0x33/0x70 [ 2221.717849][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.724238][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2221.729236][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2221.733998][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2221.739095][ T7701] do_fast_syscall_32+0x33/0x70 [ 2221.744033][ T7718] [ 2221.750334][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2221.754960][ T7718] Uninit was stored to memory at: [ 2221.759964][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2221.765930][ T7718] __get_compat_msghdr+0x514/0x750 [ 2221.772152][ T7701] [ 2221.772161][ T7701] Uninit was stored to memory at: [ 2221.772314][ T7701] __get_compat_msghdr+0x514/0x750 [ 2221.777097][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2221.781475][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2221.787885][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2221.790183][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2221.795287][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2221.799323][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2221.819037][ T7718] __sys_recvmmsg+0x113/0x450 [ 2221.827527][ T7701] __sys_recvmmsg+0x113/0x450 [ 2221.832715][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.840689][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.848746][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2221.856762][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2221.864837][ T7718] do_fast_syscall_32+0x33/0x70 [ 2221.872878][ T7701] do_fast_syscall_32+0x33/0x70 [ 2221.877712][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2221.880720][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2221.885924][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2221.890572][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2221.895770][ T7718] [ 2221.900235][ T7701] [ 2221.900244][ T7701] Uninit was stored to memory at: [ 2221.905168][ T7718] Uninit was stored to memory at: [ 2221.909873][ T7701] __get_compat_msghdr+0x514/0x750 [ 2221.914625][ T7718] __get_compat_msghdr+0x514/0x750 [ 2221.920802][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2221.925388][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2221.930387][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2221.935159][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2221.939967][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2221.946294][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2221.950760][ T7701] __sys_recvmmsg+0x113/0x450 [ 2221.955875][ T7718] __sys_recvmmsg+0x113/0x450 [ 2221.962162][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.967095][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2221.969387][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2221.973970][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2221.978975][ T7701] do_fast_syscall_32+0x33/0x70 [ 2221.985388][ T7718] do_fast_syscall_32+0x33/0x70 [ 2221.990483][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2221.992874][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2221.997887][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.003083][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.007977][ T7701] [ 2222.007986][ T7701] Uninit was stored to memory at: [ 2222.008063][ T7701] __get_compat_msghdr+0x514/0x750 [ 2222.012922][ T7718] [ 2222.017560][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2222.022217][ T7718] Uninit was stored to memory at: [ 2222.022394][ T7718] __get_compat_msghdr+0x514/0x750 [ 2222.026781][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2222.031266][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2222.036005][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2222.040688][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2222.046999][ T7701] __sys_recvmmsg+0x113/0x450 [ 2222.053319][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2222.058345][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2222.063450][ T7718] __sys_recvmmsg+0x113/0x450 [ 2222.068259][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2222.073196][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2222.077660][ T7701] do_fast_syscall_32+0x33/0x70 [ 2222.082144][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2222.088540][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2222.094964][ T7718] do_fast_syscall_32+0x33/0x70 [ 2222.097255][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.099566][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2222.104649][ T7701] [ 2222.104659][ T7701] Uninit was stored to memory at: [ 2222.104733][ T7701] __get_compat_msghdr+0x514/0x750 [ 2222.109677][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.114852][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2222.119962][ T7718] [ 2222.119970][ T7718] Uninit was stored to memory at: [ 2222.124871][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2222.129785][ T7718] __get_compat_msghdr+0x514/0x750 [ 2222.134460][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2222.139142][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2222.143706][ T7701] __sys_recvmmsg+0x113/0x450 [ 2222.148208][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2222.152941][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2222.157624][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2222.163936][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2222.170180][ T7718] __sys_recvmmsg+0x113/0x450 [ 2222.175271][ T7701] do_fast_syscall_32+0x33/0x70 [ 2222.180294][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2222.185208][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2222.190059][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2222.194620][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.199122][ T7718] do_fast_syscall_32+0x33/0x70 [ 2222.205513][ T7701] [ 2222.205523][ T7701] Uninit was stored to memory at: [ 2222.205596][ T7701] __get_compat_msghdr+0x514/0x750 [ 2222.211838][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2222.214236][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2222.219260][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.224435][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2222.226773][ T7718] [ 2222.226782][ T7718] Local variable msg_sys created at: [ 2222.231604][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2222.236712][ T7718] do_recvmmsg+0x5f/0x10a0 [ 2222.241811][ T7701] __sys_recvmmsg+0x113/0x450 [ 2222.246571][ T7718] __sys_recvmmsg+0x113/0x450 [ 2222.251388][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2222.501589][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2222.506839][ T7701] do_fast_syscall_32+0x33/0x70 [ 2222.511742][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2222.516468][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.522938][ T7701] [ 2222.525271][ T7701] Uninit was stored to memory at: [ 2222.530371][ T7701] __get_compat_msghdr+0x514/0x750 [ 2222.535759][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2222.540662][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2222.545566][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2222.550124][ T7701] __sys_recvmmsg+0x113/0x450 [ 2222.555070][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2222.561408][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2222.566700][ T7701] do_fast_syscall_32+0x33/0x70 [ 2222.571607][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2222.576362][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.582946][ T7701] [ 2222.585289][ T7701] Local variable msg_sys created at: [ 2222.590581][ T7701] do_recvmmsg+0x5f/0x10a0 [ 2222.595227][ T7701] __sys_recvmmsg+0x113/0x450 [ 2222.673130][ T7701] not chained 1550000 origins [ 2222.677861][ T7701] CPU: 0 PID: 7701 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2222.688058][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2222.698319][ T7701] Call Trace: [ 2222.701619][ T7701] [ 2222.704582][ T7701] dump_stack_lvl+0x1c8/0x256 [ 2222.709314][ T7701] dump_stack+0x1a/0x1c [ 2222.713531][ T7701] kmsan_internal_chain_origin+0x78/0x120 [ 2222.719309][ T7701] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2222.725434][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.730599][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2222.736908][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.742077][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2222.747948][ T7701] ? __get_compat_msghdr+0x5b/0x750 [ 2222.753197][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.758357][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2222.764220][ T7701] ? should_fail+0x3f/0x7e0 [ 2222.768753][ T7701] ? __stack_depot_save+0x21/0x4b0 [ 2222.773913][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.779084][ T7701] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2222.785389][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.790558][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2222.796423][ T7701] __msan_chain_origin+0xbd/0x140 [ 2222.801521][ T7701] __get_compat_msghdr+0x514/0x750 [ 2222.806695][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2222.811595][ T7701] ? ___sys_recvmsg+0xa9/0x870 [ 2222.816410][ T7701] ? do_recvmmsg+0x63a/0x10a0 [ 2222.821231][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2222.825980][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.831147][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2222.837141][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.842316][ T7701] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2222.848225][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2222.852804][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.857990][ T7701] ? __sys_recvmmsg+0x52/0x450 [ 2222.862811][ T7701] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2222.869287][ T7701] __sys_recvmmsg+0x113/0x450 [ 2222.874016][ T7701] ? kmsan_get_metadata+0x33/0x220 [ 2222.879189][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2222.885519][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2222.890597][ T7701] ? exit_to_user_mode_prepare+0x119/0x220 [ 2222.896484][ T7701] do_fast_syscall_32+0x33/0x70 [ 2222.901378][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2222.905920][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2222.912297][ T7701] RIP: 0023:0xf7fc9549 [ 2222.916387][ T7701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2222.936046][ T7701] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2222.944504][ T7701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2222.952507][ T7701] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2222.960514][ T7701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2222.968510][ T7701] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2222.976533][ T7701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2222.984544][ T7701] [ 2222.988992][ T7701] Uninit was stored to memory at: [ 2222.994402][ T7701] __get_compat_msghdr+0x514/0x750 [ 2222.999565][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2223.004560][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2223.009284][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2223.013924][ T7701] __sys_recvmmsg+0x113/0x450 [ 2223.018739][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.025136][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2223.030204][ T7701] do_fast_syscall_32+0x33/0x70 [ 2223.035186][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2223.039730][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.046199][ T7701] [ 2223.048529][ T7701] Uninit was stored to memory at: [ 2223.053727][ T7701] __get_compat_msghdr+0x514/0x750 [ 2223.058882][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2223.063872][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2223.068603][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2223.073289][ T7701] __sys_recvmmsg+0x113/0x450 [ 2223.078015][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.084415][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2223.089484][ T7701] do_fast_syscall_32+0x33/0x70 [ 2223.094468][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2223.099009][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.105489][ T7701] [ 2223.107843][ T7701] Uninit was stored to memory at: [ 2223.113032][ T7701] __get_compat_msghdr+0x514/0x750 [ 2223.118195][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2223.123198][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2223.124151][ T7718] not chained 1560000 origins [ 2223.127920][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2223.132810][ T7718] CPU: 1 PID: 7718 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2223.137258][ T7701] __sys_recvmmsg+0x113/0x450 [ 2223.147306][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2223.147332][ T7718] Call Trace: [ 2223.147345][ T7718] [ 2223.147361][ T7718] dump_stack_lvl+0x1c8/0x256 [ 2223.152062][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.162116][ T7718] dump_stack+0x1a/0x1c [ 2223.162164][ T7718] kmsan_internal_chain_origin+0x78/0x120 [ 2223.165539][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2223.168385][ T7718] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2223.173131][ T7701] do_fast_syscall_32+0x33/0x70 [ 2223.179276][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.183520][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2223.189154][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2223.194278][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.200212][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.205119][ T7701] [ 2223.210135][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2223.214690][ T7701] Uninit was stored to memory at: [ 2223.220838][ T7718] ? __get_compat_msghdr+0x5b/0x750 [ 2223.227545][ T7701] __get_compat_msghdr+0x514/0x750 [ 2223.232497][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.234884][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2223.240673][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2223.245787][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2223.250856][ T7718] ? should_fail+0x3f/0x7e0 [ 2223.256020][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2223.261051][ T7718] ? __stack_depot_save+0x21/0x4b0 [ 2223.265994][ T7701] __sys_recvmmsg+0x113/0x450 [ 2223.271705][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.276461][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.280870][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2223.285437][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2223.290455][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.295229][ T7701] do_fast_syscall_32+0x33/0x70 [ 2223.300206][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2223.306506][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2223.312663][ T7718] __msan_chain_origin+0xbd/0x140 [ 2223.312726][ T7718] __get_compat_msghdr+0x514/0x750 [ 2223.317741][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.322847][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2223.322906][ T7718] ? ___sys_recvmsg+0xa9/0x870 [ 2223.327744][ T7701] [ 2223.327752][ T7701] Uninit was stored to memory at: [ 2223.333549][ T7718] ? do_recvmmsg+0x63a/0x10a0 [ 2223.333613][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2223.338167][ T7701] __get_compat_msghdr+0x514/0x750 [ 2223.343300][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.343361][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2223.348480][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2223.354791][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.354853][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2223.359699][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2223.364463][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2223.364539][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.366861][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2223.371876][ T7718] ? __sys_recvmmsg+0x52/0x450 [ 2223.376612][ T7701] __sys_recvmmsg+0x113/0x450 [ 2223.381193][ T7718] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.386375][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.391391][ T7718] __sys_recvmmsg+0x113/0x450 [ 2223.397287][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2223.402003][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2223.407174][ T7701] do_fast_syscall_32+0x33/0x70 [ 2223.412890][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.412968][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2223.417611][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2223.422101][ T7718] do_fast_syscall_32+0x33/0x70 [ 2223.427274][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.431682][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2223.436505][ T7701] [ 2223.441081][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.447581][ T7701] Uninit was stored to memory at: [ 2223.453697][ T7718] RIP: 0023:0xf7fc2549 [ 2223.453730][ T7718] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2223.453774][ T7718] RSP: 002b:00000000f7f9c5cc EFLAGS: 00000296 [ 2223.458491][ T7701] __get_compat_msghdr+0x514/0x750 [ 2223.463428][ T7718] ORIG_RAX: 0000000000000151 [ 2223.463445][ T7718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2223.463476][ T7718] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2223.463504][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2223.468596][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2223.473427][ T7718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2223.473454][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2223.473496][ T7718] [ 2223.476212][ T7718] Uninit was stored to memory at: [ 2223.479733][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2223.485194][ T7718] __get_compat_msghdr+0x514/0x750 [ 2223.489332][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2223.494277][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2223.500576][ T7701] __sys_recvmmsg+0x113/0x450 [ 2223.505163][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2223.507463][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.514011][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2223.519015][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2223.523157][ T7718] __sys_recvmmsg+0x113/0x450 [ 2223.542928][ T7701] do_fast_syscall_32+0x33/0x70 [ 2223.549093][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.554269][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2223.558947][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2223.567861][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.576146][ T7718] do_fast_syscall_32+0x33/0x70 [ 2223.584240][ T7701] [ 2223.584255][ T7701] Uninit was stored to memory at: [ 2223.584332][ T7701] __get_compat_msghdr+0x514/0x750 [ 2223.589123][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2223.597178][ T7701] get_compat_msghdr+0x8c/0x1c0 [ 2223.605256][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.608252][ T7701] ___sys_recvmsg+0x19d/0x870 [ 2223.613348][ T7718] [ 2223.613357][ T7718] Uninit was stored to memory at: [ 2223.618003][ T7701] do_recvmmsg+0x63a/0x10a0 [ 2223.623265][ T7718] __get_compat_msghdr+0x514/0x750 [ 2223.627678][ T7701] __sys_recvmmsg+0x113/0x450 [ 2223.632610][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2223.637248][ T7701] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.641913][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2223.648222][ T7701] __do_fast_syscall_32+0x95/0xf0 [ 2223.652802][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2223.657815][ T7701] do_fast_syscall_32+0x33/0x70 [ 2223.662588][ T7718] __sys_recvmmsg+0x113/0x450 [ 2223.667421][ T7701] do_SYSENTER_32+0x1b/0x20 [ 2223.673768][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.678230][ T7701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.683433][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2223.689739][ T7701] [ 2223.689749][ T7701] Local variable msg_sys created at: [ 2223.694672][ T7718] do_fast_syscall_32+0x33/0x70 [ 2223.696982][ T7701] do_recvmmsg+0x5f/0x10a0 [ 2223.701992][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2223.707170][ T7701] __sys_recvmmsg+0x113/0x450 [ 2223.711676][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.840111][ T7718] [ 2223.842607][ T7718] Uninit was stored to memory at: [ 2223.847691][ T7718] __get_compat_msghdr+0x514/0x750 [ 2223.852963][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2223.857864][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2223.862765][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2223.867315][ T7718] __sys_recvmmsg+0x113/0x450 [ 2223.872035][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.878510][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2223.883675][ T7718] do_fast_syscall_32+0x33/0x70 [ 2223.888573][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2223.893291][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.899670][ T7718] [ 2223.902003][ T7718] Uninit was stored to memory at: [ 2223.907289][ T7718] __get_compat_msghdr+0x514/0x750 [ 2223.912646][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2223.917629][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2223.922471][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2223.927022][ T7718] __sys_recvmmsg+0x113/0x450 [ 2223.931737][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.938219][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2223.943448][ T7718] do_fast_syscall_32+0x33/0x70 [ 2223.948349][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2223.953068][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2223.959444][ T7718] [ 2223.961788][ T7718] Uninit was stored to memory at: [ 2223.967102][ T7718] __get_compat_msghdr+0x514/0x750 [ 2223.972448][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2223.977346][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2223.982492][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2223.987062][ T7718] __sys_recvmmsg+0x113/0x450 [ 2223.991786][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2223.998270][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2224.003452][ T7718] do_fast_syscall_32+0x33/0x70 [ 2224.008350][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2224.013080][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2224.019464][ T7718] [ 2224.021801][ T7718] Uninit was stored to memory at: [ 2224.027086][ T7718] __get_compat_msghdr+0x514/0x750 [ 2224.032330][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2224.037258][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2224.041979][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2224.046756][ T7718] __sys_recvmmsg+0x113/0x450 [ 2224.051484][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2224.057968][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2224.063144][ T7718] do_fast_syscall_32+0x33/0x70 [ 2224.068062][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2224.072802][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 01:52:26 executing program 1: socket(0xf, 0x6, 0x8000006) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r0, 0x542e, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r1, 0x542e, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r2, 0x542e, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r3, 0x542e, 0x0) openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)="c238614ea85a9eea64cf356630a9f4") getpgid(0xffffffffffffffff) getgid() ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r4, 0x542e, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 01:52:26 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @short={0x2, 0xffff}}, 0x14) 01:52:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000440), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000400)="331f151bde7ac9d90e6599a2a0b4ccb1f29ae81f883838b3f62470812982cb858a63e12ff0e4aca74293a4aaae5d1547aa", 0x31}, {&(0x7f0000000440)="4e0483bd8853c81c31c01762ef0c13f13c82898b7eb491a69f3ab62798822a49f4c68788b9f4c4ad4ec24aa8a1834382aedfee16178c7cb4bc121a6453b79a742b132e953aba4bd49646ab9690d97f230a5fe5ed52e129c06fa8e6009423398d0c204a", 0x63}, {&(0x7f0000000500)="5d8c499d7d077615e41d96a4cd02e770d1c5fb11fa61fdd2", 0x18}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000400000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000030000000100000002000000828e23a95047c91243ab65e436dc4813c879d5c66678e82caa25bb34c2beb7b8895771c416da46e4f6426a3376e64f9a0e8ed53addf5cad51e768652f3e32740c042fa480d3af5052f00000000a5e2619d5782544b4b70638bd1634ca56e2f872bb61d5dc42ac3c7fce37ed79bc4adf4974fbe63100836244b771bf3109e", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4004000}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000000c40)=@file={0x0, './bus\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)="35f95c09935811b1c687235e6182e4701c3c01b8fadaf59724bd4b4c70c385e21aa63f280c214bbac3cb20c216482a3ebf817dbaaab802a6605f8e53db7a8cf11817b55a8c5d84ad4cafb2d77881e5787d4af4c92a8932088ad3212ee5caa660d5ba0487ab4fe14ab4cc123414fc2f6f95c42d53d99b8c0df8241f9191969439136a9c1282b7331b7bb55a", 0x8b}], 0x1, &(0x7f0000003200)}}, {{&(0x7f0000001380)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040840}}], 0x5, 0x48004) sched_rr_get_interval(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:26 executing program 0: prctl$PR_GET_NO_NEW_PRIVS(0x27) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/255, 0xff}, {0x0}, {0x0}, {0x0}, {&(0x7f00000014c0)=""/64, 0x40}, {0x0}], 0x6}, 0x100) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001d80)={&(0x7f0000001680), 0x6e, &(0x7f0000001cc0)=[{0x0}, {&(0x7f00000018c0)=""/91, 0x5b}, {&(0x7f0000001940)=""/117, 0x75}, {0x0}, {0x0}, {&(0x7f0000001c00)=""/70, 0x46}], 0x6}, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001dc0)={0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000001e40)) syz_io_uring_setup(0x5113, &(0x7f0000005240)={0x0, 0x0, 0x1, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000052c0), &(0x7f0000005300)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:52:26 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x0, &(0x7f0000000580)=ANY=[]) [ 2224.079176][ T7718] [ 2224.081504][ T7718] Uninit was stored to memory at: [ 2224.086775][ T7718] __get_compat_msghdr+0x514/0x750 [ 2224.091931][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2224.097049][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2224.101778][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2224.106556][ T7718] __sys_recvmmsg+0x113/0x450 [ 2224.111283][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2224.117714][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2224.122942][ T7718] do_fast_syscall_32+0x33/0x70 [ 2224.127848][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2224.132517][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2224.138904][ T7718] [ 2224.141237][ T7718] Local variable msg_sys created at: [ 2224.146806][ T7718] do_recvmmsg+0x5f/0x10a0 [ 2224.151284][ T7718] __sys_recvmmsg+0x113/0x450 [ 2224.240746][ T7746] loop5: detected capacity change from 0 to 252287 01:52:26 executing program 4: r0 = openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}}) [ 2224.325849][ T7746] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2224.339563][ T7746] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 2224.394067][ T7746] REISERFS (device loop5): using ordered data mode [ 2224.400949][ T7746] reiserfs: using flush barriers [ 2224.479577][ T7746] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 2224.557242][ T7752] fuse: Invalid rootmode [ 2224.633574][ T7746] REISERFS (device loop5): checking transaction log (loop5) [ 2224.701474][ T7746] REISERFS (device loop5): Using r5 hash to sort names [ 2224.709225][ T7746] REISERFS (device loop5): using 3.5.x disk format [ 2224.736952][ T7718] not chained 1570000 origins [ 2224.741773][ T7718] CPU: 0 PID: 7718 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2224.751887][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2224.761970][ T7718] Call Trace: [ 2224.765271][ T7718] [ 2224.768221][ T7718] dump_stack_lvl+0x1c8/0x256 [ 2224.772948][ T7718] dump_stack+0x1a/0x1c [ 2224.773509][ T7746] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 2224.777142][ T7718] kmsan_internal_chain_origin+0x78/0x120 [ 2224.777208][ T7718] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2224.777271][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.777333][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2224.777398][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.777457][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2224.777531][ T7718] ? __get_compat_msghdr+0x5b/0x750 [ 2224.831495][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.836677][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2224.842561][ T7718] ? should_fail+0x3f/0x7e0 [ 2224.847102][ T7718] ? __stack_depot_save+0x21/0x4b0 [ 2224.852282][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.857479][ T7718] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2224.863786][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.868951][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2224.874906][ T7718] __msan_chain_origin+0xbd/0x140 [ 2224.880083][ T7718] __get_compat_msghdr+0x514/0x750 [ 2224.885296][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2224.890233][ T7718] ? ___sys_recvmsg+0xa9/0x870 [ 2224.895095][ T7718] ? do_recvmmsg+0x63a/0x10a0 [ 2224.899855][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2224.904687][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.909856][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2224.915738][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.920906][ T7718] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2224.926786][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2224.931354][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.936533][ T7718] ? __sys_recvmmsg+0x52/0x450 [ 2224.941352][ T7718] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2224.947838][ T7718] __sys_recvmmsg+0x113/0x450 [ 2224.952571][ T7718] ? kmsan_get_metadata+0x33/0x220 [ 2224.957768][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2224.964084][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2224.969173][ T7718] do_fast_syscall_32+0x33/0x70 [ 2224.974074][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2224.978624][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2224.985000][ T7718] RIP: 0023:0xf7fc2549 [ 2224.989115][ T7718] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2225.008768][ T7718] RSP: 002b:00000000f7f9c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2225.017254][ T7718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2225.025260][ T7718] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2225.033356][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2225.041376][ T7718] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2225.049369][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2225.057385][ T7718] [ 2225.065477][ T7718] Uninit was stored to memory at: [ 2225.070597][ T7718] __get_compat_msghdr+0x514/0x750 [ 2225.077681][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2225.082739][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2225.087516][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2225.092068][ T7718] __sys_recvmmsg+0x113/0x450 [ 2225.096958][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2225.103348][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2225.108422][ T7718] do_fast_syscall_32+0x33/0x70 [ 2225.113458][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2225.118015][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.124545][ T7718] [ 2225.126902][ T7718] Uninit was stored to memory at: [ 2225.131999][ T7718] __get_compat_msghdr+0x514/0x750 [ 2225.137266][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2225.142171][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2225.146997][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2225.151584][ T7718] __sys_recvmmsg+0x113/0x450 [ 2225.156411][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2225.162802][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2225.167875][ T7718] do_fast_syscall_32+0x33/0x70 [ 2225.172869][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2225.177413][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.183893][ T7718] [ 2225.186225][ T7718] Uninit was stored to memory at: [ 2225.191309][ T7718] __get_compat_msghdr+0x514/0x750 [ 2225.196575][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2225.201486][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2225.206315][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2225.210875][ T7718] __sys_recvmmsg+0x113/0x450 [ 2225.215769][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2225.222074][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2225.227305][ T7718] do_fast_syscall_32+0x33/0x70 [ 2225.232203][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2225.236980][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.243549][ T7718] [ 2225.245882][ T7718] Uninit was stored to memory at: [ 2225.251006][ T7718] __get_compat_msghdr+0x514/0x750 [ 2225.256334][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2225.261238][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2225.266139][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2225.270694][ T7718] __sys_recvmmsg+0x113/0x450 [ 2225.275592][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2225.281897][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2225.287146][ T7718] do_fast_syscall_32+0x33/0x70 [ 2225.292048][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2225.296757][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.303238][ T7718] [ 2225.305572][ T7718] Uninit was stored to memory at: [ 2225.310665][ T7718] __get_compat_msghdr+0x514/0x750 [ 2225.315991][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2225.320926][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2225.325814][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2225.330368][ T7718] __sys_recvmmsg+0x113/0x450 [ 2225.335274][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2225.341611][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2225.346856][ T7718] do_fast_syscall_32+0x33/0x70 [ 2225.351788][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2225.356489][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.362968][ T7718] [ 2225.365299][ T7718] Uninit was stored to memory at: [ 2225.370392][ T7718] __get_compat_msghdr+0x514/0x750 [ 2225.375784][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2225.380693][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2225.385593][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2225.390151][ T7718] __sys_recvmmsg+0x113/0x450 [ 2225.395048][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2225.401383][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2225.406640][ T7718] do_fast_syscall_32+0x33/0x70 [ 2225.411568][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2225.416293][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.422791][ T7718] [ 2225.425123][ T7718] Uninit was stored to memory at: [ 2225.430212][ T7718] __get_compat_msghdr+0x514/0x750 [ 2225.435537][ T7718] get_compat_msghdr+0x8c/0x1c0 [ 2225.440441][ T7718] ___sys_recvmsg+0x19d/0x870 [ 2225.445347][ T7718] do_recvmmsg+0x63a/0x10a0 [ 2225.449922][ T7718] __sys_recvmmsg+0x113/0x450 [ 2225.454812][ T7718] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2225.461127][ T7718] __do_fast_syscall_32+0x95/0xf0 [ 2225.466379][ T7718] do_fast_syscall_32+0x33/0x70 [ 2225.471290][ T7718] do_SYSENTER_32+0x1b/0x20 [ 2225.475944][ T7718] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.482431][ T7718] [ 2225.484775][ T7718] Local variable msg_sys created at: [ 2225.490061][ T7718] do_recvmmsg+0x5f/0x10a0 [ 2225.494640][ T7718] __sys_recvmmsg+0x113/0x450 01:52:27 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 01:52:27 executing program 0: syz_io_uring_setup(0x2cb7, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xe08, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:52:27 executing program 4: socket(0x0, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) 01:52:27 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x0, &(0x7f0000000580)=ANY=[]) 01:52:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000180)=""/17, &(0x7f00000001c0)=0x11) 01:52:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x11, 0xb, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x200, 0xe0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "60e15881af0fa38665390f81316bbbfad317c6d821061d95a4c245bca8e2"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 01:52:28 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, 0x0) 01:52:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) [ 2226.436074][ T7775] loop5: detected capacity change from 0 to 252287 [ 2226.459255][ T7749] not chained 1580000 origins [ 2226.464410][ T7749] CPU: 1 PID: 7749 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2226.474520][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2226.484606][ T7749] Call Trace: [ 2226.487903][ T7749] [ 2226.490848][ T7749] dump_stack_lvl+0x1c8/0x256 [ 2226.495582][ T7749] dump_stack+0x1a/0x1c [ 2226.499788][ T7749] kmsan_internal_chain_origin+0x78/0x120 [ 2226.505565][ T7749] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2226.511718][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.516918][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2226.523353][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.528529][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2226.534400][ T7749] ? __get_compat_msghdr+0x5b/0x750 [ 2226.539663][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.544835][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2226.550712][ T7749] ? should_fail+0x3f/0x7e0 [ 2226.552847][ T7777] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2226.555271][ T7749] ? __stack_depot_save+0x21/0x4b0 [ 2226.555338][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.555399][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2226.579986][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.585158][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2226.591031][ T7749] __msan_chain_origin+0xbd/0x140 [ 2226.596215][ T7749] __get_compat_msghdr+0x514/0x750 [ 2226.601396][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2226.606305][ T7749] ? ___sys_recvmsg+0xa9/0x870 [ 2226.611121][ T7749] ? do_recvmmsg+0x63a/0x10a0 [ 2226.615867][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2226.620612][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.625782][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2226.631652][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.636819][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2226.642693][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2226.647444][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.652632][ T7749] ? __sys_recvmmsg+0x52/0x450 [ 2226.657451][ T7749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2226.663932][ T7749] __sys_recvmmsg+0x113/0x450 [ 2226.668656][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2226.673816][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2226.680202][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2226.685373][ T7749] ? exit_to_user_mode_prepare+0x119/0x220 [ 2226.691233][ T7749] do_fast_syscall_32+0x33/0x70 [ 2226.696142][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2226.700681][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2226.707053][ T7749] RIP: 0023:0xf7f4b549 [ 2226.711183][ T7749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2226.730843][ T7749] RSP: 002b:00000000f7f255cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2226.739288][ T7749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2226.747277][ T7749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2226.755279][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2226.763266][ T7749] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2226.771252][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2226.779435][ T7749] [ 2226.785615][ T7749] Uninit was stored to memory at: [ 2226.790770][ T7749] __get_compat_msghdr+0x514/0x750 [ 2226.796624][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2226.801554][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2226.806484][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2226.811042][ T7749] __sys_recvmmsg+0x113/0x450 [ 2226.815981][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2226.822493][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2226.827614][ T7749] do_fast_syscall_32+0x33/0x70 [ 2226.832724][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2226.837311][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2226.843891][ T7749] [ 2226.846251][ T7749] Uninit was stored to memory at: [ 2226.851451][ T7749] __get_compat_msghdr+0x514/0x750 [ 2226.856837][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2226.861753][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2226.866633][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2226.871540][ T7749] __sys_recvmmsg+0x113/0x450 [ 2226.876588][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2226.883006][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2226.888089][ T7749] do_fast_syscall_32+0x33/0x70 [ 2226.893196][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2226.897841][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2226.904526][ T7749] [ 2226.906858][ T7749] Uninit was stored to memory at: [ 2226.911980][ T7749] __get_compat_msghdr+0x514/0x750 [ 2226.917288][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2226.922210][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2226.927096][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2226.931662][ T7749] __sys_recvmmsg+0x113/0x450 [ 2226.936615][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2226.943043][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2226.948140][ T7749] do_fast_syscall_32+0x33/0x70 [ 2226.953242][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2226.957788][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2226.964367][ T7749] [ 2226.966702][ T7749] Uninit was stored to memory at: [ 2226.971826][ T7749] __get_compat_msghdr+0x514/0x750 [ 2226.977196][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2226.982116][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2226.987065][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2226.991642][ T7749] __sys_recvmmsg+0x113/0x450 [ 2226.996572][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2227.002996][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2227.008091][ T7749] do_fast_syscall_32+0x33/0x70 [ 2227.013189][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2227.017744][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2227.024330][ T7749] [ 2227.026662][ T7749] Uninit was stored to memory at: [ 2227.031749][ T7749] __get_compat_msghdr+0x514/0x750 [ 2227.037052][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2227.041954][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2227.046895][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2227.051472][ T7749] __sys_recvmmsg+0x113/0x450 [ 2227.056413][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2227.062828][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2227.067997][ T7749] do_fast_syscall_32+0x33/0x70 [ 2227.073153][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2227.077705][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2227.084327][ T7749] [ 2227.086664][ T7749] Uninit was stored to memory at: [ 2227.091762][ T7749] __get_compat_msghdr+0x514/0x750 [ 2227.097123][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2227.102030][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2227.106952][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2227.111513][ T7749] __sys_recvmmsg+0x113/0x450 [ 2227.116464][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2227.122908][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2227.128000][ T7749] do_fast_syscall_32+0x33/0x70 [ 2227.133267][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2227.137821][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2227.144395][ T7749] [ 2227.146815][ T7749] Uninit was stored to memory at: [ 2227.151897][ T7749] __get_compat_msghdr+0x514/0x750 [ 2227.157201][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2227.162126][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2227.167057][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2227.171630][ T7749] __sys_recvmmsg+0x113/0x450 [ 2227.176665][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2227.183109][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2227.188184][ T7749] do_fast_syscall_32+0x33/0x70 [ 2227.193286][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2227.197831][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2227.204399][ T7749] [ 2227.206729][ T7749] Local variable msg_sys created at: [ 2227.212062][ T7749] do_recvmmsg+0x5f/0x10a0 [ 2227.216717][ T7749] __sys_recvmmsg+0x113/0x450 [ 2227.743174][ T7749] not chained 1590000 origins [ 2227.747904][ T7749] CPU: 0 PID: 7749 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2227.758004][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2227.768087][ T7749] Call Trace: [ 2227.771380][ T7749] [ 2227.774334][ T7749] dump_stack_lvl+0x1c8/0x256 [ 2227.779060][ T7749] dump_stack+0x1a/0x1c [ 2227.783249][ T7749] kmsan_internal_chain_origin+0x78/0x120 [ 2227.789017][ T7749] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2227.795137][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.800294][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2227.806585][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.811747][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2227.817610][ T7749] ? __get_compat_msghdr+0x5b/0x750 [ 2227.822856][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.828018][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2227.833892][ T7749] ? should_fail+0x3f/0x7e0 [ 2227.838425][ T7749] ? __stack_depot_save+0x21/0x4b0 [ 2227.843584][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.848742][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2227.855034][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.860192][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2227.866048][ T7749] __msan_chain_origin+0xbd/0x140 [ 2227.871125][ T7749] __get_compat_msghdr+0x514/0x750 [ 2227.876293][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2227.881186][ T7749] ? ___sys_recvmsg+0xa9/0x870 [ 2227.885991][ T7749] ? do_recvmmsg+0x63a/0x10a0 [ 2227.890722][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2227.895458][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.900643][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2227.906503][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.911677][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2227.917539][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2227.922102][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.927270][ T7749] ? __sys_recvmmsg+0x52/0x450 [ 2227.932085][ T7749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2227.938557][ T7749] __sys_recvmmsg+0x113/0x450 [ 2227.943281][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2227.948446][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2227.954788][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2227.959852][ T7749] ? exit_to_user_mode_prepare+0x119/0x220 [ 2227.965710][ T7749] do_fast_syscall_32+0x33/0x70 [ 2227.970604][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2227.975141][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2227.981514][ T7749] RIP: 0023:0xf7f4b549 [ 2227.985597][ T7749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2228.005245][ T7749] RSP: 002b:00000000f7f255cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2228.013696][ T7749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2228.021698][ T7749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2228.030303][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2228.038312][ T7749] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2228.046309][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2228.054318][ T7749] [ 2228.062480][ T7749] Uninit was stored to memory at: [ 2228.067601][ T7749] __get_compat_msghdr+0x514/0x750 [ 2228.073881][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2228.078788][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2228.083608][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2228.088159][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.092977][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.099274][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2228.104436][ T7749] do_fast_syscall_32+0x33/0x70 [ 2228.109327][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2228.113957][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.120331][ T7749] [ 2228.122748][ T7749] Uninit was stored to memory at: [ 2228.127832][ T7749] __get_compat_msghdr+0x514/0x750 [ 2228.133079][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2228.137971][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2228.142793][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2228.147344][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.152080][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.158473][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2228.163638][ T7749] do_fast_syscall_32+0x33/0x70 [ 2228.168531][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2228.173163][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.179541][ T7749] [ 2228.181865][ T7749] Uninit was stored to memory at: [ 2228.187122][ T7749] __get_compat_msghdr+0x514/0x750 [ 2228.192366][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2228.197425][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2228.202147][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2228.206863][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.211587][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.218044][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2228.223219][ T7749] do_fast_syscall_32+0x33/0x70 [ 2228.228110][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2228.232823][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.239202][ T7749] [ 2228.241534][ T7749] Uninit was stored to memory at: [ 2228.246870][ T7749] __get_compat_msghdr+0x514/0x750 [ 2228.252024][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2228.257085][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2228.261809][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2228.266528][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.271252][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.277700][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2228.282867][ T7749] do_fast_syscall_32+0x33/0x70 [ 2228.287760][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2228.292442][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.298815][ T7749] [ 2228.301142][ T7749] Uninit was stored to memory at: [ 2228.306392][ T7749] __get_compat_msghdr+0x514/0x750 [ 2228.311547][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2228.316648][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2228.321384][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2228.326120][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.330855][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.337301][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2228.342489][ T7749] do_fast_syscall_32+0x33/0x70 [ 2228.347392][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2228.351951][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.358494][ T7749] [ 2228.360825][ T7749] Uninit was stored to memory at: [ 2228.366076][ T7749] __get_compat_msghdr+0x514/0x750 [ 2228.371238][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2228.376293][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2228.381125][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2228.385884][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.390619][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.397083][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2228.402170][ T7749] do_fast_syscall_32+0x33/0x70 [ 2228.407222][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2228.411767][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.418317][ T7749] [ 2228.420672][ T7749] Uninit was stored to memory at: [ 2228.425946][ T7749] __get_compat_msghdr+0x514/0x750 [ 2228.431129][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2228.436201][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2228.441025][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2228.445736][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.450463][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.456914][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2228.462021][ T7749] do_fast_syscall_32+0x33/0x70 [ 2228.467078][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2228.471751][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.478285][ T7749] [ 2228.480630][ T7749] Local variable msg_sys created at: [ 2228.486101][ T7749] do_recvmmsg+0x5f/0x10a0 [ 2228.490564][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.746222][ T7749] not chained 1600000 origins [ 2228.750991][ T7749] CPU: 0 PID: 7749 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2228.761097][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2228.771178][ T7749] Call Trace: [ 2228.774474][ T7749] [ 2228.777416][ T7749] dump_stack_lvl+0x1c8/0x256 [ 2228.782149][ T7749] dump_stack+0x1a/0x1c [ 2228.786356][ T7749] kmsan_internal_chain_origin+0x78/0x120 [ 2228.792126][ T7749] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2228.798245][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.803406][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2228.809709][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.814867][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2228.820818][ T7749] ? __get_compat_msghdr+0x5b/0x750 [ 2228.826079][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.831242][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2228.837104][ T7749] ? should_fail+0x3f/0x7e0 [ 2228.841635][ T7749] ? __stack_depot_save+0x21/0x4b0 [ 2228.846793][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.851971][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2228.858272][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.863435][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2228.869299][ T7749] __msan_chain_origin+0xbd/0x140 [ 2228.874397][ T7749] __get_compat_msghdr+0x514/0x750 [ 2228.879574][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2228.884475][ T7749] ? ___sys_recvmsg+0xa9/0x870 [ 2228.889288][ T7749] ? do_recvmmsg+0x63a/0x10a0 [ 2228.894041][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2228.898785][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.903946][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2228.909822][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.914981][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2228.920845][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2228.925407][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.930578][ T7749] ? __sys_recvmmsg+0x52/0x450 [ 2228.935393][ T7749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.941872][ T7749] __sys_recvmmsg+0x113/0x450 [ 2228.946595][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2228.951762][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2228.958070][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2228.963139][ T7749] ? exit_to_user_mode_prepare+0x119/0x220 [ 2228.969020][ T7749] do_fast_syscall_32+0x33/0x70 [ 2228.973916][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2228.978468][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.984849][ T7749] RIP: 0023:0xf7f4b549 [ 2228.988934][ T7749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2229.008584][ T7749] RSP: 002b:00000000f7f255cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2229.017040][ T7749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2229.025068][ T7749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2229.033083][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2229.041075][ T7749] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2229.049066][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2229.057078][ T7749] [ 2229.061599][ T7749] Uninit was stored to memory at: [ 2229.066968][ T7749] __get_compat_msghdr+0x514/0x750 [ 2229.072124][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2229.077139][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2229.081865][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2229.086515][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.091240][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.097746][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2229.102915][ T7749] do_fast_syscall_32+0x33/0x70 [ 2229.107807][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2229.112440][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.118817][ T7749] [ 2229.121146][ T7749] Uninit was stored to memory at: [ 2229.126351][ T7749] __get_compat_msghdr+0x514/0x750 [ 2229.131514][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2229.136542][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2229.141363][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2229.146018][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.150745][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.157243][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2229.162412][ T7749] do_fast_syscall_32+0x33/0x70 [ 2229.167309][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2229.171857][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.178343][ T7749] [ 2229.180758][ T7749] Uninit was stored to memory at: [ 2229.185957][ T7749] __get_compat_msghdr+0x514/0x750 [ 2229.191128][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2229.196198][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2229.200925][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2229.205644][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.210397][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.216861][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2229.221941][ T7749] do_fast_syscall_32+0x33/0x70 [ 2229.227013][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2229.231562][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.238115][ T7749] [ 2229.240463][ T7749] Uninit was stored to memory at: [ 2229.245725][ T7749] __get_compat_msghdr+0x514/0x750 [ 2229.250888][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2229.256103][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2229.260837][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2229.265561][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.270377][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.276827][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2229.281917][ T7749] do_fast_syscall_32+0x33/0x70 [ 2229.286974][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2229.291525][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.298014][ T7749] [ 2229.300353][ T7749] Uninit was stored to memory at: [ 2229.305603][ T7749] __get_compat_msghdr+0x514/0x750 [ 2229.310761][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2229.315811][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2229.320541][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2229.325243][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.329980][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.336455][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2229.341616][ T7749] do_fast_syscall_32+0x33/0x70 [ 2229.346706][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2229.351348][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.357835][ T7749] [ 2229.360267][ T7749] Uninit was stored to memory at: [ 2229.365556][ T7749] __get_compat_msghdr+0x514/0x750 [ 2229.370737][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2229.375824][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2229.380686][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2229.385398][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.390179][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.396673][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2229.401920][ T7749] do_fast_syscall_32+0x33/0x70 [ 2229.406992][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2229.411556][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.418050][ T7749] [ 2229.420390][ T7749] Uninit was stored to memory at: [ 2229.425645][ T7749] __get_compat_msghdr+0x514/0x750 [ 2229.430806][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2229.435847][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2229.440574][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2229.445283][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.450006][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.456449][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2229.461553][ T7749] do_fast_syscall_32+0x33/0x70 [ 2229.466625][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2229.471172][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.477781][ T7749] [ 2229.480132][ T7749] Local variable msg_sys created at: [ 2229.485632][ T7749] do_recvmmsg+0x5f/0x10a0 [ 2229.490124][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.737831][ T7749] not chained 1610000 origins [ 2229.742788][ T7749] CPU: 1 PID: 7749 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2229.753022][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2229.763191][ T7749] Call Trace: [ 2229.766532][ T7749] [ 2229.769485][ T7749] dump_stack_lvl+0x1c8/0x256 [ 2229.774410][ T7749] dump_stack+0x1a/0x1c [ 2229.778596][ T7749] kmsan_internal_chain_origin+0x78/0x120 [ 2229.784378][ T7749] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2229.790494][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.795648][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2229.802022][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.807182][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2229.813128][ T7749] ? __get_compat_msghdr+0x5b/0x750 [ 2229.818389][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.823544][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2229.829387][ T7749] ? should_fail+0x3f/0x7e0 [ 2229.833942][ T7749] ? __stack_depot_save+0x21/0x4b0 [ 2229.839117][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.844269][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2229.850558][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.855717][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2229.861597][ T7749] __msan_chain_origin+0xbd/0x140 [ 2229.866688][ T7749] __get_compat_msghdr+0x514/0x750 [ 2229.871872][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2229.876771][ T7749] ? ___sys_recvmsg+0xa9/0x870 [ 2229.881583][ T7749] ? do_recvmmsg+0x63a/0x10a0 [ 2229.886387][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2229.891116][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.896259][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2229.902103][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.907267][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2229.913159][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2229.917706][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.922850][ T7749] ? __sys_recvmmsg+0x52/0x450 [ 2229.927810][ T7749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.934264][ T7749] __sys_recvmmsg+0x113/0x450 [ 2229.938968][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2229.944123][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2229.950403][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2229.955454][ T7749] ? exit_to_user_mode_prepare+0x119/0x220 [ 2229.961331][ T7749] do_fast_syscall_32+0x33/0x70 [ 2229.966241][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2229.970764][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.977150][ T7749] RIP: 0023:0xf7f4b549 [ 2229.981246][ T7749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2230.000875][ T7749] RSP: 002b:00000000f7f255cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2230.009337][ T7749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2230.017343][ T7749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2230.025351][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2230.033331][ T7749] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2230.041305][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2230.049293][ T7749] [ 2230.054845][ T7749] Uninit was stored to memory at: [ 2230.059958][ T7749] __get_compat_msghdr+0x514/0x750 [ 2230.065649][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2230.070559][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2230.075416][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2230.079998][ T7749] __sys_recvmmsg+0x113/0x450 [ 2230.084851][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2230.091149][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2230.096359][ T7749] do_fast_syscall_32+0x33/0x70 [ 2230.101284][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2230.105974][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2230.112472][ T7749] [ 2230.114799][ T7749] Uninit was stored to memory at: [ 2230.119890][ T7749] __get_compat_msghdr+0x514/0x750 [ 2230.125177][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2230.130078][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2230.134998][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2230.139546][ T7749] __sys_recvmmsg+0x113/0x450 [ 2230.144396][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2230.150691][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2230.155932][ T7749] do_fast_syscall_32+0x33/0x70 [ 2230.160838][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2230.165559][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2230.172113][ T7749] [ 2230.174649][ T7749] Uninit was stored to memory at: [ 2230.179738][ T7749] __get_compat_msghdr+0x514/0x750 [ 2230.185015][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2230.189912][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2230.194820][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2230.199371][ T7749] __sys_recvmmsg+0x113/0x450 [ 2230.204284][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2230.210648][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2230.215906][ T7749] do_fast_syscall_32+0x33/0x70 [ 2230.220796][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2230.225578][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2230.231952][ T7749] [ 2230.234468][ T7749] Uninit was stored to memory at: [ 2230.239561][ T7749] __get_compat_msghdr+0x514/0x750 [ 2230.245022][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2230.249919][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2230.254822][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2230.259403][ T7749] __sys_recvmmsg+0x113/0x450 [ 2230.264256][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2230.270556][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2230.275814][ T7749] do_fast_syscall_32+0x33/0x70 [ 2230.280707][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2230.285436][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2230.291812][ T7749] [ 2230.294326][ T7749] Uninit was stored to memory at: [ 2230.299416][ T7749] __get_compat_msghdr+0x514/0x750 [ 2230.304765][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2230.309659][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2230.314577][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2230.319126][ T7749] __sys_recvmmsg+0x113/0x450 [ 2230.324031][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2230.330325][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2230.335576][ T7749] do_fast_syscall_32+0x33/0x70 [ 2230.340465][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2230.345182][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2230.351557][ T7749] [ 2230.354064][ T7749] Uninit was stored to memory at: [ 2230.359156][ T7749] __get_compat_msghdr+0x514/0x750 [ 2230.364503][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2230.369417][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2230.374363][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2230.378963][ T7749] __sys_recvmmsg+0x113/0x450 [ 2230.383852][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2230.390277][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2230.395575][ T7749] do_fast_syscall_32+0x33/0x70 [ 2230.400482][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2230.405220][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2230.411592][ T7749] [ 2230.414110][ T7749] Uninit was stored to memory at: [ 2230.419200][ T7749] __get_compat_msghdr+0x514/0x750 [ 2230.424535][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2230.429443][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2230.434361][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2230.438914][ T7749] __sys_recvmmsg+0x113/0x450 [ 2230.443808][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2230.450105][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2230.455363][ T7749] do_fast_syscall_32+0x33/0x70 [ 2230.460254][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2230.464988][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2230.471361][ T7749] [ 2230.473842][ T7749] Local variable msg_sys created at: [ 2230.479129][ T7749] do_recvmmsg+0x5f/0x10a0 [ 2230.483727][ T7749] __sys_recvmmsg+0x113/0x450 [ 2230.804517][ T7749] not chained 1620000 origins [ 2230.809253][ T7749] CPU: 1 PID: 7749 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2230.819355][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2230.829429][ T7749] Call Trace: [ 2230.832732][ T7749] [ 2230.835672][ T7749] dump_stack_lvl+0x1c8/0x256 [ 2230.840378][ T7749] dump_stack+0x1a/0x1c [ 2230.844552][ T7749] kmsan_internal_chain_origin+0x78/0x120 [ 2230.850306][ T7749] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2230.856405][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2230.861575][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2230.867877][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2230.873049][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2230.878925][ T7749] ? __get_compat_msghdr+0x5b/0x750 [ 2230.884192][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2230.889341][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2230.895193][ T7749] ? should_fail+0x3f/0x7e0 [ 2230.899729][ T7749] ? __stack_depot_save+0x21/0x4b0 [ 2230.904877][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2230.910023][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2230.916314][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2230.921484][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2230.927357][ T7749] __msan_chain_origin+0xbd/0x140 [ 2230.932466][ T7749] __get_compat_msghdr+0x514/0x750 [ 2230.937621][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2230.942508][ T7749] ? ___sys_recvmsg+0xa9/0x870 [ 2230.947295][ T7749] ? do_recvmmsg+0x63a/0x10a0 [ 2230.952132][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2230.956852][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2230.962017][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2230.967872][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2230.973040][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2230.978886][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2230.983436][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2230.988933][ T7749] ? __sys_recvmmsg+0x52/0x450 [ 2230.993732][ T7749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.000286][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.005017][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.010176][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.016469][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.021543][ T7749] ? exit_to_user_mode_prepare+0x119/0x220 [ 2231.027402][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.032311][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.036836][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.043191][ T7749] RIP: 0023:0xf7f4b549 [ 2231.047269][ T7749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2231.066915][ T7749] RSP: 002b:00000000f7f255cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2231.075373][ T7749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2231.083374][ T7749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2231.091361][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2231.099356][ T7749] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2231.107334][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2231.115339][ T7749] [ 2231.121113][ T7749] Uninit was stored to memory at: [ 2231.126738][ T7749] __get_compat_msghdr+0x514/0x750 [ 2231.131898][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2231.136927][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2231.141648][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2231.146316][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.151034][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.157456][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.162627][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.167786][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.172479][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.178860][ T7749] [ 2231.181211][ T7749] Uninit was stored to memory at: [ 2231.186445][ T7749] __get_compat_msghdr+0x514/0x750 [ 2231.191601][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2231.196649][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2231.201373][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2231.206096][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.210823][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.217252][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.222414][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.227308][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.231842][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.238366][ T7749] [ 2231.240690][ T7749] Uninit was stored to memory at: [ 2231.245909][ T7749] __get_compat_msghdr+0x514/0x750 [ 2231.251058][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2231.256122][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2231.260883][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2231.265658][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.270382][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.276915][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.282156][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.287233][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.291772][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.298261][ T7749] [ 2231.300585][ T7749] Uninit was stored to memory at: [ 2231.305836][ T7749] __get_compat_msghdr+0x514/0x750 [ 2231.310986][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2231.316051][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2231.320778][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2231.325444][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.330210][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.336670][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.341735][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.346793][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.351335][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.357883][ T7749] [ 2231.360205][ T7749] Uninit was stored to memory at: [ 2231.365467][ T7749] __get_compat_msghdr+0x514/0x750 [ 2231.370794][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2231.375876][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2231.380599][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2231.385287][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.390008][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.396482][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.401547][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.406622][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.411167][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.417691][ T7749] [ 2231.420025][ T7749] Uninit was stored to memory at: [ 2231.425316][ T7749] __get_compat_msghdr+0x514/0x750 [ 2231.430481][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2231.435548][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2231.440273][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2231.444996][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.449735][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.456241][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.461314][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.466379][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.470920][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.477464][ T7749] [ 2231.479799][ T7749] Uninit was stored to memory at: [ 2231.485060][ T7749] __get_compat_msghdr+0x514/0x750 [ 2231.490227][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2231.495290][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2231.500015][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2231.504758][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.509925][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.516545][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.521638][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.526732][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.531277][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.537789][ T7749] [ 2231.540137][ T7749] Local variable msg_sys created at: [ 2231.545616][ T7749] do_recvmmsg+0x5f/0x10a0 [ 2231.550080][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.744523][ T7749] not chained 1630000 origins [ 2231.749255][ T7749] CPU: 1 PID: 7749 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2231.759350][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2231.769449][ T7749] Call Trace: [ 2231.772726][ T7749] [ 2231.775655][ T7749] dump_stack_lvl+0x1c8/0x256 [ 2231.780355][ T7749] dump_stack+0x1a/0x1c [ 2231.784543][ T7749] kmsan_internal_chain_origin+0x78/0x120 [ 2231.790289][ T7749] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2231.796386][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.801553][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2231.807862][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.813013][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2231.818854][ T7749] ? __get_compat_msghdr+0x5b/0x750 [ 2231.824077][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.829210][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2231.835059][ T7749] ? should_fail+0x3f/0x7e0 [ 2231.839583][ T7749] ? __stack_depot_save+0x21/0x4b0 [ 2231.844721][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.849879][ T7749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2231.856182][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.861351][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2231.867187][ T7749] __msan_chain_origin+0xbd/0x140 [ 2231.872237][ T7749] __get_compat_msghdr+0x514/0x750 [ 2231.877415][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2231.882289][ T7749] ? ___sys_recvmsg+0xa9/0x870 [ 2231.887084][ T7749] ? do_recvmmsg+0x63a/0x10a0 [ 2231.891786][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2231.896507][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.901672][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2231.907531][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.912777][ T7749] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2231.918613][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2231.923162][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.928306][ T7749] ? __sys_recvmmsg+0x52/0x450 [ 2231.933091][ T7749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.939622][ T7749] __sys_recvmmsg+0x113/0x450 [ 2231.944324][ T7749] ? kmsan_get_metadata+0x33/0x220 [ 2231.949491][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2231.955801][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2231.960864][ T7749] ? exit_to_user_mode_prepare+0x119/0x220 [ 2231.966703][ T7749] do_fast_syscall_32+0x33/0x70 [ 2231.971574][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2231.976092][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.982440][ T7749] RIP: 0023:0xf7f4b549 [ 2231.986593][ T7749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2232.006659][ T7749] RSP: 002b:00000000f7f255cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2232.015553][ T7749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2232.023621][ T7749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2232.031610][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2232.039596][ T7749] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2232.047583][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2232.055594][ T7749] [ 2232.061223][ T7749] Uninit was stored to memory at: [ 2232.066812][ T7749] __get_compat_msghdr+0x514/0x750 [ 2232.071977][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2232.077024][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2232.081766][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2232.086565][ T7749] __sys_recvmmsg+0x113/0x450 [ 2232.091312][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2232.097705][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2232.102908][ T7749] do_fast_syscall_32+0x33/0x70 [ 2232.107808][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2232.112598][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2232.118982][ T7749] [ 2232.121323][ T7749] Uninit was stored to memory at: [ 2232.126665][ T7749] __get_compat_msghdr+0x514/0x750 [ 2232.131826][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2232.136899][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2232.141633][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2232.146378][ T7749] __sys_recvmmsg+0x113/0x450 [ 2232.151101][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2232.157537][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2232.162712][ T7749] do_fast_syscall_32+0x33/0x70 [ 2232.167610][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2232.172150][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2232.178725][ T7749] [ 2232.181060][ T7749] Uninit was stored to memory at: [ 2232.186305][ T7749] __get_compat_msghdr+0x514/0x750 [ 2232.191716][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2232.196787][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2232.201515][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2232.206200][ T7749] __sys_recvmmsg+0x113/0x450 [ 2232.210935][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2232.217360][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2232.222529][ T7749] do_fast_syscall_32+0x33/0x70 [ 2232.227439][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2232.231978][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2232.238519][ T7749] [ 2232.240847][ T7749] Uninit was stored to memory at: [ 2232.246071][ T7749] __get_compat_msghdr+0x514/0x750 [ 2232.251221][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2232.256287][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2232.261066][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2232.265773][ T7749] __sys_recvmmsg+0x113/0x450 [ 2232.270506][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2232.276916][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2232.281996][ T7749] do_fast_syscall_32+0x33/0x70 [ 2232.287059][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2232.291602][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2232.298174][ T7749] [ 2232.300534][ T7749] Uninit was stored to memory at: [ 2232.305750][ T7749] __get_compat_msghdr+0x514/0x750 [ 2232.310898][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2232.316058][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2232.320782][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2232.325450][ T7749] __sys_recvmmsg+0x113/0x450 [ 2232.330176][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2232.336615][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2232.341679][ T7749] do_fast_syscall_32+0x33/0x70 [ 2232.346771][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2232.351320][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2232.358068][ T7749] [ 2232.360397][ T7749] Uninit was stored to memory at: [ 2232.365624][ T7749] __get_compat_msghdr+0x514/0x750 [ 2232.370784][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2232.375859][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2232.380589][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2232.385278][ T7749] __sys_recvmmsg+0x113/0x450 [ 2232.389999][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2232.396467][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2232.401539][ T7749] do_fast_syscall_32+0x33/0x70 [ 2232.406616][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2232.411164][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2232.417708][ T7749] [ 2232.420053][ T7749] Uninit was stored to memory at: [ 2232.425275][ T7749] __get_compat_msghdr+0x514/0x750 [ 2232.430426][ T7749] get_compat_msghdr+0x8c/0x1c0 [ 2232.435486][ T7749] ___sys_recvmsg+0x19d/0x870 [ 2232.440213][ T7749] do_recvmmsg+0x63a/0x10a0 [ 2232.444880][ T7749] __sys_recvmmsg+0x113/0x450 [ 2232.449598][ T7749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2232.456083][ T7749] __do_fast_syscall_32+0x95/0xf0 [ 2232.461169][ T7749] do_fast_syscall_32+0x33/0x70 [ 2232.466227][ T7749] do_SYSENTER_32+0x1b/0x20 [ 2232.470766][ T7749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2232.477272][ T7749] [ 2232.479598][ T7749] Local variable msg_sys created at: [ 2232.485020][ T7749] do_recvmmsg+0x5f/0x10a0 [ 2232.489478][ T7749] __sys_recvmmsg+0x113/0x450 01:52:34 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x44000, &(0x7f0000000540)) 01:52:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f0000000040)) 01:52:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00', 0x0}) 01:52:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000004740)=[{{&(0x7f0000000280)=@in={0x2, 0x4e21}, 0x80, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="180000000000000000000000070000000040"], 0x18}}], 0x1, 0x0) 01:52:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0x0, 0x0, 0x209, 0x0, 0x4}, 0xa0) 01:52:34 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, 0x0) 01:52:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x44, r1, 0x601, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x0) [ 2232.846418][ T7790] loop5: detected capacity change from 0 to 252287 01:52:35 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3}) 01:52:35 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc03020001005265497345723346730000000300000002", 0x45, 0x2000}, {&(0x7f00000000c0)="0000020000000000000000ed15000000001e0000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000280)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000300000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000140)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003444e3e03", 0x3d, 0x3d97fa0}], 0x208403, 0x0) 01:52:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000340)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter={0xcf}}, {0x0, 0x0, 0x0, 0x0, @adapter}, {0x0, 0x0, 0x0, 0x0, @adapter}, {}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:52:35 executing program 3: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4000012, r2, 0x0) r3 = dup(r1) write$binfmt_misc(r3, 0x0, 0x29) [ 2233.717078][ T7805] loop5: detected capacity change from 0 to 252287 [ 2233.778015][ T7796] IPVS: Error connecting to the multicast addr 01:52:35 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) dup2(r1, r0) 01:52:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 01:52:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0xa0, r0}, 0x38) 01:52:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000140)) 01:52:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@block}]}) 01:52:36 executing program 2: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) open(0x0, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 01:52:36 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r2 = getpid() fcntl$setown(r1, 0x8, r2) sendto$unix(r1, &(0x7f0000000240)='\r', 0x1, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) tkill(r0, 0x16) 01:52:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000e40)='#\x00', 0x0) dup2(r0, r1) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) 01:52:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{}, {0x7, 0x0, 0x0, 0x193793e8}]}) 01:52:36 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r2, 0x0) r3 = dup(r1) write$binfmt_misc(r3, &(0x7f0000000540)=ANY=[], 0x29) 01:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, 0x0, 0x49, 0x4000000005) 01:52:36 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) dup2(r1, r0) 01:52:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x180, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 01:52:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) [ 2235.292166][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 01:52:37 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000440)='./file0\x00', 0x2, 0x0) 01:52:37 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x1c, 0x1c}, 0x1c) 01:52:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000280)=',', 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 01:52:37 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000240), &(0x7f0000000000)=0x4) 01:52:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xce442, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1}, 0x6e) 01:52:39 executing program 1: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r2, 0x0) r3 = dup(r1) write$binfmt_misc(r3, &(0x7f0000000540)=ANY=[], 0x29) 01:52:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000280)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 01:52:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@un=@abs={0x8}, 0x8) 01:52:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 01:52:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='htcp\x00', 0x5) 01:52:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r0, r1) 01:52:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x2f, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0xffd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x4) 01:52:40 executing program 2: msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000000)=""/34) 01:52:40 executing program 5: pipe2(&(0x7f000000b580)={0xffffffffffffffff}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2238.081647][ T24] audit: type=1800 audit(1655517160.141:68): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1159 res=0 errno=0 01:52:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28641, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 01:52:40 executing program 2: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x4) 01:52:40 executing program 4: get_mempolicy(0x0, &(0x7f0000000080), 0x7001, &(0x7f0000ffc000/0x4000)=nil, 0x2) 01:52:40 executing program 1: mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/42) 01:52:40 executing program 5: pipe2(&(0x7f000000b580)={0xffffffffffffffff}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 01:52:40 executing program 3: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:52:40 executing program 0: pipe2(&(0x7f000000b580)={0xffffffffffffffff}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:52:40 executing program 1: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10062, 0x0, 0x0) 01:52:40 executing program 5: pipe2(&(0x7f000000b580)={0xffffffffffffffff}, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, 0x0) 01:52:40 executing program 4: pipe2(&(0x7f000000b580)={0xffffffffffffffff}, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) 01:52:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 01:52:41 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create(0xbb61) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 01:52:41 executing program 0: mlock(&(0x7f0000ff8000/0x3000)=nil, 0x3000) 01:52:41 executing program 1: pipe2(&(0x7f000000b580)={0xffffffffffffffff}, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 01:52:41 executing program 2: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 01:52:41 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @initdev={0xac, 0x1e, 0x0, 0x0}, @random="2d482909e888", @multicast1}}}}, 0x0) 01:52:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2bd3, 0x60482) ioctl$USBDEVFS_IOCTL(r0, 0x40085511, 0x0) 01:52:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2bd3, 0x60482) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:52:41 executing program 0: getpid() syz_clone(0x40002000, &(0x7f0000000000)="40905118226d97079a1f9054cb674201ca11c2618ce7e369ff09c069d5c3316d95d482396b6fdcfb6898517c0fc0314f42b77f5eabb22bf361430c7a0b4cef53653538ccdac09ce0374dcc028a5ee9a7a781959ff49c8c3189a65c2e84", 0x5d, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="5fbd85cc0b1127") 01:52:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e", 0x1b}, {&(0x7f0000000100)="a1a10b9a979fb85511eef06629c3691f5dbdae", 0x13}], 0x2}, 0x0) 01:52:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000002c0)={'sit0\x00', 0x0}) 01:52:41 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x23, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 01:52:41 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x5, 0x5}]}]}}, &(0x7f0000000600)=""/155, 0x32, 0x9b, 0x1}, 0x20) 01:52:41 executing program 2: bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) [ 2240.049071][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.057036][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2240.065152][ T7925] device bridge0 entered promiscuous mode 01:52:42 executing program 4: syz_clone(0x40004000, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000001100)="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") 01:52:42 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) [ 2240.186788][ T7927] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2240.196869][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.204522][ T7927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2240.212735][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state [ 2240.220197][ T7927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2240.228484][ T7927] device bridge0 left promiscuous mode 01:52:42 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0xb}, 0x10) 01:52:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/208, 0xd0}], 0x1}, 0x10163) 01:52:42 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)="e181bd25858d69ad8aea447733aead08eba0a49166ca5e06632d9a6ffd171a96aba3861e1abfb03c8d09fecc20778a78ad55f4dde10af68179dc99cc7a5a72af330d2b6e9a7c2364d7e9735082cbe74170ced6a4e9b7db9d2acef751466bed835dff02e72749cbe6c9335cf725d0c8c30903396e4a23c8997fc1d9dc14c57b7e8f1c8d33666373e11c610f87882a033321d3946ffdfc78fcacab1fab1ceba3ffee7b68106625795d072426225184b467f92cceb5aa133d7834478e3aa2b0", 0xbe}, {&(0x7f0000000100)="48024e47e8214897c85cd7ca3f3375b83945f52268bc709cddec8bef77ea6c3bc893c8bb3f5d7f5f636d977315a1fbf3c3e63b52d0a8b2703bee9af414930c2de5bea36559069b72f4cbccd03549815414d6998c476efb1986b32d47c0e2a621c70a93ddc15787668188cf208d2b786e34981d25026ce76accc7aa48c1e204c9f3e18b57077c94ffccc300b317f21658a85e2aef3165da347f759a7a6fdf6d94099ef360", 0xa4}, {&(0x7f0000002a00)="7da0790cfcb2721899816d459d4f697278148028201b38867bbad08f9e319a3cf55f565759d93bd6b0beeb55e5f25074a0076678e29d0652bf150f774760c456d61765b16c57e846051d4ef28e4c71c11f79c7aa768d7d202014799d461e2757d184395244674281be9a4a08038f9bc21813d92d3fee2c525f4ee6adc36b4ed3938db09d813f7a995879f640e8b78e7b6e9c620c0b4642326bebaee513d1e64a1183ebad928a0d0656d09a09a8b59ece1dd35085302c92da5b86888d44f41fedb91d6732c68ae284018109dba7f5e6da7132ef71a3638093b7208a72ffa6c0916cf835743533065a3878a1e9", 0xec}, {&(0x7f00000001c0)="0dfbc92a6ee9e0b262146fc2f5d593b884f5f42fb227846dac8d0c9316a1b5d9cece8896fa85d94c3e93f3f31d79ab7bd80cf538e400098e890947a212006d073e26ad3bf48128d18d1d1cac6fb3e4f4379ce9d34c4115f9fd7890ded3814a9932a1fadffe302d31c55bca99cc82abdaa42782eda8c6d79c05a84b17acbf19b29654cefc36fff086ee9eaa3d49f77ef7ac283e8c373464154fa4e3034da6f039047ea6ca28d1c8cdb53c08", 0xab}, {&(0x7f0000000380)="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", 0xb88}], 0x5}, 0x0) 01:52:42 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x85, &(0x7f00000000c0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:42 executing program 3: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x1) syz_clone(0x40004000, &(0x7f0000000140)='T', 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x0) 01:52:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x7ffff000) 01:52:43 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002a80)='J', 0x1}, {&(0x7f0000002b40)="85", 0x1}, {&(0x7f0000003b40)='[', 0x1}, {&(0x7f0000003b80)="fa", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000040c0)="07d76ad96e704f73d7f7ab354e50ac4a3f939535ce75f081c4e50518774a2e18d1656598f9", 0x25}, 0x0) 01:52:43 executing program 5: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x1) syz_clone(0x40004000, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000200), 0x0) 01:52:43 executing program 1: syz_clone(0x802000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="fdcf99f9259b8845da03678ed7a035ff2ce993bb65f48622eaa212c919d2182e9ba26f8c6ab15a312daaccce908bf5bd60b3") 01:52:43 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000002240)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 01:52:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)="e181bd25858d69ad8aea447733aead08eba0a49166ca5e06632d9a6ffd171a96aba3861e1abfb03c8d09fecc20778a78ad55f4dde10af68179dc99cc7a5a72af330d2b6e9a7c2364d7e9735082cbe74170ced6a4e9b7db9d2acef751466bed835dff02e72749cbe6c9335cf725d0c8c30903396e4a23c8997fc1d9dc14c57b7e8f1c8d33666373e11c610f87882a033321d3946ffdfc78fcacab1fab1ceba3ffee7b68106625795d072426225184b467f92cceb5aa133d7834478e3aa2b099fdd988454b2ab497d38917197eccbe6fdd9f23a2378774db364f", 0xd9}, {&(0x7f0000000100)="48024e47e8214897c85cd7ca3f3375b83945f52268bc709cddec8bef77ea6c3bc893c8bb3f5d7f5f636d977315a1fbf3c3e63b52d0a8b2703bee9af414930c2de5bea36559069b72f4cbccd03549815414d6998c476efb1986b32d47c0e2a621c70a93ddc15787668188cf208d2b786e34981d25026ce76accc7aa48c1e204c9f3e18b57077c94ffccc300b317f21658a85e2aef3165da347f759a7a6fdf6d94099ef360", 0xa4}, {&(0x7f0000002a00)="7da0790cfcb2721899816d459d4f697278148028201b38867bbad08f9e319a3cf55f565759d93bd6b0beeb55e5f25074a0076678e29d0652bf150f774760c456d61765b16c57e846051d4ef28e4c71c11f79c7aa768d7d202014799d461e2757d184395244674281be9a4a08038f9bc21813d92d3fee2c525f4ee6adc36b4ed3938db09d813f7a995879f640e8b78e7b6e9c620c0b4642326bebaee513d1e64a1183ebad928a0d0656d09a09a8b59ece1dd35085302c92da5b86888d44f41fedb91d6732c68ae284018109dba7f5e6da7132ef71a3638093b7208a72ffa6c0916cf835743533065a3878a1e9", 0xec}, {&(0x7f00000001c0)="0dfbc92a6ee9e0b262146fc2f5d593b884f5f42fb227846dac8d0c9316a1b5d9cece8896fa85d94c3e93f3f31d79ab7bd80cf538e400098e890947a212006d073e26ad3bf48128d18d1d1cac6fb3e4f4379ce9d34c4115f9fd7890ded3814a9932a1fadffe302d31c55bca99cc82abdaa42782eda8c6d79c05a84b17acbf19b29654cefc36fff086ee9eaa3d49f77ef7ac283e8c373464154fa4e3034da6f039047ea6ca28d1c8cdb53c08", 0xab}, {&(0x7f0000000380)="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", 0xce8}, {0x0}, {&(0x7f00000013c0)="b19dcdf684", 0x5}], 0x7, &(0x7f0000001740)=[{0x18, 0x0, 0x0, "d4"}, {0x10}], 0x28}, 0x0) 01:52:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000001d80)=""/166, 0x5f5e0ff, 0xa6}, 0x20) 01:52:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x2142, 0x0) close(r0) 01:52:43 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) 01:52:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000600)=@framed={{}, [@jmp]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:43 executing program 3: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x1) syz_clone(0x40004000, &(0x7f0000000140)='T', 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x0) 01:52:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1000000}, {}]}]}}, &(0x7f0000001d80)=""/166, 0x36, 0xa6, 0x1}, 0x20) 01:52:43 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89e1, 0x0) 01:52:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x7ffff000) 01:52:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 01:52:44 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) syz_usb_connect(0x4, 0x29b, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x41, 0xe4, 0xc2, 0x0, 0xccd, 0x8e, 0x1c11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x289, 0x3, 0x4, 0x6, 0x0, 0x5, [{{0x9, 0x4, 0x2b, 0x20, 0x5, 0x93, 0xfb, 0x11, 0x20, [@generic={0xd4, 0x11, "94d4ab4676ce2de2bb807883dc94acc78db67a0c470d787ae3d5f32822bb742fa832fb68a1f3e71078de908aa224564c4fe587c7a85f93dd718cea5c12b443b87385fae92836569879d37aaeea533d8c0959b7c4c5bcdafcbf2c5a0f0a0e2e35aceaaa724600e709cb3ac3da209a5cb092c421a0f29dbe04c4c725087797457131c7bc32f24c7585d02d90befc46f8c3c6f355f6e8d4fd27a2a0e4b800821a6ced9c22dfe413a40fec66723f9175d0c855e438de02a3b7504af26f20fbe1c8bfb7990f57e59cd493e4b54065027d50a0b328"}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "4eee80446e54"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0x8, 0xb9}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x1f, 0xa7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7f, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x81}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x0, 0x8, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9a, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1f, 0x6, 0x0, [@generic={0x20, 0x7, "6236ead785b0d0d0d201cfde5c0eafc2cacebc278b5f241cf348b6760ce1"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x2, 0x0, 0x9, [@generic={0x2d, 0x3, "5fa74d06b508b0037296ad58a232eac99def4a16be2c4b2d524b9fc54c7a2525320345ab6f46654bd5dc89"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x5, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x81}]}}]}}, {{0x9, 0x4, 0xc2, 0xe1, 0x1, 0xff, 0x1, 0x0, 0x2, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1ff}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x43b8}]}], [{{0x9, 0x5, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x80, [@generic={0x81, 0x0, "1ce534a0769a572130b97a00dcb9b2f932147a6335572b325e30eb9c3c1371aebfa873cad1f62b64beb0fa7ca985b413a11bfabef18e3fa01bffe492dfe2683417d5eff79321cc6ae846abc1ea277cb1378ede48baf3ba6525104a027ca725ef6f6d4d53ecd05c6084b9d01dc221c392620964469ae134287e2762db3878ce"}]}}]}}, {{0x9, 0x4, 0x6, 0x0, 0x2, 0xe2, 0x78, 0xd0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x5}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0xc, "df"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x46}]}], [{{0x9, 0x5, 0x6, 0x10, 0x0, 0x20, 0xfb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1f, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa7, 0x2}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x1, 0x7f, 0x6, 0x10, 0x5}, 0x26, &(0x7f0000000880)={0x5, 0xf, 0x26, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x0, 0x40}, @generic={0x3, 0x10, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x2, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x20, 0x7f}, @ptm_cap={0x3}]}, 0x5, [{0x2, &(0x7f0000000900)=@string={0x2}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x804}}, {0x18, &(0x7f0000000a40)=@string={0x18, 0x3, "a043ea93888bf2a9e194d764584e7bdfc63bd0bfc692"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4}}]}) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/96) 01:52:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000007c0), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/83) 01:52:44 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x100, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0xff, {0x9, 0x21, 0x1}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x26}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x26, &(0x7f0000000100)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d8b257c3c8c47c8f3f0b68c1cf7719b7"}]}, 0x4, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x3, &(0x7f0000000440)=@string={0x3, 0x3, 'c'}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000f40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x78, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0x6}}}}}]}}]}}, 0x0) 01:52:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000007c0), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x17, 0x0, 0x0}) 01:52:44 executing program 1: r0 = syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x3f, 0x3f, 0x0, 0x8}, 0x26, &(0x7f0000000100)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x20, 0x400}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x66, "d8b257c3c8c47c8f3f0b68c1cf7719b7"}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x8a, &(0x7f0000000440)=@string={0x8a, 0x3, "6321b1cf0e2a41bfdfc8965637483ee1b8097b43f85ebdd9bbf92755c5ea33b73dc3e6924095a80a4e5b701169b550edb8951c2bbb525830574641ff217cda33c6f647a064e5d09597125593a1ddd9f5caa5e77a295e002be2f84c57008381f6adf881970418f3af1ce0d0cd0fb69aa7ac9543fb8be79dc51cc7e6f3e40e95e8d133483d7f5e2e3e"}}, {0x0, 0x0}]}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000f40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x40, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x19, &(0x7f0000000fc0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "82b4c20bf9332bfe0ad259c21edda1ba"}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f00000005c0)={0x20, 0x11, 0x1a, {0x1a, 0x0, "139da5490bed1b9825162c7152ce6944141d5d2c8a8e713b"}}, 0x0, &(0x7f0000000680)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "6354e38c"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5}}}, &(0x7f00000009c0)={0x2c, &(0x7f0000000740)={0x40, 0x16, 0xe8, "fae2cfc3e9beb6d63e5e240685d2053549b6566e42dafea5b2bc8bee7bfaf85d47ffa0526e4802d5ade0026b951cfb39d62f1b191e2a929ad6e59b454346b9ef3960f9389fd4a384531335e10374a6639abcd2f2a7988c53153913766c50456f6d98bd4592d7138c316d89d1c9fa70611feb9ab1063120a724083ba6bceafe503dd394019dcf66c4378644e660b65042d73cea5d336ab388f0e279284e6d7a0e3750386c51412a1125c83e3b849243542417ee69509a47f56fec0c4aeedf5f07e2801c45142bccd049b3e5de3b6ed87c7b85072465c70d7fada64c41496790c88f31fb68e1b24412"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xad}, 0x0, &(0x7f00000008c0)={0x20, 0x1, 0x86, "e567a01d5ac67d61720b8e84ac9dde895cbeb9878306b1b4fd81a0b6daef3888f62749c0a3e12b16d82d150f56ec15f59819a96ce9085a39c220ca132aae06fcc6e21365f973829676b8f9c2c5232505a02fd24cccc69fbd21ff4b848f38d61c0596891fa95c14fcfbf74cc8ce4f0e320de3ba6d8c86494eb1e3c255c5ad03c0f2647dd6ed28"}, 0x0}) syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x71, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x59, 0x0, 0x2, 0x6, 0x0, 0x7, {{0xa, 0x24, 0x6, 0x0, 0x0, "19a187bcf6"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x7, 0x9b}, [@call_mgmt={0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x0, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x3, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) [ 2242.702816][T29480] usb 3-1: new high-speed USB device number 6 using dummy_hcd 01:52:45 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={0x0}}, 0x0) 01:52:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4bfb, &(0x7f0000000000)) [ 2243.043823][T15187] usb 1-1: new high-speed USB device number 32 using dummy_hcd 01:52:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r0, r1) [ 2243.224662][T29480] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2243.234123][T29480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.242419][T29480] usb 3-1: Product: syz [ 2243.246731][T29480] usb 3-1: Manufacturer: syz [ 2243.251462][T29480] usb 3-1: SerialNumber: syz [ 2243.312840][T15187] usb 1-1: Using ep0 maxpacket: 8 [ 2243.314116][ T3557] usb 2-1: new full-speed USB device number 74 using dummy_hcd 01:52:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000000)=""/111, 0x6f) r2 = fcntl$dupfd(r0, 0x0, r0) poll(&(0x7f0000000380)=[{r2, 0x3c}], 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000140)='^', 0x1}], 0x1) [ 2243.436515][T29480] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 01:52:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000080)=""/85, 0x55, 0x42, 0x0, 0x0) [ 2243.517638][T15187] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2243.573266][T15187] usb 1-1: language id specifier not provided by device, defaulting to English 01:52:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040), 0x4) [ 2243.734011][ T3557] usb 2-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2243.747217][ T3557] usb 2-1: config 1 interface 0 has no altsetting 0 01:52:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b63, 0x0) [ 2243.903812][T15187] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.40 [ 2243.913492][T15187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.043181][ T3557] usb 2-1: string descriptor 0 read error: -22 [ 2244.049711][ T3557] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2244.059272][ T3557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.067976][ T7992] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2244.216055][ T7998] UDC core: couldn't find an available UDC or it's busy: -16 [ 2244.223822][ T7998] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2244.282938][T29480] usb 3-1: USB disconnect, device number 6 [ 2244.370280][T15187] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 2244.422628][ T3557] usb 2-1: USB disconnect, device number 74 [ 2244.449209][T15187] usb 1-1: USB disconnect, device number 32 01:52:46 executing program 2: syz_usb_connect(0x0, 0x6c, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x26, 0xdf, 0xab, 0x8, 0x46d, 0x8b2, 0x5bdf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1b, 0x0, 0x7, 0x28, 0x93, 0x8f, 0x0, [], [{{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x0, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x128b}, @generic={0x2, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x0, 0x3f, 0x1f}}, {{0x9, 0x5, 0x9, 0x8, 0x0, 0x3, 0x0, 0x3}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x9, 0xff}}, {}, {{0x9, 0x5, 0x0, 0x8, 0x0, 0x23, 0x6}}]}}]}}]}}, &(0x7f0000001740)={0x0, 0x0, 0x3e, &(0x7f0000001400)={0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x1f}, @ssp_cap={0x10, 0x10, 0xa, 0x96, 0x1, 0x0, 0x0, 0x0, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "fe73f9c8077e2b8b6aa351572df53ea4"}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000001680)=@string={0x2}}]}) 01:52:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) preadv2(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) 01:52:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x80047213, &(0x7f0000000040)) 01:52:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="7469a6c3370c7c04dbc3ea7be6b0f719c75fcf2e9654872c8f1d43265a05307007c8f10018073b6046ce683ff3c3c152b548556ae55365c1c2de756dce4c7e6c3f952d0e6d1fd9f96b6a47", 0x4b}, {&(0x7f00000019c0)="1f73cff3f0eaa8ba0a000f000002c0367a4668d0dfbd4ded6ded6dd58d8c74de19d10a99ef316de73432a1ad7c3d6ec2e34674c72aec1f696dba9fa2bee32203c686fcfa1d1e81cfe20c8269b5d46fef4fda4057a0fec2bdd32db794af98daf2f688e78a6e657be346b07945ac945d139d743690341ebfcb08f39bdc0c2cd68104302ef1f40481b4514f151a50753fb59288bd4f5e0b58bb6d6687c05679a1cd169e45fb96b45211330fcd49ddf26fb80c0a6976e69b2ae6ee3c8af2c8c907f72696147bc14f02cfc0e2edca867a5506012482417bf9751ca5e83479157c964ead6d9878f6ddba3c6bed0d1d5e350198508321d5b6873fc30abe97ea45586f03c036b0d1e616ffa0b2721335af3e3379df97dda4e28c675df9f17125d01ef2c1789a00170f36dead6199083bdc341c86ff7e78adb3a2285ad4b9f9d1c32b71ca3ecb4425323468fad15edd6abb5f2d702b00dbdb86d739190a15c6b18fadfb8a53b7a8cbbc3c953a4619a95f271b56e7f867bdedf4ccfa72902e214dbf670a03f1ed9124edff61f78bbfadbe4aa28ffb4fe9b81bb5d05500df008449bcb2acc15195886b32979305ba2e770c3bcbf46b22003577d760a6877cad0d0085bda25eb44c6452f3cfafec2b2cfa6533508e5100150ac9ca26a476110224ff59e068b921d6b31c50a832c6ddd21e81911be90bb75431cf8472e196ff5669f3cd564ec8f720b1b7293eb3cfe04de5f2f076c877cbb137c9d82177466f1bb106f97091e8c13401c2f8484e2a3c6f5f40714e8b3157a5a96d37e82f4a18a849716374021c4e09d9825e8ce7ee146ff6184b4b0c1d5cac583de84be57fd5320c76dfc7a34de4faf4ccc52f92432174e5b9b450e475d1bc8887880a2a0227b4ee36eb9bf96fb90301ac1e62b42ea531db9d8a2e2aee4a65b4bb100c69cfb12a616ca16da556824ce3d53937a0370d626a3a1e2ba1fb9c92ed2869f554663272c326a516beeaf30a8aa3dc5343ec38f5f2ba94e2d13fd2eadd9871b29bb8e0c60906920ad292812f07ffcd4bdbf5c5261d75759996fb42df261227a8649f2c649275fa33e8ffa9fd4fc784d78314a6cd9f46e63c0e5bd3619697535324a20b6b40aebcf86eef0de02df919dbf137285ce537804f77930c44757cbc6d94fc5d2044dc018d833639fcf7d34c3264f41371e974bc089c389fef1d9f4af1259a3825c5a8a7640c529f70de8f0a9d4ff1adab593c71ba4ecc540d7e3e54e7ec98f1e868bbb4124182e4c29fd6592d8c8c35939ab5d7a6115c10d2d397bd67b78b9b30efcb6a0822f8ee31b0b44e47bc88e89e039fc9fcf868ba8e8be7f078073a2d8e951dcbcfddd0565e276aad7250aa4cd314f9e719b6f4b3445eaa65fe2f9b80dcd1ea41fbfeb652b0f77f6fd7c6d31b5942b1219fe5c22d630ecb98d2aa26778d8554a92205217c394abcd0224cbaf54a70d928215be891cb4a58a9bbae1ecea471ce41ef9e0b00de7527282b5effc2b3cd2504889ac2a838b38a6702404fcf05d074fe4a496e0517a9f81fbe51023a4d5c3f18e9099969c061c525ee3441c631f27b8fa614548dd0bfa2122c8725f1a11993fef62d0472502707cebe6d303f939e4ab23a311a7e8bd75660cb2d5bb3a3ef612c46fb03b7e684971ea857c8fc94d40c0463d86801b9400a7fecb1cf34e5a1533f6c247001c7b40f403636d0f7deb74eead51a551512cc7332d5f7dd6d3a0474e56f1cc2cb4a2bed993fb5721f318cc849cb8e88b13bcce7b48f00574f6f12bd863b6bb7ba535c16e123066b05f6f7cddf4b8e2f28e21e1ed801a25b51d9fa27c14e78886d600f83f3705a591d5f848e05ca1df77a7ef4b34efe22e09092ca16e5ffda91158b81517b6c1896f5b46d6108d6c76dad85d1243c03ba20", 0x548}], 0x2}}], 0x1, 0x0) 01:52:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x23f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCGRAB(r0, 0x5501, 0x0) 01:52:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) [ 2245.119325][ T7992] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2245.126722][ T7992] ath9k_htc: Failed to initialize the device [ 2245.196555][T29480] usb 3-1: ath9k_htc: USB layer deinitialized 01:52:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050008000000000000000000000004", 0x15, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000011a00)="504d4d00504d4dff", 0x8, 0x8000}, {&(0x7f0000013b00)="ed41000000100000dff4655fe0f4655fe0f4655f000000000000040008", 0x1d, 0x22080}], 0x0, &(0x7f0000014900)) 01:52:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22080}], 0x0, &(0x7f0000014900)) 01:52:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x10017}) [ 2245.593347][T29480] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2245.689268][ T3557] usb 4-1: new high-speed USB device number 99 using dummy_hcd 01:52:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) [ 2245.832864][T29480] usb 3-1: Using ep0 maxpacket: 8 01:52:47 executing program 4: syz_usb_connect$uac1(0x0, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "e06b", "25e7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 2245.889083][ T3557] usb 4-1: device descriptor read/64, error 18 [ 2245.953032][T29480] usb 3-1: config 0 has an invalid interface number: 27 but max is 0 [ 2245.961473][T29480] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2245.970587][T29480] usb 3-1: config 0 has no interface number 0 [ 2245.977059][T29480] usb 3-1: config 0 interface 27 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2245.987932][T29480] usb 3-1: config 0 interface 27 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2245.998937][T29480] usb 3-1: config 0 interface 27 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2246.009086][T29480] usb 3-1: config 0 interface 27 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2246.020054][T29480] usb 3-1: config 0 interface 27 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2246.030211][T29480] usb 3-1: config 0 interface 27 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2246.041055][T29480] usb 3-1: config 0 interface 27 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2246.173126][ T3557] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2246.373709][ T3557] usb 4-1: device descriptor read/64, error 18 [ 2246.509172][ T3557] usb usb4-port1: attempt power cycle [ 2246.528802][T29480] usb 3-1: string descriptor 0 read error: -22 [ 2246.535532][T29480] usb 3-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=5b.df [ 2246.545016][T29480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.571174][T29480] usb 3-1: config 0 descriptor?? [ 2246.583987][T29444] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2246.829343][T29480] usb 3-1: USB disconnect, device number 7 [ 2246.843248][T29444] usb 5-1: Using ep0 maxpacket: 8 [ 2246.933291][ T3557] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2246.973578][T29444] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2246.982863][T29444] usb 5-1: config 1 has no interface number 1 [ 2246.989102][T29444] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2247.002542][T29444] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2247.013773][T29444] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2247.062947][ T3557] usb 4-1: Invalid ep0 maxpacket: 0 [ 2247.223735][T29444] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2247.233434][T29444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.241584][T29444] usb 5-1: Product: syz [ 2247.246603][T29444] usb 5-1: Manufacturer: syz [ 2247.251367][T29444] usb 5-1: SerialNumber: syz [ 2247.257742][ T3557] usb 4-1: new high-speed USB device number 102 using dummy_hcd 01:52:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="7469a6c3370c7c04dbc3ea7be6b0f719c75fcf2e9654872c8f1d43265a05307007c8f10018073b60", 0x28}, {&(0x7f00000019c0)="1f73cff3f0eaa8ba0a000f000002c0367a4668d0dfbd4ded6ded6dd58d8c74de19d10a99ef316de73432a1ad7c3d6ec2e34674c72aec1f696dba9fa2bee32203c686fcfa1d1e81cfe20c8269b5d46fef4fda4057a0fec2bdd32db794af98daf2f688e78a6e657be346b07945ac945d139d743690341ebfcb08f39bdc0c2cd68104302ef1f40481b4514f151a50753fb59288bd4f5e0b58bb6d6687c05679a1cd169e45fb96b45211330fcd49ddf26fb80c0a6976e69b2ae6ee3c8af2c8c907f72696147bc14f02cfc0e2edca867a5506012482417bf9751ca5e83479157c964ead6d9878f6ddba3c6bed0d1d5e350198508321d5b6873fc30abe97ea45586f03c036b0d1e616ffa0b2721335af3e3379df97dda4e28c675df9f17125d01ef2c1789a00170f36dead6199083bdc341c86ff7e78adb3a2285ad4b9f9d1c32b71ca3ecb4425323468fad15edd6abb5f2d702b00dbdb86d739190a15c6b18fadfb8a53b7a8cbbc3c953a4619a95f271b56e7f867bdedf4ccfa72902e214dbf670a03f1ed9124edff61f78bbfadbe4aa28ffb4fe9b81bb5d05500df008449bcb2acc15195886b32979305ba2e770c3bcbf46b22003577d760a6877cad0d0085bda25eb44c6452f3cfafec2b2cfa6533508e5100150ac9ca26a476110224ff59e068b921d6b31c50a832c6ddd21e81911be90bb75431cf8472e196ff5669f3cd564ec8f720b1b7293eb3cfe04de5f2f076c877cbb137c9d82177466f1bb106f97091e8c13401c2f8484e2a3c6f5f40714e8b3157a5a96d37e82f4a18a849716374021c4e09d9825e8ce7ee146ff6184b4b0c1d5cac583de84be57fd5320c76dfc7a34de4faf4ccc52f92432174e5b9b450e475d1bc8887880a2a0227b4ee36eb9bf96fb90301ac1e62b42ea531db9d8a2e2aee4a65b4bb100c69cfb12a616ca16da556824ce3d53937a0370d626a3a1e2ba1fb9c92ed2869f554663272c326a516beeaf30a8aa3dc5343ec38f5f2ba94e2d13fd2eadd9871b29bb8e0c60906920ad292812f07ffcd4bdbf5c5261d75759996fb42df261227a8649f2c649275fa33e8ffa9fd4fc784d78314a6cd9f46e63c0e5bd3619697535324a20b6b40aebcf86eef0de02df919dbf137285ce537804f77930c44757cbc6d94fc5d2044dc018d833639fcf7d34c3264f41371e974bc089c389fef1d9f4af1259a3825c5a8a7640c529f70de8f0a9d4ff1adab593c71ba4ecc540d7e3e54e7ec98f1e868bbb4124182e4c29fd6592d8c8c35939ab5d7a6115c10d2d397bd67b78b9b30efcb6a0822f8ee31b0b44e47bc88e89e039fc9fcf868ba8e8be7f078073a2d8e951dcbcfddd0565e276aad7250aa4cd314f9e719b6f4b3445eaa65fe2f9b80dcd1ea41fbfeb652b0f77f6fd7c6d31b", 0x3e9}], 0x2}}], 0x1, 0x0) 01:52:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 01:52:49 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/247, 0xf7}], 0x2}}], 0x40001bf, 0x0, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) 01:52:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) [ 2247.383798][ T3557] usb 4-1: Invalid ep0 maxpacket: 0 [ 2247.389625][ T3557] usb usb4-port1: unable to enumerate USB device 01:52:49 executing program 5: mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) [ 2247.659207][T29444] usb 5-1: USB disconnect, device number 31 [ 2247.891971][ T8019] udevd[8019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 01:52:50 executing program 3: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000014c010044000000ffffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000000080)) 01:52:50 executing program 5: mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b33, &(0x7f0000000000)) 01:52:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="7469a6c3370c7c04dbc3ea7be6b0f719c75fcf2e9654872c8f1d43265a05307007c8f10018073b6046ce683ff3c3c152b548556ae55365c1c2de756dce4c7e6c3f952d0e6d1fd9f96b", 0x49}, {&(0x7f00000019c0)="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", 0x448}], 0x2}}], 0x1, 0x0) 01:52:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}}, 0x0) 01:52:50 executing program 5: mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x269, 0x0, 0x7fffffffffffffff}]}) 01:52:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) sendfile(r0, r0, 0x0, 0x24002da8) 01:52:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:50 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "287790a635042896f6a1dcf3694a7b0131ed34500a8b3f708699f699cbc764b48c0677d1762a8d2d4d0620ebcd93791947927c4338383dfe48a4d5521264cbf1"}, 0x48, r0) keyctl$reject(0x3, r0, 0x0, 0x0, 0x0) 01:52:50 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000180)) 01:52:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$setlease(r0, 0x40e, 0x0) 01:52:51 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x79) 01:52:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:51 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000690200000002a0000000ff"]) 01:52:51 executing program 2: syz_io_uring_setup(0x4db, &(0x7f00000006c0), &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 01:52:51 executing program 1: syz_io_uring_setup(0x1737, &(0x7f0000001280)={0x0, 0x3b39, 0x1d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001340), &(0x7f0000001300)) 01:52:51 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000003c0)=""/98) 01:52:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 01:52:52 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x4400) 01:52:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000690200000002a0000000ff"]) 01:52:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$setlease(r0, 0xf, 0x0) 01:52:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:52 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffe, 0x0) 01:52:52 executing program 1: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000380)) 01:52:52 executing program 3: eventfd2(0x0, 0xccf5d35029dba559) 01:52:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000690200000002a0000000ff"]) 01:52:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8911, &(0x7f0000000200)={'syztnl0\x00', 0x0}) 01:52:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) 01:52:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 01:52:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26e, 0x0, 0x7fffffffffffffff}]}) 01:52:53 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) 01:52:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000690200000002a0000000ff"]) 01:52:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:53 executing program 1: syz_io_uring_setup(0x38f7, &(0x7f0000000340), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5aae, &(0x7f0000000480)={0x0, 0xab63, 0x1, 0x3, 0x155}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 01:52:53 executing program 0: read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 01:52:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002180)) 01:52:53 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000004100), &(0x7f0000004140), 0x2, 0x0) 01:52:54 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='\x00', r0) 01:52:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 01:52:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:54 executing program 4: add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1d483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e00"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) 01:52:54 executing program 0: read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x904}, 0x48) 01:52:54 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4041) 01:52:54 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='nr_blocks=1k,huge=advise,nr_inodes=6e,nr_inodes=t']) 01:52:54 executing program 3: pipe(&(0x7f00000000c0)) syz_io_uring_setup(0x552c, &(0x7f0000000200), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000fd8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 01:52:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x401c5820, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 01:52:54 executing program 0: read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:54 executing program 1: socketpair(0xa, 0x5, 0x0, &(0x7f00000004c0)) 01:52:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:55 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1d483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e00"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, r0) 01:52:55 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18}, 0x18}}, 0x0) 01:52:55 executing program 2: r0 = syz_io_uring_setup(0x3abb, &(0x7f0000000100), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 01:52:55 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@sco={0x1f, @none}, 0x80) 01:52:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:55 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "31121fe7937361d9466b1d515c8554f43a88970a0c4c203504042389f8a02815894d2d0a5b0400a48706e62f75d7b38b0299837658ebcd6ba262d32fe95b00df"}, 0x48, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 01:52:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000040)=@raw=[@generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create1(0x0) sendmsg$unix(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x28}, 0x0) 01:52:55 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:55 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000140)=0xfffffffffffffd3a) 01:52:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 01:52:56 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000008840), 0x2, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) 01:52:56 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x201}, 0x14}}, 0x0) 01:52:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=0']) 01:52:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x10001, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e513544bffef8f6a38b725b59b913cf06e425c64c42d7405653b87315a101d7134b05a3412a61e10bf77a729ade35918df893bfbff9b44ae7b3d94fdc93368da", "0073ecf7becb7cff1de90908483dd3d807c9b091f58a4b21f030f7f3db8a8a3affa497e4384f8d08103d7c05365fc5be901746c1b5c23999fff10fd667755afd", "0f1e4ec2e798a0ced5853bc69622f11e5aeb18e6c1677cbf640f8d4c60655aa9"}}) 01:52:56 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xae243) 01:52:56 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x40049409, &(0x7f0000000080)) 01:52:56 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:56 executing program 2: add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x66, 0x65, 0x39, 0x38, 0x61, 0x30, 0x61, 0x34, 0x37, 0x32, 0x65, 0x39, 0x35, 0x32, 0x33, 0x63]}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1d483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e00"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "1dacbf1e41564957cf7f5c23a120629d346f874809bb0d7f1df52e67389dacbfd60b8b5663bc483f038b7476d148f427b462614cc656015e93793b1d3a9ddc9e"}, 0x48, 0xfffffffffffffffe) 01:52:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 01:52:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:52:56 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xfffffffe, 0x8, '9P2000.L'}, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44414000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x90, 0x2, 0x2, 0x201, 0x70bd26, 0x25dfdbff, {0xc, 0x0, 0x1}, [@typed={0xf, 0x2b, 0x0, 0x0, @str='}\\}^)-\':+[\x00'}, @generic="8f35c49db2884406ba0c7775235bac14c5af1f415e48d100cabda7b08a50c6b0591effd5a373f665a4059cf580c2c2de7ab41065ff66d045ec583ab4b6dd3d48afe3a1f48b0aa39d5350eeb8b04219a630e600fbd3edbc9dd97c00547df0a73764fa8924c9ff53fa258d"]}, 0x90}, 0x1, 0x0, 0x0, 0x4040000}, 0x100000c0) 01:52:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 01:52:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:57 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000740)='cifs.idmap\x00', 0x0, 0x0) 01:52:57 executing program 4: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x5c1842) syz_io_uring_setup(0x5db2, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:52:57 executing program 1: socketpair(0xa, 0x2, 0x0, &(0x7f00000020c0)) [ 2255.094463][ T8257] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2255.118486][ T8258] 9pnet_virtio: no channels available for device 127.0.0.1 01:52:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 01:52:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, 0x9, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_DATA={0x4}]}, 0x30}}, 0x0) 01:52:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:57 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x269, 0x0, 0x7fffffffffffffff}]}) 01:52:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) 01:52:57 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 01:52:57 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000000300)) [ 2255.605894][ T8271] 9pnet_virtio: no channels available for device 127.0.0.1 01:52:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, 0x0, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 01:52:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 01:52:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[]) [ 2255.880392][ T8284] 9pnet_virtio: no channels available for device 127.0.0.1 01:52:58 executing program 4: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/246) [ 2255.976301][ T8286] loop7: detected capacity change from 0 to 1036 01:52:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000240)=""/111) [ 2256.111842][ T9] I/O error, dev loop7, sector 248 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.122049][ T9] Buffer I/O error on dev loop7, logical block 31, lost async page write [ 2256.131256][ T9] I/O error, dev loop7, sector 240 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.141191][ T9] Buffer I/O error on dev loop7, logical block 30, lost async page write [ 2256.150005][ T9] I/O error, dev loop7, sector 232 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.159897][ T9] Buffer I/O error on dev loop7, logical block 29, lost async page write [ 2256.168724][ T9] I/O error, dev loop7, sector 224 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.178555][ T9] Buffer I/O error on dev loop7, logical block 28, lost async page write [ 2256.187390][ T9] I/O error, dev loop7, sector 216 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.197257][ T9] Buffer I/O error on dev loop7, logical block 27, lost async page write [ 2256.206234][ T9] I/O error, dev loop7, sector 208 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.216186][ T9] Buffer I/O error on dev loop7, logical block 26, lost async page write [ 2256.224989][ T9] I/O error, dev loop7, sector 200 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.234844][ T9] Buffer I/O error on dev loop7, logical block 25, lost async page write [ 2256.243646][ T9] I/O error, dev loop7, sector 192 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.253488][ T9] Buffer I/O error on dev loop7, logical block 24, lost async page write [ 2256.262154][ T9] I/O error, dev loop7, sector 184 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.272067][ T9] Buffer I/O error on dev loop7, logical block 23, lost async page write [ 2256.280874][ T9] I/O error, dev loop7, sector 176 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2256.290725][ T9] Buffer I/O error on dev loop7, logical block 22, lost async page write 01:52:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, 0x0, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:58 executing program 2: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240), &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-arm\x00'}}, 0x0, 0x0) 01:52:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) 01:52:58 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) 01:52:58 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'changeprofile ', '/de\xb1v/zero\x00\xf8\"X}gon\x91Q\x84I\xff\af\x9d\xb4\xdb\xec\x9d \"\x8a\x8e\x02^\xc4/\xbc\xe0wn\xbdn\xcai\x01\x14\x82\xa1`\xf4\xda\xff\xa3\xc0\xe9N\x1d\x93Ev\xa1H\xb5^\x11\x87\xb5\x9d\x9d\xa1M\x05\x17\x1e\xd7\xae<\xca:\xfc\xe4\xe5\x80~W\x85\xdda\x17-\xbdS\x189\x98*Z\"V3U\x987\x1e\xa5\xb7\x85=\x8d\x1f\xde\xe4\fc\x87\x12v\xa4\xd2\x99W>\xf4\x8c\x1f=\x81\x8b?\x03\xe9\xd1\x98\x18T&e\xeck_\x1a\xab\xc2Y^/\x9d\xb2\x13\x8f\x11\xc3r\xf2\x00\x01\x00\x003\xe0\xddS\xf3;ye\x00\'?\v\xac\x0f\x1a\xad]\x8d\xef\x13\xef\xb0\x9f\x80\xab?tgcj\xc06sG\x82A\xbf\x81\xff\xe5\x8b\xd6\xf3\\\t>\xb8\xe6\xe6\x87\xafe\xb1\'up\xe4$/\xc2\xe7\xaa\xfd\xb8w\x88\x81\xce\x12A\x06Y-/Q\xafIF\xfft\xe4\x8e\x98\xcbt\xc2\xd9\xa0\xa8\xd8\xe9 \x17\x11\xd7%#\x15^\b\xd3\x841\xf4\xca\x04\xa3\xa39\xd8&\x10\xd6\xcd\x90k]\xd2\xff[\xcf\xe7\xdc\x83q\xb4\x00ZTE?u\xf4f\xc8\xa7X\xe1a\xa0x\xb4\tB\xfagr\x87\v\x01&\x1a\x80~&#s&\x1er\x8c^\xb7\x8eT\xc8\xda\xf6g}\v\x95\xe8\x90\x88\xb0\xc5\x9c\xd5\xc2>\x1d\xd4:W\xec\xe5~\xeb<\xec\xd1un\x12\xcf\xd9Md\xf0x\rP\xcd\xe1\xab\xea\xe7/\x06\xb7\xcd\x02\xad\xda\x17\xa2}\x01G\x7f\r\x10L\xa8)m\x82G\xf0\x17\xfbqw+\n\xaa\x13p\xa5\x13w\xa3\xbc\'\xfc\xbe\xeb\xc5\xe3\x95YQ\xf1i3\xadu}\x01\xc9\xcaL\x8eKT<\xf0\x92\x84-=\x8c/\x1b\x92\xe5\xdc\xec\xb0\x81\xde\xd6\xe8\x14\xad+\xf5\xf5\xcf\x8c\xbb\x98y/DV\xd1I\x7f\xfd\xd3)l\r\x16b\xf7\xac\xc0,\xc1EL\xb1\xa8\xe6+\xc5\x82\x8d\x065\x93\xc3\x140\xc0\xed\xd0T\xd6\xeaR\xee\xfdr< }\x0e\x96\r\xc3?\x182\x94!\x9e\xc7Nu*\xbe4,\xfd\xc0^_\x9e\a$1C8\xdd\x9f;\xc5\x0e\xc0\x1d\xdb\x1c\x1d\x9e-&R\x13\xae\b\xe1\x15\x02,\x83t\xe8v\xde\x9dHq F\xeb\x89=?\xb5{b\xcf\xd5g\x19SY&\xb1j\x03\x9b\xb3\x82,1\x9c\x7f\xdf\x19t=a(\x85@T\xc7\xa5\x9e#l\x93\xa8\x96\xd0\xc10P\xfe\xc5\xf2[\xb0 \xaf\x0e5\x90\x97}\xed\x97E}\x88q/\x00\xbc\x05\xb2\x9b\xe4\xa7\x9fz\xa1\xdc\xf4c\x91FN\x88z\xc1\x83\x8f\x00?\x93\xa2I\xdb\x89\xc4\xb3\x96(\xb0j\x0f\x8c'}, 0x2a0) 01:52:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[]) 01:52:58 executing program 3: syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) inotify_init1(0x0) select(0x40, &(0x7f0000000080)={0x3f}, 0x0, 0x0, 0x0) [ 2256.764651][ T8304] loop7: detected capacity change from 0 to 1036 01:52:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, 0x0, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/4096, 0x1000) [ 2256.894323][ T24] audit: type=1400 audit(1655517178.961:69): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2F6465B1762F7A65726F pid=8307 comm="syz-executor.2" 01:52:59 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}}, 0x0) 01:52:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 2257.108691][ T8312] 9pnet_virtio: no channels available for device 127.0.0.1 01:52:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[]) 01:52:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:59 executing program 3: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000001380)=[{0x0, 0x5e}, {0x0}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000000)=[{&(0x7f0000001400)=""/164, 0xa4}, {&(0x7f00000014c0)=""/106, 0x6a}], 0x2, 0x0) [ 2257.370518][ T8319] loop7: detected capacity change from 0 to 1036 01:52:59 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 01:52:59 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2902, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)) [ 2257.688381][ T8325] 9pnet_virtio: no channels available for device 127.0.0.1 01:52:59 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000000), 0x20, 0xc8484) 01:52:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) 01:52:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB]) 01:53:00 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000800)) 01:53:00 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$fb(r0, 0x0, 0x1d) 01:53:00 executing program 3: syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x4000098, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 01:53:00 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@private2}, 0xa, @in6=@private0}}, 0xe8) 01:53:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) [ 2258.221698][ T8338] 9pnet_virtio: no channels available for device 127.0.0.1 01:53:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB]) 01:53:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) [ 2258.389487][ T8342] fuse: Bad value for 'fd' 01:53:00 executing program 1: syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@unhide}, {@hide}, {@sbsector={'sbsector', 0x3d, 0x2c6c}}]}) 01:53:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') pread64(r0, 0x0, 0x0, 0x0) 01:53:00 executing program 4: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) 01:53:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, 0x0, 0x0) [ 2258.625210][ T8348] 9pnet_virtio: no channels available for device 127.0.0.1 01:53:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB]) 01:53:00 executing program 1: r0 = add_key$keyring(&(0x7f0000002100), &(0x7f0000002140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xee01, r0) 01:53:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(ghash-clmulni,ctr-aes-neonbs-sync)\x00'}, 0x58) 01:53:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) 01:53:01 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, 0x0, 0x0) 01:53:01 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) [ 2259.033170][ T8361] 9pnet_virtio: no channels available for device 127.0.0.1 01:53:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e2']) 01:53:01 executing program 1: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x31c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdebf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8a7ce661}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x90}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "3b95dbce771e0889f5d1ca73f78f19d4c142b01b0e7e052ae1aef25b29cce0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdae3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x913b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3a32}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000540)="b40355924898e315d3fffc2bca134096d58a97bcf65fcf24ccf4a54e0f7e243ee560155d3af4c7c15898d0030bdcc4393eb48fc0943625e9e4659592b3f48cee2ffa70cf613a84ae6031d23d69e47eac77e90d67c62982d25877b0f939d58338f43a67beeb23358699ef66172dae1456defd505055eeac6c95f7575b9b1d899abaf92244628559b022465e15b5082f087e8975a265d2143df934cfe4f8ca4780f263dfa991e8f985e288c02537292f399e2c2ef0177483b63e8c8599e329853651d8c6c51214561ac36075e54d7e02e09d501dc7adbae810eecfe1d43a615116", 0xe0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000800)={0x2, 0x0, {&(0x7f0000000680)=""/235, 0xeb, &(0x7f0000000780)=""/87, 0x2, 0x3}}, 0x48) syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), 0xffffffffffffffff) socket(0x2, 0xa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000001e00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x218, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x500}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcdc}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6d}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x14}, 0x40c0) syz_usbip_server_init(0x4) 01:53:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e2']) 01:53:01 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) 01:53:01 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') read$char_usb(r0, &(0x7f0000000180)=""/233, 0xe9) read$char_usb(r0, 0x0, 0x0) 01:53:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x1c]}}}}]}) [ 2259.642952][ T8384] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2259.649662][ T8384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2259.657800][ T8384] vhci_hcd vhci_hcd.0: Device attached [ 2259.845704][ T8385] vhci_hcd: connection closed [ 2259.846378][ T1018] vhci_hcd: stop threads [ 2259.855836][ T1018] vhci_hcd: release socket [ 2259.860407][ T1018] vhci_hcd: disconnect device [ 2259.872960][T29480] vhci_hcd: vhci_device speed not set [ 2259.986482][ T8394] tmpfs: Bad value for 'mpol' 01:53:02 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="be", 0x1, r0) [ 2260.019591][ T8396] tmpfs: Bad value for 'mpol' 01:53:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e2']) 01:53:02 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0xd, 0x0) 01:53:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r1, &(0x7f00000000c0)="9b", 0x1) read$char_usb(r0, &(0x7f00000010c0)=""/4096, 0x1000) 01:53:02 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/247, 0xf7, 0x0) 01:53:02 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x3e8, 0xf8, 0x548, 0x3e8, 0x4b0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'erspan0\x00', 'wlan0\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0x2c8, 0x2f0, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@bpf0={{0x230}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'macsec0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) 01:53:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r0, 0x0, 0x0, 0x10001) 01:53:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x801, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 01:53:02 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x5}]}) 01:53:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000']) 01:53:02 executing program 2: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$fb(r0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000002c0)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)={0x320, 0x140, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x1}) 01:53:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000a40)) 01:53:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r1, 0x801, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}}, 0x0) 01:53:02 executing program 0: r0 = add_key$keyring(&(0x7f0000002100), &(0x7f0000002140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='~', 0x1, r0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) 01:53:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000']) 01:53:03 executing program 4: add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="cfb953eca7fb34583fca682e", 0xc, 0xfffffffffffffffc) 01:53:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000']) 01:53:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x20000001) 01:53:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}]}, 0x3c}}, 0x0) 01:53:03 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000880), &(0x7f00000008c0), 0x2, 0x0) 01:53:03 executing program 1: r0 = memfd_create(&(0x7f0000000040)='net/ip_tab\x00'/22, 0x4) fstatfs(r0, &(0x7f0000000000)=""/50) 01:53:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 01:53:03 executing program 0: pselect6(0x40, &(0x7f0000000080), 0x0, 0xfffffffffffffffe, 0x0, 0x0) 01:53:03 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') 01:53:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') pread64(r0, 0x0, 0x0, 0x0) 01:53:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,t']) 01:53:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1000003}) 01:53:04 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2c404, 0x0) 01:53:04 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000180)) 01:53:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,t']) 01:53:04 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 01:53:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "969649c9399436c46c6cccdd370d682ffbfd62b13cc7a7e983d1bb1a43cce4205bbcd7ea95ef987c8bf093aaa247ef878add24e7220b4f8309721ffe9af6da50"}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)={0x0, "90e62de2bb4e6de36a7eb098a488bb54215e5b44ba0e8e948a80950c8c5ea6eb4eee8abca4f42a4c395405786e42245b242ae0aab78576c2dfacd2190d2ec901"}, 0x48, r0) 01:53:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xfffffffffffffff9) 01:53:04 executing program 0: request_key(&(0x7f0000000740)='logon\x00', &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0) 01:53:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000600)=@raw=[@cb_func, @ldst, @initr0, @map_idx_val, @cb_func, @map_fd], &(0x7f0000000680)='GPL\x00', 0x3, 0xea, &(0x7f00000006c0)=""/234, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:53:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,t']) 01:53:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)={0xe84, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe3c, 0x3, 0x0, 0x1, [{0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x42, 0x1, "ed074abb4943db09a2a729f433897c55a9c7d3bb7840e97454e485c05b85b9a218074817d5908c92c39e5e43925fbbcde2ac107fac31012ad6a6397cb81e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xce, 0x1, "ec44cd1cb61f67f0dbc06cc58f66aa4bbdeb0eed7326f9e57cccbfb4105ab2bf65b5525d7a3a4758de23685d74257acadf8bde1ebbd8e68284e45d16c3dbe135e7f35909b058f98724454ebeb614e834c494f5d6f6734cb2fe2786e38a1bf52293070439a91fb00c533fdbcd1bf4df1260cfbe0555a94c2acbe2779c72600926d6f20c55a3ccdd5eb57f0b5e6e1fc4ed29bb90f0f10f3f50798cca4527848cf6f81ada0d0cafc3610f5a412c5f243fed5bf05e6514877e62ceec7b9c412d29d41ff30031e7ab2eba5023"}]}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x58, 0x6, 0x1, 0x0, "9c870f24bccbba1cb0e1d971195b09b822e152cd3bc55399b913c250360192f79faa8150a322dc86144b9d346ef24f2f902f921663a3bff609103f6aa2e2e19a45a4497ac60deb288d735fa17c5c2751c85fa81b"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x4}, {0x244, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x1fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "5cc77bf559006c232c00ab372721a67cf08589878b623d5bc1f78ad47bc6c3f2649cab1a96c3a08bfe3b44a6249da6d1682891214e7716732f3e8dcc98695462a084c30641f4bc9ebc27704e7b4df98b9f2ff1afefe9a4d30ff70cea2c24541be74c5d5971aa16665539d91a44277e4e5a0441c39b330894e5f6f32185deb38f542a32ae8e3396e523602960e160ca8e5f06e77749fbf1d7b924c59fe0f869bedcccb7aa8c57357fca65a5007faf032fd58a353208efebef27a23a7a85d224b3f955de4ea3edf718ce2e894c5a0a7f66ed5b2dce0cfc194e0d56221e0e1b2d807380e737fbac3f58c9"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0xa14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9f5, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x52bc1b8f7dce83c9}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x4}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0xe84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 01:53:04 executing program 3: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{}, {@max={'max', 0x3d, 0x79fc}}], [{@seclabel}]}) 01:53:04 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) 01:53:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40101283, 0x0) 01:53:04 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) [ 2262.834628][ T8481] binder: Unknown parameter 'seclabel' 01:53:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x20, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x20}}, 0x0) 01:53:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x400000, 0x4}, 0x48) 01:53:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x20) 01:53:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeo']) 01:53:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "135a6c794917b87ce0adc01488c4f13f5244e0f92dd692f6842e03086c311e197571155ed816c14a2eb3260074cfc264106a07d2fa3722468d8d2474f65762c9"}, 0x48, r0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, r1) 01:53:05 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) 01:53:05 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x1}, 0x90) 01:53:05 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@remote, @mcast2, @remote, 0x0, 0x6b58}) 01:53:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="181000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@'], &(0x7f0000000040)='GPL\x00', 0x2, 0xfe, &(0x7f0000000540)=""/254, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:53:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pimreg\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 01:53:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeo']) 01:53:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x76000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 01:53:05 executing program 4: creat(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) 01:53:05 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x1}, 0x20) 01:53:05 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 01:53:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000440)='GPL\x00', 0x2, 0xfe, &(0x7f0000000540)=""/254, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x4, 0x4d7d, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 01:53:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeo']) [ 2263.976723][ T8516] overlayfs: './bus' not a directory 01:53:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1810", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@'], &(0x7f0000000040)='GPL\x00', 0x2, 0xfe, &(0x7f0000000540)=""/254, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:53:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x15}, 0x48) 01:53:06 executing program 0: syz_mount_image$tmpfs(&(0x7f0000001180), &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@huge_advise}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@subj_role}, {@appraise}, {@euid_lt={'euid<', 0xee00}}]}) 01:53:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x107}, 0x14}}, 0x0) 01:53:06 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x3, 0x9}}) 01:53:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout']) 01:53:06 executing program 2: syz_open_dev$usbfs(&(0x7f0000000bc0), 0x567, 0x0) [ 2264.525793][ T8533] tmpfs: Bad value for 'nr_inodes' 01:53:06 executing program 4: r0 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f3", 0x1, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) 01:53:06 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000480), 0x1c6, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 01:53:06 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 01:53:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x5, 0x26a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 01:53:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout']) 01:53:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11000000}, 0x48) 01:53:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 01:53:07 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "f9384368596cf2c752ebd40e8b506ffb"}]}}) 01:53:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xfe, &(0x7f0000000540)=""/254, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:53:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout']) 01:53:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f00000001c0)) 01:53:07 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x14, &(0x7f00000002c0)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc}]}}) 01:53:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x3ffdcf, 0x5, 0x4}, 0x48) 01:53:07 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x7fff}) 01:53:07 executing program 2: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000), &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'blake2s-224-x86\x00'}}, 0x0, 0x0) 01:53:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=']) [ 2265.553059][ T7992] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2265.792687][ T7992] usb 1-1: Using ep0 maxpacket: 32 [ 2265.812884][ T3557] usb 2-1: new high-speed USB device number 75 using dummy_hcd 01:53:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x3ffdcf, 0x4}, 0x48) 01:53:07 executing program 4: add_key$keyring(&(0x7f0000000840), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x1, 0x0, @a}, 0x48, 0xffffffffffffffff) 01:53:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=']) [ 2265.998373][ T7992] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2266.009594][ T7992] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2266.019695][ T7992] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2266.029726][ T7992] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2266.039761][ T7992] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2266.049691][ T7992] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2266.065276][ T3557] usb 2-1: Using ep0 maxpacket: 32 [ 2266.272975][ T3557] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2266.284473][ T3557] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2266.294684][ T3557] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2266.304798][ T3557] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2266.314885][ T3557] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2266.324801][ T3557] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2266.403824][ T7992] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2266.413822][ T7992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.422001][ T7992] usb 1-1: Product: syz [ 2266.426513][ T7992] usb 1-1: Manufacturer: syz [ 2266.432994][ T7992] usb 1-1: SerialNumber: syz [ 2266.652854][ T3557] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2266.662138][ T3557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.670575][ T3557] usb 2-1: Product: syz [ 2266.675190][ T3557] usb 2-1: Manufacturer: syz [ 2266.679923][ T3557] usb 2-1: SerialNumber: syz [ 2266.873390][ T7992] cdc_ncm 1-1:1.0: bind() failure [ 2266.888260][ T7992] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2266.895304][ T7992] cdc_ncm 1-1:1.1: bind() failure [ 2266.910180][ T7992] usb 1-1: USB disconnect, device number 33 [ 2267.017914][ T3557] cdc_ncm 2-1:1.0: bind() failure [ 2267.032472][ T3557] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2267.039463][ T3557] cdc_ncm 2-1:1.1: bind() failure [ 2267.061621][ T3557] usb 2-1: USB disconnect, device number 75 01:53:09 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1, &(0x7f00000003c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000440)='GPL\x00', 0x2, 0xfe, &(0x7f0000000540)=""/254, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:53:09 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) 01:53:09 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}, &(0x7f0000000040)=0x20) 01:53:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000001,timeout=']) 01:53:09 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000040)={@random="21fff89aee28", @empty, @val, {@ipv4}}, 0x0) 01:53:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, 0x0) 01:53:09 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) dup2(r0, r1) 01:53:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 01:53:09 executing program 2: request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) 01:53:09 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x7fffffff}, 0x1c) 01:53:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x40081271, r0) 01:53:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x16, 0x0, 0x0, 0xfffffff7}, 0x48) 01:53:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x0, 0x0, 0x0, 0x14}, 0x48) 01:53:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r0) 01:53:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x80, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 01:53:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000015c0)={{0x1, 0x1, 0x22}, './file1\x00'}) 01:53:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x80, 0x2000, 0x10}, 0x48) 01:53:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=""/207, 0xcf}, 0x60) 01:53:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x80, 0x2000, 0xc}, 0x48) 01:53:10 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') read$char_usb(r0, 0x0, 0x0) 01:53:10 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='nr_blocks=1k']) 01:53:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_stats}) 01:53:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x5427, 0x0) 01:53:10 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 01:53:10 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/75, 0x4b}}, 0x120) 01:53:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x1, 0x1}) 01:53:11 executing program 4: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="90040e00000000220000000008060001080006040002", @ANYRESOCT], 0x120) 01:53:11 executing program 1: r0 = socket(0x28, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={0x0}}, 0x0) [ 2269.014028][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 01:53:11 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000680)) [ 2269.014189][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.014311][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 01:53:11 executing program 5: socketpair(0x2, 0x2, 0x7, &(0x7f0000000080)) [ 2269.014434][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.014557][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 01:53:11 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000880)=0x4, 0x4) [ 2269.014678][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 01:53:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:53:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x2, @pix={0x0, 0xc25, 0x0, 0x0, 0x0, 0x0, 0xc}}) [ 2269.014800][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 01:53:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 2269.014923][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.015054][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.015175][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.015297][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.015420][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.015541][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.015663][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.015782][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.015904][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.016031][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.016155][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.016273][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.016391][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.016512][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.016631][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.016750][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.016870][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017002][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017128][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017252][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017375][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017501][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017627][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017746][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017869][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.017998][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.018120][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.018242][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.018364][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.018486][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.018609][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.018734][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.018858][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.018984][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.019105][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.019225][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.019344][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.019470][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.019590][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.019711][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.019832][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.019962][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.020085][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.020208][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.020331][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.020457][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.020580][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.020705][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.020830][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.020960][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.021085][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.021210][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.021336][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.021460][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.021582][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.021697][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.021815][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.021946][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.022071][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.022194][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.022901][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.023031][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.023149][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.023269][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.023393][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.023515][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.023639][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 01:53:12 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f00000001c0)) 01:53:12 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0xfdf9) 01:53:12 executing program 4: r0 = socket(0x15, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x6000) 01:53:12 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev}}}, 0x118) dup3(r0, r1, 0x0) 01:53:12 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) 01:53:12 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 2269.023763][ T7992] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2269.072033][ T7992] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz0] on syz0 01:53:12 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 01:53:12 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000080)) 01:53:12 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:53:12 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev}}}, 0x118) dup3(r0, r1, 0x0) 01:53:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x9}) 01:53:13 executing program 3: r0 = socket(0x15, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'caif0\x00'}) [ 2271.030147][ T8666] dlm: non-version read from control device 0 [ 2271.059233][ T8667] veth1_to_batadv: mtu less than device minimum 01:53:13 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000001380)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)='~', 0x1}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}, 0x0) 01:53:13 executing program 4: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080), 0x0, 0xffffffff}], 0x810004, &(0x7f0000000180)={[{'&\x99\xfc:\x99\',#y*-\\('}, {'\x12!%+@%'}, {}, {}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@dont_measure}]}) 01:53:13 executing program 0: syz_mount_image$romfs(&(0x7f0000001980), &(0x7f00000019c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3882008, &(0x7f0000002f80)) 01:53:13 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev}}}, 0x118) dup3(r0, r1, 0x0) 01:53:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe46, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) [ 2271.430360][ T8678] loop4: detected capacity change from 0 to 264192 01:53:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000b40)={'team_slave_0\x00', 0x400}) [ 2271.545399][ T8678] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) 01:53:13 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev}}}, 0x118) dup3(r0, r1, 0x0) 01:53:13 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='5\x00', 0x2) 01:53:13 executing program 4: syz_mount_image$pvfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[{'\x00'}, {'\x00'}], [{@fsmagic}]}) 01:53:13 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) 01:53:13 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xb, 0x0) epoll_pwait2(r0, &(0x7f0000000400)=[{}], 0x1, &(0x7f0000000480), &(0x7f00000004c0)={[0x1]}, 0x8) 01:53:14 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) 01:53:14 executing program 1: openat$ppp(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) 01:53:14 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000180)={0x0, r1/1000+10000}, 0x8) 01:53:14 executing program 5: memfd_create(0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [@func]}, &(0x7f0000000040)='syzkaller\x00', 0x5ef8ba73, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x10, 0x100000, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 01:53:14 executing program 0: syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 01:53:14 executing program 2: syz_mount_image$hfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001ac0)=[{&(0x7f00000008c0)='.', 0x1, 0x7fff}], 0x0, 0x0) 01:53:14 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x20) 01:53:14 executing program 1: clock_gettime(0x0, &(0x7f0000000600)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 01:53:14 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r2) setsockopt$MRT6_PIM(r1, 0x10e, 0xcf, 0x0, 0x0) [ 2272.963721][ T8695] orangefs_mount: mount request failed with -4 01:53:15 executing program 4: openat$ppp(0xffffff9c, &(0x7f0000001180), 0x2c0000, 0x0) 01:53:15 executing program 0: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000045c0)=""/51) 01:53:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000200)=""/207, 0x1000000, 0xcf, 0x1}, 0x20) 01:53:15 executing program 3: syz_mount_image$exfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x125000, &(0x7f0000001800)) 01:53:15 executing program 1: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$midi(0x0, 0x3ff, 0x0) 01:53:15 executing program 5: connect$x25(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$damon_attrs(0xffffff9c, 0x0, 0x0, 0x88) 01:53:15 executing program 0: r0 = openat$ppp(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) 01:53:15 executing program 1: syz_mount_image$hfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x1ff, 0x1}], 0x0, &(0x7f0000001b40)) 01:53:15 executing program 3: syz_mount_image$hfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000001ac0), 0x0, &(0x7f0000001b40)) 01:53:15 executing program 5: epoll_create(0x20000000) 01:53:15 executing program 4: lstat(&(0x7f0000001540)='./file0\x00', 0x0) 01:53:15 executing program 0: lstat(&(0x7f0000001540)='./file0\x00', 0x0) syz_mount_image$romfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500), 0x41, &(0x7f0000001600)={[], [{@euid_gt}]}) 01:53:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:53:15 executing program 5: syz_mount_image$hfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x2, &(0x7f0000001ac0)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000000940)="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", 0xc00, 0x1}], 0x0, &(0x7f0000001b40)) [ 2274.025768][ T8744] loop5: detected capacity change from 0 to 127 [ 2274.069250][ T8744] hfs: can't find a HFS filesystem on dev loop5 01:53:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3, &(0x7f0000000980)=@framed, &(0x7f00000009c0)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000a00)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00), 0x10}, 0x80) 01:53:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x0, 0x0, 0x310, 0xffffffff, 0xffffffff, 0x440, 0x440, 0x440, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @local, [], [], 'geneve0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'veth1\x00', 'batadv0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:cron_log_t:s0\x00'}}}, {{@ipv6={@loopback, @mcast2, [], [], 'batadv0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 01:53:16 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0) 01:53:16 executing program 0: syz_clone(0xc0082000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="968f8c63c981c9b10e09a083436b73cf4ce6f61117eec33a6614dcfe0a001d5811edfa065ecda3de11062b1e368c34e98546") 01:53:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140e, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 01:53:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @pix={0x7f}}) 01:53:16 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="82", 0x1}], 0x1, &(0x7f00000001c0)='S', 0x1}, 0x0) 01:53:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @pix_mp}) 01:53:16 executing program 1: socket$bt_rfcomm(0x10, 0x2, 0x3) 01:53:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x6, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x214, 0x0, 0x0, 0x0, 0x40}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x32}, @ldst={0x0, 0x2, 0x1, 0x2, 0x7, 0xd18f222227aeee0d, 0x1}]}, &(0x7f00000009c0)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000a00)=""/143, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x7, 0x7ff, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 01:53:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)=@overlay={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "98c6a3a5"}}) 01:53:16 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:53:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) 01:53:17 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0x401c5820, 0x0) 01:53:17 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)={0x0, 0x0, 0x28}, 0x10) 01:53:17 executing program 0: r0 = syz_open_dev$media(&(0x7f0000002200), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000002240)) 01:53:17 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002180)={0xa8, 0x0, r1, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee01}}}]}, 0xa8) 01:53:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "78f87b2a"}, 0x0, 0x2, {0x0}}) 01:53:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0xb, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x281, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b83b0000000f23d8f26f35c0000020660f381598d54db29d0f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235018000000f3066b8658e0000e1adfd359b00c0fe0f082f320f210d", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c89fd4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f4450071f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eb5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617dea61e1919c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cd434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e467200000000a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c51d539f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:53:17 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x800}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x44020400, &(0x7f0000000340)="296ead8f907ef876d208f4a4879d6c053bb3f80b97716ca406df792787512f8cd07580cc16ccbad8c6768d08508572e91a833a516fabc20a1e3b73d222b751c6a2ac7214e21ad3a3ee4a8fa7a8667d473aa85f2311966b1d979aa629c072b4a8c34233664882491eb75a47e2316796e444bee78e6caa0c4c7c5d665c13178ed4b88733e42a7df5832c65", 0x8a, &(0x7f0000000500), &(0x7f0000000540), 0x0) ioprio_get$pid(0x2, r0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000680)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000680)) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x1, 0x8001, 0x1, 0x6, 0x4, 0xd867be1, 0x48e3, 0x35}}}, 0x60) 01:53:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0xffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x281, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b83b0000000f23d8f26f35c0000020660f381598d54db29d0f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235018000000f3066b8658e0000e1adfd359b00c0fe0f082f320f210d", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7ffff487, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5, 0x0, '\x00', 0xff}]}}) 01:53:18 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 2275.911492][ T8785] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 01:53:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000300)='J', 0x1, 0x80000001}], 0x0, &(0x7f0000000680)={[{@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x0]}}]}) 01:53:18 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x800}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x44020400, &(0x7f0000000340)="296ead8f907ef876d208f4a4879d6c053bb3f80b97716ca406df792787512f8cd07580cc16ccbad8c6768d08508572e91a833a516fabc20a1e3b73d222b751c6a2ac7214e21ad3a3ee4a8fa7a8667d473aa85f2311966b1d979aa629c072b4a8c34233664882491eb75a47e2316796e444bee78e6caa0c4c7c5d665c13178ed4b88733e42a7df5832c65ab90fa11298599691d741f682f530121c48051a36b42ca4bed8cb63183db76a808735807cb5b5fdd248db35080b1", 0xb8, &(0x7f0000000500), &(0x7f0000000540), 0x0) ioprio_get$pid(0x2, r0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000680)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000680)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4881}, 0x40040) 01:53:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b83b0000000f23d8f26f35c0000020660f381598d54db29d0f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235018000000f3066b8658e0000e1adfd359b00c0fe0f082f320f210d", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x281, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b83b0000000f23d8f26f35c0000020660f381598d54db29d0f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235018000000f3066b8658e0000e1adfd359b00c0fe0f082f320f210d", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:53:18 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x800}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x44020400, &(0x7f0000000340)="296ead8f907ef876d208f4a4879d6c053bb3f80b97716ca406df792787512f8cd07580cc16ccbad8c6768d08508572e91a833a516fabc20a1e3b73d222b751c6a2ac7214e21ad3a3ee4a8fa7a8667d473aa85f2311966b1d979aa629c072b4a8c34233664882491eb75a47e2316796e444bee78e6caa0c4c7c5d665c13178ed4b88733e42a7df5832c65ab90fa11298599691d741f682f530121c48051a36b42ca4bed8cb63183db76a808735807cb5b5fdd248db35080b1", 0xb8, &(0x7f0000000500), &(0x7f0000000540), 0x0) ioprio_get$pid(0x2, r0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000680)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000680)) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x1, 0x8001, 0x1, 0x6, 0x4, 0xd867be1, 0x48e3, 0x35}}}, 0x60) 01:53:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7ffff487, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5, 0x0, '\x00', 0xff}]}}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) 01:53:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:53:19 executing program 5: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)="a0", 0x1}], 0x1, &(0x7f0000001540)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @sndrcv={0x2c}, @init={0x14}, @sndrcv={0x2c}, @sndrcv={0x2c}, @dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0xc4}, 0x0) 01:53:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x44020400, &(0x7f0000000340)="296ead8f907ef876d208f4a4879d6c053bb3f80b97716ca406df792787512f8cd07580cc16ccbad8c6768d08508572e91a833a516fabc20a1e3b73d222b751c6a2ac7214e21ad3a3ee4a8fa7a8667d473aa85f2311966b1d979aa629c072b4a8c34233664882491eb75a47e2316796e444bee78e6caa0c4c7c5d665c13178ed4b88733e42a7df5832c65ab90fa11298599691d741f682f530121c48051a36b42ca4bed8cb63183db76a808735807cb5b5fdd248db35080b1", 0xb8, 0x0, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000680)) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000680)) 01:53:19 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x44020400, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x800, 0x0) 01:53:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x281, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b83b0000000f23d8f26f35c0000020660f381598d54db29d0f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235018000000f3066b8658e0000e1adfd359b00c0fe0f082f320f210d", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8b2fac000046bf56c26f5cfecd1fb5c3cd87237a84dd4a0f7f3d9490c43fafa021f324730f76c3792921875ca43bd73135872cb2af8899eb1dd7f991adeeebb1ce8c9b730000000000000000000000000000ac0000116079fa"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:53:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0xb, 0x0, 0xffff) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x281, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b83b0000000f23d8f26f35c0000020660f381598d54db29d0f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235018000000f3066b8658e0000e1adfd359b00c0fe0f082f320f210d", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:53:19 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x800}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x44020400, &(0x7f0000000340)="296ead8f907ef876d208f4a4879d6c053bb3f80b97716ca406df792787512f8cd07580cc16ccbad8c6768d08508572e91a833a516fabc20a1e3b73d222b751c6a2ac7214e21ad3a3ee4a8fa7a8667d473aa85f2311966b1d979aa629c072b4a8c34233664882491eb75a47e2316796e444bee78e6caa0c4c7c5d665c13178ed4b88733e42a7df5832c65ab90fa11298599691d741f682f530121c48051a36b42ca4bed8cb63183db76a808735807cb5b5fdd248db35080b1", 0xb8, &(0x7f0000000500), &(0x7f0000000540), 0x0) ioprio_get$pid(0x2, r0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/user\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000680)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000680)) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x1, 0x8001, 0x1, 0x6, 0x4, 0xd867be1, 0x48e3, 0x35}}}, 0x60) 01:53:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=ANY=[], 0x80, 0x4}, 0x20000) [ 2278.286370][ T8854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 01:53:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000000)={@multicast2}, 0x8) 01:53:20 executing program 0: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000280), 0x8) 01:53:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r1, r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x8) 01:53:20 executing program 4: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x100) 01:53:20 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000140), 0x8) 01:53:20 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '/'}}, 0x119) 01:53:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 01:53:21 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x1c, 0x1c, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f0000000200), &(0x7f0000000240)=0x18) [ 2279.131641][ T3557] hid-generic 0000:0000:0000.0053: item fetching failed at offset 0/1 [ 2279.197173][ T3557] hid-generic: probe of 0000:0000:0000.0053 failed with error -22 01:53:21 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r1, 0x0, 0x0, 0x60108, &(0x7f0000001240)={0x1c, 0x1c}, 0x1c) 01:53:21 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xc, &(0x7f0000000040), 0xb) 01:53:22 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup(r0) shutdown(r1, 0x1) 01:53:22 executing program 0: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)="a0", 0x1}], 0x1, &(0x7f0000001540)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @sndrcv={0x2c}, @init={0x14}, @sndrcv={0x2c}, @sndrcv={0x2c}, @dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0xc4}, 0x0) 01:53:22 executing program 5: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) 01:53:22 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x6b, 0x1c, 0x3}, 0x1c) 01:53:22 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x2e, &(0x7f0000000000)={@local={0xfe, 0x80, '\x00', 0x0}}, 0x14) 01:53:22 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup(r0) getsockname(r1, 0x0, &(0x7f0000000040)) 01:53:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001500)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000100)="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", 0xff1}], 0x1}, 0x0) 01:53:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000000)={0x0, 0x2, "f623"}, &(0x7f00000000c0)=0xa) 01:53:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 01:53:22 executing program 1: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x10) 01:53:22 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 01:53:23 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xb) 01:53:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001500)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000100)="bc", 0x1}], 0x1}, 0x0) 01:53:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x5, &(0x7f0000000140), 0x4) 01:53:23 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000100), &(0x7f00000001c0)=0x98) 01:53:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)='|', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001a00), 0x88) 01:53:23 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 01:53:23 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 01:53:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)=0xbd) 01:53:23 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7, &(0x7f0000000080), 0x88) 01:53:23 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x9, &(0x7f0000000080), &(0x7f0000000040)=0x4) 01:53:23 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random="c7b800001600", @val, {@ipv6}}, 0x0) 01:53:24 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) listen(r0, 0x7f) 01:53:24 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x103, &(0x7f0000000140)={0x0, 0x2, "80e1"}, &(0x7f00000001c0)=0xa) 01:53:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000c40)={0x10, 0x2}, 0x10) 01:53:24 executing program 3: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)="a0", 0x1}], 0x1, &(0x7f0000001540)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}], 0x1c}, 0x0) 01:53:24 executing program 2: symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') 01:53:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) r3 = dup2(r2, r1) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001980)=[@authinfo={0x10}], 0x10}, 0x0) 01:53:24 executing program 4: r0 = socket$inet6(0x1c, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c}, 0x1c) 01:53:24 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 01:53:24 executing program 3: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xb) 01:53:24 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x1c, 0x1c}, 0x44) 01:53:25 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 01:53:25 executing program 1: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)="a0", 0x1}], 0x1, &(0x7f0000001540)=[@sndrcv={0x2c}], 0x2c}, 0x0) 01:53:25 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="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", 0x785, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000940)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000100)={r2}, &(0x7f00000001c0)=0xb0) 01:53:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001480)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000040)='C', 0x1}], 0x1, &(0x7f0000001440)=[@sndinfo={0x1c}], 0x1c}, 0x0) 01:53:25 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x100, &(0x7f00000010c0)={0x1c, 0x1c}, 0x1c) 01:53:25 executing program 5: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)="a0", 0x1}], 0x1, &(0x7f0000001540)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @sndrcv={0x2c}], 0x48}, 0x0) 01:53:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4}, 0x20000) 01:53:25 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x10, 0x2}, 0x10) 01:53:26 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r1, &(0x7f00000001c0)="d3", 0x1, 0x0, &(0x7f0000001240)={0x1c, 0x1c}, 0x1c) 01:53:26 executing program 2: r0 = socket(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x10) 01:53:26 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000d00), &(0x7f0000000d40)=0x10) 01:53:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc) 01:53:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000740)={0x0, 0x0, 0xf}, &(0x7f0000000780)=0x18) 01:53:26 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000200)=0x98) 01:53:26 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000001200)={0x1c, 0x1c, 0x2}, 0x1c) 01:53:26 executing program 3: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000840000000a000000ff0100000000000000000000000000011000000084"], 0x84}, 0x100) 01:53:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@authinfo={0x10}], 0x10}, 0x0) 01:53:26 executing program 5: syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[], [{@seclabel}]}) 01:53:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) 01:53:27 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 01:53:27 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000001140)='+', 0x1, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="fe", 0x1, 0x10100, 0x0, 0x0) 01:53:27 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r1, r0) 01:53:27 executing program 5: r0 = socket(0x1c, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 01:53:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000700), 0x8) 01:53:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_cache\x00') read$char_usb(r0, &(0x7f0000000000)=""/69, 0x45) 01:53:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x30, 0x30]}}, &(0x7f0000000580)=""/208, 0x29, 0xd0, 0x1}, 0x20) 01:53:28 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000540)={[{@longad}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@adinicb}]}) 01:53:28 executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000540)={[{@adinicb}]}) 01:53:28 executing program 2: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x1, &(0x7f0000000200)={[{@gid_ignore}]}) 01:53:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpid() r2 = gettid() sendmmsg$unix(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x40}}], 0x1, 0x0) 01:53:28 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2af000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="b0") 01:53:28 executing program 1: syz_clone(0x50200000, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 01:53:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)) 01:53:28 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x7bd, &(0x7f0000000d00)=[{&(0x7f00000007c0)="18", 0x1}, {&(0x7f00000008c0)='.', 0x1}, {&(0x7f0000000940)="bb", 0x1}, {&(0x7f00000009c0)="fe", 0x1}, {&(0x7f0000000ac0)="c2", 0x1}, {&(0x7f0000000b00)='\f', 0x1}], 0x0, 0x0) 01:53:28 executing program 0: keyctl$unlink(0xc, 0x0, 0x0) 01:53:28 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="a1", 0x1, r0) keyctl$unlink(0x9, r1, r0) 01:53:28 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='batadv0\x00', &(0x7f0000000100)="f9", 0x1) 01:53:29 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 01:53:29 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x1d, r0, 0xffffffffffffffff) 01:53:29 executing program 5: clock_gettime(0x0, &(0x7f0000000000)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 01:53:29 executing program 2: syz_clone(0xc101200, 0x0, 0x0, 0x0, 0x0, 0x0) 01:53:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfcc9, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x0, 0x1, [{0x0, 0x1}]}) 01:53:29 executing program 1: keyctl$read(0xb, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) syslog(0x0, &(0x7f0000000000)=""/2, 0x2) 01:53:29 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) 01:53:29 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) 01:53:29 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "625bd9c305f7ff1f22d7a5a17957c271ef8380a3541cef4d8027a5e09bf3155cf1eb93c8dea7816f03639f8ad765072714a08526789a12839917ee6e45156af6"}, 0x48, r0) keyctl$unlink(0x3, r1, 0x0) add_key(&(0x7f0000000080)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r1, 0x0, 0x0) 01:53:29 executing program 3: syz_clone(0x2af000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2287.747431][ T9113] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2287.754142][ T9113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2287.762865][ T9113] vhci_hcd vhci_hcd.0: Device attached 01:53:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0xff, "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"}) [ 2287.828776][ T9117] vhci_hcd: connection closed [ 2287.831368][ T52] vhci_hcd: stop threads [ 2287.840958][ T52] vhci_hcd: release socket [ 2287.845720][ T52] vhci_hcd: disconnect device 01:53:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x63, 0x1, 0xfffffffd, 0x0, 0x0, 0x1, 0xdc, 0xff}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="620af8ff25200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415bd1966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b7845e6b607130c89f18c0c1089d8b853289d01aa27ae82e61b0f9223684198e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364145835108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e68242aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000009711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b000020435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ece0ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225f728d44d0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933bee24c7e8000f2c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e000000000000037010632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef96ccecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127cf72748a028daf5fc4d4e6d5265bec44219ee8fbfe86f441c724fa7b3d1ff0555e63ad00a1c7f9f9af10154f1e109dc3f7dd87ea308a1fb5a983490c6c93610864623613dabec4c0b64461d21f807515d8fadec636c99aa95ff895c25aad5ac0993a65c7668ca2b6d46edbad410df7390d27ec8199259b8e3dd36de9b35ce25d39686f2470afb1b1db18221841cee6e5531280d65f1d28886e0f06856a5ca37a91ea6e19977c517b10fb66858a05b03084d1f3bd5542d2796a33cfe545be3dc03d302e4839492cdc7694142e48f23271787d3a2360996ca3c9b18000000000700000000000000000000004882ce2e7a68512b23b0ab1f7a6c960b"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x125) io_setup(0x100000000000c333, 0x0) io_submit(0x0, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1500000000000000, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffff6c}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x64, &(0x7f0000000340)=""/100, 0x41100, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0x4, 0x1}, 0x10}, 0x80) 01:53:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x2f, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0xffd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x4) 01:53:30 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400000, &(0x7f0000001180), 0x0, &(0x7f0000001000), 0x0, &(0x7f0000001080)="70115990ad2b7487d53685b6bbf521822e57d2ce38bd58efa46a35c13b72f17a7713860508ca14193da6cb96dbfa94ead64e84ef830f8d1d16d7a0b9e779120a6dafb28991bcabab68d807f4d2f643c465442e44db0d69844e7cc1d41b90134b70327e44ce28f7159f7757971d4e1b60942934f8c8d45e28618824c2b6e28a3f3403ec465881d0fb6eeb2c26307f5c00edc4e5c92289a1858904773230") 01:53:30 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @random="1da174746e3a", @val, {@ipv6}}, 0x0) 01:53:30 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x3, [@ptm_cap={0x3}, @wireless={0xb}, @ext_cap={0x7}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="8a0312"]}]}) 01:53:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x63, 0x1, 0xfffffffd, 0x0, 0x0, 0x1, 0xdc, 0xff}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x125) io_setup(0x100000000000c333, 0x0) io_submit(0x0, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1500000000000000, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffff6c}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x64, &(0x7f0000000340)=""/100, 0x41100, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0x4, 0x1}, 0x10}, 0x80) 01:53:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x123, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000003980)={'bridge_slave_0\x00', 0x12}) sendmmsg$unix(r0, &(0x7f0000003b40)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{0x0}, {&(0x7f00000023c0)}], 0x2, &(0x7f0000002500)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000002780)}, {&(0x7f0000003800)}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000300000000000000001000000010000003abc8dae08916ace03257d9fe7c6078a606e5fabaa74820fc2318b1eff195779b2abc6c418e9bcd11b0d3d703cd9117c287db0bcbeea5e56e613ec3ca0aa3e94db941f70afe5805cfa95f116c3d931b87852c132f984816c796271f0d323b77a925bb7f7962f9d641e37dce5f3844023b6bd979c23a745a01cca917c98bc0bde8afc25358c6f8fc1aca06d5a1acc42a5d37c6d50ff8572161779577f3f04d2d01c190c12b774694cbf3a67cb17a937e188e55c6b0d3639bc3fe2", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x58, 0x24004000}}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 01:53:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newnexthop={0x24, 0x68, 0xfffffffffffffffd, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) 01:53:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r1 = dup(r0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) [ 2288.953002][ T7992] usb 4-1: new high-speed USB device number 103 using dummy_hcd 01:53:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000004c0)={0xcc, "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"}) [ 2289.212655][ T7992] usb 4-1: Using ep0 maxpacket: 32 01:53:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r1 = dup(r0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) [ 2289.415164][ T7992] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2289.554207][ T9131] not chained 1640000 origins [ 2289.559073][ T9131] CPU: 0 PID: 9131 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2289.569308][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2289.579420][ T9131] Call Trace: [ 2289.582714][ T9131] [ 2289.585669][ T9131] dump_stack_lvl+0x1c8/0x256 [ 2289.590391][ T9131] dump_stack+0x1a/0x1c [ 2289.594579][ T9131] kmsan_internal_chain_origin+0x78/0x120 [ 2289.600347][ T9131] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2289.606459][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.611616][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2289.617907][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.623060][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2289.628936][ T9131] ? __get_compat_msghdr+0x5b/0x750 [ 2289.634184][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.639339][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2289.645197][ T9131] ? should_fail+0x3f/0x7e0 [ 2289.649755][ T9131] ? __stack_depot_save+0x21/0x4b0 [ 2289.654924][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.660080][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2289.666367][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.671522][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2289.677389][ T9131] __msan_chain_origin+0xbd/0x140 [ 2289.682468][ T9131] __get_compat_msghdr+0x514/0x750 [ 2289.687638][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2289.692546][ T9131] ? ___sys_recvmsg+0xa9/0x870 [ 2289.697355][ T9131] ? do_recvmmsg+0x63a/0x10a0 [ 2289.702077][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2289.706810][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.711962][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2289.717820][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.722978][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2289.728837][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2289.733391][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.738556][ T9131] ? __sys_recvmmsg+0x52/0x450 [ 2289.743361][ T9131] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2289.749826][ T9131] __sys_recvmmsg+0x113/0x450 [ 2289.754546][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2289.759705][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2289.766000][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2289.771081][ T9131] do_fast_syscall_32+0x33/0x70 [ 2289.775969][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2289.780513][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.786883][ T9131] RIP: 0023:0xf7f0f549 [ 2289.790968][ T9131] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2289.810611][ T9131] RSP: 002b:00000000f7ee95cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2289.819050][ T9131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2289.827040][ T9131] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2289.835032][ T9131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2289.843032][ T9131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2289.851015][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2289.859016][ T9131] [ 2289.862207][ C0] vkms_vblank_simulate: vblank timer overrun [ 2289.871167][ T9131] Uninit was stored to memory at: [ 2289.876572][ T9131] __get_compat_msghdr+0x514/0x750 [ 2289.881750][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2289.886744][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2289.891528][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2289.896168][ T9131] __sys_recvmmsg+0x113/0x450 [ 2289.900895][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2289.902937][ T7992] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2289.907315][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2289.916491][ T7992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.921420][ T9131] do_fast_syscall_32+0x33/0x70 [ 2289.921473][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2289.929751][ T7992] usb 4-1: Product: syz [ 2289.934476][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.934539][ T9131] [ 2289.934547][ T9131] Uninit was stored to memory at: [ 2289.934628][ T9131] __get_compat_msghdr+0x514/0x750 [ 2289.939062][ T7992] usb 4-1: Manufacturer:  [ 2289.943317][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2289.943371][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2289.943427][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2289.949787][ T7992] usb 4-1: SerialNumber: syz [ 2289.952076][ T9131] __sys_recvmmsg+0x113/0x450 [ 2289.990345][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2289.996741][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2290.001831][ T9131] do_fast_syscall_32+0x33/0x70 [ 2290.006875][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2290.011419][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.017882][ T9131] [ 2290.020212][ T9131] Uninit was stored to memory at: [ 2290.025433][ T9131] __get_compat_msghdr+0x514/0x750 [ 2290.030586][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2290.035584][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2290.040360][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2290.044994][ T9131] __sys_recvmmsg+0x113/0x450 [ 2290.049720][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.056146][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2290.061215][ T9131] do_fast_syscall_32+0x33/0x70 [ 2290.066230][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2290.070794][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.077401][ T9131] [ 2290.079730][ T9131] Uninit was stored to memory at: [ 2290.084911][ T9131] __get_compat_msghdr+0x514/0x750 [ 2290.090143][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2290.095146][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2290.099870][ T9131] do_recvmmsg+0x63a/0x10a0 01:53:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460009fe00b8b775fd00000000000000000000000000000000000000000000004679211ddb39d4f9d6df4f277396470000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000aa9d00"/120], 0x78) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{0x0}, {&(0x7f00000023c0)}], 0x2, &(0x7f0000002500)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000002780)="2550b4c804b2bc1fe7de4d38ba3ac3bcd11891b78ee696173f7134524e62aa116b29", 0x22}, {&(0x7f0000002800)="2ebffdf2626f27149355dc6336220de442ac441fbdad4378f1e488aa17402a79f1859ba0d1f57e218f1357044c8d1af1112d6f6288bbc5344b60446f51d3decb6c4745bceac134e6cf7df03c480292c4b77e4e867c67cc156a251b94a47ceac7e3bc70a599a76f0281751c34cdf107519a6dcb8614f1d6e5ee3d6f82338397180ddd50c0f044a0f9c081c38ef8200d9c6594cbe0bcdbaaf3279b9095d6855b33139390975350faacfea8f6cc2ff7fdc9af66b874855b28040d25f585f150655dbaa9d75e8e7810870b3d94897d8dd7c06556159fb071f389fc4fb55b1ebf93be62053adf246cb6ec0bd1ce271a12cd182b51be385347862f5e9c80eb4623ebc31cdcf487cafc48f9a657416ffd2968124f2b94fc11ba720684f6e788855397a6c8fc03fe4602b49bbef0667bb42df97acdde0b64f7244e99fb4eb4ddd133c780b0cb1e1656ad9b6276d097b682ad6752db3368ff1f08dccda63a898828dc61a84303aa54c4401622fb7ea84ce512a3c7d97aa8ae17e8b129eb5223766e081508a089d14802bb2c3444028f6b09fff9372b296424584f620785f1c5cab4fb003b15162327057ee44d94f0f43cbf33d1e7cc39bbe27eee098596761b2d68bb432d4f0cc7ee16f5dc69a223f310df93ccd4c03b2027973d11071392a5c3257aede8efee7af8854cde112df7f2fc4d1235fc64297685f8766a043869cc0186406282e12f047a573b26d46719d743a7173b7c7baac38a9e0a6d7d4bf4baeb81685260e30fa393b98868a08a489c70e7d09f32a0cd1264612f044638f84242d85b73c839b7eda4be32d05b06e2bd2ca81b8e23e7a10a764bfe5bf8d228ef8aff6d0d9612d826ca6e471c7023839dc0aa36c1a4558823670107b907068329bf8c108b944c751b79a4960a403c42576f0388fa273510eb5a03c7f078958971e03ee8ca667e70e64fe58d363284752e0dcc46bfb8b9639ca08fd2934f72b08498b8aafab4a33cdf5589edf08bfab3aae91e700cdd9a1a92dbe0eddacba612a6269477abd9b211fc116c3837d189d6219de33316527dbbcf36d42f3f06acbe8dc882a8464890f4c1c9d5f32268ac2f36fbf9840912e999a389d6803f33f95d9ec8940d75f62552095203ae9178bbe07e37795928b8b6f8af5304ad1265ef3fa4bb2f7b8e0238dbac37d0171b0f18071f5d54a6739e19f7ef41eb45612ef786cd044f93dfaa00dc28d57294f701501398ecb3677f5cc1a7d43885e14da1660a0c231342dc89a05886696ab6a377f76dfedded868a587358da129ef230058ef12028a3cb08aaf2532641079f2a67482c3ff48ea63ba699e7700657c25add6c0efe57ea2eef03bb63b861e1a5f48ece1bfc69ab5c71d42f4cebf73e3b16dbde1e2918f23479ad666c6294970d211fcd367db0258eaed70317355461cf3fbcc34ea0d599e46e2b69a1e3d5b5b87cd4f7a0fa4dfb549012824cd63fb8df78b9dfc85d9eb63cb2581eb088ba7eb3e9e256ed6d7e5c60e13632467aa09014b6a50b60a3a3b1664118a731f1349fe3be3f5de13cf1cd6478f32caf60a5ad3a1c5479e508a69db72855ce1d72477d1219c947cfca751b8b105a54c366c7dfe01243f60aff1a5406c7626b653a8ec0ed81d8ea027af4f3b3757d56b3bce7986ffddb6f3ab0d739614ec30f60fc99456e4e36e84c1dc94431eef04bfdca723f6397fc8f37b73e619b3c4e7ebfb1df4d74327d610acea98dabd2448bdecbba699aadfb12f7da897936f1bd4a4ac68f8d497b531e358e2da1ec5baebd52c6655c8785b6a83f17bc99f0f42d48ea661be19701c432f25c6d1c589c278f054173a74908ef847b39b3f7f608334f61a1602da96b736d89b17b0fc31a4d72b08b68a7597e90f4fd1302f5083a94472e57e7d8c7e63f7c2cfe87d6c8b8bfd47668c563dfea6afdebaabe9a14ad08e7ed793698d0a3c984afe1012ba6c911ef72a648c7bc451326e6975e82918236ad5e1569767158cd24744278737dbe7e5b1bb93f3bd25270178fbdaa7082b5ad5803eb8dffb47e15e28f97047ead0068bbffa2e8dea79c45bdb6506d5d23dceecc73d23d073764e81028236aa5e1f8fef553f736c09b1698886d2ee2eb6a35739d124836710c12a56811d5c810048f6415245d6482be4f09443f5d31f8aa964d02e493ce0586eecde3e734a662d4968d14b8f0bedd3c756ed23149469b0c5c578b486722199bd8d70a81e5e40f68ca38803a58e09b4484499197a2a3b0887081b9d5452275c8784cc672ad3990a4df3eab7d82b8b61884aa8e1d02976b44f42260b74c1d7de0b3e10bf838a6122a262f54be2d311611898391e14e983eddffe7c1772c24fcb19e9c009464f4bf64c7b47c27fea57e2c17642dc718f3dfb49566af4c4f5922f912af5254818b0ee875e25cb9a899c81b09f8faeb3634bba602ce852d461ffaf870e414882c6cf96d7e31b2323ab21e197b5bf3104278716d44646430e2b8244173009b0262229560e78c2759f9e0a56ee782df18e90e295fc89fc512bda2d3d0f537566208a262e79ae24bcd56d3319d837e049a2596429f23154dc6973e330fbad679a0dad7f26d51e8365702d0bdc697ebcfe40a5f1b0126148346cae6291697a37e1fc544900b372ed3803ba1aafa7f208bde2f462a84d2272812996450b7dcb79cea8a1ff0076c8327a12af36786cf375c45ab2f9c1b5e7591f61e5ada8184f70c435c5e5b582b72984de0d47d7a41939913965afcf9f80ee2d30ed76d646c93902c4feebc98746adc1711b2390c64109afd131b9fbcf15dcfd5f041696be48da7dbec61db84b8f1412b760edc400b97caace6affe7ba32b8fc79cb02476e69fcf3589b5f530eba07f1d6f1d8b77b28b8f59acd2a44b0e408f12e7f9952484ca12761d68bb29c7849f68fb9b497016b2eea7cf65c53fd666551d0b5e0b968593a72805cb783a9d186845fd57da49a74243a782c64127e1eefa7f8d74dcd06bfffda4ad1b63ab663c39e0ab4ca47920dce2dc50beee26593a12674f402899c86207c084921bc012e6df18d076a1c526aee8e631262c4d5ff7cc8ec4438f405dd9b84229bb976754deb0e9d7ba9e5fca168eafe70ce6ccd9e547dd6f559df6c60806474d27ffdb38a48c658cc4eff10efbb093c4ba33b0bad42229358f93ecee7008d3a32645c6ec461bfd070652f3ee766ef6732a3fda6c7a696e5072bf7adc0b2c2fa0a613c52f20528d6d1add3bdb1467e729686a8b969bedce7792179d2605e010e4bbbb1a2d6bf938abaf149e1c7eb548abd90ebef84cb1e588f693ba542b3a1a14c8d34470889990d0297786f178a4e9a07638bd9f01494bfe21994e4a4245a6c9182729b40848f46032e3c4524b18e7b3d67a2c4a2b4ef6837e1d99b0773eeb7eb3a58908a407693b81ddab17ccfc2d57c6313ed560ad775704865b9b9f4fc3be24947d35964ecf5f820a262b2cbec3a145bcbd7cd7247ad000d13603493553f377181efaad65827f1a501c1652e7368d77acd10360b625cadc7ccca8abe63bb3b4c29f33e2764d1c9d1662244bb5b4024041a33c7d3c3a57e187d7eafbbaca54cf836a4c04c74942ceed010e761fc38a9da00cd412f46165da7f4acf6c40b6d6e500def572b3ff81b09f7baec102f32c8478ac77fd40e979141bf92bc45aa2a9865dc7af397828f364369f521fd821c91244766fff503641f5a05d26c1ad2d9f95a6245d1f1fb96889984bdada9bf1796e64356a431a2feef556678e64c2364f6f", 0xa6c}, {&(0x7f0000003800)}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000300000000000000001000000010000003abc8dae08916ace03257d9fe7c6078a606e5fabaa74820fc2318b1eff195779b2abc6c418e9bcd11b0d3d703cd9117c287db0bcbeea5e56e613ec3ca0aa3e94db941f70afe5805cfa95f116c3d931b87852c132f984816c796271f0d323b77a925bb7f7962f9d641e37dce5f3844023b6bd979c23a745a01cca917c98bc0bde8afc25358c6f8fc1aca06d5a1acc42a5d37c6d50ff8572161779577f3f04d2d01c190c12b774694cbf3a67cb17a937e188e55c6b0d3639bc3fe216e49a92d81ea89957fe7562afabf3bbe40bfa2ffdee430fc5", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2], 0x58, 0x24004000}}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 2290.104582][ T9131] __sys_recvmmsg+0x113/0x450 [ 2290.109375][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.115766][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2290.120833][ T9131] do_fast_syscall_32+0x33/0x70 [ 2290.125851][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2290.130399][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.137041][ T9131] [ 2290.139431][ T9131] Uninit was stored to memory at: [ 2290.144718][ T9131] __get_compat_msghdr+0x514/0x750 [ 2290.149880][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2290.154942][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2290.159731][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2290.164440][ T9131] __sys_recvmmsg+0x113/0x450 [ 2290.169166][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.175593][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2290.180665][ T9131] do_fast_syscall_32+0x33/0x70 [ 2290.185724][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2290.190326][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.196862][ T9131] [ 2290.199194][ T9131] Uninit was stored to memory at: [ 2290.204443][ T9131] __get_compat_msghdr+0x514/0x750 [ 2290.209657][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2290.214710][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2290.219435][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2290.224162][ T9131] __sys_recvmmsg+0x113/0x450 [ 2290.228923][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.235376][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2290.240509][ T9131] do_fast_syscall_32+0x33/0x70 [ 2290.245565][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2290.250114][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.256675][ T9131] [ 2290.259009][ T9131] Uninit was stored to memory at: [ 2290.264258][ T9131] __get_compat_msghdr+0x514/0x750 [ 2290.269413][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2290.274524][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2290.279251][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2290.283973][ T9131] __sys_recvmmsg+0x113/0x450 [ 2290.288759][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.295218][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2290.300323][ T9131] do_fast_syscall_32+0x33/0x70 [ 2290.305414][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2290.310001][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.316591][ T9131] [ 2290.318922][ T9131] Local variable msg_sys created at: [ 2290.324360][ T9131] do_recvmmsg+0x5f/0x10a0 [ 2290.328829][ T9131] __sys_recvmmsg+0x113/0x450 [ 2290.521570][ T9145] not chained 1650000 origins [ 2290.526544][ T9145] CPU: 0 PID: 9145 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2290.536657][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2290.546740][ T9145] Call Trace: [ 2290.550033][ T9145] [ 2290.552979][ T9145] dump_stack_lvl+0x1c8/0x256 [ 2290.557710][ T9145] dump_stack+0x1a/0x1c [ 2290.561908][ T9145] kmsan_internal_chain_origin+0x78/0x120 [ 2290.567692][ T9145] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2290.573850][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.579017][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2290.585313][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.590496][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2290.596365][ T9145] ? __get_compat_msghdr+0x5b/0x750 [ 2290.601620][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.606783][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2290.612653][ T9145] ? should_fail+0x3f/0x7e0 [ 2290.617195][ T9145] ? __stack_depot_save+0x21/0x4b0 [ 2290.622358][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.627523][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2290.633827][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.638996][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2290.644875][ T9145] __msan_chain_origin+0xbd/0x140 [ 2290.649954][ T9145] __get_compat_msghdr+0x514/0x750 [ 2290.655140][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2290.660043][ T9145] ? ___sys_recvmsg+0xa9/0x870 [ 2290.664858][ T9145] ? do_recvmmsg+0x63a/0x10a0 [ 2290.669592][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2290.674335][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.679503][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2290.685365][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.690530][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2290.696399][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2290.700992][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.706166][ T9145] ? __sys_recvmmsg+0x52/0x450 [ 2290.710979][ T9145] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.717461][ T9145] __sys_recvmmsg+0x113/0x450 [ 2290.722198][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2290.727368][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.733698][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2290.738769][ T9145] ? exit_to_user_mode_prepare+0x119/0x220 [ 2290.744639][ T9145] do_fast_syscall_32+0x33/0x70 [ 2290.749540][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2290.750951][ T7992] usb 4-1: USB disconnect, device number 103 [ 2290.754085][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.754149][ T9145] RIP: 0023:0xf7fc9549 [ 2290.754178][ T9145] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2290.754221][ T9145] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2290.754265][ T9145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2290.754296][ T9145] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2290.754323][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2290.754350][ T9145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2290.830559][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2290.838667][ T9145] [ 2290.841880][ C0] vkms_vblank_simulate: vblank timer overrun [ 2290.849626][ T9145] Uninit was stored to memory at: [ 2290.855303][ T9145] __get_compat_msghdr+0x514/0x750 [ 2290.860464][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2290.865530][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2290.870257][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2290.875001][ T9145] __sys_recvmmsg+0x113/0x450 [ 2290.879817][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.886282][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2290.891416][ T9145] do_fast_syscall_32+0x33/0x70 [ 2290.896479][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2290.901026][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.907625][ T9145] [ 2290.909956][ T9145] Uninit was stored to memory at: [ 2290.915218][ T9145] __get_compat_msghdr+0x514/0x750 [ 2290.920376][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2290.925478][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2290.930206][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2290.934926][ T9145] __sys_recvmmsg+0x113/0x450 [ 2290.939710][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2290.946170][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2290.951240][ T9145] do_fast_syscall_32+0x33/0x70 [ 2290.956331][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2290.960894][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.967459][ T9145] [ 2290.969793][ T9145] Uninit was stored to memory at: [ 2290.975086][ T9145] __get_compat_msghdr+0x514/0x750 [ 2290.980243][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2290.985303][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2290.990086][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2290.994793][ T9145] __sys_recvmmsg+0x113/0x450 [ 2290.999512][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.005995][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2291.011073][ T9145] do_fast_syscall_32+0x33/0x70 [ 2291.016135][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2291.020681][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.027242][ T9145] [ 2291.029571][ T9145] Uninit was stored to memory at: [ 2291.034811][ T9145] __get_compat_msghdr+0x514/0x750 [ 2291.040028][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2291.045093][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2291.049817][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2291.054525][ T9145] __sys_recvmmsg+0x113/0x450 [ 2291.059329][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.065774][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2291.070841][ T9145] do_fast_syscall_32+0x33/0x70 [ 2291.075924][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2291.080467][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.086996][ T9145] [ 2291.089381][ T9145] Uninit was stored to memory at: [ 2291.094617][ T9145] __get_compat_msghdr+0x514/0x750 [ 2291.099769][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2291.104824][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2291.109606][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2291.114346][ T9145] __sys_recvmmsg+0x113/0x450 [ 2291.119078][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.125569][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2291.130642][ T9145] do_fast_syscall_32+0x33/0x70 [ 2291.135685][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2291.140281][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.146838][ T9145] [ 2291.149169][ T9145] Uninit was stored to memory at: [ 2291.154409][ T9145] __get_compat_msghdr+0x514/0x750 [ 2291.159617][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2291.164664][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2291.169388][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2291.174117][ T9145] __sys_recvmmsg+0x113/0x450 [ 2291.178840][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.185337][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2291.190495][ T9145] do_fast_syscall_32+0x33/0x70 [ 2291.195572][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2291.200115][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.206680][ T9145] [ 2291.209007][ T9145] Uninit was stored to memory at: [ 2291.214252][ T9145] __get_compat_msghdr+0x514/0x750 [ 2291.219408][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2291.224494][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2291.229216][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2291.233920][ T9145] __sys_recvmmsg+0x113/0x450 [ 2291.238695][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.245148][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2291.250217][ T9145] do_fast_syscall_32+0x33/0x70 [ 2291.255292][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2291.259831][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.266401][ T9145] [ 2291.268735][ T9145] Local variable msg_sys created at: [ 2291.274201][ T9145] do_recvmmsg+0x5f/0x10a0 [ 2291.278667][ T9145] __sys_recvmmsg+0x113/0x450 [ 2291.306225][ T9131] not chained 1660000 origins [ 2291.313088][ T9131] CPU: 1 PID: 9131 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2291.323201][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2291.333277][ T9131] Call Trace: [ 2291.336573][ T9131] [ 2291.339518][ T9131] dump_stack_lvl+0x1c8/0x256 [ 2291.344248][ T9131] dump_stack+0x1a/0x1c [ 2291.348444][ T9131] kmsan_internal_chain_origin+0x78/0x120 [ 2291.354228][ T9131] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2291.360368][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.365551][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2291.371856][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.377027][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2291.383124][ T9131] ? __get_compat_msghdr+0x5b/0x750 [ 2291.383195][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.383259][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2291.399404][ T9131] ? should_fail+0x3f/0x7e0 [ 2291.403957][ T9131] ? __stack_depot_save+0x21/0x4b0 [ 2291.409214][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.414380][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2291.420689][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.425847][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2291.431710][ T9131] __msan_chain_origin+0xbd/0x140 [ 2291.436784][ T9131] __get_compat_msghdr+0x514/0x750 [ 2291.442045][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2291.446939][ T9131] ? ___sys_recvmsg+0xa9/0x870 [ 2291.451750][ T9131] ? do_recvmmsg+0x63a/0x10a0 [ 2291.456472][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2291.461206][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.466359][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2291.472217][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.477379][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2291.483243][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2291.487802][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.492961][ T9131] ? __sys_recvmmsg+0x52/0x450 [ 2291.497764][ T9131] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.504227][ T9131] __sys_recvmmsg+0x113/0x450 [ 2291.508944][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2291.514105][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.520402][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2291.525475][ T9131] do_fast_syscall_32+0x33/0x70 [ 2291.530381][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2291.534922][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.541298][ T9131] RIP: 0023:0xf7f0f549 [ 2291.545397][ T9131] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2291.565048][ T9131] RSP: 002b:00000000f7ee95cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2291.573510][ T9131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2291.581504][ T9131] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2291.589492][ T9131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2291.597482][ T9131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2291.605469][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2291.613488][ T9131] [ 2291.617769][ T9131] Uninit was stored to memory at: [ 2291.622997][ T9131] __get_compat_msghdr+0x514/0x750 [ 2291.628153][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2291.633174][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2291.637890][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2291.642573][ T9131] __sys_recvmmsg+0x113/0x450 [ 2291.647301][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.653747][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2291.658817][ T9131] do_fast_syscall_32+0x33/0x70 [ 2291.663843][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2291.668384][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.674887][ T9131] [ 2291.677219][ T9131] Uninit was stored to memory at: [ 2291.682403][ T9131] __get_compat_msghdr+0x514/0x750 [ 2291.687559][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2291.692597][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2291.697325][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2291.701870][ T9131] __sys_recvmmsg+0x113/0x450 [ 2291.706727][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.713136][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2291.718244][ T9131] do_fast_syscall_32+0x33/0x70 [ 2291.723270][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2291.727817][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.734331][ T9131] [ 2291.736661][ T9131] Uninit was stored to memory at: [ 2291.741754][ T9131] __get_compat_msghdr+0x514/0x750 [ 2291.747844][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2291.752846][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2291.757568][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2291.762116][ T9131] __sys_recvmmsg+0x113/0x450 [ 2291.766966][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.773363][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2291.778429][ T9131] do_fast_syscall_32+0x33/0x70 [ 2291.783466][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2291.788042][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.794557][ T9131] [ 2291.796906][ T9131] Uninit was stored to memory at: [ 2291.802005][ T9131] __get_compat_msghdr+0x514/0x750 [ 2291.807284][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2291.812184][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2291.817014][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2291.821563][ T9131] __sys_recvmmsg+0x113/0x450 [ 2291.826425][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.832839][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2291.837912][ T9131] do_fast_syscall_32+0x33/0x70 [ 2291.842926][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2291.847466][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.853977][ T9131] [ 2291.856303][ T9131] Uninit was stored to memory at: [ 2291.861389][ T9131] __get_compat_msghdr+0x514/0x750 [ 2291.866669][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2291.871565][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2291.876416][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2291.880964][ T9131] __sys_recvmmsg+0x113/0x450 [ 2291.885810][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.892103][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2291.897296][ T9131] do_fast_syscall_32+0x33/0x70 [ 2291.902184][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2291.906807][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.913304][ T9131] [ 2291.915629][ T9131] Uninit was stored to memory at: [ 2291.920716][ T9131] __get_compat_msghdr+0x514/0x750 [ 2291.926064][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2291.930962][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2291.935795][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2291.940341][ T9131] __sys_recvmmsg+0x113/0x450 [ 2291.945175][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2291.951465][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2291.956674][ T9131] do_fast_syscall_32+0x33/0x70 [ 2291.961649][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2291.966307][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.972771][ T9131] [ 2291.975105][ T9131] Uninit was stored to memory at: [ 2291.980209][ T9131] __get_compat_msghdr+0x514/0x750 [ 2291.985488][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2291.990379][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2291.995235][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2291.999781][ T9131] __sys_recvmmsg+0x113/0x450 [ 2292.004624][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.010917][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2292.016108][ T9131] do_fast_syscall_32+0x33/0x70 [ 2292.021008][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2292.025680][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.032061][ T9131] [ 2292.034522][ T9131] Local variable msg_sys created at: [ 2292.039807][ T9131] do_recvmmsg+0x5f/0x10a0 [ 2292.044381][ T9131] __sys_recvmmsg+0x113/0x450 [ 2292.284995][ T9145] not chained 1670000 origins [ 2292.289894][ T9145] CPU: 1 PID: 9145 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2292.299999][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2292.310078][ T9145] Call Trace: [ 2292.313383][ T9145] [ 2292.316327][ T9145] dump_stack_lvl+0x1c8/0x256 [ 2292.321053][ T9145] dump_stack+0x1a/0x1c [ 2292.325241][ T9145] kmsan_internal_chain_origin+0x78/0x120 [ 2292.331025][ T9145] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2292.337139][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.342294][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2292.348588][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.353739][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2292.359596][ T9145] ? __get_compat_msghdr+0x5b/0x750 [ 2292.364832][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.369987][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2292.375847][ T9145] ? should_fail+0x3f/0x7e0 [ 2292.380396][ T9145] ? __stack_depot_save+0x21/0x4b0 [ 2292.385565][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.390724][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2292.397021][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.402176][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2292.408034][ T9145] __msan_chain_origin+0xbd/0x140 [ 2292.413103][ T9145] __get_compat_msghdr+0x514/0x750 [ 2292.418268][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2292.423164][ T9145] ? ___sys_recvmsg+0xa9/0x870 [ 2292.427966][ T9145] ? do_recvmmsg+0x63a/0x10a0 [ 2292.432684][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2292.437418][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.442585][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2292.448451][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.453602][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2292.459470][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2292.464036][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.469205][ T9145] ? __sys_recvmmsg+0x52/0x450 [ 2292.474006][ T9145] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.480468][ T9145] __sys_recvmmsg+0x113/0x450 [ 2292.485182][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2292.490340][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.496635][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2292.501707][ T9145] ? exit_to_user_mode_prepare+0x119/0x220 [ 2292.507570][ T9145] do_fast_syscall_32+0x33/0x70 [ 2292.512478][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2292.517014][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.523385][ T9145] RIP: 0023:0xf7fc9549 [ 2292.527471][ T9145] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2292.547107][ T9145] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2292.555545][ T9145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2292.563531][ T9145] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2292.571527][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2292.579532][ T9145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2292.587523][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2292.595524][ T9145] [ 2292.601284][ T9145] Uninit was stored to memory at: [ 2292.606794][ T9145] __get_compat_msghdr+0x514/0x750 [ 2292.611954][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2292.617007][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2292.621725][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2292.626404][ T9145] __sys_recvmmsg+0x113/0x450 [ 2292.631129][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.637618][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2292.642866][ T9145] do_fast_syscall_32+0x33/0x70 [ 2292.647842][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2292.652609][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.658985][ T9145] [ 2292.661311][ T9145] Uninit was stored to memory at: [ 2292.666610][ T9145] __get_compat_msghdr+0x514/0x750 [ 2292.671773][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2292.676871][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2292.681591][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2292.686335][ T9145] __sys_recvmmsg+0x113/0x450 [ 2292.691069][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.697696][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2292.702885][ T9145] do_fast_syscall_32+0x33/0x70 [ 2292.707797][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2292.712514][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.718886][ T9145] [ 2292.721224][ T9145] Uninit was stored to memory at: [ 2292.726630][ T9145] __get_compat_msghdr+0x514/0x750 [ 2292.731797][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2292.736913][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2292.741641][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2292.746411][ T9145] __sys_recvmmsg+0x113/0x450 [ 2292.751164][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.757659][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2292.762834][ T9145] do_fast_syscall_32+0x33/0x70 [ 2292.767734][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2292.772519][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.778903][ T9145] [ 2292.781239][ T9145] Uninit was stored to memory at: [ 2292.786539][ T9145] __get_compat_msghdr+0x514/0x750 [ 2292.791874][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2292.797091][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2292.801943][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2292.806696][ T9145] __sys_recvmmsg+0x113/0x450 [ 2292.811440][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.817955][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2292.823138][ T9145] do_fast_syscall_32+0x33/0x70 [ 2292.828036][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2292.832759][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.839129][ T9145] [ 2292.841460][ T9145] Uninit was stored to memory at: [ 2292.846743][ T9145] __get_compat_msghdr+0x514/0x750 [ 2292.851899][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2292.857008][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2292.861732][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2292.866461][ T9145] __sys_recvmmsg+0x113/0x450 [ 2292.871185][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.877674][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2292.882854][ T9145] do_fast_syscall_32+0x33/0x70 [ 2292.887756][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2292.892485][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.898857][ T9145] [ 2292.901187][ T9145] Uninit was stored to memory at: [ 2292.906471][ T9145] __get_compat_msghdr+0x514/0x750 [ 2292.911622][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2292.916717][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2292.921437][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2292.926189][ T9145] __sys_recvmmsg+0x113/0x450 [ 2292.930929][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.937407][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2292.942564][ T9145] do_fast_syscall_32+0x33/0x70 [ 2292.947455][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2292.951999][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.958576][ T9145] [ 2292.960973][ T9145] Uninit was stored to memory at: [ 2292.966260][ T9145] __get_compat_msghdr+0x514/0x750 [ 2292.971425][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2292.976525][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2292.981275][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2292.986014][ T9145] __sys_recvmmsg+0x113/0x450 [ 2292.990741][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2292.997226][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2293.002393][ T9145] do_fast_syscall_32+0x33/0x70 [ 2293.007295][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2293.011852][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.018436][ T9145] [ 2293.020774][ T9145] Local variable msg_sys created at: [ 2293.026252][ T9145] do_recvmmsg+0x5f/0x10a0 [ 2293.030717][ T9145] __sys_recvmmsg+0x113/0x450 [ 2293.143951][ T9153] not chained 1680000 origins [ 2293.148678][ T9153] CPU: 0 PID: 9153 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2293.158786][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.168867][ T9153] Call Trace: [ 2293.172162][ T9153] [ 2293.175105][ T9153] dump_stack_lvl+0x1c8/0x256 [ 2293.179831][ T9153] dump_stack+0x1a/0x1c [ 2293.184023][ T9153] kmsan_internal_chain_origin+0x78/0x120 [ 2293.189790][ T9153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2293.195913][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.201081][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2293.207374][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.212549][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.218419][ T9153] ? __get_compat_msghdr+0x5b/0x750 [ 2293.223735][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.229004][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.234873][ T9153] ? should_fail+0x3f/0x7e0 [ 2293.239422][ T9153] ? __stack_depot_save+0x21/0x4b0 [ 2293.244594][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.249782][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2293.256196][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.261374][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.267247][ T9153] __msan_chain_origin+0xbd/0x140 [ 2293.272329][ T9153] __get_compat_msghdr+0x514/0x750 [ 2293.277538][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2293.282439][ T9153] ? ___sys_recvmsg+0xa9/0x870 [ 2293.287259][ T9153] ? do_recvmmsg+0x63a/0x10a0 [ 2293.292002][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2293.296746][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.301914][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.307780][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.312944][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.318822][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2293.323383][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.328638][ T9153] ? __sys_recvmmsg+0x52/0x450 [ 2293.333448][ T9153] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.339923][ T9153] __sys_recvmmsg+0x113/0x450 [ 2293.344652][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2293.349822][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.356135][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2293.361202][ T9153] ? exit_to_user_mode_prepare+0x119/0x220 [ 2293.367067][ T9153] do_fast_syscall_32+0x33/0x70 [ 2293.371961][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2293.376506][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.382880][ T9153] RIP: 0023:0xf7f04549 [ 2293.386967][ T9153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2293.406777][ T9153] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2293.415230][ T9153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2293.423227][ T9153] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2293.431220][ T9153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2293.439211][ T9153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2293.447206][ T9153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2293.455215][ T9153] [ 2293.458493][ C0] vkms_vblank_simulate: vblank timer overrun [ 2293.466093][ T9153] Uninit was stored to memory at: [ 2293.471192][ T9153] __get_compat_msghdr+0x514/0x750 [ 2293.476701][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2293.481605][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2293.486516][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2293.491128][ T9153] __sys_recvmmsg+0x113/0x450 [ 2293.495982][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.502386][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2293.507513][ T9153] do_fast_syscall_32+0x33/0x70 [ 2293.512486][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2293.517027][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.523543][ T9153] [ 2293.525875][ T9153] Uninit was stored to memory at: [ 2293.530979][ T9153] __get_compat_msghdr+0x514/0x750 [ 2293.536261][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2293.538243][ T9145] not chained 1690000 origins [ 2293.541225][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2293.546226][ T9145] CPU: 1 PID: 9145 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2293.550597][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2293.560645][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.560671][ T9145] Call Trace: [ 2293.560687][ T9145] [ 2293.560702][ T9145] dump_stack_lvl+0x1c8/0x256 [ 2293.560760][ T9145] dump_stack+0x1a/0x1c [ 2293.565347][ T9153] __sys_recvmmsg+0x113/0x450 [ 2293.575346][ T9145] kmsan_internal_chain_origin+0x78/0x120 [ 2293.575413][ T9145] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2293.578738][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.581660][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.586396][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2293.590470][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2293.595340][ T9153] do_fast_syscall_32+0x33/0x70 [ 2293.600966][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.607157][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2293.613249][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.613320][ T9145] ? __get_compat_msghdr+0x5b/0x750 [ 2293.618451][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.623470][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.623533][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.623600][ T9145] ? should_fail+0x3f/0x7e0 [ 2293.629830][ T9153] [ 2293.629839][ T9153] Uninit was stored to memory at: [ 2293.634675][ T9145] ? __stack_depot_save+0x21/0x4b0 [ 2293.634739][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.639964][ T9153] __get_compat_msghdr+0x514/0x750 [ 2293.644338][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2293.644405][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.650205][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2293.655391][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.655462][ T9145] __msan_chain_origin+0xbd/0x140 [ 2293.655523][ T9145] __get_compat_msghdr+0x514/0x750 [ 2293.661839][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2293.666947][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2293.667005][ T9145] ? ___sys_recvmsg+0xa9/0x870 [ 2293.672912][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2293.677292][ T9145] ? do_recvmmsg+0x63a/0x10a0 [ 2293.679606][ T9153] __sys_recvmmsg+0x113/0x450 [ 2293.684620][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2293.684695][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.689855][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.694904][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.694970][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.700095][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2293.706318][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2293.706387][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2293.706462][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.711556][ T9153] do_fast_syscall_32+0x33/0x70 [ 2293.716396][ T9145] ? __sys_recvmmsg+0x52/0x450 [ 2293.716461][ T9145] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.722471][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2293.727264][ T9145] __sys_recvmmsg+0x113/0x450 [ 2293.732523][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.737112][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2293.741990][ T9153] [ 2293.746699][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.746776][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2293.751262][ T9153] Uninit was stored to memory at: [ 2293.751335][ T9153] __get_compat_msghdr+0x514/0x750 [ 2293.755922][ T9145] ? exit_to_user_mode_prepare+0x119/0x220 [ 2293.755992][ T9145] do_fast_syscall_32+0x33/0x70 [ 2293.756046][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2293.760837][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2293.765498][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.765558][ T9145] RIP: 0023:0xf7fc9549 [ 2293.765588][ T9145] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2293.770668][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2293.776888][ T9145] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2293.776932][ T9145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2293.776964][ T9145] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2293.776991][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2293.777017][ T9145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2293.782864][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2293.787881][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2293.793000][ T9153] __sys_recvmmsg+0x113/0x450 [ 2293.798689][ T9145] [ 2293.803270][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.810714][ T9145] Uninit was stored to memory at: [ 2293.813230][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2293.813288][ T9153] do_fast_syscall_32+0x33/0x70 [ 2293.813335][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2293.813382][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.813437][ T9153] [ 2293.813445][ T9153] Uninit was stored to memory at: [ 2293.813516][ T9153] __get_compat_msghdr+0x514/0x750 [ 2293.818367][ T9145] __get_compat_msghdr+0x514/0x750 [ 2293.824845][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2293.829333][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2293.834089][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2293.840423][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2293.840484][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2293.845703][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2293.847984][ T9145] __sys_recvmmsg+0x113/0x450 [ 2293.854287][ T9153] __sys_recvmmsg+0x113/0x450 [ 2293.859412][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.864567][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.869687][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2293.875583][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2293.880413][ T9145] do_fast_syscall_32+0x33/0x70 [ 2293.884978][ T9153] do_fast_syscall_32+0x33/0x70 [ 2293.889836][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2293.889885][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.896262][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2293.900337][ T9145] [ 2293.900346][ T9145] Uninit was stored to memory at: [ 2293.900420][ T9145] __get_compat_msghdr+0x514/0x750 [ 2293.920048][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.924804][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2293.933279][ T9153] [ 2293.933289][ T9153] Uninit was stored to memory at: [ 2293.933358][ T9153] __get_compat_msghdr+0x514/0x750 [ 2293.941314][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2293.941371][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2293.949399][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2293.957492][ T9145] __sys_recvmmsg+0x113/0x450 [ 2293.965522][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2293.970046][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2293.978120][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2293.982874][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2293.985875][ T9153] __sys_recvmmsg+0x113/0x450 [ 2293.992206][ T9145] do_fast_syscall_32+0x33/0x70 [ 2293.997327][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.002549][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2294.007407][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.011851][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.018254][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.020593][ T9145] [ 2294.020602][ T9145] Uninit was stored to memory at: [ 2294.025701][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.030887][ T9145] __get_compat_msghdr+0x514/0x750 [ 2294.036076][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.040931][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2294.040986][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2294.045902][ T9153] [ 2294.045910][ T9153] Uninit was stored to memory at: [ 2294.045986][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.050590][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2294.055352][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.059836][ T9145] __sys_recvmmsg+0x113/0x450 [ 2294.064416][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.069104][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.073862][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.080064][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2294.086359][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.091393][ T9145] do_fast_syscall_32+0x33/0x70 [ 2294.091444][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2294.096516][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.101378][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.106316][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.110816][ T9145] [ 2294.110824][ T9145] Uninit was stored to memory at: [ 2294.110899][ T9145] __get_compat_msghdr+0x514/0x750 [ 2294.117204][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.121714][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2294.121768][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2294.124148][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.129177][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2294.134349][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.140685][ T9145] __sys_recvmmsg+0x113/0x450 [ 2294.140742][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.145640][ T9153] [ 2294.145651][ T9153] Local variable msg_sys created at: [ 2294.145664][ T9153] do_recvmmsg+0x5f/0x10a0 [ 2294.147979][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2294.153062][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.158155][ T9145] do_fast_syscall_32+0x33/0x70 [ 2294.158207][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2294.432558][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.438941][ T9145] [ 2294.441276][ T9145] Uninit was stored to memory at: [ 2294.446605][ T9145] __get_compat_msghdr+0x514/0x750 [ 2294.451796][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2294.451860][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2294.451916][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2294.451977][ T9145] __sys_recvmmsg+0x113/0x450 [ 2294.470913][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.477348][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2294.482530][ T9145] do_fast_syscall_32+0x33/0x70 [ 2294.487444][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2294.492135][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.492200][ T9145] [ 2294.492209][ T9145] Uninit was stored to memory at: [ 2294.492509][ T9145] __get_compat_msghdr+0x514/0x750 [ 2294.492563][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2294.492615][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2294.492672][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2294.492725][ T9145] __sys_recvmmsg+0x113/0x450 [ 2294.492779][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.492841][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2294.492892][ T9145] do_fast_syscall_32+0x33/0x70 [ 2294.492940][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2294.492988][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.493050][ T9145] [ 2294.493059][ T9145] Uninit was stored to memory at: [ 2294.493126][ T9145] __get_compat_msghdr+0x514/0x750 [ 2294.493179][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2294.493232][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2294.493287][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2294.493341][ T9145] __sys_recvmmsg+0x113/0x450 [ 2294.493396][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.493458][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2294.493509][ T9145] do_fast_syscall_32+0x33/0x70 [ 2294.493557][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2294.493605][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.493660][ T9145] [ 2294.493668][ T9145] Local variable msg_sys created at: [ 2294.493682][ T9145] do_recvmmsg+0x5f/0x10a0 [ 2294.493734][ T9145] __sys_recvmmsg+0x113/0x450 [ 2294.701569][ T9153] not chained 1700000 origins [ 2294.701601][ T9153] CPU: 1 PID: 9153 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2294.701652][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2294.701677][ T9153] Call Trace: [ 2294.701689][ T9153] [ 2294.701704][ T9153] dump_stack_lvl+0x1c8/0x256 [ 2294.701766][ T9153] dump_stack+0x1a/0x1c [ 2294.701813][ T9153] kmsan_internal_chain_origin+0x78/0x120 [ 2294.701876][ T9153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2294.701939][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.701999][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2294.702065][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.702124][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2294.702194][ T9153] ? __get_compat_msghdr+0x5b/0x750 [ 2294.702256][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.702315][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2294.702383][ T9153] ? should_fail+0x3f/0x7e0 [ 2294.702425][ T9153] ? __stack_depot_save+0x21/0x4b0 [ 2294.702488][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.702548][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2294.702617][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.702677][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2294.702741][ T9153] __msan_chain_origin+0xbd/0x140 [ 2294.702801][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.702872][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.702929][ T9153] ? ___sys_recvmsg+0xa9/0x870 [ 2294.702988][ T9153] ? do_recvmmsg+0x63a/0x10a0 [ 2294.703050][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.703123][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.703183][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2294.703247][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.703306][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2294.703375][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.703443][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.703511][ T9153] ? __sys_recvmmsg+0x52/0x450 [ 2294.703570][ T9153] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.703643][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.703702][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2294.703769][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.703844][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.703898][ T9153] ? exit_to_user_mode_prepare+0x119/0x220 [ 2294.703966][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.704021][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.704072][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.704132][ T9153] RIP: 0023:0xf7f04549 [ 2294.704162][ T9153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2294.704208][ T9153] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2294.704252][ T9153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2294.704284][ T9153] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2294.704312][ T9153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2294.704340][ T9153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2294.704367][ T9153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2294.704407][ T9153] [ 2294.704965][ T9153] Uninit was stored to memory at: [ 2294.705036][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.705091][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.705144][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.705199][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.705253][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.705306][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.705365][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.705416][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.705465][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.705511][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.705564][ T9153] [ 2294.705571][ T9153] Uninit was stored to memory at: [ 2294.705643][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.705697][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.705748][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.705802][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.705855][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.705909][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.705970][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.706020][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.706069][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.706116][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.706168][ T9153] [ 2294.706175][ T9153] Uninit was stored to memory at: [ 2294.706235][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.706282][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.706328][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.706381][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.706433][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.706486][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.706543][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.706599][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.706647][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.706694][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.706749][ T9153] [ 2294.706756][ T9153] Uninit was stored to memory at: [ 2294.706820][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.706872][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.706922][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.706975][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.707028][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.707082][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.707142][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.707190][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.707238][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.707285][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.707338][ T9153] [ 2294.707345][ T9153] Uninit was stored to memory at: [ 2294.707430][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.707481][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.707533][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.707591][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.707643][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.707697][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.707757][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.707806][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.707854][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.707901][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.707955][ T9153] [ 2294.707962][ T9153] Uninit was stored to memory at: [ 2294.708027][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.708080][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.708130][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.708184][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.708236][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.708290][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.708349][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.708399][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.708446][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.708492][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.708547][ T9153] [ 2294.708554][ T9153] Uninit was stored to memory at: [ 2294.708625][ T9153] __get_compat_msghdr+0x514/0x750 [ 2294.708678][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2294.708728][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2294.708782][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2294.708834][ T9153] __sys_recvmmsg+0x113/0x450 [ 2294.708888][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2294.708948][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2294.708997][ T9153] do_fast_syscall_32+0x33/0x70 [ 2294.709044][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2294.709090][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.709145][ T9153] [ 2294.709153][ T9153] Local variable msg_sys created at: [ 2294.709167][ T9153] do_recvmmsg+0x5f/0x10a0 [ 2294.709217][ T9153] __sys_recvmmsg+0x113/0x450 [ 2295.035469][ T9153] not chained 1710000 origins [ 2295.035495][ T9153] CPU: 1 PID: 9153 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2295.035544][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.035569][ T9153] Call Trace: [ 2295.035587][ T9153] [ 2295.035602][ T9153] dump_stack_lvl+0x1c8/0x256 [ 2295.035663][ T9153] dump_stack+0x1a/0x1c [ 2295.035708][ T9153] kmsan_internal_chain_origin+0x78/0x120 [ 2295.035771][ T9153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2295.035833][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.035893][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2295.035957][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.036017][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2295.036084][ T9153] ? __get_compat_msghdr+0x5b/0x750 [ 2295.036144][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.036203][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2295.036270][ T9153] ? should_fail+0x3f/0x7e0 [ 2295.036312][ T9153] ? __stack_depot_save+0x21/0x4b0 [ 2295.036373][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.036432][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2295.036496][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.036556][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2295.036626][ T9153] __msan_chain_origin+0xbd/0x140 [ 2295.036686][ T9153] __get_compat_msghdr+0x514/0x750 [ 2295.036755][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2295.036813][ T9153] ? ___sys_recvmsg+0xa9/0x870 [ 2295.036871][ T9153] ? do_recvmmsg+0x63a/0x10a0 [ 2295.036932][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2295.037004][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.037063][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2295.037127][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.037186][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2295.037252][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2295.037321][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.037388][ T9153] ? __sys_recvmmsg+0x52/0x450 [ 2295.037446][ T9153] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2295.037514][ T9153] __sys_recvmmsg+0x113/0x450 [ 2295.037573][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2295.037644][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2295.931577][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2295.936646][ T9153] ? exit_to_user_mode_prepare+0x119/0x220 [ 2295.942501][ T9153] do_fast_syscall_32+0x33/0x70 [ 2295.947417][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2295.951951][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.958324][ T9153] RIP: 0023:0xf7f04549 [ 2295.962406][ T9153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2295.982049][ T9153] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2295.990577][ T9153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2295.998567][ T9153] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2296.006550][ T9153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2296.014535][ T9153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2296.022528][ T9153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2296.030528][ T9153] [ 2296.037034][ T9153] Uninit was stored to memory at: [ 2296.042141][ T9153] __get_compat_msghdr+0x514/0x750 [ 2296.047687][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2296.052704][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2296.057428][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2296.061976][ T9153] __sys_recvmmsg+0x113/0x450 [ 2296.066826][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.073217][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2296.078653][ T9153] do_fast_syscall_32+0x33/0x70 [ 2296.083680][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2296.088218][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.094746][ T9153] [ 2296.097075][ T9153] Uninit was stored to memory at: [ 2296.102162][ T9153] __get_compat_msghdr+0x514/0x750 [ 2296.107429][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2296.112444][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2296.117176][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2296.121729][ T9153] __sys_recvmmsg+0x113/0x450 [ 2296.126916][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.133413][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2296.138483][ T9153] do_fast_syscall_32+0x33/0x70 [ 2296.143554][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2296.148093][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.154667][ T9153] [ 2296.156998][ T9153] Uninit was stored to memory at: [ 2296.162086][ T9153] __get_compat_msghdr+0x514/0x750 [ 2296.167461][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2296.172446][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2296.177175][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2296.181718][ T9153] __sys_recvmmsg+0x113/0x450 [ 2296.186644][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.193077][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2296.198150][ T9153] do_fast_syscall_32+0x33/0x70 [ 2296.203227][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2296.207772][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.214381][ T9153] [ 2296.216714][ T9153] Uninit was stored to memory at: [ 2296.221801][ T9153] __get_compat_msghdr+0x514/0x750 [ 2296.227146][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2296.232048][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2296.236989][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2296.241543][ T9153] __sys_recvmmsg+0x113/0x450 [ 2296.246465][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.252927][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2296.258004][ T9153] do_fast_syscall_32+0x33/0x70 [ 2296.263103][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2296.267652][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.274210][ T9153] [ 2296.276536][ T9153] Uninit was stored to memory at: [ 2296.281627][ T9153] __get_compat_msghdr+0x514/0x750 [ 2296.286982][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2296.291875][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2296.296793][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2296.301346][ T9153] __sys_recvmmsg+0x113/0x450 [ 2296.306259][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.312655][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2296.317722][ T9153] do_fast_syscall_32+0x33/0x70 [ 2296.322790][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2296.327354][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.333932][ T9153] [ 2296.336272][ T9153] Uninit was stored to memory at: [ 2296.341357][ T9153] __get_compat_msghdr+0x514/0x750 [ 2296.346737][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2296.351629][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2296.351900][ T9145] not chained 1720000 origins [ 2296.356504][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2296.356562][ T9153] __sys_recvmmsg+0x113/0x450 [ 2296.356617][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.356679][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2296.356731][ T9153] do_fast_syscall_32+0x33/0x70 [ 2296.361434][ T9145] CPU: 0 PID: 9145 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2296.366037][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2296.370573][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.376892][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.381794][ T9145] Call Trace: [ 2296.381808][ T9145] [ 2296.386729][ T9153] [ 2296.396694][ T9145] dump_stack_lvl+0x1c8/0x256 [ 2296.396753][ T9145] dump_stack+0x1a/0x1c [ 2296.396799][ T9145] kmsan_internal_chain_origin+0x78/0x120 [ 2296.401278][ T9153] Uninit was stored to memory at: [ 2296.401351][ T9153] __get_compat_msghdr+0x514/0x750 [ 2296.411409][ T9145] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2296.411480][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.417919][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2296.421089][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2296.424118][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2296.426332][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.430982][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2296.435117][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2296.435188][ T9145] ? __get_compat_msghdr+0x5b/0x750 [ 2296.440913][ T9153] __sys_recvmmsg+0x113/0x450 [ 2296.445918][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.445980][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2296.451108][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.457156][ T9145] ? should_fail+0x3f/0x7e0 [ 2296.457200][ T9145] ? __stack_depot_save+0x21/0x4b0 [ 2296.457262][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.462416][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2296.467167][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2296.473494][ T9153] do_fast_syscall_32+0x33/0x70 [ 2296.478074][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.483263][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2296.487652][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2296.493545][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.498629][ T9145] __msan_chain_origin+0xbd/0x140 [ 2296.503378][ T9153] [ 2296.508373][ T9145] __get_compat_msghdr+0x514/0x750 [ 2296.514256][ T9153] Local variable msg_sys created at: [ 2296.520389][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2296.524956][ T9153] do_recvmmsg+0x5f/0x10a0 [ 2296.529946][ T9145] ? ___sys_recvmsg+0xa9/0x870 [ 2296.535135][ T9153] __sys_recvmmsg+0x113/0x450 [ 2296.540206][ T9145] ? do_recvmmsg+0x63a/0x10a0 [ 2296.614030][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2296.618780][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.623938][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2296.629798][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.634958][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2296.640835][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2296.645396][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.650561][ T9145] ? __sys_recvmmsg+0x52/0x450 [ 2296.655370][ T9145] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.661843][ T9145] __sys_recvmmsg+0x113/0x450 [ 2296.666564][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2296.671732][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.678034][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2296.683101][ T9145] ? exit_to_user_mode_prepare+0x119/0x220 [ 2296.688960][ T9145] do_fast_syscall_32+0x33/0x70 [ 2296.693849][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2296.698386][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.704758][ T9145] RIP: 0023:0xf7fc9549 [ 2296.708842][ T9145] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2296.728487][ T9145] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2296.736934][ T9145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2296.744931][ T9145] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2296.752921][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2296.760906][ T9145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2296.768891][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2296.776893][ T9145] [ 2296.789022][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 2296.792582][ T9145] Uninit was stored to memory at: [ 2296.800485][ T9145] __get_compat_msghdr+0x514/0x750 [ 2296.806785][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2296.811711][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2296.815352][ T9131] not chained 1730000 origins [ 2296.816529][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2296.821100][ T9131] CPU: 1 PID: 9131 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2296.825659][ T9145] __sys_recvmmsg+0x113/0x450 [ 2296.835620][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.835645][ T9131] Call Trace: [ 2296.835659][ T9131] [ 2296.835675][ T9131] dump_stack_lvl+0x1c8/0x256 [ 2296.840349][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.850395][ T9131] dump_stack+0x1a/0x1c [ 2296.850443][ T9131] kmsan_internal_chain_origin+0x78/0x120 [ 2296.853806][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2296.856651][ T9131] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2296.861304][ T9145] do_fast_syscall_32+0x33/0x70 [ 2296.867529][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2296.867597][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2296.871781][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2296.877484][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2296.877547][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2296.882631][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.888789][ T9131] ? __get_compat_msghdr+0x5b/0x750 [ 2296.893685][ T9145] [ 2296.898701][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2296.904996][ T9145] Uninit was stored to memory at: [ 2296.909404][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2296.914655][ T9145] __get_compat_msghdr+0x514/0x750 [ 2296.920281][ T9131] ? should_fail+0x3f/0x7e0 [ 2296.926662][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2296.931764][ T9131] ? __stack_depot_save+0x21/0x4b0 [ 2296.934152][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2296.939166][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2296.944504][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2296.950223][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2296.955398][ T9145] __sys_recvmmsg+0x113/0x450 [ 2296.959806][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2296.964740][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2296.969731][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2296.974472][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2296.979528][ T9131] __msan_chain_origin+0xbd/0x140 [ 2296.984087][ T9145] do_fast_syscall_32+0x33/0x70 [ 2296.990232][ T9131] __get_compat_msghdr+0x514/0x750 [ 2296.994962][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2296.999989][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2297.006271][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.011984][ T9131] ? ___sys_recvmsg+0xa9/0x870 [ 2297.017093][ T9145] [ 2297.021985][ T9131] ? do_recvmmsg+0x63a/0x10a0 [ 2297.026890][ T9145] Uninit was stored to memory at: [ 2297.031920][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2297.036544][ T9145] __get_compat_msghdr+0x514/0x750 [ 2297.041248][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2297.047618][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2297.052288][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2297.052356][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2297.054670][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2297.059326][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2297.064452][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2297.069005][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2297.074166][ T9145] __sys_recvmmsg+0x113/0x450 [ 2297.079196][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2297.084093][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.089808][ T9131] ? __sys_recvmmsg+0x52/0x450 [ 2297.094977][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2297.099560][ T9131] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.105424][ T9145] do_fast_syscall_32+0x33/0x70 [ 2297.109854][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.114439][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2297.118993][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2297.124162][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.130312][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.135127][ T9145] [ 2297.140061][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2297.146528][ T9145] Uninit was stored to memory at: [ 2297.151290][ T9131] do_fast_syscall_32+0x33/0x70 [ 2297.156094][ T9145] __get_compat_msghdr+0x514/0x750 [ 2297.160437][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2297.165629][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2297.171829][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.178125][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2297.180361][ T9131] RIP: 0023:0xf7f0f549 [ 2297.185438][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2297.190366][ T9131] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2297.195268][ T9145] __sys_recvmmsg+0x113/0x450 [ 2297.200289][ T9131] RSP: 002b:00000000f7ee95cc EFLAGS: 00000296 [ 2297.204845][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.209601][ T9131] ORIG_RAX: 0000000000000151 [ 2297.209617][ T9131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2297.216010][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2297.220563][ T9131] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2297.224685][ T9145] do_fast_syscall_32+0x33/0x70 [ 2297.229090][ T9131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2297.248760][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2297.253339][ T9131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2297.253367][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2297.253409][ T9131] [ 2297.256547][ T9131] Uninit was stored to memory at: [ 2297.259460][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.266104][ T9131] __get_compat_msghdr+0x514/0x750 [ 2297.270430][ T9145] [ 2297.270438][ T9145] Uninit was stored to memory at: [ 2297.278489][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2297.283608][ T9145] __get_compat_msghdr+0x514/0x750 [ 2297.291511][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2297.296429][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2297.304594][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2297.309082][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2297.317193][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.325220][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2297.328262][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.333355][ T9145] __sys_recvmmsg+0x113/0x450 [ 2297.339684][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2297.344861][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.347204][ T9131] do_fast_syscall_32+0x33/0x70 [ 2297.352205][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2297.357141][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2297.362127][ T9145] do_fast_syscall_32+0x33/0x70 [ 2297.366989][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.371798][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2297.376516][ T9131] [ 2297.376528][ T9131] Uninit was stored to memory at: [ 2297.381171][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.385999][ T9131] __get_compat_msghdr+0x514/0x750 [ 2297.390389][ T9145] [ 2297.390397][ T9145] Uninit was stored to memory at: [ 2297.390473][ T9145] __get_compat_msghdr+0x514/0x750 [ 2297.396745][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2297.401391][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2297.406677][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2297.412982][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2297.417819][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2297.422903][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2297.427420][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.432504][ T9145] __sys_recvmmsg+0x113/0x450 [ 2297.438832][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.443403][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.445741][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2297.450746][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2297.457167][ T9131] do_fast_syscall_32+0x33/0x70 [ 2297.462321][ T9145] do_fast_syscall_32+0x33/0x70 [ 2297.464634][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2297.469637][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2297.474824][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.479631][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.484565][ T9131] [ 2297.489198][ T9145] [ 2297.489206][ T9145] Uninit was stored to memory at: [ 2297.493957][ T9131] Uninit was stored to memory at: [ 2297.498492][ T9145] __get_compat_msghdr+0x514/0x750 [ 2297.503138][ T9131] __get_compat_msghdr+0x514/0x750 [ 2297.507739][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2297.512583][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2297.518782][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2297.525098][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2297.530092][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2297.535191][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2297.540003][ T9145] __sys_recvmmsg+0x113/0x450 [ 2297.544962][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.549436][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.554061][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.560353][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2297.566878][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2297.569183][ T9145] do_fast_syscall_32+0x33/0x70 [ 2297.571498][ T9131] do_fast_syscall_32+0x33/0x70 [ 2297.576584][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2297.581612][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2297.586804][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.593099][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.597960][ T9145] [ 2297.597971][ T9145] Local variable msg_sys created at: [ 2297.603011][ T9131] [ 2297.607650][ T9145] do_recvmmsg+0x5f/0x10a0 [ 2297.612415][ T9131] Uninit was stored to memory at: [ 2297.616989][ T9145] __sys_recvmmsg+0x113/0x450 [ 2297.621535][ T9131] __get_compat_msghdr+0x514/0x750 [ 2297.715002][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2297.719907][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2297.724768][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2297.729316][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.734152][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.740445][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2297.745632][ T9131] do_fast_syscall_32+0x33/0x70 [ 2297.750540][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2297.755189][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.761650][ T9131] [ 2297.764092][ T9131] Uninit was stored to memory at: [ 2297.769176][ T9131] __get_compat_msghdr+0x514/0x750 [ 2297.774448][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2297.779342][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2297.784180][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2297.788734][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.793552][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.799849][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2297.805087][ T9131] do_fast_syscall_32+0x33/0x70 [ 2297.809982][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2297.814709][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.821086][ T9131] [ 2297.823585][ T9131] Uninit was stored to memory at: [ 2297.828677][ T9131] __get_compat_msghdr+0x514/0x750 [ 2297.834021][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2297.838977][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2297.843863][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2297.848418][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.853329][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.859627][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2297.864888][ T9131] do_fast_syscall_32+0x33/0x70 [ 2297.869775][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2297.874508][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.880972][ T9131] [ 2297.883471][ T9131] Uninit was stored to memory at: [ 2297.888577][ T9131] __get_compat_msghdr+0x514/0x750 [ 2297.893849][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2297.898743][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2297.903649][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2297.908219][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.913134][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2297.919429][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2297.924672][ T9131] do_fast_syscall_32+0x33/0x70 [ 2297.929565][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2297.934285][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.940656][ T9131] [ 2297.943169][ T9131] Local variable msg_sys created at: [ 2297.948458][ T9131] do_recvmmsg+0x5f/0x10a0 [ 2297.953090][ T9131] __sys_recvmmsg+0x113/0x450 [ 2297.956645][ T9153] not chained 1740000 origins [ 2297.962756][ T9153] CPU: 0 PID: 9153 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2297.972851][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.982928][ T9153] Call Trace: [ 2297.986212][ T9153] [ 2297.989149][ T9153] dump_stack_lvl+0x1c8/0x256 [ 2297.993865][ T9153] dump_stack+0x1a/0x1c [ 2297.998057][ T9153] kmsan_internal_chain_origin+0x78/0x120 [ 2298.003820][ T9153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2298.010004][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.015173][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2298.021474][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.026639][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.032500][ T9153] ? __get_compat_msghdr+0x5b/0x750 [ 2298.037743][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.042901][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.048781][ T9153] ? should_fail+0x3f/0x7e0 [ 2298.053315][ T9153] ? __stack_depot_save+0x21/0x4b0 [ 2298.058486][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.063663][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2298.069954][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.075117][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.080980][ T9153] __msan_chain_origin+0xbd/0x140 [ 2298.086053][ T9153] __get_compat_msghdr+0x514/0x750 [ 2298.091221][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2298.096118][ T9153] ? ___sys_recvmsg+0xa9/0x870 [ 2298.100929][ T9153] ? do_recvmmsg+0x63a/0x10a0 [ 2298.105658][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2298.110397][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.115554][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.121409][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.126566][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.132432][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2298.136990][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.142164][ T9153] ? __sys_recvmmsg+0x52/0x450 [ 2298.146973][ T9153] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.153444][ T9153] __sys_recvmmsg+0x113/0x450 [ 2298.158167][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2298.163330][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.169630][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2298.174863][ T9153] ? exit_to_user_mode_prepare+0x119/0x220 [ 2298.180723][ T9153] do_fast_syscall_32+0x33/0x70 [ 2298.185611][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2298.190146][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.196513][ T9153] RIP: 0023:0xf7f04549 [ 2298.200598][ T9153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2298.220239][ T9153] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2298.228680][ T9153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2298.236669][ T9153] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2298.244654][ T9153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2298.252736][ T9153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2298.260718][ T9153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2298.268715][ T9153] [ 2298.274119][ T9153] Uninit was stored to memory at: [ 2298.280620][ T9153] __get_compat_msghdr+0x514/0x750 [ 2298.286450][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2298.287074][ T9131] not chained 1750000 origins [ 2298.291359][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2298.296232][ T9131] CPU: 1 PID: 9131 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2298.300778][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2298.310817][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.310842][ T9131] Call Trace: [ 2298.310856][ T9131] [ 2298.310871][ T9131] dump_stack_lvl+0x1c8/0x256 [ 2298.310928][ T9131] dump_stack+0x1a/0x1c [ 2298.315468][ T9153] __sys_recvmmsg+0x113/0x450 [ 2298.325454][ T9131] kmsan_internal_chain_origin+0x78/0x120 [ 2298.325526][ T9131] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2298.328810][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.331732][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.336464][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2298.340528][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2298.345265][ T9153] do_fast_syscall_32+0x33/0x70 [ 2298.350894][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.357052][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2298.363156][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.363229][ T9131] ? __get_compat_msghdr+0x5b/0x750 [ 2298.368316][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.373320][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.373383][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.379630][ T9153] [ 2298.384449][ T9131] ? should_fail+0x3f/0x7e0 [ 2298.384497][ T9131] ? __stack_depot_save+0x21/0x4b0 [ 2298.389607][ T9153] Uninit was stored to memory at: [ 2298.389679][ T9153] __get_compat_msghdr+0x514/0x750 [ 2298.394091][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.394155][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2298.399971][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2298.405152][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.405216][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.411562][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2298.416655][ T9131] __msan_chain_origin+0xbd/0x140 [ 2298.416719][ T9131] __get_compat_msghdr+0x514/0x750 [ 2298.422588][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2298.424843][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2298.429309][ T9153] __sys_recvmmsg+0x113/0x450 [ 2298.434403][ T9131] ? ___sys_recvmsg+0xa9/0x870 [ 2298.434469][ T9131] ? do_recvmmsg+0x63a/0x10a0 [ 2298.439479][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.444577][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2298.444653][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.449736][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2298.455958][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.456025][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.460905][ T9153] do_fast_syscall_32+0x33/0x70 [ 2298.466002][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2298.466073][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2298.471861][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2298.476528][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.476599][ T9131] ? __sys_recvmmsg+0x52/0x450 [ 2298.481594][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.486684][ T9131] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.486759][ T9131] __sys_recvmmsg+0x113/0x450 [ 2298.491241][ T9153] [ 2298.491250][ T9153] Uninit was stored to memory at: [ 2298.496071][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2298.496142][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.500860][ T9153] __get_compat_msghdr+0x514/0x750 [ 2298.505554][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2298.505614][ T9131] do_fast_syscall_32+0x33/0x70 [ 2298.505669][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2298.510320][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2298.516539][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.516603][ T9131] RIP: 0023:0xf7f0f549 [ 2298.516633][ T9131] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2298.521275][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2298.526376][ T9131] RSP: 002b:00000000f7ee95cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2298.526422][ T9131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2298.526453][ T9131] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2298.526481][ T9131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2298.526507][ T9131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2298.531509][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2298.537298][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2298.537345][ T9131] [ 2298.540258][ T9131] Uninit was stored to memory at: [ 2298.542601][ T9153] __sys_recvmmsg+0x113/0x450 [ 2298.542665][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.542728][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2298.542780][ T9153] do_fast_syscall_32+0x33/0x70 [ 2298.542829][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2298.547814][ T9131] __get_compat_msghdr+0x514/0x750 [ 2298.553538][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.558043][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2298.562608][ T9153] [ 2298.562618][ T9153] Uninit was stored to memory at: [ 2298.562688][ T9153] __get_compat_msghdr+0x514/0x750 [ 2298.567720][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2298.572597][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2298.578928][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2298.585441][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2298.590136][ T9131] __sys_recvmmsg+0x113/0x450 [ 2298.592533][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2298.597539][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.602713][ T9153] __sys_recvmmsg+0x113/0x450 [ 2298.608953][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2298.614129][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.619152][ T9131] do_fast_syscall_32+0x33/0x70 [ 2298.624058][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2298.628562][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2298.633468][ T9153] do_fast_syscall_32+0x33/0x70 [ 2298.639806][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.643957][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2298.663669][ T9131] [ 2298.668307][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.676798][ T9131] Uninit was stored to memory at: [ 2298.684813][ T9153] [ 2298.684822][ T9153] Uninit was stored to memory at: [ 2298.684897][ T9153] __get_compat_msghdr+0x514/0x750 [ 2298.692927][ T9131] __get_compat_msghdr+0x514/0x750 [ 2298.700823][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2298.708883][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2298.713429][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2298.721406][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2298.721466][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2298.721520][ T9131] __sys_recvmmsg+0x113/0x450 [ 2298.724631][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2298.729654][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.734389][ T9153] __sys_recvmmsg+0x113/0x450 [ 2298.740633][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2298.745718][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.750566][ T9131] do_fast_syscall_32+0x33/0x70 [ 2298.755127][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2298.760241][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2298.766634][ T9153] do_fast_syscall_32+0x33/0x70 [ 2298.771483][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.773872][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2298.778873][ T9131] [ 2298.778882][ T9131] Uninit was stored to memory at: [ 2298.784040][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.788781][ T9131] __get_compat_msghdr+0x514/0x750 [ 2298.793643][ T9153] [ 2298.793651][ T9153] Uninit was stored to memory at: [ 2298.798125][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2298.802923][ T9153] __get_compat_msghdr+0x514/0x750 [ 2298.807537][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2298.812018][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2298.818336][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2298.823045][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2298.828059][ T9131] __sys_recvmmsg+0x113/0x450 [ 2298.834353][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2298.839220][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.844304][ T9153] __sys_recvmmsg+0x113/0x450 [ 2298.848804][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2298.853710][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.860019][ T9131] do_fast_syscall_32+0x33/0x70 [ 2298.864579][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2298.866911][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2298.873295][ T9153] do_fast_syscall_32+0x33/0x70 [ 2298.878310][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.880617][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2298.885721][ T9131] [ 2298.890790][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.895992][ T9131] Uninit was stored to memory at: [ 2298.900803][ T9153] [ 2298.900811][ T9153] Uninit was stored to memory at: [ 2298.905818][ T9131] __get_compat_msghdr+0x514/0x750 [ 2298.910423][ T9153] __get_compat_msghdr+0x514/0x750 [ 2298.915119][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2298.919597][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2298.924354][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2298.928812][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2298.935126][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2298.939761][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2298.944859][ T9131] __sys_recvmmsg+0x113/0x450 [ 2298.951061][ T9153] __sys_recvmmsg+0x113/0x450 [ 2298.955988][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.960975][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2298.965555][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2298.970362][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2298.976766][ T9131] do_fast_syscall_32+0x33/0x70 [ 2298.981229][ T9153] do_fast_syscall_32+0x33/0x70 [ 2298.983620][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2298.988619][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2298.995033][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.000105][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.002510][ T9131] [ 2299.002518][ T9131] Uninit was stored to memory at: [ 2299.007509][ T9153] [ 2299.007519][ T9153] Local variable msg_sys created at: [ 2299.012505][ T9131] __get_compat_msghdr+0x514/0x750 [ 2299.017504][ T9153] do_recvmmsg+0x5f/0x10a0 [ 2299.022158][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2299.027071][ T9153] __sys_recvmmsg+0x113/0x450 [ 2299.031569][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2299.261019][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2299.265749][ T9131] __sys_recvmmsg+0x113/0x450 [ 2299.270467][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2299.276947][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2299.282010][ T9131] do_fast_syscall_32+0x33/0x70 [ 2299.287083][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2299.291628][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.298199][ T9131] [ 2299.300526][ T9131] Uninit was stored to memory at: [ 2299.305803][ T9131] __get_compat_msghdr+0x514/0x750 [ 2299.310965][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2299.316040][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2299.320764][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2299.325497][ T9131] __sys_recvmmsg+0x113/0x450 [ 2299.330216][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2299.336621][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2299.341694][ T9131] do_fast_syscall_32+0x33/0x70 [ 2299.346770][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2299.351311][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.357894][ T9131] [ 2299.360241][ T9131] Uninit was stored to memory at: [ 2299.365512][ T9131] __get_compat_msghdr+0x514/0x750 [ 2299.370701][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2299.375789][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2299.380596][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2299.385275][ T9131] __sys_recvmmsg+0x113/0x450 [ 2299.390006][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2299.396494][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2299.401566][ T9131] do_fast_syscall_32+0x33/0x70 [ 2299.406666][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2299.411302][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.417857][ T9131] [ 2299.420205][ T9131] Local variable msg_sys created at: [ 2299.425671][ T9131] do_recvmmsg+0x5f/0x10a0 [ 2299.430139][ T9131] __sys_recvmmsg+0x113/0x450 [ 2299.604815][ T9131] not chained 1760000 origins [ 2299.611435][ T9131] CPU: 1 PID: 9131 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2299.621545][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.631624][ T9131] Call Trace: [ 2299.634925][ T9131] [ 2299.637864][ T9131] dump_stack_lvl+0x1c8/0x256 [ 2299.642586][ T9131] dump_stack+0x1a/0x1c [ 2299.646865][ T9131] kmsan_internal_chain_origin+0x78/0x120 [ 2299.652636][ T9131] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2299.658751][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.663999][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2299.670291][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.675452][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2299.681313][ T9131] ? __get_compat_msghdr+0x5b/0x750 [ 2299.686563][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.691742][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2299.697611][ T9131] ? should_fail+0x3f/0x7e0 [ 2299.702140][ T9131] ? __stack_depot_save+0x21/0x4b0 [ 2299.707298][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.712468][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2299.718766][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.723928][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2299.729803][ T9131] __msan_chain_origin+0xbd/0x140 [ 2299.734878][ T9131] __get_compat_msghdr+0x514/0x750 [ 2299.740048][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2299.744942][ T9131] ? ___sys_recvmsg+0xa9/0x870 [ 2299.749752][ T9131] ? do_recvmmsg+0x63a/0x10a0 [ 2299.754482][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2299.759219][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.764376][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2299.770233][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.775388][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2299.781250][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2299.785819][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.790994][ T9131] ? __sys_recvmmsg+0x52/0x450 [ 2299.795802][ T9131] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2299.802366][ T9131] __sys_recvmmsg+0x113/0x450 [ 2299.807102][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2299.812267][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2299.818576][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2299.823649][ T9131] do_fast_syscall_32+0x33/0x70 [ 2299.828549][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2299.833090][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.839461][ T9131] RIP: 0023:0xf7f0f549 [ 2299.843544][ T9131] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2299.863189][ T9131] RSP: 002b:00000000f7ee95cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2299.871636][ T9131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2299.879266][ T9145] not chained 1770000 origins [ 2299.879627][ T9131] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2299.892252][ T9131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2299.900236][ T9131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2299.908304][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2299.916297][ T9131] [ 2299.919315][ T9145] CPU: 0 PID: 9145 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2299.922060][ T9131] Uninit was stored to memory at: [ 2299.929414][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.929441][ T9145] Call Trace: [ 2299.929454][ T9145] [ 2299.929467][ T9145] dump_stack_lvl+0x1c8/0x256 [ 2299.929535][ T9145] dump_stack+0x1a/0x1c [ 2299.929580][ T9145] kmsan_internal_chain_origin+0x78/0x120 [ 2299.929642][ T9145] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2299.929704][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2299.934914][ T9131] __get_compat_msghdr+0x514/0x750 [ 2299.944877][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2299.944946][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2299.948248][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2299.951172][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2299.955928][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2299.959961][ T9145] ? __get_compat_msghdr+0x5b/0x750 [ 2299.965755][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2299.971702][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2299.976894][ T9131] __sys_recvmmsg+0x113/0x450 [ 2299.981883][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2299.988202][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2299.993199][ T9145] ? should_fail+0x3f/0x7e0 [ 2299.993243][ T9145] ? __stack_depot_save+0x21/0x4b0 [ 2299.998112][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2300.003895][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2300.003957][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2300.008649][ T9131] do_fast_syscall_32+0x33/0x70 [ 2300.013828][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2300.013889][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2300.018449][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2300.023527][ T9145] __msan_chain_origin+0xbd/0x140 [ 2300.023590][ T9145] __get_compat_msghdr+0x514/0x750 [ 2300.028253][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.034055][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2300.034115][ T9145] ? ___sys_recvmsg+0xa9/0x870 [ 2300.040358][ T9131] [ 2300.040367][ T9131] Uninit was stored to memory at: [ 2300.044837][ T9145] ? do_recvmmsg+0x63a/0x10a0 [ 2300.044902][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2300.050089][ T9131] __get_compat_msghdr+0x514/0x750 [ 2300.055043][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2300.055105][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2300.060219][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2300.066440][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2300.066506][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2300.071364][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2300.076459][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2300.076536][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2300.082418][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2300.086834][ T9145] ? __sys_recvmmsg+0x52/0x450 [ 2300.091828][ T9131] __sys_recvmmsg+0x113/0x450 [ 2300.096920][ T9145] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.096992][ T9145] __sys_recvmmsg+0x113/0x450 [ 2300.103414][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.108166][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2300.113039][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2300.115251][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.120246][ T9131] do_fast_syscall_32+0x33/0x70 [ 2300.124913][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2300.124967][ T9145] ? exit_to_user_mode_prepare+0x119/0x220 [ 2300.129663][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2300.134769][ T9145] do_fast_syscall_32+0x33/0x70 [ 2300.134825][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2300.134877][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.139955][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.145742][ T9145] RIP: 0023:0xf7fc9549 [ 2300.145774][ T9145] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2300.145820][ T9145] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2300.150669][ T9131] [ 2300.150677][ T9131] Uninit was stored to memory at: [ 2300.155755][ T9145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2300.155789][ T9145] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2300.155817][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2300.155844][ T9145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2300.155871][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2300.161707][ T9131] __get_compat_msghdr+0x514/0x750 [ 2300.166310][ T9145] [ 2300.166422][ T9145] Uninit was stored to memory at: [ 2300.170882][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2300.176191][ T9145] __get_compat_msghdr+0x514/0x750 [ 2300.180634][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2300.185454][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2300.190127][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2300.196596][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2300.201271][ T9131] __sys_recvmmsg+0x113/0x450 [ 2300.207573][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2300.212761][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.217758][ T9145] __sys_recvmmsg+0x113/0x450 [ 2300.224081][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2300.228889][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.233998][ T9131] do_fast_syscall_32+0x33/0x70 [ 2300.239757][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2300.244345][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2300.249155][ T9145] do_fast_syscall_32+0x33/0x70 [ 2300.253716][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.260022][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2300.266426][ T9131] [ 2300.270453][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.290249][ T9131] Uninit was stored to memory at: [ 2300.298701][ T9145] [ 2300.298709][ T9145] Uninit was stored to memory at: [ 2300.298785][ T9145] __get_compat_msghdr+0x514/0x750 [ 2300.301087][ T9131] __get_compat_msghdr+0x514/0x750 [ 2300.306104][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2300.314176][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2300.322113][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2300.330172][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2300.338185][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2300.346259][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2300.351329][ T9145] __sys_recvmmsg+0x113/0x450 [ 2300.354439][ T9131] __sys_recvmmsg+0x113/0x450 [ 2300.359428][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.364356][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.369436][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2300.374191][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2300.379007][ T9145] do_fast_syscall_32+0x33/0x70 [ 2300.383576][ T9131] do_fast_syscall_32+0x33/0x70 [ 2300.388232][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2300.393010][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2300.397468][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.403790][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.408424][ T9145] [ 2300.408432][ T9145] Uninit was stored to memory at: [ 2300.413525][ T9131] [ 2300.419793][ T9145] __get_compat_msghdr+0x514/0x750 [ 2300.424665][ T9131] Uninit was stored to memory at: [ 2300.429646][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2300.434312][ T9131] __get_compat_msghdr+0x514/0x750 [ 2300.439059][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2300.445546][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2300.450011][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2300.452399][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2300.458704][ T9145] __sys_recvmmsg+0x113/0x450 [ 2300.463811][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2300.466100][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.471100][ T9131] __sys_recvmmsg+0x113/0x450 [ 2300.476267][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2300.481395][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.486305][ T9145] do_fast_syscall_32+0x33/0x70 [ 2300.491154][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2300.495893][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2300.500572][ T9131] do_fast_syscall_32+0x33/0x70 [ 2300.505148][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.509652][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2300.514410][ T9145] [ 2300.514421][ T9145] Uninit was stored to memory at: [ 2300.514502][ T9145] __get_compat_msghdr+0x514/0x750 [ 2300.519088][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.525397][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2300.531722][ T9131] [ 2300.531732][ T9131] Uninit was stored to memory at: [ 2300.536831][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2300.541940][ T9131] __get_compat_msghdr+0x514/0x750 [ 2300.546810][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2300.551765][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2300.556252][ T9145] __sys_recvmmsg+0x113/0x450 [ 2300.560748][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2300.567138][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.573555][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2300.575871][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2300.580883][ T9131] __sys_recvmmsg+0x113/0x450 [ 2300.583269][ T9145] do_fast_syscall_32+0x33/0x70 [ 2300.588383][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.593471][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2300.598318][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2300.603488][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.608188][ T9131] do_fast_syscall_32+0x33/0x70 [ 2300.613098][ T9145] [ 2300.613107][ T9145] Uninit was stored to memory at: [ 2300.613182][ T9145] __get_compat_msghdr+0x514/0x750 [ 2300.617594][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2300.622326][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2300.627004][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.631489][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2300.637812][ T9131] [ 2300.642527][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2300.647530][ T9131] Uninit was stored to memory at: [ 2300.647604][ T9131] __get_compat_msghdr+0x514/0x750 [ 2300.653826][ T9145] __sys_recvmmsg+0x113/0x450 [ 2300.658674][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2300.663751][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.668255][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2300.673161][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2300.679504][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2300.684061][ T9145] do_fast_syscall_32+0x33/0x70 [ 2300.686394][ T9131] __sys_recvmmsg+0x113/0x450 [ 2300.691399][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2300.696591][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.702953][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.707791][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2300.710104][ T9145] [ 2300.710112][ T9145] Uninit was stored to memory at: [ 2300.715206][ T9131] do_fast_syscall_32+0x33/0x70 [ 2300.720036][ T9145] __get_compat_msghdr+0x514/0x750 [ 2300.725049][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2300.729502][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2300.734428][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.739064][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2300.743799][ T9131] [ 2300.743809][ T9131] Local variable msg_sys created at: [ 2300.750032][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2300.754616][ T9131] do_recvmmsg+0x5f/0x10a0 [ 2300.759599][ T9145] __sys_recvmmsg+0x113/0x450 [ 2300.764363][ T9131] __sys_recvmmsg+0x113/0x450 [ 2300.769167][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2300.978640][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2300.983801][ T9145] do_fast_syscall_32+0x33/0x70 [ 2300.988690][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2300.993314][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.999682][ T9145] [ 2301.002003][ T9145] Uninit was stored to memory at: [ 2301.007182][ T9145] __get_compat_msghdr+0x514/0x750 [ 2301.012412][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2301.017307][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2301.022028][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2301.026674][ T9145] __sys_recvmmsg+0x113/0x450 [ 2301.031392][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.037794][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2301.042965][ T9145] do_fast_syscall_32+0x33/0x70 [ 2301.047857][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2301.052485][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.058854][ T9145] [ 2301.061181][ T9145] Local variable msg_sys created at: [ 2301.066568][ T9145] do_recvmmsg+0x5f/0x10a0 [ 2301.071026][ T9145] __sys_recvmmsg+0x113/0x450 [ 2301.171976][ T9131] not chained 1780000 origins [ 2301.176879][ T9131] CPU: 1 PID: 9131 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2301.186987][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2301.197061][ T9131] Call Trace: [ 2301.200349][ T9131] [ 2301.203290][ T9131] dump_stack_lvl+0x1c8/0x256 [ 2301.208039][ T9131] dump_stack+0x1a/0x1c [ 2301.212228][ T9131] kmsan_internal_chain_origin+0x78/0x120 [ 2301.218000][ T9131] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2301.224115][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.229279][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2301.235589][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.240749][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.246611][ T9131] ? __get_compat_msghdr+0x5b/0x750 [ 2301.251972][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.257141][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.263008][ T9131] ? should_fail+0x3f/0x7e0 [ 2301.267537][ T9131] ? __stack_depot_save+0x21/0x4b0 [ 2301.272698][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.277860][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2301.284151][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.289310][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.295168][ T9131] __msan_chain_origin+0xbd/0x140 [ 2301.300236][ T9131] __get_compat_msghdr+0x514/0x750 [ 2301.305407][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2301.310301][ T9131] ? ___sys_recvmsg+0xa9/0x870 [ 2301.315109][ T9131] ? do_recvmmsg+0x63a/0x10a0 [ 2301.319832][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2301.324575][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.329730][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.335586][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.340750][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.346666][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2301.351237][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.356438][ T9131] ? __sys_recvmmsg+0x52/0x450 [ 2301.361259][ T9131] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.367754][ T9131] __sys_recvmmsg+0x113/0x450 [ 2301.372479][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2301.377645][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.380456][ T9153] not chained 1790000 origins [ 2301.383951][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2301.384016][ T9131] do_fast_syscall_32+0x33/0x70 [ 2301.384071][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2301.384123][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.384184][ T9131] RIP: 0023:0xf7f0f549 [ 2301.384214][ T9131] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2301.384259][ T9131] RSP: 002b:00000000f7ee95cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2301.384302][ T9131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2301.384334][ T9131] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2301.384361][ T9131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2301.384386][ T9131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2301.473577][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2301.481571][ T9131] [ 2301.484592][ T9153] CPU: 0 PID: 9153 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2301.487211][ T9131] Uninit was stored to memory at: [ 2301.494691][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2301.494718][ T9153] Call Trace: [ 2301.494731][ T9153] [ 2301.494745][ T9153] dump_stack_lvl+0x1c8/0x256 [ 2301.494806][ T9153] dump_stack+0x1a/0x1c [ 2301.494851][ T9153] kmsan_internal_chain_origin+0x78/0x120 [ 2301.494911][ T9153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2301.494979][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.495038][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2301.495102][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.495160][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.495227][ T9153] ? __get_compat_msghdr+0x5b/0x750 [ 2301.495285][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.495344][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.495411][ T9153] ? should_fail+0x3f/0x7e0 [ 2301.500499][ T9131] __get_compat_msghdr+0x514/0x750 [ 2301.510482][ T9153] ? __stack_depot_save+0x21/0x4b0 [ 2301.510544][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.510603][ T9153] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2301.513977][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2301.516798][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.521447][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2301.525584][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.525651][ T9153] __msan_chain_origin+0xbd/0x140 [ 2301.531385][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2301.537718][ T9153] __get_compat_msghdr+0x514/0x750 [ 2301.537794][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2301.537851][ T9153] ? ___sys_recvmsg+0xa9/0x870 [ 2301.543057][ T9131] __sys_recvmmsg+0x113/0x450 [ 2301.549188][ T9153] ? do_recvmmsg+0x63a/0x10a0 [ 2301.554422][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.560103][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2301.565384][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2301.570461][ T9153] ? raw_spin_rq_unlock_irq+0x22/0x90 [ 2301.576870][ T9131] do_fast_syscall_32+0x33/0x70 [ 2301.581243][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.586486][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2301.591447][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.596660][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.602769][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.602832][ T9153] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2301.607686][ T9131] [ 2301.607694][ T9131] Uninit was stored to memory at: [ 2301.612885][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2301.612964][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.617700][ T9131] __get_compat_msghdr+0x514/0x750 [ 2301.623431][ T9153] ? __sys_recvmmsg+0x52/0x450 [ 2301.623491][ T9153] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.628530][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2301.633037][ T9153] __sys_recvmmsg+0x113/0x450 [ 2301.633098][ T9153] ? kmsan_get_metadata+0x33/0x220 [ 2301.633165][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.638230][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2301.643212][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2301.643269][ T9153] ? exit_to_user_mode_prepare+0x119/0x220 [ 2301.648146][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2301.652808][ T9153] do_fast_syscall_32+0x33/0x70 [ 2301.652865][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2301.652917][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.657565][ T9131] __sys_recvmmsg+0x113/0x450 [ 2301.663796][ T9153] RIP: 0023:0xf7f04549 [ 2301.663830][ T9153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2301.663873][ T9153] RSP: 002b:00000000f7ede5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2301.663916][ T9153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2301.663948][ T9153] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2301.668611][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.673621][ T9153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2301.673657][ T9153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2301.673683][ T9153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2301.673726][ T9153] [ 2301.673838][ T9153] Uninit was stored to memory at: [ 2301.679100][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2301.684113][ T9153] __get_compat_msghdr+0x514/0x750 [ 2301.689157][ T9131] do_fast_syscall_32+0x33/0x70 [ 2301.693723][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2301.699518][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2301.705901][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2301.711101][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.716985][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2301.717044][ T9153] __sys_recvmmsg+0x113/0x450 [ 2301.719460][ T9131] [ 2301.724471][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.728976][ T9131] Uninit was stored to memory at: [ 2301.729049][ T9131] __get_compat_msghdr+0x514/0x750 [ 2301.734144][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2301.739255][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2301.744080][ T9153] do_fast_syscall_32+0x33/0x70 [ 2301.750487][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2301.755392][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2301.760070][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2301.765239][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.771481][ T9131] __sys_recvmmsg+0x113/0x450 [ 2301.776214][ T9153] [ 2301.776222][ T9153] Uninit was stored to memory at: [ 2301.776296][ T9153] __get_compat_msghdr+0x514/0x750 [ 2301.781235][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.787102][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2301.791703][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2301.796610][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2301.801115][ T9131] do_fast_syscall_32+0x33/0x70 [ 2301.807501][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2301.812189][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2301.816324][ T9153] __sys_recvmmsg+0x113/0x450 [ 2301.835944][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.844380][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.852812][ T9131] [ 2301.852821][ T9131] Uninit was stored to memory at: [ 2301.860775][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2301.867434][ T9131] __get_compat_msghdr+0x514/0x750 [ 2301.875368][ T9153] do_fast_syscall_32+0x33/0x70 [ 2301.883422][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2301.891377][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2301.894482][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2301.899462][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.904577][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2301.909641][ T9153] [ 2301.909650][ T9153] Uninit was stored to memory at: [ 2301.915103][ T9131] __sys_recvmmsg+0x113/0x450 [ 2301.919973][ T9153] __get_compat_msghdr+0x514/0x750 [ 2301.924496][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.929129][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2301.935561][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2301.940018][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2301.944778][ T9131] do_fast_syscall_32+0x33/0x70 [ 2301.947069][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2301.953365][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2301.953413][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.958460][ T9153] __sys_recvmmsg+0x113/0x450 [ 2301.963648][ T9131] [ 2301.968628][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2301.973563][ T9131] Uninit was stored to memory at: [ 2301.978368][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2301.983185][ T9131] __get_compat_msghdr+0x514/0x750 [ 2301.987585][ T9153] do_fast_syscall_32+0x33/0x70 [ 2301.992065][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2301.998451][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2302.003212][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2302.005520][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.010532][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2302.015800][ T9153] [ 2302.015808][ T9153] Uninit was stored to memory at: [ 2302.015881][ T9153] __get_compat_msghdr+0x514/0x750 [ 2302.022040][ T9131] __sys_recvmmsg+0x113/0x450 [ 2302.027023][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2302.032051][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.036799][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2302.041646][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2302.046200][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2302.050702][ T9131] do_fast_syscall_32+0x33/0x70 [ 2302.055436][ T9153] __sys_recvmmsg+0x113/0x450 [ 2302.061762][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2302.068062][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.070390][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.075468][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2302.080530][ T9131] [ 2302.080539][ T9131] Uninit was stored to memory at: [ 2302.085705][ T9153] do_fast_syscall_32+0x33/0x70 [ 2302.090615][ T9131] __get_compat_msghdr+0x514/0x750 [ 2302.095634][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2302.100142][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2302.104873][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.111198][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2302.115758][ T9153] [ 2302.115766][ T9153] Uninit was stored to memory at: [ 2302.115839][ T9153] __get_compat_msghdr+0x514/0x750 [ 2302.118092][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2302.123172][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2302.127831][ T9131] __sys_recvmmsg+0x113/0x450 [ 2302.132999][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2302.139241][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.144145][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2302.149165][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2302.153898][ T9153] __sys_recvmmsg+0x113/0x450 [ 2302.158748][ T9131] do_fast_syscall_32+0x33/0x70 [ 2302.163306][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.167791][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2302.174170][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2302.178844][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.181170][ T9153] do_fast_syscall_32+0x33/0x70 [ 2302.187498][ T9131] [ 2302.192557][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2302.197576][ T9131] Uninit was stored to memory at: [ 2302.197650][ T9131] __get_compat_msghdr+0x514/0x750 [ 2302.202740][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.207593][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2302.212503][ T9153] [ 2302.212512][ T9153] Uninit was stored to memory at: [ 2302.212582][ T9153] __get_compat_msghdr+0x514/0x750 [ 2302.217009][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2302.221668][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2302.228072][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2302.232616][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2302.234928][ T9131] __sys_recvmmsg+0x113/0x450 [ 2302.239928][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2302.245116][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.249755][ T9153] __sys_recvmmsg+0x113/0x450 [ 2302.254683][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2302.260880][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.265637][ T9131] do_fast_syscall_32+0x33/0x70 [ 2302.270620][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2302.275198][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2302.280005][ T9153] do_fast_syscall_32+0x33/0x70 [ 2302.284757][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.289233][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2302.295553][ T9131] [ 2302.301836][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.306953][ T9131] Local variable msg_sys created at: [ 2302.309242][ T9153] [ 2302.309250][ T9153] Uninit was stored to memory at: [ 2302.314351][ T9131] do_recvmmsg+0x5f/0x10a0 [ 2302.319232][ T9153] __get_compat_msghdr+0x514/0x750 [ 2302.324361][ T9131] __sys_recvmmsg+0x113/0x450 [ 2302.328822][ T9153] get_compat_msghdr+0x8c/0x1c0 [ 2302.591740][ T9153] ___sys_recvmsg+0x19d/0x870 [ 2302.596642][ T9153] do_recvmmsg+0x63a/0x10a0 [ 2302.601195][ T9153] __sys_recvmmsg+0x113/0x450 [ 2302.606094][ T9153] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.612518][ T9153] __do_fast_syscall_32+0x95/0xf0 [ 2302.617630][ T9153] do_fast_syscall_32+0x33/0x70 [ 2302.622680][ T9153] do_SYSENTER_32+0x1b/0x20 [ 2302.627243][ T9153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.633789][ T9153] [ 2302.636125][ T9153] Local variable msg_sys created at: [ 2302.641412][ T9153] do_recvmmsg+0x5f/0x10a0 [ 2302.646042][ T9153] __sys_recvmmsg+0x113/0x450 [ 2302.737293][ T9145] not chained 1800000 origins [ 2302.742020][ T9145] CPU: 1 PID: 9145 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2302.752123][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2302.762201][ T9145] Call Trace: [ 2302.765492][ T9145] [ 2302.768434][ T9145] dump_stack_lvl+0x1c8/0x256 [ 2302.773165][ T9145] dump_stack+0x1a/0x1c [ 2302.777357][ T9145] kmsan_internal_chain_origin+0x78/0x120 [ 2302.783125][ T9145] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2302.789249][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.794409][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2302.800708][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.805865][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2302.811869][ T9145] ? __get_compat_msghdr+0x5b/0x750 [ 2302.817137][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.822319][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2302.828196][ T9145] ? should_fail+0x3f/0x7e0 [ 2302.832746][ T9145] ? __stack_depot_save+0x21/0x4b0 [ 2302.837910][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.843069][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2302.849362][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.854520][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2302.860381][ T9145] __msan_chain_origin+0xbd/0x140 [ 2302.865454][ T9145] __get_compat_msghdr+0x514/0x750 [ 2302.870626][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2302.875520][ T9145] ? ___sys_recvmsg+0xa9/0x870 [ 2302.880329][ T9145] ? do_recvmmsg+0x63a/0x10a0 [ 2302.885187][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2302.889935][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.895122][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2302.900992][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.906161][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2302.912028][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2302.916596][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.921764][ T9145] ? __sys_recvmmsg+0x52/0x450 [ 2302.926572][ T9145] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.933046][ T9145] __sys_recvmmsg+0x113/0x450 [ 2302.936564][ T9131] not chained 1810000 origins [ 2302.937765][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2302.947551][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2302.953865][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2302.958932][ T9145] ? exit_to_user_mode_prepare+0x119/0x220 [ 2302.964785][ T9145] do_fast_syscall_32+0x33/0x70 [ 2302.969683][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2302.974211][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.980569][ T9145] RIP: 0023:0xf7fc9549 [ 2302.984646][ T9145] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2303.004287][ T9145] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2303.012726][ T9145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2303.020727][ T9145] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2303.028721][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2303.036713][ T9145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2303.044692][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2303.052682][ T9145] [ 2303.055699][ T9131] CPU: 0 PID: 9131 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2303.058462][ T9145] Uninit was stored to memory at: [ 2303.065799][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.065827][ T9131] Call Trace: [ 2303.065839][ T9131] [ 2303.065854][ T9131] dump_stack_lvl+0x1c8/0x256 [ 2303.065915][ T9131] dump_stack+0x1a/0x1c [ 2303.065960][ T9131] kmsan_internal_chain_origin+0x78/0x120 [ 2303.066023][ T9131] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2303.066088][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.066148][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2303.071255][ T9145] __get_compat_msghdr+0x514/0x750 [ 2303.081257][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.081319][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2303.081389][ T9131] ? __get_compat_msghdr+0x5b/0x750 [ 2303.084744][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2303.087567][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.092324][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2303.096382][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2303.102091][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2303.108143][ T9131] ? should_fail+0x3f/0x7e0 [ 2303.108187][ T9131] ? __stack_depot_save+0x21/0x4b0 [ 2303.108250][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.113434][ T9145] __sys_recvmmsg+0x113/0x450 [ 2303.119593][ T9131] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2303.124780][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.129776][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.135661][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2303.140742][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2303.145673][ T9145] do_fast_syscall_32+0x33/0x70 [ 2303.150668][ T9131] __msan_chain_origin+0xbd/0x140 [ 2303.155422][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2303.161115][ T9131] __get_compat_msghdr+0x514/0x750 [ 2303.165707][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.170105][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2303.175284][ T9145] [ 2303.180290][ T9131] ? ___sys_recvmsg+0xa9/0x870 [ 2303.185051][ T9145] Uninit was stored to memory at: [ 2303.191181][ T9131] ? do_recvmmsg+0x63a/0x10a0 [ 2303.197569][ T9145] __get_compat_msghdr+0x514/0x750 [ 2303.202502][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2303.202585][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.207582][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2303.213369][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2303.213437][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.218304][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2303.223312][ T9131] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2303.223384][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2303.227889][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2303.232993][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.233065][ T9131] ? __sys_recvmmsg+0x52/0x450 [ 2303.239389][ T9145] __sys_recvmmsg+0x113/0x450 [ 2303.244235][ T9131] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.244310][ T9131] __sys_recvmmsg+0x113/0x450 [ 2303.246640][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.251387][ T9131] ? kmsan_get_metadata+0x33/0x220 [ 2303.256492][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2303.261056][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.266237][ T9145] do_fast_syscall_32+0x33/0x70 [ 2303.270807][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2303.276003][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2303.280739][ T9131] do_fast_syscall_32+0x33/0x70 [ 2303.286628][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.291638][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2303.296393][ T9145] [ 2303.302093][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.306673][ T9145] Uninit was stored to memory at: [ 2303.311060][ T9131] RIP: 0023:0xf7f0f549 [ 2303.316311][ T9145] __get_compat_msghdr+0x514/0x750 [ 2303.320893][ T9131] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2303.325644][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2303.331939][ T9131] RSP: 002b:00000000f7ee95cc EFLAGS: 00000296 [ 2303.336702][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2303.342820][ T9131] ORIG_RAX: 0000000000000151 [ 2303.342837][ T9131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2303.342869][ T9131] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2303.342898][ T9131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2303.347992][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2303.352996][ T9131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2303.353024][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2303.353067][ T9131] [ 2303.353174][ T9131] Uninit was stored to memory at: [ 2303.359334][ T9145] __sys_recvmmsg+0x113/0x450 [ 2303.364306][ T9131] __get_compat_msghdr+0x514/0x750 [ 2303.369272][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.373833][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2303.378672][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2303.385059][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2303.389572][ T9145] do_fast_syscall_32+0x33/0x70 [ 2303.391886][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2303.398296][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2303.403358][ T9131] __sys_recvmmsg+0x113/0x450 [ 2303.407422][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.412599][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.432369][ T9145] [ 2303.437179][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2303.443327][ T9145] Uninit was stored to memory at: [ 2303.447980][ T9131] do_fast_syscall_32+0x33/0x70 [ 2303.452799][ T9145] __get_compat_msghdr+0x514/0x750 [ 2303.460674][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2303.468745][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2303.476765][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.481268][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2303.489301][ T9131] [ 2303.489310][ T9131] Uninit was stored to memory at: [ 2303.489382][ T9131] __get_compat_msghdr+0x514/0x750 [ 2303.497380][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2303.500368][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2303.505468][ T9145] __sys_recvmmsg+0x113/0x450 [ 2303.510105][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2303.515776][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.522015][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2303.527303][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2303.532385][ T9131] __sys_recvmmsg+0x113/0x450 [ 2303.537083][ T9145] do_fast_syscall_32+0x33/0x70 [ 2303.541916][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.546689][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2303.551159][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2303.551210][ T9131] do_fast_syscall_32+0x33/0x70 [ 2303.551257][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2303.556017][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.562387][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.568615][ T9145] [ 2303.568624][ T9145] Uninit was stored to memory at: [ 2303.570929][ T9131] [ 2303.570937][ T9131] Uninit was stored to memory at: [ 2303.576118][ T9145] __get_compat_msghdr+0x514/0x750 [ 2303.581122][ T9131] __get_compat_msghdr+0x514/0x750 [ 2303.586045][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2303.591137][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2303.595735][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2303.600562][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2303.606980][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2303.611619][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2303.614048][ T9145] __sys_recvmmsg+0x113/0x450 [ 2303.619039][ T9131] __sys_recvmmsg+0x113/0x450 [ 2303.624264][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.628730][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.633643][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2303.638302][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2303.643075][ T9145] do_fast_syscall_32+0x33/0x70 [ 2303.649366][ T9131] do_fast_syscall_32+0x33/0x70 [ 2303.653953][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2303.658935][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2303.663686][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.668517][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.674860][ T9145] [ 2303.679322][ T9131] [ 2303.679331][ T9131] Uninit was stored to memory at: [ 2303.684425][ T9145] Uninit was stored to memory at: [ 2303.689301][ T9131] __get_compat_msghdr+0x514/0x750 [ 2303.693861][ T9145] __get_compat_msghdr+0x514/0x750 [ 2303.700566][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2303.707011][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2303.709283][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2303.714401][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2303.716690][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2303.721836][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2303.726868][ T9131] __sys_recvmmsg+0x113/0x450 [ 2303.731994][ T9145] __sys_recvmmsg+0x113/0x450 [ 2303.736902][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.741752][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.746491][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2303.751191][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2303.755756][ T9131] do_fast_syscall_32+0x33/0x70 [ 2303.760265][ T9145] do_fast_syscall_32+0x33/0x70 [ 2303.765000][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2303.769693][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2303.775993][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.782315][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.787322][ T9131] [ 2303.787330][ T9131] Uninit was stored to memory at: [ 2303.792427][ T9145] [ 2303.797299][ T9131] __get_compat_msghdr+0x514/0x750 [ 2303.802065][ T9145] Uninit was stored to memory at: [ 2303.802135][ T9145] __get_compat_msghdr+0x514/0x750 [ 2303.806633][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2303.811135][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2303.817519][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2303.823949][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2303.826238][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2303.828549][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2303.833645][ T9131] __sys_recvmmsg+0x113/0x450 [ 2303.838651][ T9145] __sys_recvmmsg+0x113/0x450 [ 2303.843817][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.848932][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2303.853839][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2303.858702][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2303.863434][ T9131] do_fast_syscall_32+0x33/0x70 [ 2303.868110][ T9145] do_fast_syscall_32+0x33/0x70 [ 2303.872670][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2303.877175][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2303.881861][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.886623][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.892893][ T9131] [ 2303.892902][ T9131] Uninit was stored to memory at: [ 2303.892975][ T9131] __get_compat_msghdr+0x514/0x750 [ 2303.899124][ T9145] [ 2303.899134][ T9145] Local variable msg_sys created at: [ 2303.904208][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2303.909233][ T9145] do_recvmmsg+0x5f/0x10a0 [ 2303.914142][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2303.919047][ T9145] __sys_recvmmsg+0x113/0x450 [ 2303.923606][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2304.101443][ T9131] __sys_recvmmsg+0x113/0x450 [ 2304.106263][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.112642][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2304.117713][ T9131] do_fast_syscall_32+0x33/0x70 [ 2304.122711][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2304.127289][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.134066][ T9131] [ 2304.136392][ T9131] Uninit was stored to memory at: [ 2304.141480][ T9131] __get_compat_msghdr+0x514/0x750 [ 2304.146727][ T9131] get_compat_msghdr+0x8c/0x1c0 [ 2304.151619][ T9131] ___sys_recvmsg+0x19d/0x870 [ 2304.156430][ T9131] do_recvmmsg+0x63a/0x10a0 [ 2304.160977][ T9131] __sys_recvmmsg+0x113/0x450 [ 2304.165789][ T9131] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.172084][ T9131] __do_fast_syscall_32+0x95/0xf0 [ 2304.177240][ T9131] do_fast_syscall_32+0x33/0x70 [ 2304.182149][ T9131] do_SYSENTER_32+0x1b/0x20 [ 2304.186854][ T9131] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.193314][ T9131] [ 2304.195640][ T9131] Local variable msg_sys created at: [ 2304.201012][ T9131] do_recvmmsg+0x5f/0x10a0 [ 2304.205613][ T9131] __sys_recvmmsg+0x113/0x450 [ 2304.395943][ T9145] not chained 1820000 origins [ 2304.400680][ T9145] CPU: 1 PID: 9145 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2304.410807][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2304.420900][ T9145] Call Trace: [ 2304.424197][ T9145] [ 2304.427141][ T9145] dump_stack_lvl+0x1c8/0x256 [ 2304.431866][ T9145] dump_stack+0x1a/0x1c [ 2304.436053][ T9145] kmsan_internal_chain_origin+0x78/0x120 [ 2304.441828][ T9145] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2304.448033][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.453194][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2304.459499][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.464660][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2304.470526][ T9145] ? __get_compat_msghdr+0x5b/0x750 [ 2304.475784][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.480964][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2304.486841][ T9145] ? should_fail+0x3f/0x7e0 [ 2304.491467][ T9145] ? __stack_depot_save+0x21/0x4b0 [ 2304.496625][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.501786][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2304.508365][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.513534][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2304.519397][ T9145] __msan_chain_origin+0xbd/0x140 [ 2304.524496][ T9145] __get_compat_msghdr+0x514/0x750 [ 2304.529673][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2304.534569][ T9145] ? ___sys_recvmsg+0xa9/0x870 [ 2304.539410][ T9145] ? do_recvmmsg+0x63a/0x10a0 [ 2304.544155][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2304.548895][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.554064][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2304.559931][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.565094][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2304.570958][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2304.575608][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.580776][ T9145] ? __sys_recvmmsg+0x52/0x450 [ 2304.585592][ T9145] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.592167][ T9145] __sys_recvmmsg+0x113/0x450 [ 2304.596893][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2304.602061][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.608371][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2304.613461][ T9145] ? exit_to_user_mode_prepare+0x119/0x220 [ 2304.619338][ T9145] do_fast_syscall_32+0x33/0x70 [ 2304.624237][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2304.628784][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.635253][ T9145] RIP: 0023:0xf7fc9549 [ 2304.639338][ T9145] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2304.659140][ T9145] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2304.667596][ T9145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2304.675592][ T9145] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2304.683582][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2304.691651][ T9145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2304.699642][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2304.707643][ T9145] [ 2304.713393][ T9145] Uninit was stored to memory at: [ 2304.718903][ T9145] __get_compat_msghdr+0x514/0x750 [ 2304.724180][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2304.729102][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2304.733957][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2304.738505][ T9145] __sys_recvmmsg+0x113/0x450 [ 2304.743322][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.749624][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2304.754815][ T9145] do_fast_syscall_32+0x33/0x70 [ 2304.759708][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2304.764378][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.770762][ T9145] [ 2304.773189][ T9145] Uninit was stored to memory at: [ 2304.778288][ T9145] __get_compat_msghdr+0x514/0x750 [ 2304.783589][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2304.788486][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2304.793356][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2304.797918][ T9145] __sys_recvmmsg+0x113/0x450 [ 2304.802779][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.809083][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2304.814286][ T9145] do_fast_syscall_32+0x33/0x70 [ 2304.819210][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2304.823861][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.830236][ T9145] [ 2304.832693][ T9145] Uninit was stored to memory at: [ 2304.837784][ T9145] __get_compat_msghdr+0x514/0x750 [ 2304.843062][ T9145] get_compat_msghdr+0x8c/0x1c0 01:53:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460009fe00b8b775fd00000000000000000000000000000000000000000000004679211ddb39d4f9d6df4f277396470000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000aa9d00"/120], 0x78) syz_clone3(&(0x7f00000006c0)={0x1020000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x13}, &(0x7f00000003c0)=""/189, 0xbd, &(0x7f0000000480)=""/192, &(0x7f0000000540)=[0x0], 0x1}, 0x58) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000003980)={'bridge_slave_0\x00', 0x12}) sendmmsg$unix(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002640)="ab221c7599e3b956b92645075845ff82f20916b94f53ed86c95653581ad9bfa085cce63a65beb9f0a6f324e09c42843671135c947310c720ba621d1b98c06b0c98ec945e167f4b2c053ec3ae55e5138230516d27dc1297ec3e714f09b9e8d0ae593a3b24004fee647c7ba73b5d5e1352fb86cb769f131c87d3985e1d668c3144062502df2d78", 0x86}, {0x0}, {&(0x7f0000002800)}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32], 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0x0, 0x2811fdff) 01:53:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000a40)={0x0, 0xffffff84, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0xffd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x4) 01:53:46 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x63, 0x1, 0xfffffffd, 0xfffffffffffffff8, 0x0, 0x1, 0xdc, 0xff}, 0x0) r3 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003680)=[{{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000580)="4df21001bdfe8ebff44279a3ee2efd9f3152057cb12b8df13bf7c9bdc7413fe688bd0282c3aefd7adccad9429a8c1eb261b29b41ff912a815d696cc6df5f3da307178a42147c7fb0ebf095e2a15f0bbb0c3caffc57e6c2534c8b7c0086298d63ee26607e577b4b0c6f0cbda8e85d5d587e1aee6a026b8fc139af91cf264d897c4a551e27f3c6a8293491861ab9cfaad24b8dfde2ac51ac30f45d3f9468cf79edcf1db2220f1494cbde580a7e187cfd6ce96d6c28795c7b9739b58b89654248d11b291ef24dd5681cd6d3b6080ce2", 0xce}, {&(0x7f0000000680)="ba4ea0a7cdff991b922f90777300b773d7309227b935f7f385296d1b47263df1d040d762f2e9eecf8d70c9c524795e35dc51e4eb167760f6bb49469203761561699fcf54f4454b259bdf71e1a5499efa2c6e68ec17", 0x55}, {&(0x7f0000000700)="e5b3ecafbe0d8962930a53a0e2a1f58a9722838c57f2b52fe236db136b850db1eb5773ac98431219f0b816540bfd1530a99d56c1818a29412ccf45105264f280d945ee4d6fd6d7f508eff7ecb403e3f40fc0a3f0be02b9f0641b856a5167c99a3c7a150464ad260876a95be7861a20233d74922d44b1f9e427e748c53b9c9d408ad5d117f627181697e0059ddb58a489c67253646b09552e95c631", 0x9b}, {&(0x7f00000007c0)="a590cd4ce3dc7ee7e1c514c44fcf63ced6b0d42b9d730dc64231c9efa92e02be68113f90c8d7e0c47b427ad42771ce52c65112a59ac7efcf4b8f432ec340b3280df6e188191526fa98bbf180326ea22b71315905f09b19a7306b1b163cf7a2de665f38f571412c565c90dee25ae6c89a40dfca54e022356281e718756f42228448d2d6c4c5acb34a62c4e3da7123d7290d11763ca91a7466900529f27614e3cbf158a94d8b84be20bc7c47a881719e43a0ea49970d308c555f95f78ab3a5e92fdfadce515a300f70636b8ba51b1795d2c433060359744208b43e92b8bdd766360510b81f16f23900bd3693243e2e888ee829bc8b5bfaa5", 0xf7}, {&(0x7f0000000500)="76163781e9e7c7b1476e5ab1c2c4886f1dffc99d05593055219c723166fb3136e43bb815788c036836efe56d1edf11cf2fab9bfbda32b3c551d3f99851cd93", 0x3f}], 0x5, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}], 0x40, 0x480d0}}, {{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001e00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e80)="a377f06f0681ba7ebed33de6134e02c8e660c79a6f8706fd3b211030e3d6d717f245386dd1bb1f2c6872f7ac28", 0x2d}, {&(0x7f0000001ec0)="239b6590f3030772159a18d5f39743e4c15dc4bec61fbf935a610b88f14ff825a1bbfcfec1f4794b437285ee138a1a5314002012b74cb4c353687205b433de09147921b81e088cbd89b17bda399ef845546a1914c51adb694e78d2aba05a4c7806b70a655c318e734ae8486dc91c21a33183c78342fcadcd5f41be30e1fd74c16130b8370ecc3b208b656148f8bf5d74529b0df5347ddc930db5e28fad34e6f1113625b96b1989c32de05e5e059c9234", 0xb0}], 0x2, &(0x7f0000003640), 0x0, 0x200180c2}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x125) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r5, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 01:53:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r1 = dup(r0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 01:53:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) [ 2304.847960][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2304.852807][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2304.857366][ T9145] __sys_recvmmsg+0x113/0x450 [ 2304.862148][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.868600][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2304.873878][ T9145] do_fast_syscall_32+0x33/0x70 [ 2304.878782][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2304.883477][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.889864][ T9145] [ 2304.892197][ T9145] Uninit was stored to memory at: [ 2304.897418][ T9145] __get_compat_msghdr+0x514/0x750 [ 2304.902703][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2304.907608][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2304.912464][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2304.917014][ T9145] __sys_recvmmsg+0x113/0x450 [ 2304.921760][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.928194][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2304.933374][ T9145] do_fast_syscall_32+0x33/0x70 [ 2304.938275][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2304.942942][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.949334][ T9145] [ 2304.951695][ T9145] Uninit was stored to memory at: [ 2304.956918][ T9145] __get_compat_msghdr+0x514/0x750 [ 2304.962076][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2304.967106][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2304.971838][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2304.976534][ T9145] __sys_recvmmsg+0x113/0x450 [ 2304.981266][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2304.987711][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2304.992899][ T9145] do_fast_syscall_32+0x33/0x70 [ 2304.997819][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2305.002525][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.008904][ T9145] [ 2305.011229][ T9145] Uninit was stored to memory at: [ 2305.016455][ T9145] __get_compat_msghdr+0x514/0x750 [ 2305.021613][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2305.026649][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2305.031374][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2305.036085][ T9145] __sys_recvmmsg+0x113/0x450 [ 2305.036147][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2305.036213][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2305.036267][ T9145] do_fast_syscall_32+0x33/0x70 [ 2305.036317][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2305.036364][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.036419][ T9145] [ 2305.036428][ T9145] Uninit was stored to memory at: [ 2305.036504][ T9145] __get_compat_msghdr+0x514/0x750 [ 2305.036556][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2305.036607][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2305.036659][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2305.036713][ T9145] __sys_recvmmsg+0x113/0x450 [ 2305.036768][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2305.036830][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2305.036881][ T9145] do_fast_syscall_32+0x33/0x70 [ 2305.036930][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2305.036977][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.037033][ T9145] [ 2305.037041][ T9145] Local variable msg_sys created at: [ 2305.037055][ T9145] do_recvmmsg+0x5f/0x10a0 [ 2305.037107][ T9145] __sys_recvmmsg+0x113/0x450 [ 2305.490182][ T9145] not chained 1830000 origins [ 2305.495007][ T9145] CPU: 0 PID: 9145 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2305.505388][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2305.515757][ T9145] Call Trace: [ 2305.519050][ T9145] [ 2305.521991][ T9145] dump_stack_lvl+0x1c8/0x256 [ 2305.526724][ T9145] dump_stack+0x1a/0x1c [ 2305.530911][ T9145] kmsan_internal_chain_origin+0x78/0x120 [ 2305.536707][ T9145] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2305.542831][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.547992][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2305.554292][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.559485][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2305.565437][ T9145] ? __get_compat_msghdr+0x5b/0x750 [ 2305.570695][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.575857][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2305.581720][ T9145] ? should_fail+0x3f/0x7e0 [ 2305.586280][ T9145] ? __stack_depot_save+0x21/0x4b0 [ 2305.591555][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.596730][ T9145] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2305.603020][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.608170][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2305.614018][ T9145] __msan_chain_origin+0xbd/0x140 [ 2305.619088][ T9145] __get_compat_msghdr+0x514/0x750 [ 2305.624250][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2305.629142][ T9145] ? ___sys_recvmsg+0xa9/0x870 [ 2305.633945][ T9145] ? do_recvmmsg+0x63a/0x10a0 [ 2305.638665][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2305.643394][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.648551][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2305.654399][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.659595][ T9145] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2305.665455][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2305.670012][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.675167][ T9145] ? __sys_recvmmsg+0x52/0x450 [ 2305.679967][ T9145] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2305.686434][ T9145] __sys_recvmmsg+0x113/0x450 [ 2305.691246][ T9145] ? kmsan_get_metadata+0x33/0x220 [ 2305.696410][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2305.702718][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2305.707775][ T9145] ? exit_to_user_mode_prepare+0x119/0x220 [ 2305.713628][ T9145] do_fast_syscall_32+0x33/0x70 [ 2305.718512][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2305.723049][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.729416][ T9145] RIP: 0023:0xf7fc9549 [ 2305.733498][ T9145] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2305.753136][ T9145] RSP: 002b:00000000f7fa35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2305.761572][ T9145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2305.769562][ T9145] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2305.777548][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2305.785533][ T9145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2305.793520][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2305.801526][ T9145] [ 2305.807250][ T9145] Uninit was stored to memory at: [ 2305.812598][ T9145] __get_compat_msghdr+0x514/0x750 [ 2305.817756][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2305.822737][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2305.827458][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2305.832014][ T9145] __sys_recvmmsg+0x113/0x450 [ 2305.836819][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2305.843194][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2305.848254][ T9145] do_fast_syscall_32+0x33/0x70 [ 2305.853215][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2305.857752][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.864208][ T9145] [ 2305.866534][ T9145] Uninit was stored to memory at: [ 2305.871618][ T9145] __get_compat_msghdr+0x514/0x750 [ 2305.876850][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2305.881738][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2305.886546][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2305.891088][ T9145] __sys_recvmmsg+0x113/0x450 [ 2305.895886][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2305.902174][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2305.907318][ T9145] do_fast_syscall_32+0x33/0x70 [ 2305.912216][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2305.916837][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.923289][ T9145] [ 2305.925615][ T9145] Uninit was stored to memory at: [ 2305.930699][ T9145] __get_compat_msghdr+0x514/0x750 [ 2305.935934][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2305.940823][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2305.945625][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2305.950167][ T9145] __sys_recvmmsg+0x113/0x450 [ 2305.954965][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2305.961258][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2305.966424][ T9145] do_fast_syscall_32+0x33/0x70 [ 2305.971323][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2305.975957][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.982419][ T9145] [ 2305.984750][ T9145] Uninit was stored to memory at: [ 2305.989835][ T9145] __get_compat_msghdr+0x514/0x750 [ 2305.995086][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2305.999984][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2306.004809][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2306.009358][ T9145] __sys_recvmmsg+0x113/0x450 [ 2306.014174][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2306.020470][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2306.025650][ T9145] do_fast_syscall_32+0x33/0x70 [ 2306.030544][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2306.035200][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.041577][ T9145] [ 2306.044001][ T9145] Uninit was stored to memory at: [ 2306.049091][ T9145] __get_compat_msghdr+0x514/0x750 [ 2306.054339][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2306.059234][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2306.064054][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2306.068602][ T9145] __sys_recvmmsg+0x113/0x450 [ 2306.073439][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2306.079748][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2306.084908][ T9145] do_fast_syscall_32+0x33/0x70 [ 2306.089799][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2306.094433][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.100829][ T9145] [ 2306.103253][ T9145] Uninit was stored to memory at: [ 2306.108340][ T9145] __get_compat_msghdr+0x514/0x750 [ 2306.113599][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2306.118497][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2306.123314][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2306.127871][ T9145] __sys_recvmmsg+0x113/0x450 [ 2306.132699][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2306.138988][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2306.144155][ T9145] do_fast_syscall_32+0x33/0x70 [ 2306.149041][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2306.153735][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.160123][ T9145] [ 2306.162603][ T9145] Uninit was stored to memory at: [ 2306.167717][ T9145] __get_compat_msghdr+0x514/0x750 [ 2306.173032][ T9145] get_compat_msghdr+0x8c/0x1c0 [ 2306.177926][ T9145] ___sys_recvmsg+0x19d/0x870 [ 2306.182819][ T9145] do_recvmmsg+0x63a/0x10a0 [ 2306.187409][ T9145] __sys_recvmmsg+0x113/0x450 [ 2306.192142][ T9145] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2306.198623][ T9145] __do_fast_syscall_32+0x95/0xf0 [ 2306.203858][ T9145] do_fast_syscall_32+0x33/0x70 [ 2306.208752][ T9145] do_SYSENTER_32+0x1b/0x20 [ 2306.213410][ T9145] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.219801][ T9145] [ 2306.222136][ T9145] Local variable msg_sys created at: [ 2306.227535][ T9145] do_recvmmsg+0x5f/0x10a0 [ 2306.231998][ T9145] __sys_recvmmsg+0x113/0x450 [ 2306.754320][ T9182] not chained 1840000 origins [ 2306.759156][ T9182] CPU: 0 PID: 9182 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2306.769257][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2306.779337][ T9182] Call Trace: [ 2306.782652][ T9182] [ 2306.785600][ T9182] dump_stack_lvl+0x1c8/0x256 [ 2306.790323][ T9182] dump_stack+0x1a/0x1c [ 2306.794515][ T9182] kmsan_internal_chain_origin+0x78/0x120 [ 2306.800284][ T9182] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2306.807354][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.812531][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2306.818827][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.823985][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2306.829854][ T9182] ? __get_compat_msghdr+0x5b/0x750 [ 2306.835098][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.840256][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2306.846115][ T9182] ? should_fail+0x3f/0x7e0 [ 2306.850644][ T9182] ? __stack_depot_save+0x21/0x4b0 [ 2306.855805][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.860960][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2306.867273][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.872430][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2306.878286][ T9182] __msan_chain_origin+0xbd/0x140 [ 2306.883360][ T9182] __get_compat_msghdr+0x514/0x750 [ 2306.888532][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2306.893426][ T9182] ? ___sys_recvmsg+0xa9/0x870 [ 2306.898231][ T9182] ? do_recvmmsg+0x63a/0x10a0 [ 2306.902958][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2306.907698][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.912853][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2306.918707][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.923861][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2306.929721][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2306.934278][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.939530][ T9182] ? __sys_recvmmsg+0x52/0x450 [ 2306.944337][ T9182] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2306.950812][ T9182] __sys_recvmmsg+0x113/0x450 [ 2306.955534][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2306.960708][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2306.967019][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2306.972091][ T9182] ? exit_to_user_mode_prepare+0x119/0x220 [ 2306.977955][ T9182] do_fast_syscall_32+0x33/0x70 [ 2306.982855][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2306.987413][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.993787][ T9182] RIP: 0023:0xf7fc2549 [ 2306.997873][ T9182] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2307.017522][ T9182] RSP: 002b:00000000f7f7b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2307.025969][ T9182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2307.033971][ T9182] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2307.041966][ T9182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2307.049964][ T9182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2307.057957][ T9182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2307.065967][ T9182] [ 2307.076309][ T9182] Uninit was stored to memory at: [ 2307.085562][ T9182] __get_compat_msghdr+0x514/0x750 [ 2307.090730][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2307.095896][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2307.100624][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2307.105279][ T9182] __sys_recvmmsg+0x113/0x450 [ 2307.110613][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2307.117011][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2307.122088][ T9182] do_fast_syscall_32+0x33/0x70 [ 2307.127147][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2307.131781][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.138329][ T9182] [ 2307.140660][ T9182] Uninit was stored to memory at: [ 2307.145909][ T9182] __get_compat_msghdr+0x514/0x750 [ 2307.151158][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2307.156229][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2307.160953][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2307.165847][ T9182] __sys_recvmmsg+0x113/0x450 [ 2307.170570][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2307.177154][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2307.182223][ T9182] do_fast_syscall_32+0x33/0x70 [ 2307.187311][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2307.191892][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.198434][ T9182] [ 2307.200766][ T9182] Uninit was stored to memory at: [ 2307.206016][ T9182] __get_compat_msghdr+0x514/0x750 [ 2307.211179][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2307.216232][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2307.221060][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2307.225777][ T9182] __sys_recvmmsg+0x113/0x450 [ 2307.230528][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2307.237004][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2307.242083][ T9182] do_fast_syscall_32+0x33/0x70 [ 2307.247131][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2307.251673][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.258202][ T9182] [ 2307.260532][ T9182] Uninit was stored to memory at: [ 2307.265773][ T9182] __get_compat_msghdr+0x514/0x750 [ 2307.270927][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2307.275970][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2307.280700][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2307.285404][ T9182] __sys_recvmmsg+0x113/0x450 [ 2307.290215][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2307.296671][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2307.301741][ T9182] do_fast_syscall_32+0x33/0x70 [ 2307.306827][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2307.311368][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.317886][ T9182] [ 2307.320218][ T9182] Uninit was stored to memory at: [ 2307.325492][ T9182] __get_compat_msghdr+0x514/0x750 [ 2307.330648][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2307.335715][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2307.340442][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2307.345179][ T9182] __sys_recvmmsg+0x113/0x450 [ 2307.349905][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2307.356373][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2307.361458][ T9182] do_fast_syscall_32+0x33/0x70 [ 2307.366529][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2307.371078][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.377742][ T9182] [ 2307.380077][ T9182] Uninit was stored to memory at: [ 2307.385370][ T9182] __get_compat_msghdr+0x514/0x750 [ 2307.390544][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2307.395622][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2307.400389][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2307.405116][ T9182] __sys_recvmmsg+0x113/0x450 [ 2307.409845][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2307.416297][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2307.421370][ T9182] do_fast_syscall_32+0x33/0x70 [ 2307.426419][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2307.430978][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.437512][ T9182] [ 2307.439843][ T9182] Uninit was stored to memory at: [ 2307.445088][ T9182] __get_compat_msghdr+0x514/0x750 [ 2307.450245][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2307.455300][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2307.460026][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2307.464735][ T9182] __sys_recvmmsg+0x113/0x450 [ 2307.469467][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2307.475928][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2307.481008][ T9182] do_fast_syscall_32+0x33/0x70 [ 2307.486071][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2307.490621][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.497166][ T9182] [ 2307.499509][ T9182] Local variable msg_sys created at: [ 2307.504970][ T9182] do_recvmmsg+0x5f/0x10a0 [ 2307.509450][ T9182] __sys_recvmmsg+0x113/0x450 01:53:49 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, 0x5c) 01:53:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5412, &(0x7f00000004c0)={0xcc, "869041abb2141a21f9a082fbe9f14e431fb56d26b0c9e29d1d23e195c938aa4891d8717bc5ef5ce95c6cac5385e24958694a37a12d948bac0dbb13e13e8a6aa1d029f5c728aea85326e1217dc6faef276bb5da76603101f53b0a644b23915909cc31e634eab3fc6d36c10268e2a4712bbdaacde5b6a312e440b51aed135c13ceb4f9bf81919b4b1a1f1101fe51096dde6094dd0df4410b3b67b9f57ccdf9679f75dfc7bcd1e48304c7c451ef84f111bcda648bb2e94cc735ae01040000653824ae94053c41c805414073fe205a02b53ca359b80c4904523becab5c23cdc672f6531e52ba7b434407a9fe53718f29ecae87660b64702e17a6ee2d97c7756dff95f8a09c1b851d4770b40000378247589f2fa4d93d50d6eb27dc5b4b026f8fc4b60e648b7db1f732a652213a9070a0ce1e8fb1b26f6a9846c2b5ee21c191f8a67ecafc52243e5e66bc13c3e3a119d934b7b653f33931b36a05b64084b6ee0cea5eb57adfb5b638fcf633ccebfca07bb925454e08d8b7da024f45badcdfc31b3bba62b74c4f96fb5cd57fe7f38c3354acc84f476f26f7968eac947e7b2003990d1a6c2b3580d67ae8dbe9fa2613a154ae6453de1ffd89984412bfb62f0c4a40d9bef7ea99410339e1acf35129c8083b952c6f675a86d8ae537a1aa6cbec4397c1e0ed09a8a61d07bbb13444248ab752f92dd80f00"}) 01:53:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r1 = dup(r0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 01:53:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') read$char_usb(r0, 0x0, 0xc0804b5b) 01:53:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xffff, 0x2, 0x6100}, 0x48) 01:53:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x2b, 0x0, 0x0) 01:53:49 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000080)=""/229, &(0x7f0000000180)=0xe5) 01:53:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0x3, 0x0, [{}, {}]}]}}, &(0x7f0000000080)=""/191, 0x36, 0xbf, 0x1}, 0x20) [ 2307.988461][ T9182] not chained 1850000 origins [ 2307.993542][ T9182] CPU: 0 PID: 9182 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2308.003651][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2308.013737][ T9182] Call Trace: [ 2308.017046][ T9182] [ 2308.019994][ T9182] dump_stack_lvl+0x1c8/0x256 [ 2308.024732][ T9182] dump_stack+0x1a/0x1c [ 2308.028931][ T9182] kmsan_internal_chain_origin+0x78/0x120 [ 2308.034741][ T9182] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2308.040867][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.046037][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2308.052335][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.057501][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2308.063372][ T9182] ? __get_compat_msghdr+0x5b/0x750 [ 2308.068623][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.073792][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2308.079665][ T9182] ? should_fail+0x3f/0x7e0 [ 2308.084205][ T9182] ? __stack_depot_save+0x21/0x4b0 [ 2308.089372][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.094540][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2308.100840][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.106001][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2308.111955][ T9182] __msan_chain_origin+0xbd/0x140 [ 2308.117033][ T9182] __get_compat_msghdr+0x514/0x750 [ 2308.122209][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2308.127114][ T9182] ? ___sys_recvmsg+0xa9/0x870 [ 2308.131929][ T9182] ? do_recvmmsg+0x63a/0x10a0 [ 2308.136663][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2308.141428][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.146596][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2308.152461][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.157624][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2308.163492][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2308.168060][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.173227][ T9182] ? __sys_recvmmsg+0x52/0x450 [ 2308.178032][ T9182] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.184499][ T9182] __sys_recvmmsg+0x113/0x450 [ 2308.189222][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2308.194383][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.200682][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2308.205745][ T9182] ? exit_to_user_mode_prepare+0x119/0x220 [ 2308.212139][ T9182] do_fast_syscall_32+0x33/0x70 [ 2308.217205][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2308.221744][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.228112][ T9182] RIP: 0023:0xf7fc2549 [ 2308.232193][ T9182] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2308.251837][ T9182] RSP: 002b:00000000f7f7b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2308.260277][ T9182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2308.268284][ T9182] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2308.276271][ T9182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 01:53:50 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0x2b, 0x0, 0x0) [ 2308.284254][ T9182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2308.292242][ T9182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2308.300244][ T9182] [ 2308.305281][ T9182] Uninit was stored to memory at: [ 2308.315964][ T9182] __get_compat_msghdr+0x514/0x750 [ 2308.321342][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2308.326364][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2308.331093][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2308.335745][ T9182] __sys_recvmmsg+0x113/0x450 [ 2308.340472][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.346865][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2308.351935][ T9182] do_fast_syscall_32+0x33/0x70 [ 2308.356960][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2308.361511][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.368050][ T9182] [ 2308.370380][ T9182] Uninit was stored to memory at: [ 2308.375625][ T9182] __get_compat_msghdr+0x514/0x750 [ 2308.380787][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2308.385938][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2308.390671][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2308.395382][ T9182] __sys_recvmmsg+0x113/0x450 [ 2308.400117][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.406681][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2308.411755][ T9182] do_fast_syscall_32+0x33/0x70 [ 2308.416830][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2308.421375][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.427914][ T9182] [ 2308.430278][ T9182] Uninit was stored to memory at: [ 2308.435527][ T9182] __get_compat_msghdr+0x514/0x750 [ 2308.440679][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2308.445723][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2308.450454][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2308.455157][ T9182] __sys_recvmmsg+0x113/0x450 [ 2308.459881][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.466335][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2308.471406][ T9182] do_fast_syscall_32+0x33/0x70 [ 2308.476456][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2308.481003][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.487546][ T9182] [ 2308.489875][ T9182] Uninit was stored to memory at: [ 2308.495117][ T9182] __get_compat_msghdr+0x514/0x750 [ 2308.500271][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2308.505331][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2308.510063][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2308.514756][ T9182] __sys_recvmmsg+0x113/0x450 [ 2308.519509][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.525958][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2308.531025][ T9182] do_fast_syscall_32+0x33/0x70 [ 2308.536270][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2308.540824][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.547362][ T9182] [ 2308.549793][ T9182] Uninit was stored to memory at: [ 2308.554998][ T9182] __get_compat_msghdr+0x514/0x750 [ 2308.560152][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2308.565150][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2308.569899][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2308.574580][ T9182] __sys_recvmmsg+0x113/0x450 [ 2308.579307][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.585710][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2308.590800][ T9182] do_fast_syscall_32+0x33/0x70 [ 2308.595822][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2308.600416][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.606910][ T9182] [ 2308.609258][ T9182] Uninit was stored to memory at: [ 2308.614475][ T9182] __get_compat_msghdr+0x514/0x750 [ 2308.619636][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2308.624633][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2308.629356][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2308.634009][ T9182] __sys_recvmmsg+0x113/0x450 [ 2308.638733][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.645127][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2308.650191][ T9182] do_fast_syscall_32+0x33/0x70 [ 2308.655186][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2308.659726][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.666201][ T9182] [ 2308.668534][ T9182] Uninit was stored to memory at: [ 2308.673719][ T9182] __get_compat_msghdr+0x514/0x750 [ 2308.678875][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2308.683989][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2308.688730][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2308.693392][ T9182] __sys_recvmmsg+0x113/0x450 [ 2308.698112][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2308.704507][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2308.709588][ T9182] do_fast_syscall_32+0x33/0x70 [ 2308.714654][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2308.719211][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.725733][ T9182] [ 2308.728069][ T9182] Local variable msg_sys created at: [ 2308.733518][ T9182] do_recvmmsg+0x5f/0x10a0 [ 2308.737989][ T9182] __sys_recvmmsg+0x113/0x450 [ 2309.486281][ T9182] not chained 1860000 origins [ 2309.491010][ T9182] CPU: 1 PID: 9182 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2309.501111][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2309.511194][ T9182] Call Trace: [ 2309.514549][ T9182] [ 2309.517493][ T9182] dump_stack_lvl+0x1c8/0x256 [ 2309.522224][ T9182] dump_stack+0x1a/0x1c [ 2309.526417][ T9182] kmsan_internal_chain_origin+0x78/0x120 [ 2309.532193][ T9182] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2309.538322][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.543487][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2309.549782][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.554942][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2309.560805][ T9182] ? __get_compat_msghdr+0x5b/0x750 [ 2309.566046][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.571200][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2309.577085][ T9182] ? should_fail+0x3f/0x7e0 [ 2309.581611][ T9182] ? __stack_depot_save+0x21/0x4b0 [ 2309.586766][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.591956][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2309.598353][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.603537][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2309.609412][ T9182] __msan_chain_origin+0xbd/0x140 [ 2309.614506][ T9182] __get_compat_msghdr+0x514/0x750 [ 2309.619678][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2309.624606][ T9182] ? ___sys_recvmsg+0xa9/0x870 [ 2309.629426][ T9182] ? do_recvmmsg+0x63a/0x10a0 [ 2309.634162][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2309.638895][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.644058][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2309.649911][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.655068][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2309.660926][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2309.665502][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.670661][ T9182] ? __sys_recvmmsg+0x52/0x450 [ 2309.675463][ T9182] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2309.681931][ T9182] __sys_recvmmsg+0x113/0x450 [ 2309.686664][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2309.691823][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2309.698120][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2309.703177][ T9182] ? exit_to_user_mode_prepare+0x119/0x220 [ 2309.709031][ T9182] do_fast_syscall_32+0x33/0x70 [ 2309.713915][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2309.718457][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.724823][ T9182] RIP: 0023:0xf7fc2549 [ 2309.728915][ T9182] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2309.748569][ T9182] RSP: 002b:00000000f7f7b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2309.757009][ T9182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2309.764997][ T9182] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2309.772984][ T9182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2309.780966][ T9182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2309.788950][ T9182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2309.796951][ T9182] [ 2309.803226][ T9182] Uninit was stored to memory at: [ 2309.808342][ T9182] __get_compat_msghdr+0x514/0x750 [ 2309.813990][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2309.818887][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2309.823753][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2309.828304][ T9182] __sys_recvmmsg+0x113/0x450 [ 2309.833154][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2309.839444][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2309.844634][ T9182] do_fast_syscall_32+0x33/0x70 [ 2309.849554][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2309.854219][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.860590][ T9182] [ 2309.863027][ T9182] Uninit was stored to memory at: [ 2309.868111][ T9182] __get_compat_msghdr+0x514/0x750 [ 2309.873383][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2309.878280][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2309.883123][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2309.887724][ T9182] __sys_recvmmsg+0x113/0x450 [ 2309.892619][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2309.898910][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2309.904168][ T9182] do_fast_syscall_32+0x33/0x70 [ 2309.909151][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2309.913852][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.920234][ T9182] [ 2309.922731][ T9182] Uninit was stored to memory at: [ 2309.927819][ T9182] __get_compat_msghdr+0x514/0x750 [ 2309.933145][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2309.938043][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2309.942951][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2309.947498][ T9182] __sys_recvmmsg+0x113/0x450 [ 2309.952215][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2309.958677][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2309.963932][ T9182] do_fast_syscall_32+0x33/0x70 [ 2309.968827][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2309.973547][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.979919][ T9182] [ 2309.982406][ T9182] Uninit was stored to memory at: [ 2309.987493][ T9182] __get_compat_msghdr+0x514/0x750 [ 2309.992833][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2309.997739][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.002639][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.007193][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.012509][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.018806][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.024000][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.028896][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.033593][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.039971][ T9182] [ 2310.042465][ T9182] Uninit was stored to memory at: [ 2310.047556][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.052812][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.057730][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.062610][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.067154][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.071881][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.078361][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.083538][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.088442][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.093151][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.099521][ T9182] [ 2310.101843][ T9182] Uninit was stored to memory at: [ 2310.107105][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.112347][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.117250][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.121967][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.126712][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.131438][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.137914][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.143085][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.147997][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.152722][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.159100][ T9182] [ 2310.161444][ T9182] Uninit was stored to memory at: [ 2310.166719][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.171884][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.176985][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.181706][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.186435][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.191157][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.197637][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.202800][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.207699][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.212419][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.218797][ T9182] [ 2310.221121][ T9182] Local variable msg_sys created at: [ 2310.226533][ T9182] do_recvmmsg+0x5f/0x10a0 [ 2310.230995][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.425329][ T9182] not chained 1870000 origins [ 2310.430051][ T9182] CPU: 1 PID: 9182 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2310.440128][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.450187][ T9182] Call Trace: [ 2310.453459][ T9182] [ 2310.456396][ T9182] dump_stack_lvl+0x1c8/0x256 [ 2310.461124][ T9182] dump_stack+0x1a/0x1c [ 2310.465312][ T9182] kmsan_internal_chain_origin+0x78/0x120 [ 2310.471063][ T9182] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2310.477188][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.482345][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2310.488653][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.493882][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2310.499842][ T9182] ? __get_compat_msghdr+0x5b/0x750 [ 2310.505072][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.510210][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2310.516153][ T9182] ? should_fail+0x3f/0x7e0 [ 2310.520670][ T9182] ? __stack_depot_save+0x21/0x4b0 [ 2310.525825][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.530984][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2310.537284][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.542446][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2310.548433][ T9182] __msan_chain_origin+0xbd/0x140 [ 2310.553490][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.558654][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.563552][ T9182] ? ___sys_recvmsg+0xa9/0x870 [ 2310.568365][ T9182] ? do_recvmmsg+0x63a/0x10a0 [ 2310.573078][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.577819][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.582973][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2310.588807][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.593943][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2310.599780][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.604316][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.609467][ T9182] ? __sys_recvmmsg+0x52/0x450 [ 2310.614263][ T9182] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.620734][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.625454][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2310.630629][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.636943][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.641994][ T9182] ? exit_to_user_mode_prepare+0x119/0x220 [ 2310.647838][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.652711][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.657239][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.663683][ T9182] RIP: 0023:0xf7fc2549 [ 2310.667755][ T9182] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2310.687400][ T9182] RSP: 002b:00000000f7f7b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2310.695855][ T9182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2310.703832][ T9182] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2310.711827][ T9182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2310.719817][ T9182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2310.727889][ T9182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2310.735890][ T9182] [ 2310.742062][ T9182] Uninit was stored to memory at: [ 2310.747835][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.753100][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.758002][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.762871][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.767448][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.772173][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.778716][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.783925][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.788815][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.793530][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.799909][ T9182] [ 2310.802349][ T9182] Uninit was stored to memory at: [ 2310.807453][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.812739][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.817632][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.822516][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.827120][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.831837][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.838286][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.843466][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.848362][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.853245][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.859632][ T9182] [ 2310.861952][ T9182] Uninit was stored to memory at: [ 2310.867194][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.872455][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.877370][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.882093][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.886782][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.891508][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.897926][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.903113][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.908017][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.912757][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.919135][ T9182] [ 2310.921463][ T9182] Uninit was stored to memory at: [ 2310.926653][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.931888][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.936988][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2310.941714][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2310.946455][ T9182] __sys_recvmmsg+0x113/0x450 [ 2310.951182][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2310.957667][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2310.962855][ T9182] do_fast_syscall_32+0x33/0x70 [ 2310.967757][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2310.972491][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.978881][ T9182] [ 2310.981210][ T9182] Uninit was stored to memory at: [ 2310.986441][ T9182] __get_compat_msghdr+0x514/0x750 [ 2310.991595][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2310.996640][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.001371][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2311.006095][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.010818][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.017253][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2311.022413][ T9182] do_fast_syscall_32+0x33/0x70 [ 2311.027304][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2311.031858][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.038447][ T9182] [ 2311.040776][ T9182] Uninit was stored to memory at: [ 2311.046056][ T9182] __get_compat_msghdr+0x514/0x750 [ 2311.051210][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2311.056292][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.061010][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2311.065759][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.070493][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.076933][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2311.082000][ T9182] do_fast_syscall_32+0x33/0x70 [ 2311.087112][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2311.091653][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.098212][ T9182] [ 2311.100544][ T9182] Uninit was stored to memory at: [ 2311.105768][ T9182] __get_compat_msghdr+0x514/0x750 [ 2311.110921][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2311.115930][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.120652][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2311.125373][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.130093][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.136566][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2311.141632][ T9182] do_fast_syscall_32+0x33/0x70 [ 2311.146706][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2311.151249][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.157806][ T9182] [ 2311.160141][ T9182] Local variable msg_sys created at: [ 2311.165566][ T9182] do_recvmmsg+0x5f/0x10a0 [ 2311.170027][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.421124][ T9182] not chained 1880000 origins [ 2311.426131][ T9182] CPU: 0 PID: 9182 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2311.436234][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2311.446321][ T9182] Call Trace: [ 2311.449611][ T9182] [ 2311.452553][ T9182] dump_stack_lvl+0x1c8/0x256 [ 2311.457279][ T9182] dump_stack+0x1a/0x1c [ 2311.461469][ T9182] kmsan_internal_chain_origin+0x78/0x120 [ 2311.467233][ T9182] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2311.473331][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.478490][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2311.484786][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.489940][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2311.495786][ T9182] ? __get_compat_msghdr+0x5b/0x750 [ 2311.501030][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.506173][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2311.512074][ T9182] ? should_fail+0x3f/0x7e0 [ 2311.516592][ T9182] ? __stack_depot_save+0x21/0x4b0 [ 2311.521750][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.526905][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2311.533180][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.538339][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2311.544280][ T9182] __msan_chain_origin+0xbd/0x140 [ 2311.549415][ T9182] __get_compat_msghdr+0x514/0x750 [ 2311.554614][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2311.559516][ T9182] ? ___sys_recvmsg+0xa9/0x870 [ 2311.564342][ T9182] ? do_recvmmsg+0x63a/0x10a0 [ 2311.569062][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.573784][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.579095][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2311.584968][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.590135][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2311.596119][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2311.600687][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.605854][ T9182] ? __sys_recvmmsg+0x52/0x450 [ 2311.610652][ T9182] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.617195][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.621942][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2311.627125][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.633434][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2311.638502][ T9182] ? exit_to_user_mode_prepare+0x119/0x220 [ 2311.644350][ T9182] do_fast_syscall_32+0x33/0x70 [ 2311.649250][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2311.653772][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.660152][ T9182] RIP: 0023:0xf7fc2549 [ 2311.664226][ T9182] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2311.683875][ T9182] RSP: 002b:00000000f7f7b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2311.692340][ T9182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2311.700364][ T9182] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2311.708369][ T9182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2311.716384][ T9182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2311.724409][ T9182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2311.732446][ T9182] [ 2311.737224][ T9182] Uninit was stored to memory at: [ 2311.742657][ T9182] __get_compat_msghdr+0x514/0x750 [ 2311.747815][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2311.752808][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.757640][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2311.762196][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.767046][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.773509][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2311.778586][ T9182] do_fast_syscall_32+0x33/0x70 [ 2311.783834][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2311.788402][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.794946][ T9182] [ 2311.797285][ T9182] Uninit was stored to memory at: [ 2311.802523][ T9182] __get_compat_msghdr+0x514/0x750 [ 2311.808201][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2311.813350][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.818097][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2311.822793][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.827517][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.833974][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2311.839050][ T9182] do_fast_syscall_32+0x33/0x70 [ 2311.844237][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2311.848823][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.855373][ T9182] [ 2311.857728][ T9182] Uninit was stored to memory at: [ 2311.862968][ T9182] __get_compat_msghdr+0x514/0x750 [ 2311.868128][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2311.873176][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.877921][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2311.882599][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.887325][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.893800][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2311.898889][ T9182] do_fast_syscall_32+0x33/0x70 [ 2311.903979][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2311.908544][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.915096][ T9182] [ 2311.917426][ T9182] Uninit was stored to memory at: [ 2311.922637][ T9182] __get_compat_msghdr+0x514/0x750 [ 2311.927788][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2311.932887][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.937623][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2311.942427][ T9182] __sys_recvmmsg+0x113/0x450 [ 2311.947160][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2311.953615][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2311.958686][ T9182] do_fast_syscall_32+0x33/0x70 [ 2311.963740][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2311.968285][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.974831][ T9182] [ 2311.977174][ T9182] Uninit was stored to memory at: [ 2311.982466][ T9182] __get_compat_msghdr+0x514/0x750 [ 2311.987624][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2311.992654][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2311.997384][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.001940][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.006822][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.013203][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.018269][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.023292][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.027836][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.034326][ T9182] [ 2312.036652][ T9182] Uninit was stored to memory at: [ 2312.041727][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.047025][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.051919][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2312.056810][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.061362][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.066226][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.072604][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.077674][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.082715][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.087258][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.093920][ T9182] [ 2312.096254][ T9182] Uninit was stored to memory at: [ 2312.101338][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.106679][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.111584][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2312.116434][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.120989][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.125856][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.132149][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.137326][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.142219][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.146968][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.153447][ T9182] [ 2312.155785][ T9182] Local variable msg_sys created at: [ 2312.161065][ T9182] do_recvmmsg+0x5f/0x10a0 [ 2312.165685][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.370586][ T9182] not chained 1890000 origins [ 2312.375532][ T9182] CPU: 0 PID: 9182 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2312.385639][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.395728][ T9182] Call Trace: [ 2312.399033][ T9182] [ 2312.401983][ T9182] dump_stack_lvl+0x1c8/0x256 [ 2312.406717][ T9182] dump_stack+0x1a/0x1c [ 2312.410938][ T9182] kmsan_internal_chain_origin+0x78/0x120 [ 2312.416722][ T9182] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2312.422849][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.428011][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2312.434309][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.439470][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2312.445332][ T9182] ? __get_compat_msghdr+0x5b/0x750 [ 2312.450753][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.455907][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2312.461768][ T9182] ? should_fail+0x3f/0x7e0 [ 2312.466300][ T9182] ? __stack_depot_save+0x21/0x4b0 [ 2312.471458][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.476620][ T9182] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2312.482926][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.488093][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2312.493959][ T9182] __msan_chain_origin+0xbd/0x140 [ 2312.499035][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.504206][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.509106][ T9182] ? ___sys_recvmsg+0xa9/0x870 [ 2312.513913][ T9182] ? do_recvmmsg+0x63a/0x10a0 [ 2312.518641][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2312.523378][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.528543][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2312.534407][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.539617][ T9182] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2312.545477][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.550064][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.555233][ T9182] ? __sys_recvmmsg+0x52/0x450 [ 2312.560042][ T9182] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.566618][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.571357][ T9182] ? kmsan_get_metadata+0x33/0x220 [ 2312.576528][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.582840][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.587917][ T9182] ? exit_to_user_mode_prepare+0x119/0x220 [ 2312.593792][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.598687][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.603226][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.609599][ T9182] RIP: 0023:0xf7fc2549 [ 2312.613684][ T9182] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2312.633335][ T9182] RSP: 002b:00000000f7f7b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2312.641800][ T9182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2312.649814][ T9182] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2312.657813][ T9182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2312.665807][ T9182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2312.673801][ T9182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2312.681842][ T9182] [ 2312.686368][ T9182] Uninit was stored to memory at: [ 2312.691474][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.697013][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.701913][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2312.706748][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.711296][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.716159][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.722550][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.727619][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.732667][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.737205][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.743666][ T9182] [ 2312.745993][ T9182] Uninit was stored to memory at: [ 2312.751077][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.756378][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.761275][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2312.766158][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.770708][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.775593][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.781970][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.787202][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.792093][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.796801][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.803270][ T9182] [ 2312.805600][ T9182] Uninit was stored to memory at: [ 2312.810683][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.815985][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.820879][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2312.825762][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.830313][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.835193][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.841488][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.846712][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.851602][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.856388][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.862854][ T9182] [ 2312.865179][ T9182] Uninit was stored to memory at: [ 2312.870260][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.875568][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.880460][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2312.885336][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.889884][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.894778][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.901075][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.906299][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.911202][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.915906][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.922370][ T9182] [ 2312.924695][ T9182] Uninit was stored to memory at: [ 2312.929782][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.935087][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.939983][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2312.944920][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2312.949474][ T9182] __sys_recvmmsg+0x113/0x450 [ 2312.954349][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2312.960646][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2312.965871][ T9182] do_fast_syscall_32+0x33/0x70 [ 2312.970770][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2312.975473][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.981841][ T9182] [ 2312.984325][ T9182] Uninit was stored to memory at: [ 2312.989409][ T9182] __get_compat_msghdr+0x514/0x750 [ 2312.994652][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2312.999544][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2313.004422][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2313.008975][ T9182] __sys_recvmmsg+0x113/0x450 [ 2313.013851][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2313.020145][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2313.025373][ T9182] do_fast_syscall_32+0x33/0x70 [ 2313.030268][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2313.034967][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.041337][ T9182] [ 2313.043814][ T9182] Uninit was stored to memory at: [ 2313.048902][ T9182] __get_compat_msghdr+0x514/0x750 [ 2313.054206][ T9182] get_compat_msghdr+0x8c/0x1c0 [ 2313.059095][ T9182] ___sys_recvmsg+0x19d/0x870 [ 2313.063962][ T9182] do_recvmmsg+0x63a/0x10a0 [ 2313.068510][ T9182] __sys_recvmmsg+0x113/0x450 [ 2313.073378][ T9182] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 2313.079679][ T9182] __do_fast_syscall_32+0x95/0xf0 [ 2313.084905][ T9182] do_fast_syscall_32+0x33/0x70 [ 2313.089794][ T9182] do_SYSENTER_32+0x1b/0x20 [ 2313.094499][ T9182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.100870][ T9182] [ 2313.103335][ T9182] Local variable msg_sys created at: [ 2313.108619][ T9182] do_recvmmsg+0x5f/0x10a0 [ 2313.113233][ T9182] __sys_recvmmsg+0x113/0x450 01:53:55 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000106a053b0340000102030709022400010100000009040000000301000009"], &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 01:53:55 executing program 0: openat$mice(0xffffff9c, &(0x7f00000002c0), 0x4002) 01:53:55 executing program 2: r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x4) 01:53:55 executing program 5: syz_clone(0x200, 0x0, 0xffffffffffffff95, 0x0, 0x0, 0x0) 01:53:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000280)) 01:53:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000007c0), 0x4) 01:53:55 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:53:55 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x16, &(0x7f0000000000), 0x8) 01:53:56 executing program 4: mount(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) [ 2313.915106][T29444] usb 2-1: new high-speed USB device number 76 using dummy_hcd 01:53:56 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0xc0) [ 2314.091185][ T24] audit: type=1800 audit(1655517236.151:70): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 2314.172808][T29444] usb 2-1: Using ep0 maxpacket: 16 01:53:56 executing program 2: r0 = socket(0x2, 0x5, 0x0) r1 = dup(r0) sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)='T', 0x1}], 0x1}, 0x0) 01:53:56 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800) [ 2314.382941][T29444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.494775][T29444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.583905][T29444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.682967][T29444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.773078][T29444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.864282][T29444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.972870][T29444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.172801][T29444] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.40 [ 2315.182045][T29444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.190333][T29444] usb 2-1: Product: syz [ 2315.197951][T29444] usb 2-1: Manufacturer: syz [ 2315.202840][T29444] usb 2-1: SerialNumber: syz [ 2315.260516][T29444] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2315.467999][T29444] usb 2-1: USB disconnect, device number 76 01:53:58 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 01:53:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="8ddb5dc7361364e32c5714709510de914f0fa2157d1538eadd4802d21a0477f039272014097104e8d404e7141b", 0x2d}, {&(0x7f0000000400)="db3ef3ee53ca1dca6018af79a1aa608ab8b3b942148b21079b", 0x19}, {&(0x7f0000000780)="984a7e7d6ad4f47109697cc498ef3feefd4db38ef6baf31e088ef9906a66ac0b8d2a806e06887cbed16a7adb1c171f9f4cfadf4480e699ae34be8c34c21d4f530d3cce83a137f09333875f", 0x4b}], 0x3}, 0x0) 01:53:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, 0x0, 0x0) close(r0) 01:53:58 executing program 3: r0 = socket(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x8) 01:53:58 executing program 0: futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 01:53:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)="c8", 0x1, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 01:53:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18060000000000000000000000002000181b0000", @ANYRES32=0x1, @ANYBLOB="000000400000800095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:53:58 executing program 5: syz_clone(0x64b0c000, 0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0) 01:53:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x5452, &(0x7f00000016c0)) 01:53:58 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) 01:53:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x1000000, 0x4}, 0x48) 01:53:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x5421, &(0x7f00000016c0)) 01:53:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x2000000, 0x4}, 0x48) 01:53:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r1, 0x11, 0x0, 0x0, 0x0}, 0x20) 01:53:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x0, 0xfffffffe, 0x4}, 0x48) 01:53:58 executing program 1: syz_clone(0x64b0c000, 0x0, 0x0, &(0x7f00000013c0), &(0x7f0000001400), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001540), 0x10) 01:53:58 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 01:53:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10002) close(r1) write$cgroup_pid(r0, 0x0, 0x0) 01:53:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x22) 01:53:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000001780)=""/160, 0x26, 0xa0, 0x1}, 0x20) 01:53:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x20) unlink(&(0x7f0000000180)='./file0\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/213, 0xd5}], 0x1}, 0x10041) openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) socketpair(0x5, 0x5, 0x61, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000001ac0)={&(0x7f0000000400)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000480)="0319081d833beb14ab85ca4452339232da6c47cf5de583218a894d287c6ee4920ad21aa1fbfb4faf5b1b6b06e888562d4f3f42cab043bdc0a81cae97371857fc0330a4a4247fa591373bd2991e1be10a28fd431e9a0a37e1a795ceb2bed1a9c9bf63f724d226f300e95af67129e8679bcddee4dda91126d9a47aec6124bfcbf4740c6ee826eb96d2ecbff55696afe7c5a624569f667e6f2ed2110e3c595e329eb68185aedeb1f78164530faa955a4a9a38da3330f9df8d13f4fbf0669c0fcd51abb90de814fc527763d2a34571408c46afb3bbd09ea4987f373900e0ed3a375824b0353a6f4993f57d5218285a0621745554e6194342fa73f6459936d5744c1043410277183e0df57a9929bc054ff2c21938cd5c2cf44bd114b790775bdb963659aa0e94df39d54cf55e5900205d634ced41b55d9984a4aee408da6eaabef1a4cbf2e854dcaf594d34c7bbc397efd8c4e38acdc21746c35d3cdc89814a3fede450407dad2475b99a73bf386de96aa9fa40804cbf260639788242a9e2e3256e5b1e1edf7cb4eedff36d95be905aae2248f1896da0207253e4a46152a809ba8a20b226892377f8e4030f61c50046041d1adfbb226bd2ad6412e3c07dc71b39c061af018e42d232c6062fa74235e312fbb3a98216c0ea696705c36b11047f46ad031fc56b4161c5dd609afdf52d61e1fae0b1494087557685b542e6ebf68380501db69a6bdf9c3c4b7efb673e9b7c42be4d820d241a3cb97f05eb44a06bc6dd5c6e91d0ffd39e59125a01132b044b5d232403471c6e37d72a12850b8769c3e71de47b4674092295a4d7654b79ea50ce2498c8606ad630e103bde0f1be82bf1c98dbdeeca850fd035b6fe30721dbb4dc72c851980fdb92a7964323c1e7b5dbcefcb4cd5a2147bb75b69494ee49926a3a53be9a61e98fbf71ae88101b2cf5a9b1aa2578952e921fc5038b1f77fb70c3ebc5b21df644232dafda8c99dd1384d1efcddd7dd6e0f591c5ae4e6dda32a7b083d58e3f93df3753f90c6a811c0867f5af0770c0176b3cab813c53c5b9c2a7b3670b53277565d1bfd0f4b072a9394f8b947fb06137f71e394cf8e90952908151ce1a88f7eaca64be2a503f79ebcddbaa4a93690690f538178f30e3d88f8912ac53240b214ca19e7837d94a9402f4183e82b648d439818bb8cacda7659e33e16fe45b7238615fb84b1c099b1cff824f5e9cde68d9cbd883143dd77e5609aec3d1b1deb113ab48d44449d46f26737f7db74b12cc735f2cef1468f48ca17dc108123f1ae9f582b7bacc5f239a9c6e5df4505bde1fb183b6c53f19bee350cbdec4e581768eb0455745d8e2234068a9f845b0b1cf16f39ba36898e6494e4bd14bfdee7bea0e5dca9606fcca3d309117bc15cc1fdff4ac1e10932633ec79ff3fac631517f7f8f92eb78bafff66e1b51761cb623d87bd7ab098dccaa3d4031137aa8053a9ae5f6c84a2c9cc9e5fdba9861aacbb112fc98a852c9d9784307fe6bb21b1eda6fd3cec1c50e0a17f94f44fe99309585a5643d18c8d026455987347893055fa3962689115c1d6013d80108d5195b761bf01120ca440fcf4979a04035a9afe911de96075fde6153c9443c2c3f77575a12e206f81137ee72e57a4d6835177cadbdb6f16138fce64c63e7b799729e685ef2f2395306a8bda50713689e61659adc274f4a77f1c5ae7a743d69fd40e4d9ee17d5d547b59965548335106488984ad21237921ae037636102f2a6d0f328626cbea2fb7687f11527bb25fd11fdaa927501fde7a5695aed004d5bcfc952c345515c03d708d27c0d651b28b8558b08825b627f0a5b3bfd4c68ca42f6de125bb7c6f21862c364c79348e7aecccb6db2dca2f91a06f5d69bd8096a3efb19cef221660f516be535759fc62ddd25aad1191467064ae7db8365e4dd258060a1d81d9bce979e9c49f8934fa23fa278a621ed3e6867c47f9fdd609fe2745d613f0d03545482587f0f16a36fea46d781b514c0922c8c53942bc23b2f61f07a138d9776ab64c9123444f951a872f93e6e018cb0a566a4ba15bf79022d7f6590c52896865b849a0dccd73579f6e257ec22da983d21e50c02e71ffc42dda9e1da3777ac7063cf934efed81dbf28b9e04bbccebd13a9965e6d4253a2039ddb19f4cfb407ccef9832f3e8ffd0c5beeeac3b80cc774f119d68c4eeeb6e56d99b975f3f32f51f638d6863ee44157286dacd5f27a3f2c22aaf75a2fe4f6cd5275feccab7de372f1faea0f854c8d6efde4b4831ceff14852382e58ed0fed0be308fcc8bf88720fddf384f822282e511328f1a75c1842c7012c6598d955484152009882d6d1107dca8ef8b645d17f2a74a08258c5bccf118223ec4662730d414bd77d3861c804e456617c1f090acf4a25164cb87be9c209cd64efaff9b559106c1cc4b0a47432ad836c156c5eaeff388d176e905d0fad2466f7d6330151cb5a6cdc03684185241ef9744c7130b0847eab5b3143f426c9f292e217684a037d4f3fb8c91a7e53f5d2562ac8897c048fc6fa8a4ee82933129a29906d77d7beab57f40231c1628d1b1513d29733e0ca474c3bb6cd0a7b3c7db3fe185b50a8ece7b88d399dd74302adc653ee9527119763071fce275e9ecb588c9a421ac889dce23c3e02b9707fb21c259e68f86bc97b37aee135bb874e1738fa34941b759dd6e803179fcc20153d3dfe43714decc40fa2c175e17b854f8cad3e47fa209825a33b3caa0b43720961acf228e2190205b5cb663eadb550930eda952bc7c62b9cc1412d97f86e53c2986a9bc5b7ddd973983e8d0a8f16ec3a0692059409e85d655b850836b45c44a44de0e36aaf1c5d24f2bc015810497c8492d22d41c13986b3ecd33674cb63d37bcd9e33a9de733aad999897d66f4caffb971fff28c1756ae57394b29df0e35b3ab29b785273314a444a154bc61981f3ee0c10ed346393c5a4e08e7527d9d37082f60384f0f74d4b3d29c7d9432c3e58a32ed3e85fb9d56a4c4cb79ce5d06d745adf4727861d71595787e83d2a28c5717d47260d3f74f4475a7f61a4479baaaf7b7d682f330a1b5959df2d1070c475bf9b546a60a83bcb7cd0bbdcf43674ae270333fe9e383109a6e5b31138205f8e6061faa9fe2b573b0612f2c1af6e3b7574d8051db789b0bfe853cb135456889fcb6b05606cc82b4fb62fbcda918ea312ecbd4b835c948dbf2e2fe485f9a9b90c2101745f620656f57ed1313407d8d649aa448977288fbee142918336f84dc183debc3ed66c97988e6cf006a905b49b1ff0232d45a26c3e2dd418e4ac21c90b81416be8d7026f29a7329c0fa58227ca81c279122b096180d5c376295f3ad0591dc7974ce895660760974eba7907920d46bcac98012a122842516fdc12b12734b997a76c7971b7f394481703dfdd405ce928fe995c39e0d7a8d511a1cc9c5b15a626ebf83167478f5ac3454097bb490e9bb8c2491abe4f3e62dd1333c3fbc25ed34cf25bc099e053fa9382c7ef503adad00d127d20476724c3048249a0a3e52ac3c48c11ff524ca5255dbe3cce2af323a9b409a903a4de151814c6d17d4f730a2862796a89cb56b425e5d26a213004ec2c1682ae6788451f58fb349d9773b48e26dcb91f1fa3f055e97e04d2b1cef1bb14467726d99c23757202052f94b495cb8759f7b632d9ab559b922f9dede3d62650268e4bcb41b18b86cb245810fe92704706554b406ccb9b0788b04960d405342c989536809274da420d31e7525076debd4254cb9829eb889228c5048eafa20a8ff34943e4cce5e93ed8932d4ea6f6c250d8340e87909d739c4db5a016f3762f86291dee7d215e94da98ed0d1adbe787673ee795317a7825a8af29cbd0a8cc30d32d2b3a8246b652ac521a6b051a78004b4d55398a60bc5b6b1d84e3eee83e90d93e41f440335c67fe7e3dec4c3fee68e34509730aacdfa992e9cfa2c6b4c421322c957809c2fd605a0a98e3a3428f934c8d102cad92e080266beef54d06ae2a02fee1d7d6a853af3e3d491726075690867f4bd793a1c8732ca2bedfc12357a8b845a47b12c6666b84cb77b597969ce347529beeadd297a70a57fd5960e9d4db1a8c8fcc74cf2bacde990be642ad958912e8d66ca2182b02473214dbed06eb95cfe16f996e0467185cab0c712658bb244bfbdc204553f58d1bdae839af75707884c9ea5f18e8117236137715dae74c93f71d750584e328bf2c29536714ace82e4413d6e8c043a2bb77178b3b7df7dd85c77b99a5ac3a3a4a9bc455f948457662284ae6b1726b3765307dbf507f4afde4b6c437735c88c3b72b44bfd4a7964d8a20a58e23325aea4287a51c929e8812976d24875611ea15f7f3dcd28833dd1c5fa05f0a317414b6a385a9b58f98323171ee8e10e129234d780dfc7918421a2a00458f294e7c71b7e087f2733b2f342e800a31af2e46697b8c50563598e69c83c8f9ca010276f3f2f0a33ff595cc1577fbb8d3abae706425142be36bbcb53369a9d0890fb009c58d9d044c62a99082d273efc697a2731a5a03ab8b49fa54fc7e0c4ada46a762f7df7c594033f93742e5b87ed9152bcce48419fbe65cd7e9e01b782b8c54f597f9bd6acc5e11a6b78a8ba67199df6f12abcb35e33d1b1aeb1f026c7911be7e72922478232ff2a39f3e07c73b5d596d4110ded4b2e61dd644f579830dd3b3b494ba1d9d501951d9b08f1eb5c8083bbf9eaa7f92f1b171ed3b6ab9e6c4995f0a9cc73cc2490e47d7a3acde68adf6989591306f22c1098ca377d7c20aaf30835014868a4cf74ae9c65831820d454e0333fa5c1b49c957953af0f45660aca0a9b8f044cad597e93ad9da752fd0560af6ae955673195b9135429c7a407afa99ab8257c314635174fb92c40cc4f0291b61a252d139ba40c22c23cce82a8ab89441a969da85dece2241e091f1dfc65fe6c8f47af99eead4569994e30c1e00440da689faf79063b207cd9f857e692e6102f8f60ec2fc049de139feada3205a87e0324d7379c427e0f0af4172a6444e67553203d2671f3f530c68a11910b68c9026bc7156538215e729fbf8be918970a183d93798bd7a49c7a480668699be63c89ff0fb034065f7a97cedeee518f081615e3f0c45d712d8869f088f1d190f06b294a70b00c9969fa0805a0cee75bb79cee7a3dfd9d73db690b61f915ca6bba3b3d372368de59ea2efe6ea34c2038cc48534f7baa2053cbdb16a716eb7f6d5d02f603b6ac24bfaf9c21020cd74cdec2f090a7bd4a5a43c2160cb8d3dacef0c0a80526add140ab2c0adb4fe5b58fb6935bb68c28813e467d63404bb277d15bad89060e83fe76de94129c9eb66a95a07d6d4efbc16ed200bbb461dc383d2ef273ab870b301bc9c600151ff8aca807f170f211e83a668cd7d6fb32aeb043ef1b38e28aefd94fbb2e4798087059fe4ffc83565a5518855db6c7dfc4401e4d8da09b5fcf6797131562746a7d84a37f1113f2ffca80e02a7ce754834c596d80ee88569921fddb19e695035077843a8ce24e14b630b02e91cdf9d4886be579e0267f9c94c829c389af6758ecfe28fcf207a5b84abee9311e00d778f5460d4259f7ce9515de53f9382dfc785ccf941141a955f82c6c8f6cd9b326ebb024fb497a537d79c5f8d5b905a30f0336c4991e56e2efd52598485653a2f537c1842eeee4fae5b15d66421b2ccddb9febf6edd959dace510e3870e7d965b8645d35f0b87e1ead501707f7213da01835d3041b0888f97df50561a1206d3f556a0c47d2357b2ab09cfa463c8ed80eeac4c92f50a7c", 0x1000}, {&(0x7f0000001480)="1275f1a2788e9a9cb8cf191be8ac02ff0d430c2f4c80e63e1e84cae3876342086bb7f5ed87342d5ac528e1d6f7db116cc6102ff6827c6bf65638e307097f5236edbfc523af19bea9a3426f1a5cb885b07271207d583c9ef5847281b6152f8bd79b4c26ba34f515403d324f491568dfdd24249ce996514604210c414eb93d8ffd4aaf9cf1846b94b74e25d4895e2e2a9c11166dd4f69631d10e3c5d5ca20d60b0a683036d346898e681e98cdaed8c2ad2b026ccba134ad8", 0xb7}, {&(0x7f0000001540)="0277b0f1db72e14acd1fc3b8089b6b6831dc948c727c15711ff2d0c990544956f32d7f55cd19de0ceb5317b71623e429be7f5c779ca160a2c0f8271086b60354c2d87b521be0c53866ebdcd1e7c4e0504d1c8892b0f648725d308ae578dcc681bb80c5", 0x63}, {&(0x7f00000015c0)="d3fcff231c6c8ca2853c484db5768b7cc1db6bf7a923952eacc4b2ab5777f2218de494d55e50fadbaa8023e745fb32e15e9bbd591e62fd37292b470fff5b81ba1618c2a9d334a91cf1c974668eef3940d491c698eb8a1d5ce8167c873a27a80edacc339e9165c68e38e7a3195ca1c2f98f6a8d4d8feebbcabec6687c57831075001d1857f0d6347a57cc93fc5f0a062afd291f3b082bde26b664795cfb68e7ae7e9eb9dd9a21c26826a33727162cdb2cd0c68a61a1a37f8e6764aa45f72aebf542de67ec8d03374c57990a8bd2b72c69786b677bad48a84990", 0xd9}, {&(0x7f00000016c0)="ed8b74eefae4282632566402ce4642b1282aae31b72a5919b8b98be6834f2ee3b93477c1dacf81dbc6e56bbdaf268c4261af19b64a526f12fd1df0e9d3c7ecd1dd4c56dbd2dbee71cb9f7936f229e80a5e0280c2c5f0ad81554cfc466e9f8ba0dd63b245564f3e35e8b8ffb506434730bb025b8efe23470e29b973c8a1bcacfcc9d1f7a4f8c97f4dcd18e5e284c9ed74624b936e1f09c2b61bfc5c1cc71ceeac99aed8", 0xa3}, {&(0x7f0000001780)="8d3c674d975e0c2de1c435dd3482e7209a71948fcbb9edd983a82bebe1a27723e353311d6b1b5806ad8fc4da460bd21a88502ee025e47467f2f164a52a25dc6cb70fcc355acdb33ced087422c6fd0cb0b25e83bfd4", 0x55}, {&(0x7f0000001800)="f5ad983367d3ec7bd99ce3462f2a331c09a72f175e2514c69e3c710a29a666d0bdf3a3049c8f7c84491dd1c155f74fb42bc3702cb18d33f9c152a45739b413a2530c972ec9f7c235a587ca1341d4129146494879eeb77e93d3158251567d8ab502635c79e346fa2cdc89523d10dd96bcbb13338d5afbb8b480c81a6095c637c1c30d746fdb2e8bfd46637bb55bf904e90a6172544db88064c12970624691a7377544ec556d2153b3de200615d8069deb0333a8cc", 0xb4}, {&(0x7f00000018c0)="76afac9f6485c08a543de020b7984a9aa9ca6da63dabbc82613f1198652cb6343dbccede4e795331d58ee7b66de920d705b91ab6f56f5ecb17814f93279fba8f69ba47fd870019941bb845", 0x4b}, {&(0x7f0000001940)="c61a2508a334b83a2c121cb055b79f5d64fc0cb7e1c7c26ce58eac78041017c6dcc4cda3395d34724f4a9ef8d3207e316d5506e5eac05150bd5cf9fa23ed5c21f46c9be64f55dca3904d1e2d25c3c49841632ab153cf735dd103cd3434d4bd67e99ba7ba056ce65425c4cd662a8d0aaa9a7053469543de24942cc59f7547ab4f34ca398f46ad851d44ecc40425bd8d252581fb1043816b9f", 0x98}], 0x9}, 0x4000014) mkdirat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x181980, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00'}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) 01:53:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x5000000}]}]}}, &(0x7f0000000100)=""/251, 0x32, 0xfb, 0x1}, 0x20) 01:53:59 executing program 2: syz_clone(0x100025000, 0x0, 0x57, 0x0, 0x0, 0x0) 01:53:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x5f]}}, &(0x7f00000016c0)=""/154, 0x27, 0x9a, 0x1}, 0x20) 01:53:59 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 01:53:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @union]}}, &(0x7f0000001780)=""/160, 0x3e, 0xa0, 0x1}, 0x20) 01:54:00 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x86000, 0x0) 01:54:00 executing program 0: syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x40) read$char_usb(r0, 0x0, 0x4d) 01:54:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x16}]}) 01:54:00 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2a, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 01:54:00 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}}, &(0x7f0000000140)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 01:54:00 executing program 5: syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)) 01:54:00 executing program 2: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "24f065acfc774ecbd2101614643ab0d7340f765d10125cc13c98d39e35217c677e74cfd17cb61c638c07933bd942fd4c9c003e600af28ac8ca1f04d6ca30cfee"}, 0x48, 0xfffffffffffffff8) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x3b568a474508c5b8) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 2318.567153][ T24] audit: type=1326 audit(1655517240.631:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9314 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4b549 code=0x0 01:54:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x3f, 0x0, "4a559fdf61a5c2d9b7cc15aa44359a2928ebb8"}) [ 2318.685813][ T24] audit: type=1326 audit(1655517240.691:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9314 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=6 compat=1 ip=0xf7f4b549 code=0x0 01:54:00 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) [ 2318.752606][ T9321] omfs: Invalid superblock (0) 01:54:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x9, 0x8c5c, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 01:54:00 executing program 5: r0 = epoll_create1(0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00') 01:54:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x5410, 0x1000000000000) 01:54:01 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 01:54:01 executing program 0: syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x40) read$char_usb(r0, 0x0, 0x4d) 01:54:01 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) creat(&(0x7f0000000280)='./bus/file0\x00', 0x14a) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) execve(&(0x7f0000000140)='./bus/file0\x00', 0x0, 0x0) 01:54:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:01 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:01 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x66ff, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x24, 0x0) truncate(&(0x7f0000000140)='./bus/file0\x00', 0x0) 01:54:01 executing program 3: r0 = socket(0x1, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40001) [ 2319.646235][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2319.710733][ T9346] gfs2: can't find protocol dlm [ 2319.747808][ T9344] device bond2 entered promiscuous mode [ 2319.754435][ T9344] 8021q: adding VLAN 0 to HW filter on device bond2 01:54:02 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) creat(&(0x7f0000000280)='./bus/file0\x00', 0x14a) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) execve(&(0x7f0000000140)='./bus/file0\x00', 0x0, 0x0) 01:54:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8d}, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) llistxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f00000002c0)={0xd, 0x3, 0xffffffc9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x80) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) read(r1, &(0x7f000001a340)=""/102400, 0x19000) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCSETS(r3, 0x5412, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, "f900"}) 01:54:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) [ 2319.977762][ T24] audit: type=1800 audit(1655517242.041:73): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1181 res=0 errno=0 01:54:02 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:02 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x66ff, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x24, 0x0) truncate(&(0x7f0000000140)='./bus/file0\x00', 0x0) 01:54:02 executing program 0: syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x40) read$char_usb(r0, 0x0, 0x4d) [ 2320.463201][ T9361] gfs2: can't find protocol dlm [ 2320.473581][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:02 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8d}, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) llistxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f00000002c0)={0xd, 0x3, 0xffffffc9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x80) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) read(r1, &(0x7f000001a340)=""/102400, 0x19000) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCSETS(r3, 0x5412, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, "f900"}) [ 2320.590384][ T9360] device bond3 entered promiscuous mode [ 2320.599480][ T9360] 8021q: adding VLAN 0 to HW filter on device bond3 01:54:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8d}, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) llistxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f00000002c0)={0xd, 0x3, 0xffffffc9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x80) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) read(r1, &(0x7f000001a340)=""/102400, 0x19000) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCSETS(r3, 0x5412, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, "f900"}) [ 2320.830665][ T24] audit: type=1800 audit(1655517242.891:74): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1193 res=0 errno=0 01:54:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) [ 2321.116519][ T9378] gfs2: can't find protocol dlm 01:54:03 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) creat(&(0x7f0000000280)='./bus/file0\x00', 0x14a) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) execve(&(0x7f0000000140)='./bus/file0\x00', 0x0, 0x0) 01:54:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') read$char_usb(r0, 0x0, 0xc0804b5b) 01:54:03 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) [ 2321.424370][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8d}, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) llistxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f00000002c0)={0xd, 0x3, 0xffffffc9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x80) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) read(r1, &(0x7f000001a340)=""/102400, 0x19000) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCSETS(r3, 0x5412, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, "f900"}) [ 2321.523189][ T9384] device bond4 entered promiscuous mode [ 2321.529676][ T9384] 8021q: adding VLAN 0 to HW filter on device bond4 01:54:03 executing program 0: syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x40) read$char_usb(r0, 0x0, 0x4d) [ 2321.622859][ T9388] gfs2: can't find protocol dlm 01:54:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:03 executing program 5: syz_mount_image$gfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:04 executing program 2: r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 01:54:04 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000600), &(0x7f0000000640)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001b00), 0x0, &(0x7f0000003c40)={[{@hide}], [{@appraise}]}) 01:54:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}]}, 0x2c}}, 0x0) [ 2322.308488][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2322.427909][ T9402] device bond5 entered promiscuous mode [ 2322.435179][ T9402] 8021q: adding VLAN 0 to HW filter on device bond5 01:54:04 executing program 3: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1ff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 01:54:04 executing program 5: syz_mount_image$gfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000005c0)={0x0, 0x0, 0xe, {0xe, 0x0, "ebc9f9f0ec9d2b00004478e3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 01:54:04 executing program 0: syz_open_procfs(0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x4d) 01:54:04 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x7) [ 2323.030678][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:05 executing program 5: syz_mount_image$gfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) [ 2323.147834][ T9419] device bond6 entered promiscuous mode [ 2323.154848][ T9419] 8021q: adding VLAN 0 to HW filter on device bond6 01:54:05 executing program 0: syz_open_procfs(0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x4d) 01:54:05 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000004700)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000004900)='ns/time\x00') 01:54:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) [ 2323.483061][ T3557] usb 3-1: new high-speed USB device number 8 using dummy_hcd 01:54:05 executing program 0: syz_open_procfs(0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x4d) 01:54:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) [ 2323.716820][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2323.743377][ T3557] usb 3-1: Using ep0 maxpacket: 16 [ 2323.862646][ T3557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2323.873824][ T3557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2323.884841][ T3557] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2323.898206][ T3557] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 2323.907532][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.940956][ T9434] device bond7 entered promiscuous mode [ 2323.945745][ T3557] usb 3-1: config 0 descriptor?? [ 2323.947648][ T9434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2324.421136][ T3557] prodikeys 0003:041E:2801.0054: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 2324.624378][T29455] usb 3-1: USB disconnect, device number 8 01:54:10 executing program 3: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1ff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 01:54:10 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:10 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x40) read$char_usb(r0, 0x0, 0x4d) 01:54:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x4b0, 0xffffffff, 0x2d8, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0x0, 0xffffff00, 0xff000000], 'bridge0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x2b, 0x6, 0x4, 0x9}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x507, [0x5, 0x8], 0x7, 0x1, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', @empty, @rand_addr=' \x01\x00', @dev, @local, @private2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x15}], 0xb}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 01:54:10 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/58, 0x3a) 01:54:10 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000001a80)=[{&(0x7f0000000400)="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", 0x107, 0xf9}, {&(0x7f0000001400)="a5c39f3255ae19355317f7ca114edfb21069cfe93923c9750acd90cdbfb84f4b4bcf2b7a66f3f3fe3833178ebb133700fc6bdb3f26acc7c01394a4558e6a9cd26903d99da7c0bae91ee268cd585cdc6159691b8e27db3518d9cdc6eed9e93f860fe384fda93e9270db43ccb7b258cab98657fa2c2a973a2a3c8484e7c7252f7f81bbcd7f1e79037830bce18f3aa67358f6", 0x91}]) [ 2328.627676][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:10 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) [ 2328.697756][ T9451] device bond8 entered promiscuous mode [ 2328.704348][ T9451] 8021q: adding VLAN 0 to HW filter on device bond8 01:54:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$char_usb(r0, &(0x7f00000001c0)=""/233, 0xfffffe43) read$char_usb(r0, 0x0, 0x0) 01:54:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 01:54:11 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) [ 2329.343561][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2329.459084][ T9465] device bond9 entered promiscuous mode [ 2329.465750][ T9465] 8021q: adding VLAN 0 to HW filter on device bond9 01:54:15 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000, 0x0, 0x0) 01:54:15 executing program 0: r0 = syz_open_dev$audion(0x0, 0x1, 0x40) read$char_usb(r0, 0x0, 0x4d) 01:54:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0xb01}, 0x14}}, 0x0) 01:54:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='j', 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 01:54:15 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:16 executing program 0: r0 = syz_open_dev$audion(0x0, 0x1, 0x40) read$char_usb(r0, 0x0, 0x4d) 01:54:16 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='D', 0x1, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x1}, 0x1c) [ 2334.046091][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:16 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="d2", 0x1, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) [ 2334.144107][ T9482] device bond10 entered promiscuous mode [ 2334.150671][ T9482] 8021q: adding VLAN 0 to HW filter on device bond10 01:54:16 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:16 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 01:54:16 executing program 0: r0 = syz_open_dev$audion(0x0, 0x1, 0x40) read$char_usb(r0, 0x0, 0x4d) [ 2334.693206][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:16 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}, {@noloccookie}]}) 01:54:16 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000340)='>', 0x1, 0x0, &(0x7f00000003c0)={0x1c, 0x1c}, 0x1c) [ 2334.813887][ T9507] device bond11 entered promiscuous mode [ 2334.820418][ T9507] 8021q: adding VLAN 0 to HW filter on device bond11 01:54:17 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)="bb", 0x1, 0x0, &(0x7f0000000200)={0x1c, 0x1c, 0x3}, 0x1c) 01:54:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x40) read$char_usb(r0, 0x0, 0x4d) 01:54:17 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:17 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 01:54:17 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 01:54:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x40) read$char_usb(r0, 0x0, 0x4d) 01:54:17 executing program 1: r0 = socket(0x1, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc) 01:54:17 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 01:54:17 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) 01:54:17 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:17 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x0, 0x181, 0x0, 0x3ff}, 0x98) 01:54:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x40) read$char_usb(r0, 0x0, 0x4d) 01:54:18 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, &(0x7f00000001c0)) 01:54:18 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 01:54:18 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:18 executing program 2: r0 = socket(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x739, 0x1609, 0x11}, 0x98) 01:54:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x0) read$char_usb(r0, 0x0, 0x4d) 01:54:18 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="d2f70bb1e4afdeb140", 0x9, 0x1, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 01:54:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, 0x0, {0xd}}}, 0x24}}, 0x0) 01:54:18 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}, {@barrier}]}) 01:54:18 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r0, r1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) 01:54:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080), 0x88) [ 2337.077228][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r0, r1) bind(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) [ 2337.253137][ T9572] device bond12 entered promiscuous mode [ 2337.259653][ T9572] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2337.303643][ T9575] gfs2: can't find protocol dlm 01:54:19 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}]}) 01:54:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000200), 0x8) 01:54:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, 0x0, {0xd}}}, 0x24}}, 0x0) 01:54:19 executing program 1: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 01:54:19 executing program 0: syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x4d) [ 2337.907676][ T9590] gfs2: can't find protocol dlm [ 2337.977588][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), 0x98) [ 2338.050403][ T9594] bond13 (uninitialized): Released all slaves 01:54:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) close(r0) 01:54:20 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}]}) 01:54:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, 0x0, {0xd}}}, 0x24}}, 0x0) 01:54:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x1c}], 0x1c}, 0x0) 01:54:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000980)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv={0x2c}], 0x2c}, 0x0) 01:54:20 executing program 0: syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x4d) 01:54:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 2338.607238][ T9609] gfs2: can't find protocol dlm [ 2338.678530][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2338.716485][ T9611] bond13 (uninitialized): Released all slaves 01:54:20 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@locktable={'locktable', 0x3d, '\xff'}}]}) 01:54:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000980)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0x2c}, 0x0) 01:54:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:21 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='cubic\x00', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='dctcp\x00', 0x6) 01:54:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8, 0x100, 0x5}, 0x10) [ 2339.201807][ T9624] gfs2: can't find protocol dlm 01:54:21 executing program 0: syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x4d) [ 2339.281634][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:21 executing program 1: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000000), 0x8) [ 2339.393062][ T9627] device bond13 entered promiscuous mode [ 2339.399582][ T9627] 8021q: adding VLAN 0 to HW filter on device bond13 01:54:21 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lockproto_dlm}, {@barrier}]}) 01:54:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:21 executing program 2: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$inet_sctp(r2, &(0x7f0000004480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000004380)=[@prinfo={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @sndrcv={0x2c}, @dstaddrv4={0x10}, @sndrcv={0x2c}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}], 0xb4}, 0x0) 01:54:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 01:54:21 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) 01:54:21 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000001c0), 0x4) [ 2339.975386][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2340.026947][ T9649] gfs2: not a GFS2 filesystem [ 2340.069790][ T9646] device bond14 entered promiscuous mode [ 2340.076477][ T9646] 8021q: adding VLAN 0 to HW filter on device bond14 01:54:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x10) 01:54:22 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x88) 01:54:22 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@barrier}]}) 01:54:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000140), 0x8) 01:54:22 executing program 1: r0 = socket(0x1, 0x5, 0x0) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r2, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000002380)={0x0, 0x5, 0x0, 0x3}, 0x10) [ 2340.611983][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2340.807333][ T9662] device bond15 entered promiscuous mode [ 2340.814298][ T9662] 8021q: adding VLAN 0 to HW filter on device bond15 01:54:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x891d, &(0x7f000000d380)={'ip_vti0\x00', @ifru_mtu}) 01:54:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) [ 2340.924442][ T9672] gfs2: not a GFS2 filesystem 01:54:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f000000cfc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x508}, 0x1c, 0x0}, 0x0) 01:54:23 executing program 0: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/4096) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x7}) syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000012c0)={0x0, {{0xa, 0x4e21, 0x10001, @private0, 0x2}}}, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r5, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) bind(0xffffffffffffffff, &(0x7f0000001380)=@in6={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x80) 01:54:23 executing program 1: r0 = socket(0x1e, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) 01:54:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000280000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 2341.345090][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2341.405477][ T9681] bond16 (uninitialized): Released all slaves 01:54:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x40000, &(0x7f00000003c0)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x30}}], 0x1, 0x0) 01:54:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8fe6ffff722e66617400020101000240008080f805", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40047211, &(0x7f0000000300)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:54:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c03ddffffff00ffffea000000010000000000000000000000ddffffff"}}) 01:54:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="30160f00b845000f00d00f01cb0f54e1baf80c66b854daa18e66efbafc0c66edf30f23fcf20f1b5700360f483b0fc777a066b9300b00000f32", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:54:24 executing program 2: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x0) [ 2341.908653][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2341.969835][ T9701] bond16 (uninitialized): Released all slaves 01:54:24 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bb4b15a86b96fa2346c5a0c03f21da2db94c5303", "81a177e8b320c4c8ce00e0a263bd85c082ee3deb"}) 01:54:24 executing program 0: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000140)=""/185) 01:54:24 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000001340), 0x0, 0x40000) 01:54:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:24 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000002c0)) 01:54:24 executing program 5: socketpair(0xf, 0x0, 0x0, &(0x7f0000000580)) 01:54:24 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) syz_mount_image$jfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 01:54:24 executing program 1: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x7}) syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000012c0)={0x0, {{0xa, 0x4e21, 0x10001, @private0, 0x2}}}, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r5, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) bind(0xffffffffffffffff, &(0x7f0000001380)=@in6={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x80) [ 2342.648533][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) 01:54:24 executing program 5: fsopen(&(0x7f0000000000)='coda\x00', 0x0) [ 2342.742996][ T9721] bond16 (uninitialized): Released all slaves 01:54:24 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:25 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) 01:54:25 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x78) 01:54:25 executing program 3: recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:54:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:25 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, 0x0) 01:54:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000000)=0x10) 01:54:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x2000}, 0x48) 01:54:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@delqdisc={0x24, 0x13, 0x1}, 0x24}}, 0x0) [ 2343.831341][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:26 executing program 1: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x7}) syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000012c0)={0x0, {{0xa, 0x4e21, 0x10001, @private0, 0x2}}}, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r5, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) bind(0xffffffffffffffff, &(0x7f0000001380)=@in6={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x80) 01:54:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001400010000000000005a74e123"], 0x24}}, 0x0) 01:54:26 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:26 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(r0, r1) 01:54:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x2000}, 0x48) 01:54:26 executing program 2: r0 = io_uring_setup(0x251f, &(0x7f00000000c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup3(r1, r0, 0x0) [ 2344.085630][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:54:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:26 executing program 0: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x7}) syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000012c0)={0x0, {{0xa, 0x4e21, 0x10001, @private0, 0x2}}}, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r5, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) bind(0xffffffffffffffff, &(0x7f0000001380)=@in6={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x80) 01:54:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x2000}, 0x48) 01:54:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x0, 0x0, 0x2000}, 0x48) [ 2344.543409][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2344.609922][ T9777] bond16 (uninitialized): Released all slaves 01:54:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 2345.256720][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2345.327726][ T9796] bond16 (uninitialized): Released all slaves 01:54:27 executing program 1: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x7}) syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000012c0)={0x0, {{0xa, 0x4e21, 0x10001, @private0, 0x2}}}, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r5, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) bind(0xffffffffffffffff, &(0x7f0000001380)=@in6={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x80) 01:54:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x2000}, 0x48) 01:54:27 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(r0, r1) 01:54:27 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x40002, 0x0) 01:54:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:27 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$netlink(r0, &(0x7f0000003d40)={0x0, 0x48, &(0x7f0000000100)=[{&(0x7f0000000200)={0x109, 0x18, 0xffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="d7ee05a3792b00a2d2b9400635e2de9bda4f5ebc5a7a1a2b73cd5fca5837c4449e"]}, @generic="e6a689c0007198f5f9dc950f21d95ba4037e7993230b7b150de3a6a6c18f74f5035c7d57cfb2879c777687e93c2cbed0e96b75eca88c9ac59cf83566a37f27ff748ed723a7420c542a9fe59b8d2e468abf67acfffea635bf3b79efa2d104a832ce9631a2520ab7c7bbf11bdf22cac347ee457e48f5d8f9ce6cf69bf0c53e4303fe7f6ad6c7960d1e7139936140b6a234b97efede0f633f2533afee57027e63580c7b9dff4bbbb439da08023063d2739958abfb8e5098e5a0a5"]}, 0x1100}], 0x1}, 0x0) [ 2345.767666][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:27 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 01:54:27 executing program 2: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x5d6c90b1c700a521) [ 2345.869186][ T9809] bond16 (uninitialized): Released all slaves 01:54:28 executing program 0: chdir(&(0x7f0000000300)='./file0/file0\x00') 01:54:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x40000001) 01:54:28 executing program 3: socketpair(0x2, 0x2, 0x0, &(0x7f00000004c0)) [ 2346.535899][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2346.612190][ T9828] bond16 (uninitialized): Released all slaves 01:54:29 executing program 1: unshare(0x6c060000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = dup2(r3, r3) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x7}) syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x4004743a, &(0x7f00000000c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000012c0)={0x0, {{0xa, 0x4e21, 0x10001, @private0, 0x2}}}, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r5, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x79000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) bind(0xffffffffffffffff, &(0x7f0000001380)=@in6={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x80) 01:54:29 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(r0, r1) 01:54:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002340)={&(0x7f0000000040)=@llc, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/198, 0xfffffffffffffd99}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000002380)=""/4111, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x4, &(0x7f00000022c0)=""/112, 0x7b}, 0x0) 01:54:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000040)="ea", 0x1}], 0x1}, 0x0) 01:54:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x6, 0x0, 0x2}, 0x48) 01:54:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x81, 0x2, 0x8}, 0x48) [ 2347.086107][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:29 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 01:54:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9d4d0000000000000000080000000c0008"], 0x20}}, 0x0) [ 2347.154529][ T9844] bond16 (uninitialized): Released all slaves 01:54:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 01:54:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0) [ 2347.622808][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2347.708997][ T9859] bond16 (uninitialized): Released all slaves 01:54:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x28}}, 0x0) 01:54:30 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private}}, 0xb) 01:54:30 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(r0, r1) 01:54:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000900010073"], 0x34}}, 0x0) 01:54:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 01:54:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x38}}, 0x0) [ 2348.340377][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2348.403399][ T9879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:30 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3739b6686e7b2b0b7bfb0a4c356661c886"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2348.448556][ T9871] device bond16 entered promiscuous mode [ 2348.457456][ T9871] 8021q: adding VLAN 0 to HW filter on device bond16 01:54:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x38}}, 0x0) 01:54:30 executing program 1: r0 = socket(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x33fe0}}, 0x0) 01:54:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '@-#-#%@M{}-:}[{]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xfd, 0x5, "9e74c31d529d0a4e1692a174507614f2c1d5852a5032e9f085dbb849a038f9691fc54618d83d3b8e8d5c73f2720518258e511a6c0bfc147f1ceb24665f9bff6c9a213e535f780247e1de41fb9a3b99bf52f437dd1aed389c30bb7226841b37ca82de69a3ea49ef84b18a5c31a2ea659eb7081738881377aae1a37afdf2c74fc152a122e4f778b1e300fe69fc44860c9b99d882ac6a7c15e964e4fef1c46eecd32d60ce5c1c28c90864649eefcd631349a1842ebf349a338d4bc09edafb8be3dbf393870a810eab8838a21def07968734e4a1d8018dc59d8da5a62dfb29073973812a8ba91a6ad767ede2ff5ac1f5d80f12404fdda5e711932a"}]}, @ETHTOOL_A_FEATURES_WANTED={0xd60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd59, 0x4, "eb1d97c9d17b4e3659c0f5e2be7ed8c321732fba489163d44a2d328682979de080a9aef53c973772d589aaf58fabb26129acf1e5b8f3f77b55afb9e150c82af94c2af4e7db73f8441817e39b247aa842a3231ec2f753802ab74576e8b1ba975b51261d85def4e003412be1e4b5bf6d7ed22147b52ae1fdb5380fa7a326c9094b6283b4edc1625efeb96365d9b561c79c6806f0b59d91563c5274cd282a55bfdc0c7cd266aa165991aa709808082ed0148a1371d5684ca1ec86ddc59f20ea2639689f03515b86c048d54a30370733f532ae5cebe38e8489fcdf0d83d43fa11d455e07215d488fa47ec8ac5a930651730c58e3d4f6b899deba93b5b2c952ac20fff3819a7b80901e6c0a56bfc9cb9dce288b8273e846424d733ab89f845b99d4404383886a18e9c05d7ef47a4b5ecc9bcf866d4358344b07680f1252286b41348a6f652ae98b250e867365eaa890fe3fc4f8ad609669fe952b40b68ba6b87718b391b9b6bf3747ca941d791afb1301ed814bd601d6ce7f2dda6c60f127fd8efca90d5f7dbaa79ce615dac661c11031c51ecb7f6ed85421fd5d6b5384a32d14dacae449e532b137cceffba56805054442f8793c38448c2e32905b2c4e01acf377bf983c9dce070b36068a3de6ddd7a8fd9ee349427e4e4e4d100928eb531bffaba615af5b55dfd30b959879e50581a91d322fc2ec1f4e0cfe9152f50c29ef237a3d14bc4773e685fcf1033539e1888646538d3f4238557b1c0148feea47d34cab79b0c32590d74dd9d5a71f597885e85e71cee829b56542f0fad1ff1e05f478377236735042b3f540df782253a2051129461d99a396c6aa5810e52ed99bb308a62ae28f763111b834efeb36984a25913a3927c073fe509a1b14c14fff9c93b0e26d2bfacc3d6d06f10263165680d2aff02655fe4535ae9e173cc593a8b18a3b2b1248bf664a4b4c6516754eeea91ed5567ded020cdc8531618434718e19c09d9f931e97c216396c3173bc3c1104c01a7249e0e0f1c8af04c06e1631e10ca7e1f46021983704e0ad4c07736f01a0b5e39c13ad0664f8e6350f5e0965a20f5b40862aaf02299636a79da801eafe1557bf3705508692afbf877283cfc9d459cbaebfaff290909ebe16c3f24c7935f17ac97e5ad69ca7b3156049b8e22bf49919a32ebd79f04671450ac0b9a62b92255767848f560b6908dc91afd4942aeba54e25111cc8b8142326e5166366a4f7a438813032ac5578bc735f2c6fa88bbaf3e4fad27ebdaf2a8ce811f89a083b9a5e692e8068db6f520189756f0115b53fc2c1073a5f8b7fe7d05bbc248ba1b03c38afc90023c0a856d048e177a5cc01f5a7203789e736a4c243244fc57ffd4f6da11bad1eeb6a1f6d919566479ed4ae630e93bdc37fa95e9b9964961a9b3578f3f13e6dffbfdf8f708c25de0bb85af8122eb58fad805d9238162fb3250b03716aa8539d380066e746b5c56838f8d550ecab08cf7ed041ee5499baf68efdc1b5a7ac02c94da3f9350edfec0c26cd1a38cc51f12670940a31f1878620f6e132c731754236d65e806510957e439b12afb3548248d1a5994c9d7e508ed983b309ce0c732b95799e5c0af06a9e43e75f6151eccbf1e4fae1f6d1e64f0a4c34d48f020340dc426ba067e6658fced90bc99927418fd7a0a1b6db2bb206f7c954e723685844d3ea4d57f92f16ae7bb3cc0ab97b4bef4056f3e2b336d968887dd163dc654b1b385b70b1a8aaa213de406486cefdeb0051fd1b4ae5375ddb978769aab52a2e36bd83e3197eee9349377cd3e02edd297d2d6a80487f46d9bcd98bf4800749a130040c0d9b836a6ebe4791375a7d918b2a46f331579729fe8022f7dcf535e654adc57b185fb133b6049e7b65a42fa3c24e8df62a6e3c303aef8c3913993c1bd981348d3a1d9a6f2ad8bd967eff47d5d78cb5c8618660a9fc463d1beb9cfdaec9ac417fd7f51fdf4c3ed7005c537cdd28d722ea446c2eeda8af80623533d896436694703ed07d9d85fbb0530517ff839b1de30b00e590ad58ab998f92b2f52c4c99f75c2ff8c245348e97a69de9120f0da66ae40715100e533d93921633aeb02084717088a0382bf34dc7b5ec79ef96592f150bd92e61d3368b24d6da6dc2695b552fd165f6b93838e65007887e5ff4ecf03df7e36f9966bfee065c0775906b15d9472d8d40f0d516229e5131c081fdf0c2688ef3433f45ad930d0d1134a9ea32a6d864de9c7705ba93e66996b0a399f4e76b88fac2bd4ccc1b9ab8169a1d229400bb8db60afeadbd60cd98f16e924f4a8e11e10e97b0d3855a8be2a18171b27d2a2aeec8c86da75fc1af7614c0ecea59d17bc05018e47378073465fe1e0823892aa16f8e3ea23dcd95bca7304f6ba4e7348d040449026e250c1ca63538df30f9dd54ba69804aa042d6ee35a242654aae956b9cf57c954195c2671b5aa7b81e82383ce48264200078f2807bf177849b7c11686b517f721f7bfd99fc897c7bf3d6357281ab4015c662056430a0749504f932f5d18841226b3e2fb0a4eface7b839c0db8b4fdc9faf143aa2d266c1f0dc5b56303a104076ca3d9f9f6fb40d26cd18291ed93f9ceee1588cd37293df3295eb84a4f3afc4d3d4e0521a50134bdbd2cfb26a4ea278b1519603976e98447747a0c26a3bd53550d86996ebc218f9b733804e9a1e7c91011f91ccecc23c1f13fddcc31d5b4560f16b2781b98b6b49a741971e4c9420014b9b771782990a2dc1cb721721cbddca6edc2c5acecf416d6b45261bc2c7229fb82c46e2a29aa67c0db6bdafa6b540c92a47e780f2dad19ff02ef6f0154292145be2806dc3c46ed684e0f6a5238150b151c8b0f955b5aeca0ec7011082a73ccf1cf71b2b519f1488001610ba4172663cee6d72fc94f7e395a0e29df08e25c94b8757f9d6d64e8e02bcf55ea3a4e2a15feaf2eca8ccb90615721060ccc6b9db486c6a1705548ce8a4a37ffc2e35f707a06f256d7d63ade055498dea1b5509ea68fc0bbb305aa3ce7340c8c30daa4ebe3bde71409c609fe328b08d21e7eff87bc60b66fa08e71d8399f6a8f6e8dc8e61bbd7afb29fd9fdf7e60945a4b528fcf7bd65abff0eeb4f3c0fe39c2802a74756dd4e17b612cf9834284f56cb2da5d7d5db772c3dfaf2c03dd3bcb5d337fdd15ed2723d87d2c4441c172f8be1e79d6f7dae70890996f6069bbe89490072b0655a7688d4e9b4d3c1e276fa0e0b9814b2bff2ef1e5e6ca085051a6ef5fc8f1586f03f3d420437d287d7f3b9faf46475aaf3b1dc30446031373948df4f77088c84a15f8c1d1a60f130f546213f2d9b872746c16063e46c23be308bb0ee22c83818384d68e768b102de0864977ab56fafe0381c67d22ad2ae0321755a42c0e0ecde4b0dd33b3b6cd54950b62b79889e99fa2a5deaf3abe26fc760d3050be35222ff39f290490699779b2aa9660fd214c11c2a509d303b85126ddc297cf5c948a9d7c0cb9146fe1a5efe9b18e2b24e935149c0082fe41b4e8167ddab6fef1836697a0d26b3e1c229bc0ab9f4063d046d55796360f2040a739501632f140c4eff43e3d06e1a980ac222625042ff21674d06d167a61200eb6b4edeefa4416c262c63f27d2ecf1c782c3ce1f3715f9511be563826a86c8424a7d27803e5aa77a99a19b5741df8c3b0363a03d62977d6408c4b1f99fd410c8ade245f077a2717e4511cd8d9988a115d3922d2883f53b2fea47075e755458312b9511666097aa735f6e2161c268ad9cfbfc99199c257f7334f05b629d264cc1111ba644b0dab8a1d2d813a59154fd69c789c75dcd3e465d8aa0bfd48a55da84e5a25603fce28633d070bc8bc9a750aad9f32f2c326b766101f529340bdd64d7658be2d72dce0a5c0f9e10f849f796f807ced64908d3990d6082fe441188daee9a9463fa4af9dfd25e1fcb7353a10a4a3e4708de86d75b8c177fb3ba1351a19a6f5125f7233de28240f955dafb5bec813ba0482063efa0d9acb0439cef45a0c166aec79b5b02733cc0e8fb50a98e6f357e9ebee8f33708b5f470a9764e4a7015aa73dd5c160737848f1f2a69521d12ac15e9f07d5018932aff904dccac9b7e87dfebf28edf7344f41142b60b4259749bae440280920036e0baba1d5c7f956ce3901f603da7911ce00c0d3a715b6ef7e2d0242b0aa6c4cd926a455c7fbba783343c037cc018cc1062e10c3444ab08cc55a51382ec4d749ded2ede844e5236ca0dc5ba254671d697746fcfd9da013f811b94ca20fe39e5669445af30c6c6f922552ef434e3796991ce2f80769d7d1629347614570e90bbe6f11e7fd2707d26a4c29b5514db664623e006a4fbc06327b193304f4ad7754e62dbb75595565de99da169422e12e762e13440345116082d61c35d375a56ebced2ba12288f215fd9cf066eceb4f1ea33fbe8ba32bda057e7cb2c47c098d18c082dbc64fc2594ca722bc96103c8fab176eaf5f13ec810a9ae53014bae0b39a4d8c460e974c510921aabbf08c5d440eb398ad09256015f3c0bd07057404cd2d514f525b4bdf6ca456c37a5c5261492bd284312a437d2f6086cbd66d6592bf0c543fc0aa9e86ab9a8f339f7eab679f383f7e7fd5b503046a6ffd3c5fa6ec3c16bf149cc64cb3277004e00a2374b0ed1c8f297397c5944d21bb452e9eee651f211cfb71c7eef6500e347ab1ee6dc2853f126efc761dafb9c17ddd18eb5ca715736eca735e52fd8f79dd80f271f231678a58faa6279d84ddf4df4e1a5604f8b36f6707051b74e8862aed30c0c57c1219550bb9130d9dd9bd2d25a140d5d77ad3bd935c003686decc10209722a7d6dc"}]}]}, 0xec4}}, 0x0) 01:54:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18108500000000000000ff000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:54:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300d355809c0000ea01"], 0x34}}, 0x0) [ 2349.149470][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:31 executing program 5: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 01:54:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="15000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x34}}, 0x0) 01:54:31 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 01:54:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000eeffffffffff01"], 0x14}}, 0x0) [ 2349.247144][ T9896] device bond17 entered promiscuous mode [ 2349.253885][ T9896] 8021q: adding VLAN 0 to HW filter on device bond17 01:54:31 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) [ 2349.341391][ T9904] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x1c}}, 0x0) 01:54:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:31 executing program 0: socketpair(0x22, 0x2, 0x22, &(0x7f0000000300)) 01:54:31 executing program 1: syz_read_part_table(0x0, 0x2600, &(0x7f0000000040)=[{&(0x7f0000000080)="03f60f2c080faf540335c90a0600000000000f00020000000001d087c77c4fd1a77d85ffffff0a000000a0f3c3ec80000000bfffffff000000000200200055aa", 0x40, 0x1c0}]) 01:54:31 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) [ 2349.807915][ T9917] delete_channel: no stack [ 2349.813017][ T9917] delete_channel: no stack [ 2349.855865][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2349.925247][ T9920] device bond18 entered promiscuous mode [ 2349.931803][ T9920] 8021q: adding VLAN 0 to HW filter on device bond18 01:54:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037001000030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 01:54:32 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1810850000000000000000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2350.290970][ T9928] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:32 executing program 5: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 01:54:32 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 01:54:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x20}}, 0x0) 01:54:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}, 0x300}, 0x0) 01:54:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="020700090e000000000000000000000005000500000000000a00000000000000ff0200000000000000000000000000010000000100000000070019"], 0x70}}, 0x0) [ 2350.595923][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:32 executing program 2: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) [ 2350.683511][ T9932] device bond19 entered promiscuous mode [ 2350.690142][ T9932] 8021q: adding VLAN 0 to HW filter on device bond19 01:54:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001000c"], 0x20}}, 0x0) 01:54:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_LINKMODES_HEADER={0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 01:54:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) [ 2351.034478][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:33 executing program 2: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) [ 2351.218980][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2351.300008][ T9953] device bond20 entered promiscuous mode [ 2351.306747][ T9953] 8021q: adding VLAN 0 to HW filter on device bond20 01:54:33 executing program 5: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 01:54:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x8}]}, 0x1c}}, 0x0) 01:54:33 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 01:54:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="02050000070000000000000003000002010005"], 0x38}}, 0x0) 01:54:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:33 executing program 2: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) [ 2351.846915][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '@-#-#%@M{}-:}[{]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0xff, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0xd60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd59, 0x4, "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"}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4048008}, 0x4884) 01:54:34 executing program 3: socketpair(0x22, 0x2, 0x11, &(0x7f0000000300)) 01:54:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '@-#-#%@M{}-:}[{]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xfd, 0x5, "9e74c31d529d0a4e1692a174507614f2c1d5852a5032e9f085dbb849a038f9691fc54618d83d3b8e8d5c73f2720518258e511a6c0bfc147f1ceb24665f9bff6c9a213e535f780247e1de41fb9a3b99bf52f437dd1aed389c30bb7226841b37ca82de69a3ea49ef84b18a5c31a2ea659eb7081738881377aae1a37afdf2c74fc152a122e4f778b1e300fe69fc44860c9b99d882ac6a7c15e964e4fef1c46eecd32d60ce5c1c28c90864649eefcd631349a1842ebf349a338d4bc09edafb8be3dbf393870a810eab8838a21def07968734e4a1d8018dc59d8da5a62dfb29073973812a8ba91a6ad767ede2ff5ac1f5d80f12404fdda5e711932a"}]}, @ETHTOOL_A_FEATURES_WANTED={0xd60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd59, 0x4, "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"}]}]}, 0xec4}}, 0x60) [ 2351.986118][ T9964] device bond21 entered promiscuous mode [ 2351.993018][ T9964] 8021q: adding VLAN 0 to HW filter on device bond21 01:54:34 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 01:54:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) [ 2352.223672][ T9976] delete_channel: no stack [ 2352.228548][ T9976] delete_channel: no stack 01:54:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) accept4$llc(r0, 0x0, 0x0, 0x0) [ 2352.461054][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2352.611529][ T9984] device bond22 entered promiscuous mode [ 2352.618717][ T9984] 8021q: adding VLAN 0 to HW filter on device bond22 01:54:35 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 01:54:35 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 01:54:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) 01:54:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x3, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000001200)='GPL\x00', 0xfd7, 0x74, &(0x7f0000001240)=""/116, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x3, 0x0, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001340)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 01:54:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x3, &(0x7f00000011c0)=@framed, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2353.037485][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:35 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 01:54:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) 01:54:35 executing program 3: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000102000000000000000f8000000000000000000000000000080008000ff0300000000000002000000000000000f00000000000000f4000000f4", 0x45}, {&(0x7f0000010900)="000000000000000000000000000000000000000000000000000000000000020046494c453000090000000000000000000300010048000100f00100000010000000000000000000000600000003000000040000000000000000000000000000000000000000000000100000004800000000001800000000003000000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000003000000068000000000018000000010050", 0xc1, 0x42fe0}], 0x0, &(0x7f0000141c00)) [ 2353.256731][ T9994] device bond23 entered promiscuous mode [ 2353.263393][ T9994] 8021q: adding VLAN 0 to HW filter on device bond23 01:54:35 executing program 1: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:54:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:35 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x0) [ 2353.767989][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2353.866814][T10014] device bond24 entered promiscuous mode [ 2353.873525][T10014] 8021q: adding VLAN 0 to HW filter on device bond24 01:54:36 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 01:54:36 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000540), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:54:36 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x3, &(0x7f00000011c0)=@framed, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), 0xffffffffffffffff) 01:54:36 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x90802) 01:54:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:36 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x0) [ 2354.320987][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:36 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x0) 01:54:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}}, 0x0) [ 2354.394483][T10027] bond25 (uninitialized): Released all slaves 01:54:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x3, &(0x7f00000011c0)=@framed, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:36 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x0) 01:54:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:36 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc1}) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000200)='./bus\x00', 0x0) [ 2354.952692][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2355.055224][T10046] bond25 (uninitialized): Released all slaves [ 2355.124401][T10050] syz-executor.3 (pid 10050) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 2355.158353][T10050] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 2355.168581][T10050] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 2355.233071][ T3506] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 2355.242859][ T3506] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 2355.274310][ T3506] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 01:54:37 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 01:54:37 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001180)={r1, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x3, &(0x7f00000011c0)=@framed, &(0x7f0000001200)='GPL\x00', 0xfd7, 0x74, &(0x7f0000001240)=""/116, 0x0, 0x7, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[0xffffffffffffffff]}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000001500), 0x40, 0x42) syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), 0xffffffffffffffff) 01:54:37 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:54:37 executing program 0: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000102000000000000000f8000000000000000000000000000080008000ff0300000000000002000000000000000f00000000000000f4000000f4", 0x45}, {&(0x7f0000010120)="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", 0x119, 0x40000}, {&(0x7f00000103c0)="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", 0x17d, 0x40fa0}, {&(0x7f0000010680)="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", 0x17b, 0x41fe0}, {&(0x7f0000010900)="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", 0x1f5, 0x42fe0}, {&(0x7f0000011c60)="000000000000000000000000000000000000000000000000000000000000020046494c453000090000000000000000000800010048000100880100000010000000000000000000000400000008000000020000000000000000000000000000000000000000000000100000006000000000001800000000004800000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000000000000000010000000000000000000000000000000000003000000070", 0xcd, 0x47fe0}], 0x0, &(0x7f0000141c00)) 01:54:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:37 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc1}) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000200)='./bus\x00', 0x0) [ 2355.459576][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:37 executing program 0: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000102000000000000000f8000000000000000000000000000080008000ff0300000000000002000000000000000f00000000000000f4000000f4", 0x45}, {&(0x7f0000010120)="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", 0x19a, 0x40000}, {&(0x7f00000103c0)="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", 0x17d, 0x40fa0}, {&(0x7f0000010680)="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", 0x13d, 0x41fe0}, {&(0x7f0000010900)="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", 0x1f5, 0x42fe0}], 0x0, &(0x7f0000141c00)) 01:54:37 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2355.514178][T10061] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 2355.526407][T10061] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 2355.551416][T10058] bond25 (uninitialized): Released all slaves 01:54:37 executing program 1: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000102000000000000000f8000000000000000000000000000080008000ff0300000000000002000000000000000f00000000000000f4000000f4", 0x45}, {&(0x7f00000103c0)="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", 0x17d, 0x40fa0}, {&(0x7f0000010680)="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", 0x179, 0x41fe0}, {&(0x7f0000010900)="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", 0x1f5, 0x42fe0}, {&(0x7f0000011c60)="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", 0x199, 0x47fe0}], 0x0, &(0x7f0000141c00)) 01:54:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x3, &(0x7f00000011c0)=@framed, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300), 0x10}, 0x80) [ 2355.711875][ T3506] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 2355.723187][ T3506] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 2355.757273][ T3506] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 01:54:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, 0x0, {0xd}}}, 0x24}}, 0x0) 01:54:38 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) [ 2356.148327][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2356.197463][T10076] bond25 (uninitialized): Released all slaves 01:54:38 executing program 5: r0 = io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 01:54:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0}) 01:54:38 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1}) 01:54:38 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:54:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:54:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, 0x0, {0xd}}}, 0x24}}, 0x0) 01:54:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0}) 01:54:38 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 01:54:38 executing program 3: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000102000000000000000f8000000000000000000000000000080008000ff0300000000000002000000000000000f00000000000000f4000000f4", 0x45}, {&(0x7f0000010120)="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", 0x115, 0x40000}, {&(0x7f00000103c0)="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", 0x17d, 0x40fa0}, {&(0x7f0000010680)="000000000000000000000000000000000000000000000000000000000000020046494c453000090000000000000000000200010048000100680100000010000000000000000000000300000002000000020000000000000000000000000000000000000000000000100000006000000000001800000000004800000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000000000000000010000000000000000000000000000000000003000000070000000000018000000020052000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801000010000000000000001000000000000600000000000000080324004c006f006700460069006c00650000000000000080000000480000000100400000000100000000000000000007000000000000004000000000000000000010000000000000001000000000000000100000000000110810", 0x17b, 0x41fe0}, {&(0x7f0000010900)="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", 0x1f5, 0x42fe0}, {&(0x7f0000011c60)="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", 0x15a, 0x47fe0}], 0x0, &(0x7f0000141c00)) [ 2356.785936][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2356.886460][T10091] bond25 (uninitialized): Released all slaves 01:54:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, 0x0, {0xd}}}, 0x24}}, 0x0) 01:54:39 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, 0x0}, 0x0) 01:54:39 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0}) [ 2357.347782][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2357.396681][T10106] bond25 (uninitialized): Released all slaves 01:54:39 executing program 5: r0 = io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 01:54:39 executing program 3: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x90802) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x3, &(0x7f00000011c0)=@framed, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x0, 0xb}, 0x10}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$vcsn(&(0x7f0000001500), 0x0, 0x42) syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), 0xffffffffffffffff) 01:54:39 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket(0x22, 0x2, 0xfffffff9) syz_mount_image$squashfs(&(0x7f0000000f00), 0x0, 0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000001080)={[{'.*\xa7\'*'}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) 01:54:39 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, 0x0}, 0x0) 01:54:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:39 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0}) [ 2357.934987][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:40 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, 0x0}, 0x0) [ 2357.999785][T10121] bond25 (uninitialized): Released all slaves 01:54:40 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x88400, 0xd3) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000040)='./file0\x00') signalfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x44090, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 01:54:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$revoke(0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)=ANY=[]) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x0, r2}) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af04, &(0x7f0000000000)) 01:54:40 executing program 1: socketpair(0x2, 0x801, 0x0, &(0x7f0000000000)) [ 2358.160369][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 01:54:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:40 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) [ 2358.548667][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2358.634811][T10142] bond25 (uninitialized): Released all slaves 01:54:41 executing program 5: r0 = io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 01:54:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)={0x4, 0x0, [{0xf000, 0xed, &(0x7f0000001640)=""/237}, {0xf000, 0x35, &(0x7f0000001740)=""/53}, {0x0, 0x9, &(0x7f0000001780)=""/9}, {0x106000, 0x5b, &(0x7f00000017c0)=""/91}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) 01:54:41 executing program 1: syz_mount_image$squashfs(&(0x7f0000000f00), 0x0, 0x0, 0x1, &(0x7f0000001040)=[{&(0x7f0000000f80)="0f", 0x1}], 0x0, &(0x7f0000001080)={[{'.*\xa7\'*'}]}) syz_open_dev$vcsn(&(0x7f0000001640), 0x0, 0x0) 01:54:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$revoke(0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)=ANY=[]) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x0, r2}) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af04, &(0x7f0000000000)) 01:54:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xd}}}, 0x24}}, 0x0) 01:54:41 executing program 2: sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0) [ 2359.143512][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10100) close(r0) 01:54:41 executing program 1: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002640)=[{&(0x7f0000000500)="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", 0xffb, 0x5}], 0x0, 0x0) 01:54:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="658fa8e94158e4df08001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @multicast2}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xfdef) [ 2359.223515][T10156] bond25 (uninitialized): Released all slaves 01:54:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$revoke(0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)=ANY=[]) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x0, r2}) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af04, &(0x7f0000000000)) 01:54:41 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:41 executing program 1: syz_mount_image$squashfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2359.656127][T10169] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.663679][T10169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2359.676081][T10169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2359.773748][T10169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2359.807697][T29444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 01:54:42 executing program 5: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x251b, &(0x7f00000000c0)) pselect6(0xa3, &(0x7f0000000080), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) dup2(r0, r1) 01:54:42 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'ip6tnl0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fanotify_init(0x20, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000c00)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @b}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x4004000) syz_mount_image$squashfs(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x3, 0x1, &(0x7f0000001040)=[{&(0x7f0000000f80)="0f70f01ea915408c0622ee156c22af46e3ce850a7d173c335dfeaebfd38923e5af6039fd2a157b9417", 0x29}], 0x0, &(0x7f0000001080)={[{'%'}, {'\')\'-'}, {'mcast_rejoin_interval\x00'}, {'}{{+}.'}, {'.*\xa7\'*'}], [{@pcr={'pcr', 0x3d, 0x1c}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@dont_appraise}, {@uid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'\xb8-'}}, {@smackfsdef={'smackfsdef', 0x3d, '$'}}]}) symlinkat(&(0x7f0000000ec0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001180)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f00000011c0), 0x505000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={0x0}}, 0x48000) syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000016c0), 0xffffffffffffffff) 01:54:42 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:42 executing program 2: syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x44090, &(0x7f00000048c0)) 01:54:42 executing program 1: socketpair$unix(0x2, 0xa, 0x8101, &(0x7f0000000240)) 01:54:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$revoke(0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)=ANY=[]) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x0, r2}) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af04, &(0x7f0000000000)) 01:54:42 executing program 0: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) 01:54:42 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r1, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r1, {0xd}}}, 0x24}}, 0x0) 01:54:42 executing program 1: symlinkat(&(0x7f0000000ec0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001180)='./file0\x00') 01:54:42 executing program 2: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) socket(0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x0, 0x1, &(0x7f0000001040)=[{&(0x7f0000000f80)="0f", 0x1}], 0x0, &(0x7f0000001080)={[{'mcast_rejoin_interval\x00'}]}) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) syz_open_dev$vcsn(0x0, 0x0, 0x0) 01:54:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000001d40)=ANY=[@ANYBLOB="18660000070000000000000005000000181a0000", @ANYRES32=0x1, @ANYBLOB="00000000000000006262e0ff10000000d40800a60000001812000000000088ec259afcdf"], &(0x7f0000001900)='GPL\x00', 0x7, 0xd5, &(0x7f0000001940)=""/213, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:54:42 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000ac0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) [ 2361.026745][T10208] ===================================================== [ 2361.034411][T10208] BUG: KMSAN: uninit-value in __page_symlink+0x2c2/0x350 [ 2361.041504][T10208] __page_symlink+0x2c2/0x350 [ 2361.047702][T10208] page_symlink+0x70/0x90 [ 2361.052094][T10208] ramfs_symlink+0x32c/0x650 [ 2361.057136][T10208] vfs_symlink+0x41c/0x610 [ 2361.061608][T10208] do_symlinkat+0x26c/0x930 [ 2361.066369][T10208] __ia32_sys_symlink+0xd0/0x120 [ 2361.071372][T10208] __do_fast_syscall_32+0x95/0xf0 [ 2361.076669][T10208] do_fast_syscall_32+0x33/0x70 [ 2361.081576][T10208] do_SYSENTER_32+0x1b/0x20 [ 2361.086298][T10208] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.092800][T10208] [ 2361.095144][T10208] Local variable fsdata created at: [ 2361.100344][T10208] __page_symlink+0x8c/0x350 [ 2361.105300][T10208] page_symlink+0x70/0x90 [ 2361.109692][T10208] [ 2361.112043][T10208] CPU: 0 PID: 10208 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2361.122404][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.132610][T10208] ===================================================== [ 2361.139571][T10208] Disabling lock debugging due to kernel taint [ 2361.145899][T10208] Kernel panic - not syncing: kmsan.panic set ... [ 2361.152346][T10208] CPU: 0 PID: 10208 Comm: syz-executor.0 Tainted: G B 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 2361.163941][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.174065][T10208] Call Trace: [ 2361.177362][T10208] [ 2361.180321][T10208] dump_stack_lvl+0x1c8/0x256 [ 2361.185044][T10208] dump_stack+0x1a/0x1c [ 2361.189228][T10208] panic+0x4d3/0xc69 [ 2361.193236][T10208] ? get_taint+0x1/0x50 [ 2361.197434][T10208] ? add_taint+0x104/0x1a0 [ 2361.201898][T10208] ? console_unlock+0x1c70/0x20c0 [ 2361.206969][T10208] kmsan_report+0x2cc/0x2d0 [ 2361.211525][T10208] ? __filemap_get_folio+0x1703/0x1b30 [ 2361.217028][T10208] ? __msan_warning+0x92/0x110 [ 2361.221842][T10208] ? __page_symlink+0x2c2/0x350 [ 2361.226816][T10208] ? page_symlink+0x70/0x90 [ 2361.231352][T10208] ? ramfs_symlink+0x32c/0x650 [ 2361.236170][T10208] ? vfs_symlink+0x41c/0x610 [ 2361.240790][T10208] ? do_symlinkat+0x26c/0x930 [ 2361.245496][T10208] ? __ia32_sys_symlink+0xd0/0x120 [ 2361.250645][T10208] ? __do_fast_syscall_32+0x95/0xf0 [ 2361.257533][T10208] ? do_fast_syscall_32+0x33/0x70 [ 2361.262615][T10208] ? do_SYSENTER_32+0x1b/0x20 [ 2361.267331][T10208] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.273894][T10208] ? kmsan_get_shadow_origin_ptr+0x85/0xf0 [ 2361.279771][T10208] ? kmsan_get_metadata+0x33/0x220 [ 2361.284929][T10208] ? kmsan_get_metadata+0x33/0x220 [ 2361.290085][T10208] ? kmsan_get_metadata+0x33/0x220 [ 2361.295239][T10208] ? kmsan_get_shadow_origin_ptr+0x85/0xf0 [ 2361.301094][T10208] ? zero_user_segments+0x554/0x870 [ 2361.306397][T10208] ? kmsan_get_metadata+0x33/0x220 [ 2361.311555][T10208] ? kmsan_internal_memmove_metadata+0x96/0x350 [ 2361.317847][T10208] ? kmsan_get_metadata+0x33/0x220 [ 2361.323000][T10208] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 2361.328852][T10208] __msan_warning+0x92/0x110 [ 2361.333483][T10208] __page_symlink+0x2c2/0x350 [ 2361.338209][T10208] page_symlink+0x70/0x90 [ 2361.342574][T10208] ramfs_symlink+0x32c/0x650 [ 2361.347213][T10208] ? ramfs_create+0x200/0x200 [ 2361.351928][T10208] vfs_symlink+0x41c/0x610 [ 2361.356382][T10208] do_symlinkat+0x26c/0x930 [ 2361.360930][T10208] __ia32_sys_symlink+0xd0/0x120 [ 2361.365907][T10208] __do_fast_syscall_32+0x95/0xf0 [ 2361.370983][T10208] do_fast_syscall_32+0x33/0x70 [ 2361.375896][T10208] do_SYSENTER_32+0x1b/0x20 [ 2361.380451][T10208] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2361.386833][T10208] RIP: 0023:0xf7f04549 [ 2361.391007][T10208] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2361.410744][T10208] RSP: 002b:00000000f7eff5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000053 [ 2361.419198][T10208] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000200000c0 [ 2361.427217][T10208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2361.435206][T10208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2361.443195][T10208] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2361.451181][T10208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2361.459320][T10208] [ 2361.462442][T10208] Kernel Offset: disabled [ 2361.466771][T10208] Rebooting in 86400 seconds..