.985196][T17171] [ 1263.987602][T17171] Local variable msg_sys created at: [ 1263.993087][T17171] do_recvmmsg+0x5c/0x1180 [ 1263.997628][T17171] __sys_recvmmsg+0x113/0x450 [ 1264.422910][ T122] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1264.683340][ T122] usb 5-1: Using ep0 maxpacket: 8 [ 1264.822680][ T122] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.822850][ T122] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1264.822972][ T122] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1265.012886][ T122] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1265.029663][ T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.029779][ T122] usb 5-1: Product: syz [ 1265.042428][ T122] usb 5-1: Manufacturer: syz [ 1265.042520][ T122] usb 5-1: SerialNumber: syz [ 1265.196085][T17171] not chained 490000 origins [ 1265.200862][T17171] CPU: 1 PID: 17171 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1265.211151][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1265.221305][T17171] Call Trace: [ 1265.224661][T17171] [ 1265.227657][T17171] dump_stack_lvl+0x1c8/0x256 [ 1265.232502][T17171] dump_stack+0x1a/0x1c [ 1265.236798][T17171] kmsan_internal_chain_origin+0x78/0x120 [ 1265.242659][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1265.249048][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1265.254990][T17171] ? ____sys_recvmsg+0x5c1/0x810 [ 1265.260050][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1265.265371][T17171] ? get_compat_msghdr+0x8c/0x1c0 [ 1265.270511][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1265.276454][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1265.281772][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1265.287722][T17171] ? should_fail+0x3f/0x810 [ 1265.292364][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1265.297615][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1265.303993][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1265.309953][T17171] __msan_chain_origin+0xbd/0x140 [ 1265.315118][T17171] __get_compat_msghdr+0x514/0x750 [ 1265.320374][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1265.325341][T17171] ? ___sys_recvmsg+0xa9/0x890 [ 1265.330221][T17171] ? do_recvmmsg+0x682/0x1180 [ 1265.335018][T17171] ___sys_recvmsg+0x19d/0x890 [ 1265.339809][T17171] ? do_recvmmsg+0x6e4/0x1180 [ 1265.344621][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1265.349871][T17171] ? kmsan_internal_check_memory+0x94/0x530 [ 1265.355909][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1265.361870][T17171] do_recvmmsg+0x682/0x1180 [ 1265.366513][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1265.372906][T17171] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.379459][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.384266][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.390669][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1265.395921][T17171] ? exit_to_user_mode_prepare+0x119/0x220 [ 1265.401866][T17171] do_fast_syscall_32+0x33/0x70 [ 1265.406840][T17171] do_SYSENTER_32+0x1b/0x20 [ 1265.411468][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1265.417929][T17171] RIP: 0023:0xf7f3a549 [ 1265.422086][T17171] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1265.441832][T17171] RSP: 002b:00000000f7f145cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1265.450370][T17171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1265.458446][T17171] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1265.466516][T17171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.474578][T17171] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1265.482641][T17171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.490729][T17171] [ 1265.496551][T17171] Uninit was stored to memory at: [ 1265.502011][T17171] __get_compat_msghdr+0x514/0x750 [ 1265.507255][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1265.512355][T17171] ___sys_recvmsg+0x19d/0x890 [ 1265.517249][T17171] do_recvmmsg+0x682/0x1180 [ 1265.521987][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.526797][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.533289][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1265.538562][T17171] do_fast_syscall_32+0x33/0x70 [ 1265.543689][T17171] do_SYSENTER_32+0x1b/0x20 [ 1265.548324][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1265.554965][T17171] [ 1265.557368][T17171] Uninit was stored to memory at: [ 1265.562702][T17171] __get_compat_msghdr+0x514/0x750 [ 1265.567970][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1265.573104][T17171] ___sys_recvmsg+0x19d/0x890 [ 1265.577911][T17171] do_recvmmsg+0x682/0x1180 [ 1265.582684][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.587511][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.594045][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1265.594484][ T122] cdc_ncm 5-1:1.0: bind() failure [ 1265.599248][T17171] do_fast_syscall_32+0x33/0x70 [ 1265.609370][T17171] do_SYSENTER_32+0x1b/0x20 [ 1265.614091][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1265.614274][ T122] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1265.620520][T17171] [ 1265.620535][T17171] Uninit was stored to memory at: [ 1265.620650][T17171] __get_compat_msghdr+0x514/0x750 [ 1265.620732][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1265.620809][T17171] ___sys_recvmsg+0x19d/0x890 [ 1265.620889][T17171] do_recvmmsg+0x682/0x1180 [ 1265.620968][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.621049][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.621147][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1265.621231][T17171] do_fast_syscall_32+0x33/0x70 [ 1265.621314][T17171] do_SYSENTER_32+0x1b/0x20 [ 1265.621400][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1265.621497][T17171] [ 1265.621512][T17171] Uninit was stored to memory at: [ 1265.621620][T17171] __get_compat_msghdr+0x514/0x750 [ 1265.621794][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1265.621873][T17171] ___sys_recvmsg+0x19d/0x890 [ 1265.621953][T17171] do_recvmmsg+0x682/0x1180 [ 1265.622032][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.622113][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.622210][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1265.622295][T17171] do_fast_syscall_32+0x33/0x70 [ 1265.622382][T17171] do_SYSENTER_32+0x1b/0x20 [ 1265.622461][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1265.622557][T17171] [ 1265.622571][T17171] Uninit was stored to memory at: [ 1265.622679][T17171] __get_compat_msghdr+0x514/0x750 [ 1265.622759][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1265.622837][T17171] ___sys_recvmsg+0x19d/0x890 [ 1265.622916][T17171] do_recvmmsg+0x682/0x1180 [ 1265.622994][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.623074][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.623172][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1265.623256][T17171] do_fast_syscall_32+0x33/0x70 [ 1265.623344][T17171] do_SYSENTER_32+0x1b/0x20 [ 1265.623423][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1265.623520][T17171] [ 1265.623534][T17171] Uninit was stored to memory at: [ 1265.623643][T17171] __get_compat_msghdr+0x514/0x750 [ 1265.623724][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1265.623801][T17171] ___sys_recvmsg+0x19d/0x890 [ 1265.623880][T17171] do_recvmmsg+0x682/0x1180 [ 1265.623959][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.624040][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.624139][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1265.624224][T17171] do_fast_syscall_32+0x33/0x70 [ 1265.624306][T17171] do_SYSENTER_32+0x1b/0x20 [ 1265.624391][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1265.624489][T17171] [ 1265.624503][T17171] Uninit was stored to memory at: [ 1265.624613][T17171] __get_compat_msghdr+0x514/0x750 [ 1265.624694][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1265.624771][T17171] ___sys_recvmsg+0x19d/0x890 [ 1265.624851][T17171] do_recvmmsg+0x682/0x1180 [ 1265.624929][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.625010][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1265.625108][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1265.625195][T17171] do_fast_syscall_32+0x33/0x70 [ 1265.625276][T17171] do_SYSENTER_32+0x1b/0x20 [ 1265.625373][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1265.625472][T17171] [ 1265.625488][T17171] Local variable msg_sys created at: [ 1265.625516][T17171] do_recvmmsg+0x5c/0x1180 [ 1265.625590][T17171] __sys_recvmmsg+0x113/0x450 [ 1265.949422][ T122] cdc_ncm 5-1:1.1: bind() failure [ 1266.074967][ T122] usb 5-1: USB disconnect, device number 22 [ 1266.275264][T17171] not chained 500000 origins [ 1266.279967][T17171] CPU: 0 PID: 17171 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1266.290263][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1266.300429][T17171] Call Trace: [ 1266.303790][T17171] [ 1266.306804][T17171] dump_stack_lvl+0x1c8/0x256 [ 1266.311670][T17171] dump_stack+0x1a/0x1c [ 1266.315983][T17171] kmsan_internal_chain_origin+0x78/0x120 [ 1266.321870][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1266.328268][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1266.334217][T17171] ? ____sys_recvmsg+0x5c1/0x810 [ 1266.339287][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1266.344613][T17171] ? get_compat_msghdr+0x8c/0x1c0 [ 1266.349759][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1266.355707][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1266.361051][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1266.367003][T17171] ? should_fail+0x3f/0x810 [ 1266.371639][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1266.376892][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1266.383297][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1266.389249][T17171] __msan_chain_origin+0xbd/0x140 [ 1266.394407][T17171] __get_compat_msghdr+0x514/0x750 [ 1266.399659][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1266.404627][T17171] ? ___sys_recvmsg+0xa9/0x890 [ 1266.409510][T17171] ? do_recvmmsg+0x682/0x1180 [ 1266.414312][T17171] ___sys_recvmsg+0x19d/0x890 [ 1266.419106][T17171] ? do_recvmmsg+0x6e4/0x1180 [ 1266.423914][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1266.429176][T17171] ? kmsan_internal_check_memory+0x94/0x530 [ 1266.435214][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1266.441196][T17171] do_recvmmsg+0x682/0x1180 [ 1266.445837][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1266.452225][T17171] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.458791][T17171] __sys_recvmmsg+0x113/0x450 [ 1266.463661][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.470059][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1266.475301][T17171] ? exit_to_user_mode_prepare+0x119/0x220 [ 1266.481240][T17171] do_fast_syscall_32+0x33/0x70 [ 1266.486218][T17171] do_SYSENTER_32+0x1b/0x20 [ 1266.490856][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1266.497344][T17171] RIP: 0023:0xf7f3a549 [ 1266.501529][T17171] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1266.521305][T17171] RSP: 002b:00000000f7f145cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1266.529862][T17171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1266.537942][T17171] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1266.546008][T17171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.554082][T17171] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1266.562156][T17171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.570259][T17171] [ 1266.578671][T17171] Uninit was stored to memory at: [ 1266.584308][T17171] __get_compat_msghdr+0x514/0x750 [ 1266.589550][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1266.594605][T17171] ___sys_recvmsg+0x19d/0x890 [ 1266.599442][T17171] do_recvmmsg+0x682/0x1180 [ 1266.604147][T17171] __sys_recvmmsg+0x113/0x450 [ 1266.608965][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.615437][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1266.620701][T17171] do_fast_syscall_32+0x33/0x70 [ 1266.625783][T17171] do_SYSENTER_32+0x1b/0x20 [ 1266.630432][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1266.636997][T17171] [ 1266.639384][T17171] Uninit was stored to memory at: [ 1266.644670][T17171] __get_compat_msghdr+0x514/0x750 [ 1266.649916][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1266.654974][T17171] ___sys_recvmsg+0x19d/0x890 [ 1266.659764][T17171] do_recvmmsg+0x682/0x1180 [ 1266.664486][T17171] __sys_recvmmsg+0x113/0x450 [ 1266.669312][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.675814][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1266.681054][T17171] do_fast_syscall_32+0x33/0x70 [ 1266.686110][T17171] do_SYSENTER_32+0x1b/0x20 [ 1266.690740][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1266.697288][T17171] [ 1266.699681][T17171] Uninit was stored to memory at: [ 1266.704956][T17171] __get_compat_msghdr+0x514/0x750 [ 1266.710204][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1266.715259][T17171] ___sys_recvmsg+0x19d/0x890 [ 1266.720067][T17171] do_recvmmsg+0x682/0x1180 [ 1266.724774][T17171] __sys_recvmmsg+0x113/0x450 [ 1266.729577][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.736098][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1266.741349][T17171] do_fast_syscall_32+0x33/0x70 [ 1266.746468][T17171] do_SYSENTER_32+0x1b/0x20 [ 1266.751109][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1266.757715][T17171] [ 1266.760120][T17171] Uninit was stored to memory at: [ 1266.765427][T17171] __get_compat_msghdr+0x514/0x750 [ 1266.770704][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1266.775797][T17171] ___sys_recvmsg+0x19d/0x890 [ 1266.780627][T17171] do_recvmmsg+0x682/0x1180 [ 1266.785456][T17171] __sys_recvmmsg+0x113/0x450 [ 1266.790273][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.796783][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1266.802094][T17171] do_fast_syscall_32+0x33/0x70 [ 1266.807072][T17171] do_SYSENTER_32+0x1b/0x20 [ 1266.811767][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1266.818244][T17171] [ 1266.820630][T17171] Uninit was stored to memory at: [ 1266.825940][T17171] __get_compat_msghdr+0x514/0x750 [ 1266.831189][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1266.836285][T17171] ___sys_recvmsg+0x19d/0x890 [ 1266.841109][T17171] do_recvmmsg+0x682/0x1180 [ 1266.845863][T17171] __sys_recvmmsg+0x113/0x450 [ 1266.850668][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.857187][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1266.862519][T17171] do_fast_syscall_32+0x33/0x70 [ 1266.867516][T17171] do_SYSENTER_32+0x1b/0x20 [ 1266.872286][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1266.878766][T17171] [ 1266.881168][T17171] Uninit was stored to memory at: [ 1266.886478][T17171] __get_compat_msghdr+0x514/0x750 [ 1266.891806][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1266.896786][T17171] ___sys_recvmsg+0x19d/0x890 [ 1266.901589][T17171] do_recvmmsg+0x682/0x1180 [ 1266.906367][T17171] __sys_recvmmsg+0x113/0x450 [ 1266.911182][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.917686][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1266.922998][T17171] do_fast_syscall_32+0x33/0x70 [ 1266.927979][T17171] do_SYSENTER_32+0x1b/0x20 [ 1266.932727][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1266.939199][T17171] [ 1266.941599][T17171] Uninit was stored to memory at: [ 1266.946915][T17171] __get_compat_msghdr+0x514/0x750 [ 1266.952238][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1266.957219][T17171] ___sys_recvmsg+0x19d/0x890 [ 1266.962152][T17171] do_recvmmsg+0x682/0x1180 [ 1266.966767][T17171] __sys_recvmmsg+0x113/0x450 [ 1266.971559][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1266.978038][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1266.983319][T17171] do_fast_syscall_32+0x33/0x70 [ 1266.988249][T17171] do_SYSENTER_32+0x1b/0x20 [ 1266.992972][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1266.999432][T17171] [ 1267.001907][T17171] Local variable msg_sys created at: [ 1267.007248][T17171] do_recvmmsg+0x5c/0x1180 [ 1267.011857][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.211664][T17171] not chained 510000 origins [ 1267.216467][T17171] CPU: 0 PID: 17171 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1267.226760][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1267.236870][T17171] Call Trace: [ 1267.240185][T17171] [ 1267.243167][T17171] dump_stack_lvl+0x1c8/0x256 [ 1267.248030][T17171] dump_stack+0x1a/0x1c [ 1267.252345][T17171] kmsan_internal_chain_origin+0x78/0x120 [ 1267.258229][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1267.264653][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1267.270598][T17171] ? ____sys_recvmsg+0x5c1/0x810 [ 1267.275607][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1267.280873][T17171] ? get_compat_msghdr+0x8c/0x1c0 [ 1267.285991][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1267.291962][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1267.297304][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1267.303258][T17171] ? should_fail+0x3f/0x810 [ 1267.307898][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1267.313109][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1267.319491][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1267.325400][T17171] __msan_chain_origin+0xbd/0x140 [ 1267.330545][T17171] __get_compat_msghdr+0x514/0x750 [ 1267.335741][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1267.340663][T17171] ? ___sys_recvmsg+0xa9/0x890 [ 1267.345509][T17171] ? do_recvmmsg+0x682/0x1180 [ 1267.350299][T17171] ___sys_recvmsg+0x19d/0x890 [ 1267.355073][T17171] ? do_recvmmsg+0x6e4/0x1180 [ 1267.359913][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1267.365180][T17171] ? kmsan_internal_check_memory+0x94/0x530 [ 1267.371221][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1267.377142][T17171] do_recvmmsg+0x682/0x1180 [ 1267.381796][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1267.388178][T17171] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.394701][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.399512][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.405861][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1267.411052][T17171] ? exit_to_user_mode_prepare+0x119/0x220 [ 1267.416957][T17171] do_fast_syscall_32+0x33/0x70 [ 1267.421899][T17171] do_SYSENTER_32+0x1b/0x20 [ 1267.426514][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1267.432940][T17171] RIP: 0023:0xf7f3a549 [ 1267.437086][T17171] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1267.456782][T17171] RSP: 002b:00000000f7f145cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1267.465303][T17171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1267.473400][T17171] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1267.481506][T17171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.489554][T17171] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1267.497583][T17171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1267.505654][T17171] [ 1267.513715][T17171] Uninit was stored to memory at: [ 1267.518918][T17171] __get_compat_msghdr+0x514/0x750 [ 1267.524662][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1267.529641][T17171] ___sys_recvmsg+0x19d/0x890 [ 1267.534524][T17171] do_recvmmsg+0x682/0x1180 [ 1267.539135][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.544018][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.550390][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1267.555681][T17171] do_fast_syscall_32+0x33/0x70 [ 1267.560647][T17171] do_SYSENTER_32+0x1b/0x20 [ 1267.565350][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1267.571898][T17171] [ 1267.574285][T17171] Uninit was stored to memory at: [ 1267.579429][T17171] __get_compat_msghdr+0x514/0x750 [ 1267.584747][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1267.589724][T17171] ___sys_recvmsg+0x19d/0x890 [ 1267.594653][T17171] do_recvmmsg+0x682/0x1180 [ 1267.599359][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.604240][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.610619][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1267.615937][T17171] do_fast_syscall_32+0x33/0x70 [ 1267.620899][T17171] do_SYSENTER_32+0x1b/0x20 [ 1267.625579][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1267.632126][T17171] [ 1267.634513][T17171] Uninit was stored to memory at: [ 1267.639646][T17171] __get_compat_msghdr+0x514/0x750 [ 1267.644956][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1267.649917][T17171] ___sys_recvmsg+0x19d/0x890 [ 1267.654796][T17171] do_recvmmsg+0x682/0x1180 [ 1267.659408][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.664287][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.670664][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1267.675956][T17171] do_fast_syscall_32+0x33/0x70 [ 1267.680920][T17171] do_SYSENTER_32+0x1b/0x20 [ 1267.685621][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1267.692169][T17171] [ 1267.694556][T17171] Uninit was stored to memory at: [ 1267.699690][T17171] __get_compat_msghdr+0x514/0x750 [ 1267.705011][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1267.709989][T17171] ___sys_recvmsg+0x19d/0x890 [ 1267.714914][T17171] do_recvmmsg+0x682/0x1180 [ 1267.719526][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.724405][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.730776][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1267.736068][T17171] do_fast_syscall_32+0x33/0x70 [ 1267.741050][T17171] do_SYSENTER_32+0x1b/0x20 [ 1267.745766][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1267.752314][T17171] [ 1267.754706][T17171] Uninit was stored to memory at: [ 1267.759839][T17171] __get_compat_msghdr+0x514/0x750 [ 1267.765154][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1267.770127][T17171] ___sys_recvmsg+0x19d/0x890 [ 1267.775054][T17171] do_recvmmsg+0x682/0x1180 [ 1267.779676][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.784601][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.790969][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1267.796290][T17171] do_fast_syscall_32+0x33/0x70 [ 1267.801259][T17171] do_SYSENTER_32+0x1b/0x20 [ 1267.805969][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1267.812538][T17171] [ 1267.814927][T17171] Uninit was stored to memory at: [ 1267.820064][T17171] __get_compat_msghdr+0x514/0x750 [ 1267.825351][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1267.830314][T17171] ___sys_recvmsg+0x19d/0x890 [ 1267.835198][T17171] do_recvmmsg+0x682/0x1180 [ 1267.839813][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.844700][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.851069][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1267.856365][T17171] do_fast_syscall_32+0x33/0x70 [ 1267.861327][T17171] do_SYSENTER_32+0x1b/0x20 [ 1267.866060][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1267.872603][T17171] [ 1267.874989][T17171] Uninit was stored to memory at: [ 1267.880144][T17171] __get_compat_msghdr+0x514/0x750 [ 1267.885431][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1267.890393][T17171] ___sys_recvmsg+0x19d/0x890 [ 1267.895266][T17171] do_recvmmsg+0x682/0x1180 [ 1267.899884][T17171] __sys_recvmmsg+0x113/0x450 [ 1267.904770][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1267.911141][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1267.916464][T17171] do_fast_syscall_32+0x33/0x70 [ 1267.921430][T17171] do_SYSENTER_32+0x1b/0x20 [ 1267.926136][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1267.932683][T17171] [ 1267.935064][T17171] Local variable msg_sys created at: [ 1267.940384][T17171] do_recvmmsg+0x5c/0x1180 [ 1267.945001][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.138517][T17171] not chained 520000 origins [ 1268.143293][T17171] CPU: 0 PID: 17171 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1268.153588][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1268.163746][T17171] Call Trace: [ 1268.167098][T17171] [ 1268.170086][T17171] dump_stack_lvl+0x1c8/0x256 [ 1268.174890][T17171] dump_stack+0x1a/0x1c [ 1268.179185][T17171] kmsan_internal_chain_origin+0x78/0x120 [ 1268.185049][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1268.191383][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1268.197274][T17171] ? ____sys_recvmsg+0x5c1/0x810 [ 1268.202305][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1268.207620][T17171] ? get_compat_msghdr+0x8c/0x1c0 [ 1268.212733][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1268.218674][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1268.223963][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1268.229908][T17171] ? should_fail+0x3f/0x810 [ 1268.234517][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1268.239763][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1268.246116][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1268.252078][T17171] __msan_chain_origin+0xbd/0x140 [ 1268.257250][T17171] __get_compat_msghdr+0x514/0x750 [ 1268.262496][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1268.267415][T17171] ? ___sys_recvmsg+0xa9/0x890 [ 1268.272267][T17171] ? do_recvmmsg+0x682/0x1180 [ 1268.277083][T17171] ___sys_recvmsg+0x19d/0x890 [ 1268.281888][T17171] ? do_recvmmsg+0x6e4/0x1180 [ 1268.286687][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1268.291900][T17171] ? kmsan_internal_check_memory+0x94/0x530 [ 1268.297926][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1268.303821][T17171] do_recvmmsg+0x682/0x1180 [ 1268.308407][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1268.314769][T17171] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.321346][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.326122][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.332528][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1268.337765][T17171] ? exit_to_user_mode_prepare+0x119/0x220 [ 1268.343670][T17171] do_fast_syscall_32+0x33/0x70 [ 1268.348640][T17171] do_SYSENTER_32+0x1b/0x20 [ 1268.353226][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1268.359706][T17171] RIP: 0023:0xf7f3a549 [ 1268.363891][T17171] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1268.383660][T17171] RSP: 002b:00000000f7f145cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1268.392210][T17171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1268.400274][T17171] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1268.408321][T17171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1268.416376][T17171] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1268.424430][T17171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1268.432492][T17171] [ 1268.440577][T17171] Uninit was stored to memory at: [ 1268.446302][T17171] __get_compat_msghdr+0x514/0x750 [ 1268.451555][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1268.456612][T17171] ___sys_recvmsg+0x19d/0x890 [ 1268.461412][T17171] do_recvmmsg+0x682/0x1180 [ 1268.466113][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.470916][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.477385][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1268.482704][T17171] do_fast_syscall_32+0x33/0x70 [ 1268.487706][T17171] do_SYSENTER_32+0x1b/0x20 [ 1268.492420][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1268.498895][T17171] [ 1268.501278][T17171] Uninit was stored to memory at: [ 1268.506611][T17171] __get_compat_msghdr+0x514/0x750 [ 1268.511937][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1268.516901][T17171] ___sys_recvmsg+0x19d/0x890 [ 1268.521642][T17171] do_recvmmsg+0x682/0x1180 [ 1268.526358][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.531101][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.537528][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1268.542845][T17171] do_fast_syscall_32+0x33/0x70 [ 1268.547808][T17171] do_SYSENTER_32+0x1b/0x20 [ 1268.552514][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1268.558972][T17171] [ 1268.561319][T17171] Uninit was stored to memory at: [ 1268.566606][T17171] __get_compat_msghdr+0x514/0x750 [ 1268.571917][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1268.576895][T17171] ___sys_recvmsg+0x19d/0x890 [ 1268.581791][T17171] do_recvmmsg+0x682/0x1180 [ 1268.586421][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.591226][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.597708][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1268.603028][T17171] do_fast_syscall_32+0x33/0x70 [ 1268.607993][T17171] do_SYSENTER_32+0x1b/0x20 [ 1268.612699][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1268.619156][T17171] [ 1268.621504][T17171] Uninit was stored to memory at: [ 1268.626751][T17171] __get_compat_msghdr+0x514/0x750 [ 1268.632059][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1268.637018][T17171] ___sys_recvmsg+0x19d/0x890 [ 1268.641891][T17171] do_recvmmsg+0x682/0x1180 [ 1268.646506][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.651245][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.657675][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1268.662990][T17171] do_fast_syscall_32+0x33/0x70 [ 1268.667951][T17171] do_SYSENTER_32+0x1b/0x20 [ 1268.672647][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1268.679123][T17171] [ 1268.681493][T17171] Uninit was stored to memory at: [ 1268.686771][T17171] __get_compat_msghdr+0x514/0x750 [ 1268.692080][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1268.697060][T17171] ___sys_recvmsg+0x19d/0x890 [ 1268.701965][T17171] do_recvmmsg+0x682/0x1180 [ 1268.706578][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.711317][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.717776][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1268.723093][T17171] do_fast_syscall_32+0x33/0x70 [ 1268.728057][T17171] do_SYSENTER_32+0x1b/0x20 [ 1268.732761][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1268.739217][T17171] [ 1268.741568][T17171] Uninit was stored to memory at: [ 1268.746814][T17171] __get_compat_msghdr+0x514/0x750 [ 1268.752126][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1268.757083][T17171] ___sys_recvmsg+0x19d/0x890 [ 1268.761948][T17171] do_recvmmsg+0x682/0x1180 [ 1268.766580][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.771364][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.777788][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1268.783105][T17171] do_fast_syscall_32+0x33/0x70 [ 1268.788067][T17171] do_SYSENTER_32+0x1b/0x20 [ 1268.792761][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1268.799237][T17171] [ 1268.801622][T17171] Uninit was stored to memory at: [ 1268.806928][T17171] __get_compat_msghdr+0x514/0x750 [ 1268.812278][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1268.817258][T17171] ___sys_recvmsg+0x19d/0x890 [ 1268.822180][T17171] do_recvmmsg+0x682/0x1180 [ 1268.826810][T17171] __sys_recvmmsg+0x113/0x450 [ 1268.831616][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1268.838110][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1268.843435][T17171] do_fast_syscall_32+0x33/0x70 [ 1268.848399][T17171] do_SYSENTER_32+0x1b/0x20 [ 1268.853106][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1268.859563][T17171] [ 1268.862040][T17171] Local variable msg_sys created at: [ 1268.867384][T17171] do_recvmmsg+0x5c/0x1180 [ 1268.871986][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.070287][T17171] not chained 530000 origins [ 1269.075070][T17171] CPU: 1 PID: 17171 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1269.085341][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1269.095447][T17171] Call Trace: [ 1269.098762][T17171] [ 1269.101747][T17171] dump_stack_lvl+0x1c8/0x256 [ 1269.106618][T17171] dump_stack+0x1a/0x1c [ 1269.110919][T17171] kmsan_internal_chain_origin+0x78/0x120 [ 1269.116729][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1269.123081][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1269.129045][T17171] ? ____sys_recvmsg+0x5c1/0x810 [ 1269.134119][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1269.139448][T17171] ? get_compat_msghdr+0x8c/0x1c0 [ 1269.144599][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1269.150565][T17171] ? __get_compat_msghdr+0x5b/0x750 [ 1269.155909][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1269.161889][T17171] ? should_fail+0x3f/0x810 [ 1269.166536][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1269.171798][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1269.178206][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1269.184179][T17171] __msan_chain_origin+0xbd/0x140 [ 1269.189345][T17171] __get_compat_msghdr+0x514/0x750 [ 1269.194611][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1269.199589][T17171] ? ___sys_recvmsg+0xa9/0x890 [ 1269.204482][T17171] ? do_recvmmsg+0x682/0x1180 [ 1269.209292][T17171] ___sys_recvmsg+0x19d/0x890 [ 1269.214099][T17171] ? do_recvmmsg+0x6e4/0x1180 [ 1269.218919][T17171] ? __stack_depot_save+0x21/0x4b0 [ 1269.224181][T17171] ? kmsan_internal_check_memory+0x94/0x530 [ 1269.230234][T17171] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1269.236203][T17171] do_recvmmsg+0x682/0x1180 [ 1269.240866][T17171] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1269.247268][T17171] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.253851][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.258673][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.265079][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1269.270335][T17171] ? exit_to_user_mode_prepare+0x119/0x220 [ 1269.276297][T17171] do_fast_syscall_32+0x33/0x70 [ 1269.281290][T17171] do_SYSENTER_32+0x1b/0x20 [ 1269.285929][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1269.292409][T17171] RIP: 0023:0xf7f3a549 [ 1269.296574][T17171] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1269.316338][T17171] RSP: 002b:00000000f7f145cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1269.324892][T17171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1269.332980][T17171] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1269.341059][T17171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.349150][T17171] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1269.357238][T17171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.365343][T17171] [ 1269.370976][T17171] Uninit was stored to memory at: [ 1269.376439][T17171] __get_compat_msghdr+0x514/0x750 [ 1269.381780][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1269.386763][T17171] ___sys_recvmsg+0x19d/0x890 [ 1269.391570][T17171] do_recvmmsg+0x682/0x1180 [ 1269.396291][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.401093][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.407576][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1269.412921][T17171] do_fast_syscall_32+0x33/0x70 [ 1269.417905][T17171] do_SYSENTER_32+0x1b/0x20 [ 1269.422632][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1269.429108][T17171] [ 1269.431498][T17171] Uninit was stored to memory at: [ 1269.436787][T17171] __get_compat_msghdr+0x514/0x750 [ 1269.442130][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1269.447102][T17171] ___sys_recvmsg+0x19d/0x890 [ 1269.452031][T17171] do_recvmmsg+0x682/0x1180 [ 1269.456664][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.461447][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.467915][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1269.473265][T17171] do_fast_syscall_32+0x33/0x70 [ 1269.478233][T17171] do_SYSENTER_32+0x1b/0x20 [ 1269.482977][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1269.489466][T17171] [ 1269.491964][T17171] Uninit was stored to memory at: [ 1269.497150][T17171] __get_compat_msghdr+0x514/0x750 [ 1269.502503][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1269.507465][T17171] ___sys_recvmsg+0x19d/0x890 [ 1269.512362][T17171] do_recvmmsg+0x682/0x1180 [ 1269.516988][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.521890][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.528261][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1269.533570][T17171] do_fast_syscall_32+0x33/0x70 [ 1269.538533][T17171] do_SYSENTER_32+0x1b/0x20 [ 1269.543223][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1269.549707][T17171] [ 1269.552212][T17171] Uninit was stored to memory at: [ 1269.557402][T17171] __get_compat_msghdr+0x514/0x750 [ 1269.562785][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1269.567744][T17171] ___sys_recvmsg+0x19d/0x890 [ 1269.572642][T17171] do_recvmmsg+0x682/0x1180 [ 1269.577254][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.582163][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.588552][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1269.593855][T17171] do_fast_syscall_32+0x33/0x70 [ 1269.598816][T17171] do_SYSENTER_32+0x1b/0x20 [ 1269.603510][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1269.609967][T17171] [ 1269.612470][T17171] Uninit was stored to memory at: [ 1269.617651][T17171] __get_compat_msghdr+0x514/0x750 [ 1269.623032][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1269.627993][T17171] ___sys_recvmsg+0x19d/0x890 [ 1269.632887][T17171] do_recvmmsg+0x682/0x1180 [ 1269.637499][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.642403][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.648775][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1269.654118][T17171] do_fast_syscall_32+0x33/0x70 [ 1269.659080][T17171] do_SYSENTER_32+0x1b/0x20 [ 1269.663868][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1269.670327][T17171] [ 1269.672839][T17171] Uninit was stored to memory at: [ 1269.677976][T17171] __get_compat_msghdr+0x514/0x750 [ 1269.683313][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1269.688275][T17171] ___sys_recvmsg+0x19d/0x890 [ 1269.693199][T17171] do_recvmmsg+0x682/0x1180 [ 1269.697813][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.702713][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.709079][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1269.714411][T17171] do_fast_syscall_32+0x33/0x70 [ 1269.719397][T17171] do_SYSENTER_32+0x1b/0x20 [ 1269.724131][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1269.730591][T17171] [ 1269.733101][T17171] Uninit was stored to memory at: [ 1269.738309][T17171] __get_compat_msghdr+0x514/0x750 [ 1269.743688][T17171] get_compat_msghdr+0x8c/0x1c0 [ 1269.748669][T17171] ___sys_recvmsg+0x19d/0x890 [ 1269.753571][T17171] do_recvmmsg+0x682/0x1180 [ 1269.758185][T17171] __sys_recvmmsg+0x113/0x450 [ 1269.763093][T17171] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1269.769485][T17171] __do_fast_syscall_32+0xa2/0x100 [ 1269.774790][T17171] do_fast_syscall_32+0x33/0x70 [ 1269.779752][T17171] do_SYSENTER_32+0x1b/0x20 [ 1269.784445][T17171] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1269.790899][T17171] [ 1269.793413][T17171] Local variable msg_sys created at: [ 1269.798752][T17171] do_recvmmsg+0x5c/0x1180 [ 1269.803356][T17171] __sys_recvmmsg+0x113/0x450 09:38:16 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000001040)={0x38, 0x0, 0x0, 0x0, 0x8000}, 0x0) 09:38:16 executing program 1: keyctl$set_reqkey_keyring(0xd, 0x0) 09:38:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0xf4240, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:38:16 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x73}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x49, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x23, &(0x7f0000000080)={0x5, 0xf, 0x23, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x800, 0xf000, 0x8, [0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0xf2}]}, 0x4, [{0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x429}}, {0x0, 0x0}]}) 09:38:16 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=0x0, @ANYBLOB="01"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="1c00228008000300020c0000050004000100000000062836ac81343d714e67f36ba3ca83dd080dce1394dc378590d89a63f004ecbbe6c4403489198b9b694347bbd2ed9ab4ef03000013cf285fd7ab4f3b9240018a4f160b6989019af69f52dade96d236b78ce0ba1b2b0836e0"], 0x60}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/5, 0x5, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1270.452049][ T8660] usb 5-1: new high-speed USB device number 23 using dummy_hcd 09:38:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x6194743d07750bdd}, 0x14}}, 0x0) 09:38:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:16 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc539, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 09:38:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093f59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9416e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c7def4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505eb0500d13330ca006bce1a84721f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abacac95900fca0493cf29b33dcc9ffffffffffa6adffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241075f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe58201000000010000007050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda21f550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb251c19ed2514e3a22a2a998de44aeadea2a40da8daccf080842a4867217373927aa3b97152916cf6f0514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304d10c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37066191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd667e87306703be8672d70d1ab0000000000000009bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965b1125e98590b8cabe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b013dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632f9fc11785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e22cfb1baa3e112645d1cdfa9fa410632f91a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb686f5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e0e4492a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a92144e43a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a66c8e941fdbd6ea6cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a2699"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syncfs(r1) [ 1271.054169][ T8660] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1271.065641][ T8660] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1271.078907][ T8660] usb 5-1: config 1 interface 0 has no altsetting 0 09:38:17 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f00000002c0)}) 09:38:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1271.523660][ T122] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1271.542921][ T8660] usb 5-1: New USB device found, idVendor=045e, idProduct=00b4, bcdDevice= 0.40 [ 1271.552482][ T8660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.565207][ T8660] usb 5-1: Product: Щ [ 1271.569478][ T8660] usb 5-1: Manufacturer: ఉ [ 1271.792201][ T122] usb 4-1: Using ep0 maxpacket: 16 09:38:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) [ 1271.923810][ T122] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1271.945388][ T8660] usbhid 5-1:1.0: can't add hid device: -22 [ 1271.952255][ T8660] usbhid: probe of 5-1:1.0 failed with error -22 09:38:18 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\xc0~\x0f~ji\xd9\xc9\x86C\x82y\xe3#\xf8\x81\x9fL\xe0\x180G\x1e\\\x83\xdb\xf0\x15V\x90\xa5\x86~\xa9\xf9\xf4\xd7b\xc9\xc3\xf2*n\x9d\xd5\xcfB\xa5\xf8\x88\xcd\\\x8b\x16\xcdi\xb5\xc5\x03\xf4\x1dji\b2\xc4r\xce\x9e&\n\x00\x01\x1eS\xbd\x9ee\xb0\xa3\xaenD\x8e\x91Z\xf2\xafA\x05\a\x9bNC\xf0\xb6\x9e\xb4\x87\xc3~\xb6E\xe3\xe6\x830\x89\x8b9\xc0\x97\x943$\xbe\x9b\x16[5\x85\xc6+\xb8`%\xa8\\5ho \xd4\xf4\xab\x98u\x95\xf7HD\'n\x06P\xb8\x1b\xfa/\x01\x85\x86/i\x92S{^\xe7\xe6\xaa\x87\a\x93\xee#\xcd\xa1B\xf2\xde&\xa7\x19') mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) [ 1272.113208][ T8660] usb 5-1: USB disconnect, device number 23 [ 1272.164055][ T122] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 1272.173423][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.181629][ T122] usb 4-1: Product: syz [ 1272.186084][ T122] usb 4-1: Manufacturer: syz [ 1272.191126][ T122] usb 4-1: SerialNumber: syz [ 1272.314355][ T122] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 09:38:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}]}]}, 0x38}}, 0x0) [ 1272.518862][ T8660] usb 4-1: USB disconnect, device number 13 [ 1273.139463][T17228] netlink: 'syz-executor.1': attribute type 58 has an invalid length. [ 1273.148027][T17228] netlink: 44127 bytes leftover after parsing attributes in process `syz-executor.1'. 09:38:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:19 executing program 1: syz_mount_image$efs(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0xc0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x21, &(0x7f0000000080)={0x5, 0xf, 0x21, 0x2, [@ssp_cap={0xc}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}, 0x4, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x429}}, {0x0, 0x0}]}) 09:38:19 executing program 0: syz_clone(0x1a01080, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) 09:38:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:19 executing program 4: r0 = syz_io_uring_setup(0x2ea1, &(0x7f0000000380), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, 0x0, 0x1) 09:38:19 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 09:38:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@sndrcv={0x2c}], 0x2c}, 0x0) 09:38:19 executing program 4: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) [ 1273.912322][ T3577] usb 4-1: new high-speed USB device number 14 using dummy_hcd 09:38:20 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0}) clock_settime(0x0, &(0x7f0000000380)={r0}) 09:38:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1274.294089][ T3577] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 09:38:20 executing program 0: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x35]}}}}]}) [ 1274.453020][ T8660] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1274.492327][ T3577] usb 4-1: New USB device found, idVendor=045e, idProduct=00b4, bcdDevice= 0.40 [ 1274.501632][ T3577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.510026][ T3577] usb 4-1: Product: syz [ 1274.514940][ T3577] usb 4-1: Manufacturer: syz [ 1274.519749][ T3577] usb 4-1: SerialNumber: syz [ 1274.680202][ T3577] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 09:38:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1274.869798][ T122] usb 4-1: USB disconnect, device number 14 [ 1274.902668][T17307] tmpfs: Bad value for 'mpol' [ 1274.912710][ T8660] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1274.974970][ T8660] usb 5-1: not running at top speed; connect to a high speed hub [ 1275.062571][ T8660] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1275.233043][ T8660] usb 5-1: New USB device found, idVendor=045e, idProduct=00b4, bcdDevice= 0.40 [ 1275.242503][ T8660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.255237][ T8660] usb 5-1: Product: syz [ 1275.259955][ T8660] usb 5-1: Manufacturer: syz [ 1275.264799][ T8660] usb 5-1: SerialNumber: syz [ 1275.370297][ T8660] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1275.572158][ T8660] usb 5-1: USB disconnect, device number 24 09:38:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}}, 0x0) 09:38:22 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000000)="a5", 0x1}, {&(0x7f0000000100)="a9", 0x1}], 0x2, &(0x7f0000001400)=[{0x18, 0x0, 0x0, "fb"}, {0x10}], 0x28}, 0x0) 09:38:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:22 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) getpid() r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x5000000) 09:38:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) getpgid(r4) r5 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) mkdirat(r5, &(0x7f0000000100)='./file1\x00', 0x5000000) [ 1276.981315][T17316] loop3: detected capacity change from 0 to 6 09:38:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x5, 0x3, 0xf58}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffc, r0}, 0x38) [ 1277.054131][T17316] Dev loop3: unable to read RDB block 6 [ 1277.060028][T17316] loop3: unable to read partition table [ 1277.115767][T17316] loop3: partition table beyond EOD, truncated [ 1277.204344][T17316] FAT-fs (loop3): Directory bread(block 6) failed [ 1277.217864][T17330] loop4: detected capacity change from 0 to 6 [ 1277.340530][T17330] Dev loop4: unable to read RDB block 6 [ 1277.346795][T17330] loop4: unable to read partition table 09:38:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:23 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5452, &(0x7f0000000000)=ANY=[@ANYRES64]) 09:38:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:23 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1277.477405][T17330] loop4: partition table beyond EOD, truncated 09:38:23 executing program 1: syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f00000001c0)=@ctrl_frame=@ba={{}, {0x20}, @device_a, @device_a, @compressed={{}, {0x2}, "3229fd05a03ec0c4"}}, 0x1c) io_setup(0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) [ 1277.570408][T17330] FAT-fs (loop4): Directory bread(block 6) failed [ 1277.939356][T17327] not chained 540000 origins [ 1277.944267][T17327] CPU: 1 PID: 17327 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1277.954577][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1277.964750][T17327] Call Trace: [ 1277.968106][T17327] [ 1277.971116][T17327] dump_stack_lvl+0x1c8/0x256 [ 1277.975984][T17327] dump_stack+0x1a/0x1c [ 1277.980304][T17327] kmsan_internal_chain_origin+0x78/0x120 [ 1277.986192][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1277.992626][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1277.998580][T17327] ? ____sys_recvmsg+0x5c1/0x810 [ 1278.003645][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1278.008966][T17327] ? get_compat_msghdr+0x8c/0x1c0 [ 1278.014120][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1278.020075][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1278.025410][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1278.031372][T17327] ? should_fail+0x3f/0x810 [ 1278.036008][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1278.041258][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1278.047661][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1278.053607][T17327] __msan_chain_origin+0xbd/0x140 [ 1278.058797][T17327] __get_compat_msghdr+0x514/0x750 [ 1278.064054][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1278.069026][T17327] ? ___sys_recvmsg+0xa9/0x890 [ 1278.073905][T17327] ? do_recvmmsg+0x682/0x1180 [ 1278.078705][T17327] ___sys_recvmsg+0x19d/0x890 [ 1278.083496][T17327] ? do_recvmmsg+0x6e4/0x1180 [ 1278.088303][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1278.093555][T17327] ? kmsan_internal_check_memory+0x94/0x530 [ 1278.099591][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1278.105547][T17327] do_recvmmsg+0x682/0x1180 [ 1278.110188][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1278.116581][T17327] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.123135][T17327] __sys_recvmmsg+0x113/0x450 [ 1278.127945][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.134332][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1278.139577][T17327] ? exit_to_user_mode_prepare+0x119/0x220 [ 1278.145520][T17327] do_fast_syscall_32+0x33/0x70 [ 1278.150493][T17327] do_SYSENTER_32+0x1b/0x20 [ 1278.155119][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1278.161582][T17327] RIP: 0023:0xf7f30549 [ 1278.165738][T17327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1278.185489][T17327] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1278.194022][T17327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1278.202094][T17327] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1278.210162][T17327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.218228][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.226303][T17327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.234400][T17327] [ 1278.241613][T17327] Uninit was stored to memory at: [ 1278.247166][T17327] __get_compat_msghdr+0x514/0x750 [ 1278.252505][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1278.257484][T17327] ___sys_recvmsg+0x19d/0x890 [ 1278.262399][T17327] do_recvmmsg+0x682/0x1180 [ 1278.267033][T17327] __sys_recvmmsg+0x113/0x450 [ 1278.271935][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.278326][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1278.283697][T17327] do_fast_syscall_32+0x33/0x70 [ 1278.288677][T17327] do_SYSENTER_32+0x1b/0x20 [ 1278.293410][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1278.299883][T17327] [ 1278.302379][T17327] Uninit was stored to memory at: [ 1278.307565][T17327] __get_compat_msghdr+0x514/0x750 [ 1278.312895][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1278.317895][T17327] ___sys_recvmsg+0x19d/0x890 [ 1278.322801][T17327] do_recvmmsg+0x682/0x1180 [ 1278.327437][T17327] __sys_recvmmsg+0x113/0x450 [ 1278.332390][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.333532][T17351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.338732][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1278.338822][T17327] do_fast_syscall_32+0x33/0x70 [ 1278.358861][T17327] do_SYSENTER_32+0x1b/0x20 [ 1278.363617][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1278.370126][T17327] [ 1278.372664][T17327] Uninit was stored to memory at: [ 1278.377852][T17327] __get_compat_msghdr+0x514/0x750 [ 1278.383193][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1278.388173][T17327] ___sys_recvmsg+0x19d/0x890 [ 1278.393118][T17327] do_recvmmsg+0x682/0x1180 [ 1278.397751][T17327] __sys_recvmmsg+0x113/0x450 [ 1278.402701][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.409097][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1278.414522][T17327] do_fast_syscall_32+0x33/0x70 [ 1278.419510][T17327] do_SYSENTER_32+0x1b/0x20 [ 1278.424281][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1278.430769][T17327] [ 1278.433268][T17327] Uninit was stored to memory at: [ 1278.438480][T17327] __get_compat_msghdr+0x514/0x750 [ 1278.443874][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1278.448917][T17327] ___sys_recvmsg+0x19d/0x890 [ 1278.453886][T17327] do_recvmmsg+0x682/0x1180 [ 1278.458523][T17327] __sys_recvmmsg+0x113/0x450 [ 1278.463458][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.469850][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1278.475254][T17327] do_fast_syscall_32+0x33/0x70 [ 1278.480246][T17327] do_SYSENTER_32+0x1b/0x20 [ 1278.485035][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 09:38:24 executing program 3: syz_mount_image$hpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000400)="4f397636a2a53861f88ce2f434ad50b95bafd3ad6bcab254995ebc9696547b2234ba92c04cf1ba174912953aa17ed712fea725a6150fb6fc1a6cc3cf48009dfc5c6ce56a5f03d1ba48f76150f614e1197b56de0411a3a62e7aebec700bda755d8b465f5787b43740ab7f7b4c15d1d6ea75350a36339e731147b8a5955f7b1b31162739bea662b88e595a88b6a90e7a4242284bc0129e79c848847cde91a59506d6337cee70fb7362391ecddf4ee727ad84658e8f1813179479d49a475e986259bdddba0e", 0xc4}, {0x0}], 0x0, &(0x7f0000000640)={[{'efs\x00'}, {'%]@)'}, {'efs\x00'}, {'efs\x00'}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x90, 0x4e, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0xc0, {0x9, 0x21, 0xc4f, 0x0, 0x1, {0x22, 0x374}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x73, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x49, 0x76, 0x4}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0x10, 0x5, 0x40, 0x1}, 0x4f, &(0x7f0000000080)={0x5, 0xf, 0x4f, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x800, 0xf000, 0x8, [0xc000]}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x4, 0xf000, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0xf2, 0x3f}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x20, 0x0, 0x7, [0xc030, 0x3fcf, 0x3f00, 0x0, 0xcf]}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1001}}]}) 09:38:24 executing program 0: io_setup(0x1, &(0x7f0000000100)) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1278.491527][T17327] [ 1278.494071][T17327] Uninit was stored to memory at: [ 1278.499279][T17327] __get_compat_msghdr+0x514/0x750 [ 1278.504696][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1278.509681][T17327] ___sys_recvmsg+0x19d/0x890 [ 1278.514631][T17327] do_recvmmsg+0x682/0x1180 [ 1278.519287][T17327] __sys_recvmmsg+0x113/0x450 [ 1278.524257][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.530659][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1278.536050][T17327] do_fast_syscall_32+0x33/0x70 [ 1278.541039][T17327] do_SYSENTER_32+0x1b/0x20 [ 1278.545818][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1278.552382][T17327] [ 1278.554773][T17327] Uninit was stored to memory at: [ 1278.559964][T17327] __get_compat_msghdr+0x514/0x750 [ 1278.565348][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1278.570322][T17327] ___sys_recvmsg+0x19d/0x890 [ 1278.575224][T17327] do_recvmmsg+0x682/0x1180 [ 1278.579855][T17327] __sys_recvmmsg+0x113/0x450 [ 1278.584817][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.591216][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1278.596595][T17327] do_fast_syscall_32+0x33/0x70 [ 1278.601578][T17327] do_SYSENTER_32+0x1b/0x20 [ 1278.606332][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1278.612959][T17327] [ 1278.615348][T17327] Uninit was stored to memory at: [ 1278.620536][T17327] __get_compat_msghdr+0x514/0x750 [ 1278.625922][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1278.630906][T17327] ___sys_recvmsg+0x19d/0x890 [ 1278.635869][T17327] do_recvmmsg+0x682/0x1180 [ 1278.640503][T17327] __sys_recvmmsg+0x113/0x450 [ 1278.645455][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1278.651928][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1278.657180][T17327] do_fast_syscall_32+0x33/0x70 [ 1278.662322][T17327] do_SYSENTER_32+0x1b/0x20 [ 1278.666954][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1278.673623][T17327] [ 1278.676019][T17327] Local variable msg_sys created at: [ 1278.681379][T17327] do_recvmmsg+0x5c/0x1180 [ 1278.686074][T17327] __sys_recvmmsg+0x113/0x450 09:38:24 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 09:38:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1279.062989][T17355] hpfs: bad mount options. [ 1279.412620][ T122] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1279.461620][T17327] not chained 550000 origins [ 1279.467031][T17327] CPU: 0 PID: 17327 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1279.477328][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1279.487502][T17327] Call Trace: [ 1279.490862][T17327] [ 1279.493874][T17327] dump_stack_lvl+0x1c8/0x256 [ 1279.498749][T17327] dump_stack+0x1a/0x1c [ 1279.503077][T17327] kmsan_internal_chain_origin+0x78/0x120 [ 1279.508960][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1279.515368][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1279.521331][T17327] ? ____sys_recvmsg+0x5c1/0x810 [ 1279.526419][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1279.531758][T17327] ? get_compat_msghdr+0x8c/0x1c0 [ 1279.536925][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1279.542889][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1279.548234][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1279.554212][T17327] ? should_fail+0x3f/0x810 [ 1279.558876][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1279.564140][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1279.570549][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1279.576519][T17327] __msan_chain_origin+0xbd/0x140 [ 1279.581695][T17327] __get_compat_msghdr+0x514/0x750 [ 1279.586966][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1279.591949][T17327] ? ___sys_recvmsg+0xa9/0x890 [ 1279.596841][T17327] ? do_recvmmsg+0x682/0x1180 [ 1279.601655][T17327] ___sys_recvmsg+0x19d/0x890 [ 1279.606471][T17327] ? do_recvmmsg+0x6e4/0x1180 [ 1279.611297][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1279.616572][T17327] ? kmsan_internal_check_memory+0x94/0x530 [ 1279.622629][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1279.628605][T17327] do_recvmmsg+0x682/0x1180 [ 1279.633267][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1279.639681][T17327] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1279.646260][T17327] __sys_recvmmsg+0x113/0x450 [ 1279.651098][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1279.657512][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1279.662774][T17327] ? exit_to_user_mode_prepare+0x119/0x220 [ 1279.668735][T17327] do_fast_syscall_32+0x33/0x70 [ 1279.673728][T17327] do_SYSENTER_32+0x1b/0x20 [ 1279.678387][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1279.684872][T17327] RIP: 0023:0xf7f30549 [ 1279.689040][T17327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1279.708809][T17327] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1279.717362][T17327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1279.725440][T17327] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1279.733509][T17327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1279.741572][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.749644][T17327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1279.757738][T17327] [ 1279.766256][T17327] Uninit was stored to memory at: [ 1279.771462][T17327] __get_compat_msghdr+0x514/0x750 [ 1279.777315][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1279.782381][T17327] ___sys_recvmsg+0x19d/0x890 [ 1279.787190][T17327] do_recvmmsg+0x682/0x1180 [ 1279.791892][T17327] __sys_recvmmsg+0x113/0x450 [ 1279.796699][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1279.803165][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1279.808412][T17327] do_fast_syscall_32+0x33/0x70 [ 1279.813469][T17327] do_SYSENTER_32+0x1b/0x20 [ 1279.818098][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1279.824651][T17327] [ 1279.827037][T17327] Uninit was stored to memory at: [ 1279.832282][T17327] __get_compat_msghdr+0x514/0x750 [ 1279.837527][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1279.842583][T17327] ___sys_recvmsg+0x19d/0x890 [ 1279.847394][T17327] do_recvmmsg+0x682/0x1180 [ 1279.852099][T17327] __sys_recvmmsg+0x113/0x450 [ 1279.856905][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1279.863379][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1279.868627][T17327] do_fast_syscall_32+0x33/0x70 [ 1279.873692][T17327] do_SYSENTER_32+0x1b/0x20 [ 1279.878324][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1279.884892][T17327] [ 1279.887284][T17327] Uninit was stored to memory at: [ 1279.892549][T17327] __get_compat_msghdr+0x514/0x750 [ 1279.897789][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1279.902841][T17327] ___sys_recvmsg+0x19d/0x890 [ 1279.907645][T17327] do_recvmmsg+0x682/0x1180 [ 1279.912345][T17327] __sys_recvmmsg+0x113/0x450 [ 1279.917159][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1279.923618][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1279.928867][T17327] do_fast_syscall_32+0x33/0x70 [ 1279.933975][T17327] do_SYSENTER_32+0x1b/0x20 [ 1279.938609][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1279.945165][T17327] [ 1279.947566][T17327] Uninit was stored to memory at: [ 1279.952827][T17327] __get_compat_msghdr+0x514/0x750 [ 1279.958066][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1279.963121][T17327] ___sys_recvmsg+0x19d/0x890 [ 1279.967923][T17327] do_recvmmsg+0x682/0x1180 [ 1279.972630][T17327] __sys_recvmmsg+0x113/0x450 [ 1279.977435][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1279.983902][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1279.989147][T17327] do_fast_syscall_32+0x33/0x70 [ 1279.994200][T17327] do_SYSENTER_32+0x1b/0x20 [ 1279.998841][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1280.005398][T17327] [ 1280.007790][T17327] Uninit was stored to memory at: [ 1280.013051][T17327] __get_compat_msghdr+0x514/0x750 [ 1280.018288][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1280.023362][T17327] ___sys_recvmsg+0x19d/0x890 [ 1280.028183][T17327] do_recvmmsg+0x682/0x1180 [ 1280.032889][T17327] __sys_recvmmsg+0x113/0x450 [ 1280.037695][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1280.044163][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1280.049413][T17327] do_fast_syscall_32+0x33/0x70 [ 1280.054503][T17327] do_SYSENTER_32+0x1b/0x20 [ 1280.059134][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1280.065691][T17327] [ 1280.068080][T17327] Uninit was stored to memory at: [ 1280.073342][T17327] __get_compat_msghdr+0x514/0x750 [ 1280.078582][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1280.083641][T17327] ___sys_recvmsg+0x19d/0x890 [ 1280.088461][T17327] do_recvmmsg+0x682/0x1180 [ 1280.093172][T17327] __sys_recvmmsg+0x113/0x450 [ 1280.097973][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1280.104452][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1280.109713][T17327] do_fast_syscall_32+0x33/0x70 [ 1280.114784][T17327] do_SYSENTER_32+0x1b/0x20 [ 1280.119414][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1280.125962][T17327] [ 1280.128354][T17327] Uninit was stored to memory at: [ 1280.133614][T17327] __get_compat_msghdr+0x514/0x750 [ 1280.138855][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1280.143906][T17327] ___sys_recvmsg+0x19d/0x890 [ 1280.148711][T17327] do_recvmmsg+0x682/0x1180 [ 1280.153422][T17327] __sys_recvmmsg+0x113/0x450 [ 1280.158259][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1280.164740][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1280.169987][T17327] do_fast_syscall_32+0x33/0x70 [ 1280.175044][T17327] do_SYSENTER_32+0x1b/0x20 [ 1280.179682][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1280.186292][T17327] [ 1280.188689][T17327] Local variable msg_sys created at: [ 1280.194172][T17327] do_recvmmsg+0x5c/0x1180 [ 1280.198717][T17327] __sys_recvmmsg+0x113/0x450 [ 1280.592254][ T122] usb 4-1: not running at top speed; connect to a high speed hub [ 1280.609679][T17327] not chained 560000 origins [ 1280.614420][T17327] CPU: 1 PID: 17327 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1280.624649][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1280.634760][T17327] Call Trace: [ 1280.638073][T17327] [ 1280.641038][T17327] dump_stack_lvl+0x1c8/0x256 [ 1280.645822][T17327] dump_stack+0x1a/0x1c [ 1280.650075][T17327] kmsan_internal_chain_origin+0x78/0x120 [ 1280.655888][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1280.662223][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1280.668114][T17327] ? ____sys_recvmsg+0x5c1/0x810 [ 1280.673142][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1280.678474][T17327] ? get_compat_msghdr+0x8c/0x1c0 [ 1280.683631][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1280.689593][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1280.694910][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1280.700807][T17327] ? should_fail+0x3f/0x810 [ 1280.705409][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1280.710603][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1280.716951][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1280.722865][T17327] __msan_chain_origin+0xbd/0x140 [ 1280.728034][T17327] __get_compat_msghdr+0x514/0x750 [ 1280.733273][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1280.738236][T17327] ? ___sys_recvmsg+0xa9/0x890 [ 1280.743098][T17327] ? do_recvmmsg+0x682/0x1180 [ 1280.747862][T17327] ___sys_recvmsg+0x19d/0x890 [ 1280.752605][T17327] ? do_recvmmsg+0x6e4/0x1180 [ 1280.757366][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1280.762560][T17327] ? kmsan_internal_check_memory+0x94/0x530 [ 1280.768540][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1280.772422][ T122] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1280.774415][T17327] do_recvmmsg+0x682/0x1180 [ 1280.774529][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1280.774646][T17327] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1280.774757][T17327] __sys_recvmmsg+0x113/0x450 [ 1280.774857][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1280.774975][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1280.775071][T17327] ? exit_to_user_mode_prepare+0x119/0x220 [ 1280.775173][T17327] do_fast_syscall_32+0x33/0x70 [ 1280.775263][T17327] do_SYSENTER_32+0x1b/0x20 [ 1280.775355][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1280.775460][T17327] RIP: 0023:0xf7f30549 [ 1280.775515][T17327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1280.775602][T17327] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1280.775682][T17327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1280.775742][T17327] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1280.775795][T17327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1280.775847][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.775899][T17327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1280.775973][T17327] [ 1280.778348][T17327] Uninit was stored to memory at: [ 1280.778467][T17327] __get_compat_msghdr+0x514/0x750 [ 1280.778550][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1280.778627][T17327] ___sys_recvmsg+0x19d/0x890 [ 1280.778706][T17327] do_recvmmsg+0x682/0x1180 [ 1280.778785][T17327] __sys_recvmmsg+0x113/0x450 [ 1280.778865][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1280.792278][ T122] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1280.796517][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1280.970813][T17327] do_fast_syscall_32+0x33/0x70 [ 1280.975876][T17327] do_SYSENTER_32+0x1b/0x20 [ 1280.980511][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1280.987133][T17327] [ 1280.989548][T17327] Uninit was stored to memory at: [ 1280.994856][T17327] __get_compat_msghdr+0x514/0x750 [ 1281.000096][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1281.005182][T17327] ___sys_recvmsg+0x19d/0x890 [ 1281.009975][T17327] do_recvmmsg+0x682/0x1180 [ 1281.014706][T17327] __sys_recvmmsg+0x113/0x450 [ 1281.019498][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1281.026009][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1281.031255][T17327] do_fast_syscall_32+0x33/0x70 [ 1281.036345][T17327] do_SYSENTER_32+0x1b/0x20 [ 1281.040985][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1281.047618][T17327] [ 1281.050004][T17327] Uninit was stored to memory at: [ 1281.053037][ T122] usb 4-1: string descriptor 0 read error: -22 [ 1281.055289][T17327] __get_compat_msghdr+0x514/0x750 [ 1281.061647][ T122] usb 4-1: New USB device found, idVendor=045e, idProduct=00b4, bcdDevice= 0.40 [ 1281.066505][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1281.075707][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.080402][T17327] ___sys_recvmsg+0x19d/0x890 [ 1281.093522][T17327] do_recvmmsg+0x682/0x1180 [ 1281.098152][T17327] __sys_recvmmsg+0x113/0x450 [ 1281.103054][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1281.109442][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1281.114833][T17327] do_fast_syscall_32+0x33/0x70 [ 1281.119818][T17327] do_SYSENTER_32+0x1b/0x20 [ 1281.124504][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1281.130919][T17327] [ 1281.133436][T17327] Uninit was stored to memory at: [ 1281.138624][T17327] __get_compat_msghdr+0x514/0x750 [ 1281.143916][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1281.148857][T17327] ___sys_recvmsg+0x19d/0x890 [ 1281.153778][T17327] do_recvmmsg+0x682/0x1180 [ 1281.158414][T17327] __sys_recvmmsg+0x113/0x450 [ 1281.163345][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1281.169735][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1281.175086][T17327] do_fast_syscall_32+0x33/0x70 [ 1281.180052][T17327] do_SYSENTER_32+0x1b/0x20 [ 1281.184779][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1281.191253][T17327] [ 1281.193789][T17327] Uninit was stored to memory at: [ 1281.198929][T17327] __get_compat_msghdr+0x514/0x750 [ 1281.204233][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1281.209200][T17327] ___sys_recvmsg+0x19d/0x890 [ 1281.214072][T17327] do_recvmmsg+0x682/0x1180 [ 1281.218711][T17327] __sys_recvmmsg+0x113/0x450 [ 1281.223648][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1281.230020][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1281.235330][T17327] do_fast_syscall_32+0x33/0x70 [ 1281.240301][T17327] do_SYSENTER_32+0x1b/0x20 [ 1281.245002][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1281.251464][T17327] [ 1281.253971][T17327] Uninit was stored to memory at: [ 1281.259110][T17327] __get_compat_msghdr+0x514/0x750 [ 1281.264415][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1281.269381][T17327] ___sys_recvmsg+0x19d/0x890 [ 1281.274294][T17327] do_recvmmsg+0x682/0x1180 [ 1281.278916][T17327] __sys_recvmmsg+0x113/0x450 [ 1281.283821][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1281.290214][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1281.295622][T17327] do_fast_syscall_32+0x33/0x70 [ 1281.300605][T17327] do_SYSENTER_32+0x1b/0x20 [ 1281.305301][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1281.311873][T17327] [ 1281.314268][T17327] Uninit was stored to memory at: [ 1281.319433][T17327] __get_compat_msghdr+0x514/0x750 [ 1281.324752][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1281.329721][T17327] ___sys_recvmsg+0x19d/0x890 [ 1281.334597][T17327] do_recvmmsg+0x682/0x1180 [ 1281.339221][T17327] __sys_recvmmsg+0x113/0x450 [ 1281.344222][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1281.350604][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1281.355917][T17327] do_fast_syscall_32+0x33/0x70 [ 1281.360901][T17327] do_SYSENTER_32+0x1b/0x20 [ 1281.365752][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1281.372312][T17327] [ 1281.374711][T17327] Local variable msg_sys created at: [ 1281.380069][T17327] do_recvmmsg+0x5c/0x1180 [ 1281.384766][T17327] __sys_recvmmsg+0x113/0x450 [ 1281.472374][ T122] usbhid 4-1:1.0: can't add hid device: -71 [ 1281.478836][ T122] usbhid: probe of 4-1:1.0 failed with error -71 [ 1281.551249][ T122] usb 4-1: USB disconnect, device number 15 [ 1281.679705][T17327] not chained 570000 origins [ 1281.684568][T17327] CPU: 1 PID: 17327 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1281.694860][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1281.705003][T17327] Call Trace: [ 1281.708328][T17327] [ 1281.711298][T17327] dump_stack_lvl+0x1c8/0x256 [ 1281.716109][T17327] dump_stack+0x1a/0x1c [ 1281.720365][T17327] kmsan_internal_chain_origin+0x78/0x120 [ 1281.726223][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1281.732615][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1281.738511][T17327] ? ____sys_recvmsg+0x5c1/0x810 [ 1281.743542][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1281.748859][T17327] ? get_compat_msghdr+0x8c/0x1c0 [ 1281.753955][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1281.759856][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1281.765171][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1281.771114][T17327] ? should_fail+0x3f/0x810 [ 1281.775732][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1281.780975][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1281.787328][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1281.793297][T17327] __msan_chain_origin+0xbd/0x140 [ 1281.798478][T17327] __get_compat_msghdr+0x514/0x750 [ 1281.803745][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1281.808725][T17327] ? ___sys_recvmsg+0xa9/0x890 [ 1281.813602][T17327] ? do_recvmmsg+0x682/0x1180 [ 1281.818371][T17327] ___sys_recvmsg+0x19d/0x890 [ 1281.823138][T17327] ? do_recvmmsg+0x6e4/0x1180 [ 1281.827963][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1281.833203][T17327] ? kmsan_internal_check_memory+0x94/0x530 [ 1281.839185][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1281.845107][T17327] do_recvmmsg+0x682/0x1180 [ 1281.849768][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1281.856175][T17327] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1281.862686][T17327] __sys_recvmmsg+0x113/0x450 [ 1281.867440][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1281.873805][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1281.879149][T17327] ? exit_to_user_mode_prepare+0x119/0x220 [ 1281.885107][T17327] do_fast_syscall_32+0x33/0x70 [ 1281.890096][T17327] do_SYSENTER_32+0x1b/0x20 [ 1281.894730][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1281.901213][T17327] RIP: 0023:0xf7f30549 [ 1281.905383][T17327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1281.925147][T17327] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1281.933702][T17327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1281.941788][T17327] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1281.949866][T17327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1281.957943][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.966015][T17327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1281.974103][T17327] [ 1281.979445][T17327] Uninit was stored to memory at: [ 1281.984963][T17327] __get_compat_msghdr+0x514/0x750 [ 1281.990208][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1281.995291][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.000105][T17327] do_recvmmsg+0x682/0x1180 [ 1282.004831][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.009637][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.016124][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.021376][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.026474][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.031107][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.037739][T17327] [ 1282.040144][T17327] Uninit was stored to memory at: [ 1282.045484][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.050724][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.055860][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.060665][T17327] do_recvmmsg+0x682/0x1180 [ 1282.065454][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.070264][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.076810][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.082136][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.087129][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.091907][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.098402][T17327] [ 1282.100793][T17327] Uninit was stored to memory at: [ 1282.106168][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.111424][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.116518][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.121345][T17327] do_recvmmsg+0x682/0x1180 [ 1282.126123][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.130928][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.137477][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.142812][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.147802][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.152576][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.159066][T17327] [ 1282.161468][T17327] Uninit was stored to memory at: [ 1282.166815][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.172143][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.177115][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.182063][T17327] do_recvmmsg+0x682/0x1180 [ 1282.186688][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.191497][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.198049][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.203384][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.208377][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.213146][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.219624][T17327] [ 1282.222152][T17327] Uninit was stored to memory at: [ 1282.227360][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.232746][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.237736][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.242692][T17327] do_recvmmsg+0x682/0x1180 [ 1282.247333][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.252248][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.258656][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.264044][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.269037][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.273813][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.280285][T17327] [ 1282.282807][T17327] Uninit was stored to memory at: [ 1282.288006][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.293425][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.298411][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.303322][T17327] do_recvmmsg+0x682/0x1180 [ 1282.307956][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.312909][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.319298][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.324696][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.329690][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.334472][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.340967][T17327] [ 1282.343493][T17327] Uninit was stored to memory at: [ 1282.348706][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.354080][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.359042][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.363958][T17327] do_recvmmsg+0x682/0x1180 [ 1282.368620][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.373533][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.379904][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.385212][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.390175][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.394921][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.401377][T17327] [ 1282.403899][T17327] Local variable msg_sys created at: [ 1282.409241][T17327] do_recvmmsg+0x5c/0x1180 [ 1282.413872][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.610912][T17327] not chained 580000 origins [ 1282.615674][T17327] CPU: 1 PID: 17327 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1282.625928][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1282.636067][T17327] Call Trace: [ 1282.639382][T17327] [ 1282.642348][T17327] dump_stack_lvl+0x1c8/0x256 [ 1282.647129][T17327] dump_stack+0x1a/0x1c [ 1282.651370][T17327] kmsan_internal_chain_origin+0x78/0x120 [ 1282.657175][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1282.663508][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1282.669397][T17327] ? ____sys_recvmsg+0x5c1/0x810 [ 1282.674423][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1282.679751][T17327] ? get_compat_msghdr+0x8c/0x1c0 [ 1282.684919][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1282.690864][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1282.696133][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1282.702040][T17327] ? should_fail+0x3f/0x810 [ 1282.706621][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1282.711812][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1282.718142][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1282.724057][T17327] __msan_chain_origin+0xbd/0x140 [ 1282.729229][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.734469][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.739388][T17327] ? ___sys_recvmsg+0xa9/0x890 [ 1282.744214][T17327] ? do_recvmmsg+0x682/0x1180 [ 1282.748957][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.753698][T17327] ? do_recvmmsg+0x6e4/0x1180 [ 1282.758451][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1282.763642][T17327] ? kmsan_internal_check_memory+0x94/0x530 [ 1282.769621][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1282.775539][T17327] do_recvmmsg+0x682/0x1180 [ 1282.780168][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1282.786498][T17327] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.792998][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.797750][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.804080][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.809262][T17327] ? exit_to_user_mode_prepare+0x119/0x220 [ 1282.815147][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.820067][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.824652][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.831128][T17327] RIP: 0023:0xf7f30549 [ 1282.835299][T17327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1282.855041][T17327] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1282.863523][T17327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1282.871557][T17327] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1282.879600][T17327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1282.887649][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1282.895685][T17327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1282.903738][T17327] [ 1282.909079][T17327] Uninit was stored to memory at: [ 1282.914584][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.919828][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.924913][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.929722][T17327] do_recvmmsg+0x682/0x1180 [ 1282.934452][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.939256][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1282.945774][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1282.951031][T17327] do_fast_syscall_32+0x33/0x70 [ 1282.956063][T17327] do_SYSENTER_32+0x1b/0x20 [ 1282.960632][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1282.967162][T17327] [ 1282.969535][T17327] Uninit was stored to memory at: [ 1282.974832][T17327] __get_compat_msghdr+0x514/0x750 [ 1282.980080][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1282.985143][T17327] ___sys_recvmsg+0x19d/0x890 [ 1282.989942][T17327] do_recvmmsg+0x682/0x1180 [ 1282.994665][T17327] __sys_recvmmsg+0x113/0x450 [ 1282.999465][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.005957][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.011190][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.016236][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.020862][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.027421][T17327] [ 1283.029809][T17327] Uninit was stored to memory at: [ 1283.035102][T17327] __get_compat_msghdr+0x514/0x750 [ 1283.040324][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1283.045363][T17327] ___sys_recvmsg+0x19d/0x890 [ 1283.050175][T17327] do_recvmmsg+0x682/0x1180 [ 1283.054911][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.059714][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.066200][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.071448][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.076534][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.081168][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.087702][T17327] [ 1283.090075][T17327] Uninit was stored to memory at: [ 1283.095381][T17327] __get_compat_msghdr+0x514/0x750 [ 1283.100604][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1283.105645][T17327] ___sys_recvmsg+0x19d/0x890 [ 1283.110434][T17327] do_recvmmsg+0x682/0x1180 [ 1283.115153][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.119943][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.126389][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.131643][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.136770][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.141408][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.148001][T17327] [ 1283.150376][T17327] Uninit was stored to memory at: [ 1283.155647][T17327] __get_compat_msghdr+0x514/0x750 [ 1283.160873][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1283.165964][T17327] ___sys_recvmsg+0x19d/0x890 [ 1283.170750][T17327] do_recvmmsg+0x682/0x1180 [ 1283.175483][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.180274][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.186718][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.192043][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.197007][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.201587][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.208165][T17327] [ 1283.210525][T17327] Uninit was stored to memory at: [ 1283.215807][T17327] __get_compat_msghdr+0x514/0x750 [ 1283.221036][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1283.226105][T17327] ___sys_recvmsg+0x19d/0x890 [ 1283.230912][T17327] do_recvmmsg+0x682/0x1180 [ 1283.235674][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.240483][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.246989][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.252291][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.257216][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.261946][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.268434][T17327] [ 1283.270801][T17327] Uninit was stored to memory at: [ 1283.276077][T17327] __get_compat_msghdr+0x514/0x750 [ 1283.281320][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1283.286394][T17327] ___sys_recvmsg+0x19d/0x890 [ 1283.291185][T17327] do_recvmmsg+0x682/0x1180 [ 1283.295933][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.300744][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.307239][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.312582][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.317504][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.322232][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.328712][T17327] [ 1283.331082][T17327] Local variable msg_sys created at: [ 1283.336583][T17327] do_recvmmsg+0x5c/0x1180 [ 1283.341125][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.562589][T17327] not chained 590000 origins [ 1283.567271][T17327] CPU: 0 PID: 17327 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1283.577515][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1283.587653][T17327] Call Trace: [ 1283.590990][T17327] [ 1283.593966][T17327] dump_stack_lvl+0x1c8/0x256 [ 1283.598747][T17327] dump_stack+0x1a/0x1c [ 1283.602988][T17327] kmsan_internal_chain_origin+0x78/0x120 [ 1283.608794][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1283.615124][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1283.621008][T17327] ? ____sys_recvmsg+0x5c1/0x810 [ 1283.626015][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1283.631338][T17327] ? get_compat_msghdr+0x8c/0x1c0 [ 1283.636444][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1283.642355][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1283.647697][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1283.653594][T17327] ? should_fail+0x3f/0x810 [ 1283.658175][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1283.663364][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1283.669691][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1283.675600][T17327] __msan_chain_origin+0xbd/0x140 [ 1283.680703][T17327] __get_compat_msghdr+0x514/0x750 [ 1283.685930][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1283.690894][T17327] ? ___sys_recvmsg+0xa9/0x890 [ 1283.695731][T17327] ? do_recvmmsg+0x682/0x1180 [ 1283.700479][T17327] ___sys_recvmsg+0x19d/0x890 [ 1283.705224][T17327] ? do_recvmmsg+0x6e4/0x1180 [ 1283.709976][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1283.715166][T17327] ? kmsan_internal_check_memory+0x94/0x530 [ 1283.721142][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1283.727039][T17327] do_recvmmsg+0x682/0x1180 [ 1283.731668][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1283.738044][T17327] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.744565][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.749368][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.755702][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.760907][T17327] ? exit_to_user_mode_prepare+0x119/0x220 [ 1283.766816][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.771771][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.776389][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.782834][T17327] RIP: 0023:0xf7f30549 [ 1283.787005][T17327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1283.806699][T17327] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1283.815183][T17327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1283.823212][T17327] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1283.831234][T17327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1283.839254][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.847298][T17327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1283.855374][T17327] [ 1283.868624][T17327] Uninit was stored to memory at: [ 1283.875505][T17327] __get_compat_msghdr+0x514/0x750 [ 1283.880754][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1283.885809][T17327] ___sys_recvmsg+0x19d/0x890 [ 1283.890621][T17327] do_recvmmsg+0x682/0x1180 [ 1283.895315][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.900114][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.906579][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.911897][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.916877][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.921495][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.928017][T17327] [ 1283.930390][T17327] Uninit was stored to memory at: [ 1283.935679][T17327] __get_compat_msghdr+0x514/0x750 [ 1283.940901][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1283.945938][T17327] ___sys_recvmsg+0x19d/0x890 [ 1283.950767][T17327] do_recvmmsg+0x682/0x1180 [ 1283.955501][T17327] __sys_recvmmsg+0x113/0x450 [ 1283.960289][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1283.966720][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1283.972041][T17327] do_fast_syscall_32+0x33/0x70 [ 1283.977006][T17327] do_SYSENTER_32+0x1b/0x20 [ 1283.981573][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1283.988098][T17327] [ 1283.990487][T17327] Uninit was stored to memory at: [ 1283.995781][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.001009][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.006070][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.010856][T17327] do_recvmmsg+0x682/0x1180 [ 1284.015571][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.020382][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.026923][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.032241][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.037203][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.041890][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.048377][T17327] [ 1284.050740][T17327] Uninit was stored to memory at: [ 1284.056022][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.061352][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.066376][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.071163][T17327] do_recvmmsg+0x682/0x1180 [ 1284.075840][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.080633][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.087064][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.092381][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.097341][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.102033][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.108495][T17327] [ 1284.110845][T17327] Uninit was stored to memory at: [ 1284.116133][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.121356][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.126417][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.131223][T17327] do_recvmmsg+0x682/0x1180 [ 1284.135978][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.140767][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.147195][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.152514][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.157492][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.162242][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.168699][T17327] [ 1284.171079][T17327] Uninit was stored to memory at: [ 1284.176328][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.181550][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.186609][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.191399][T17327] do_recvmmsg+0x682/0x1180 [ 1284.196081][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.200886][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.207314][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.212635][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.217616][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.222314][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.228780][T17327] [ 1284.231128][T17327] Uninit was stored to memory at: [ 1284.236421][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.241660][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.246762][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.251549][T17327] do_recvmmsg+0x682/0x1180 [ 1284.256247][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.261038][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.267475][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.272795][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.277759][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.282472][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.288969][T17327] [ 1284.291342][T17327] Local variable msg_sys created at: [ 1284.296775][T17327] do_recvmmsg+0x5c/0x1180 [ 1284.301298][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.495871][T17327] not chained 600000 origins [ 1284.500565][T17327] CPU: 0 PID: 17327 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1284.510813][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1284.520929][T17327] Call Trace: [ 1284.524246][T17327] [ 1284.527255][T17327] dump_stack_lvl+0x1c8/0x256 [ 1284.532068][T17327] dump_stack+0x1a/0x1c [ 1284.536368][T17327] kmsan_internal_chain_origin+0x78/0x120 [ 1284.542197][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1284.548596][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1284.554518][T17327] ? ____sys_recvmsg+0x5c1/0x810 [ 1284.559572][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1284.564859][T17327] ? get_compat_msghdr+0x8c/0x1c0 [ 1284.570019][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1284.575984][T17327] ? __get_compat_msghdr+0x5b/0x750 [ 1284.581301][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1284.587205][T17327] ? should_fail+0x3f/0x810 [ 1284.591807][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1284.597047][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1284.603384][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1284.609274][T17327] __msan_chain_origin+0xbd/0x140 [ 1284.614403][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.619645][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.624590][T17327] ? ___sys_recvmsg+0xa9/0x890 [ 1284.629423][T17327] ? do_recvmmsg+0x682/0x1180 [ 1284.634191][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.639006][T17327] ? do_recvmmsg+0x6e4/0x1180 [ 1284.643791][T17327] ? __stack_depot_save+0x21/0x4b0 [ 1284.648985][T17327] ? kmsan_internal_check_memory+0x94/0x530 [ 1284.654985][T17327] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1284.660933][T17327] do_recvmmsg+0x682/0x1180 [ 1284.665550][T17327] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1284.671965][T17327] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.678545][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.683379][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.689760][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.694973][T17327] ? exit_to_user_mode_prepare+0x119/0x220 [ 1284.700878][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.705808][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.710409][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.716815][T17327] RIP: 0023:0xf7f30549 [ 1284.720932][T17327] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1284.740630][T17327] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1284.749121][T17327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1284.757157][T17327] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1284.765208][T17327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1284.773279][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.781338][T17327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1284.789402][T17327] [ 1284.797586][T17327] Uninit was stored to memory at: [ 1284.803250][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.808521][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.813579][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.818396][T17327] do_recvmmsg+0x682/0x1180 [ 1284.823104][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.827915][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.834376][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.839625][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.844734][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.849373][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.855981][T17327] [ 1284.858370][T17327] Uninit was stored to memory at: [ 1284.863644][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.868871][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.873934][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.878724][T17327] do_recvmmsg+0x682/0x1180 [ 1284.883430][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.888235][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.894754][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.900011][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.905118][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.909750][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.916345][T17327] [ 1284.918720][T17327] Uninit was stored to memory at: [ 1284.924011][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.929255][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.934318][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.939106][T17327] do_recvmmsg+0x682/0x1180 [ 1284.943819][T17327] __sys_recvmmsg+0x113/0x450 [ 1284.948611][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1284.955048][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1284.960278][T17327] do_fast_syscall_32+0x33/0x70 [ 1284.965340][T17327] do_SYSENTER_32+0x1b/0x20 [ 1284.969956][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1284.976535][T17327] [ 1284.978908][T17327] Uninit was stored to memory at: [ 1284.984198][T17327] __get_compat_msghdr+0x514/0x750 [ 1284.989423][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1284.994478][T17327] ___sys_recvmsg+0x19d/0x890 [ 1284.999269][T17327] do_recvmmsg+0x682/0x1180 [ 1285.003992][T17327] __sys_recvmmsg+0x113/0x450 [ 1285.008799][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1285.015316][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1285.020545][T17327] do_fast_syscall_32+0x33/0x70 [ 1285.025576][T17327] do_SYSENTER_32+0x1b/0x20 [ 1285.030211][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1285.036728][T17327] [ 1285.039100][T17327] Uninit was stored to memory at: [ 1285.044360][T17327] __get_compat_msghdr+0x514/0x750 [ 1285.049689][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1285.054761][T17327] ___sys_recvmsg+0x19d/0x890 [ 1285.059551][T17327] do_recvmmsg+0x682/0x1180 [ 1285.064232][T17327] __sys_recvmmsg+0x113/0x450 [ 1285.069051][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1285.075523][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1285.080756][T17327] do_fast_syscall_32+0x33/0x70 [ 1285.085807][T17327] do_SYSENTER_32+0x1b/0x20 [ 1285.090424][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1285.096954][T17327] [ 1285.099329][T17327] Uninit was stored to memory at: [ 1285.104662][T17327] __get_compat_msghdr+0x514/0x750 [ 1285.109906][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1285.115022][T17327] ___sys_recvmsg+0x19d/0x890 [ 1285.119833][T17327] do_recvmmsg+0x682/0x1180 [ 1285.124589][T17327] __sys_recvmmsg+0x113/0x450 [ 1285.129400][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1285.135863][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1285.141111][T17327] do_fast_syscall_32+0x33/0x70 [ 1285.146188][T17327] do_SYSENTER_32+0x1b/0x20 [ 1285.150817][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1285.157369][T17327] [ 1285.159765][T17327] Uninit was stored to memory at: [ 1285.165066][T17327] __get_compat_msghdr+0x514/0x750 [ 1285.170301][T17327] get_compat_msghdr+0x8c/0x1c0 [ 1285.175355][T17327] ___sys_recvmsg+0x19d/0x890 [ 1285.180163][T17327] do_recvmmsg+0x682/0x1180 [ 1285.184919][T17327] __sys_recvmmsg+0x113/0x450 [ 1285.189721][T17327] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1285.196232][T17327] __do_fast_syscall_32+0xa2/0x100 [ 1285.201479][T17327] do_fast_syscall_32+0x33/0x70 [ 1285.206590][T17327] do_SYSENTER_32+0x1b/0x20 [ 1285.211225][T17327] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1285.217833][T17327] [ 1285.220224][T17327] Local variable msg_sys created at: [ 1285.225704][T17327] do_recvmmsg+0x5c/0x1180 [ 1285.230241][T17327] __sys_recvmmsg+0x113/0x450 09:38:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) getpgid(r4) r5 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) mkdirat(r5, &(0x7f0000000100)='./file1\x00', 0x5000000) 09:38:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 09:38:31 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 09:38:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:31 executing program 3: syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x2) 09:38:31 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap$dsp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 09:38:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 09:38:31 executing program 1: syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f00000001c0)=@ctrl_frame=@ba={{}, {}, @device_a, @device_a, @compressed={{}, {}, "3229fd05a03ec0c4"}}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:38:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1285.969192][T17389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1285.976699][T17389] IPv6: NLM_F_CREATE should be set when creating new route [ 1285.984210][T17389] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.036155][T17392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:38:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1286.249245][T17396] loop4: detected capacity change from 0 to 6 [ 1286.373426][T17396] Dev loop4: unable to read RDB block 6 [ 1286.379423][T17396] loop4: unable to read partition table [ 1286.414583][T17396] loop4: partition table beyond EOD, truncated [ 1286.705541][T17396] FAT-fs (loop4): Directory bread(block 6) failed [ 1287.193174][T17391] not chained 610000 origins [ 1287.197925][T17391] CPU: 0 PID: 17391 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1287.208175][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1287.218294][T17391] Call Trace: [ 1287.221626][T17391] [ 1287.224618][T17391] dump_stack_lvl+0x1c8/0x256 [ 1287.229483][T17391] dump_stack+0x1a/0x1c [ 1287.233802][T17391] kmsan_internal_chain_origin+0x78/0x120 [ 1287.239686][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1287.246091][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1287.252056][T17391] ? ____sys_recvmsg+0x5c1/0x810 [ 1287.257131][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1287.262428][T17391] ? get_compat_msghdr+0x8c/0x1c0 [ 1287.267587][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1287.273518][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1287.278855][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1287.284828][T17391] ? should_fail+0x3f/0x810 [ 1287.289476][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1287.294692][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1287.301101][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1287.307020][T17391] __msan_chain_origin+0xbd/0x140 [ 1287.312195][T17391] __get_compat_msghdr+0x514/0x750 [ 1287.317439][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1287.322466][T17391] ? ___sys_recvmsg+0xa9/0x890 [ 1287.327391][T17391] ? do_recvmmsg+0x682/0x1180 [ 1287.332218][T17391] ___sys_recvmsg+0x19d/0x890 [ 1287.337021][T17391] ? do_recvmmsg+0x6e4/0x1180 [ 1287.341806][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1287.347077][T17391] ? kmsan_internal_check_memory+0x94/0x530 [ 1287.353141][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1287.359100][T17391] do_recvmmsg+0x682/0x1180 [ 1287.363723][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1287.370112][T17391] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.376633][T17391] __sys_recvmmsg+0x113/0x450 [ 1287.381400][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.387763][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1287.392982][T17391] ? exit_to_user_mode_prepare+0x119/0x220 [ 1287.398931][T17391] do_fast_syscall_32+0x33/0x70 [ 1287.403885][T17391] do_SYSENTER_32+0x1b/0x20 [ 1287.408512][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1287.414967][T17391] RIP: 0023:0xf7f30549 [ 1287.419125][T17391] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1287.438876][T17391] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1287.447391][T17391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1287.455456][T17391] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1287.463548][T17391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1287.471626][T17391] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1287.479672][T17391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1287.487722][T17391] [ 1287.496009][T17391] Uninit was stored to memory at: [ 1287.501217][T17391] __get_compat_msghdr+0x514/0x750 [ 1287.507053][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1287.512115][T17391] ___sys_recvmsg+0x19d/0x890 [ 1287.516924][T17391] do_recvmmsg+0x682/0x1180 [ 1287.521584][T17391] __sys_recvmmsg+0x113/0x450 [ 1287.526473][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.532977][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1287.538224][T17391] do_fast_syscall_32+0x33/0x70 [ 1287.543344][T17391] do_SYSENTER_32+0x1b/0x20 [ 1287.547991][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1287.554590][T17391] [ 1287.556983][T17391] Uninit was stored to memory at: [ 1287.562262][T17391] __get_compat_msghdr+0x514/0x750 [ 1287.567505][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1287.572562][T17391] ___sys_recvmsg+0x19d/0x890 [ 1287.577371][T17391] do_recvmmsg+0x682/0x1180 [ 1287.582104][T17391] __sys_recvmmsg+0x113/0x450 [ 1287.586912][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.593394][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1287.598631][T17391] do_fast_syscall_32+0x33/0x70 [ 1287.603690][T17391] do_SYSENTER_32+0x1b/0x20 [ 1287.608334][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1287.614945][T17391] [ 1287.617334][T17391] Uninit was stored to memory at: [ 1287.622643][T17391] __get_compat_msghdr+0x514/0x750 [ 1287.627869][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1287.632928][T17391] ___sys_recvmsg+0x19d/0x890 [ 1287.637737][T17391] do_recvmmsg+0x682/0x1180 [ 1287.642494][T17391] __sys_recvmmsg+0x113/0x450 [ 1287.647304][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.653765][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1287.658994][T17391] do_fast_syscall_32+0x33/0x70 [ 1287.664099][T17391] do_SYSENTER_32+0x1b/0x20 [ 1287.668732][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1287.675312][T17391] [ 1287.677700][T17391] Uninit was stored to memory at: [ 1287.683011][T17391] __get_compat_msghdr+0x514/0x750 [ 1287.688246][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1287.693300][T17391] ___sys_recvmsg+0x19d/0x890 [ 1287.698103][T17391] do_recvmmsg+0x682/0x1180 [ 1287.702842][T17391] __sys_recvmmsg+0x113/0x450 [ 1287.707652][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.714177][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1287.719456][T17391] do_fast_syscall_32+0x33/0x70 [ 1287.724538][T17391] do_SYSENTER_32+0x1b/0x20 [ 1287.730117][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1287.736669][T17391] [ 1287.739059][T17391] Uninit was stored to memory at: [ 1287.744373][T17391] __get_compat_msghdr+0x514/0x750 [ 1287.749599][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1287.754655][T17391] ___sys_recvmsg+0x19d/0x890 [ 1287.759451][T17391] do_recvmmsg+0x682/0x1180 [ 1287.764161][T17391] __sys_recvmmsg+0x113/0x450 [ 1287.768953][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.775389][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1287.780622][T17391] do_fast_syscall_32+0x33/0x70 [ 1287.785689][T17391] do_SYSENTER_32+0x1b/0x20 [ 1287.790320][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1287.796922][T17391] [ 1287.799310][T17391] Uninit was stored to memory at: [ 1287.804567][T17391] __get_compat_msghdr+0x514/0x750 [ 1287.809795][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1287.814869][T17391] ___sys_recvmsg+0x19d/0x890 [ 1287.819682][T17391] do_recvmmsg+0x682/0x1180 [ 1287.824423][T17391] __sys_recvmmsg+0x113/0x450 [ 1287.829238][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.835701][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1287.840951][T17391] do_fast_syscall_32+0x33/0x70 [ 1287.846053][T17391] do_SYSENTER_32+0x1b/0x20 [ 1287.850670][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1287.857223][T17391] [ 1287.859616][T17391] Uninit was stored to memory at: [ 1287.864900][T17391] __get_compat_msghdr+0x514/0x750 [ 1287.870128][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1287.875189][T17391] ___sys_recvmsg+0x19d/0x890 [ 1287.879984][T17391] do_recvmmsg+0x682/0x1180 [ 1287.884687][T17391] __sys_recvmmsg+0x113/0x450 [ 1287.889480][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1287.895953][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1287.901200][T17391] do_fast_syscall_32+0x33/0x70 [ 1287.906299][T17391] do_SYSENTER_32+0x1b/0x20 [ 1287.910926][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1287.917450][T17391] [ 1287.919835][T17391] Local variable msg_sys created at: [ 1287.925296][T17391] do_recvmmsg+0x5c/0x1180 [ 1287.929846][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.139359][T17391] not chained 620000 origins [ 1288.144133][T17391] CPU: 0 PID: 17391 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1288.154431][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1288.164598][T17391] Call Trace: [ 1288.167935][T17391] [ 1288.170902][T17391] dump_stack_lvl+0x1c8/0x256 [ 1288.175711][T17391] dump_stack+0x1a/0x1c [ 1288.180016][T17391] kmsan_internal_chain_origin+0x78/0x120 [ 1288.185851][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1288.192266][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1288.198212][T17391] ? ____sys_recvmsg+0x5c1/0x810 [ 1288.203245][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1288.208558][T17391] ? get_compat_msghdr+0x8c/0x1c0 [ 1288.213672][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1288.219617][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1288.224919][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1288.230894][T17391] ? should_fail+0x3f/0x810 [ 1288.235548][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1288.240790][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1288.247126][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1288.253043][T17391] __msan_chain_origin+0xbd/0x140 [ 1288.258196][T17391] __get_compat_msghdr+0x514/0x750 [ 1288.263480][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1288.268444][T17391] ? ___sys_recvmsg+0xa9/0x890 [ 1288.273297][T17391] ? do_recvmmsg+0x682/0x1180 [ 1288.278089][T17391] ___sys_recvmsg+0x19d/0x890 [ 1288.282860][T17391] ? do_recvmmsg+0x6e4/0x1180 [ 1288.287695][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1288.292966][T17391] ? kmsan_internal_check_memory+0x94/0x530 [ 1288.299000][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1288.304898][T17391] do_recvmmsg+0x682/0x1180 [ 1288.309488][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1288.315846][T17391] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.322511][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.327312][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.333680][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1288.338931][T17391] ? exit_to_user_mode_prepare+0x119/0x220 [ 1288.344901][T17391] do_fast_syscall_32+0x33/0x70 [ 1288.349874][T17391] do_SYSENTER_32+0x1b/0x20 [ 1288.354474][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1288.360943][T17391] RIP: 0023:0xf7f30549 [ 1288.365078][T17391] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1288.384845][T17391] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1288.393404][T17391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1288.401475][T17391] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1288.409523][T17391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1288.417601][T17391] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1288.425662][T17391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1288.433766][T17391] [ 1288.441955][T17391] Uninit was stored to memory at: [ 1288.447162][T17391] __get_compat_msghdr+0x514/0x750 [ 1288.452904][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1288.457904][T17391] ___sys_recvmsg+0x19d/0x890 [ 1288.462791][T17391] do_recvmmsg+0x682/0x1180 [ 1288.467425][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.472307][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.478715][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1288.484042][T17391] do_fast_syscall_32+0x33/0x70 [ 1288.489024][T17391] do_SYSENTER_32+0x1b/0x20 [ 1288.493782][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1288.500244][T17391] [ 1288.502735][T17391] Uninit was stored to memory at: [ 1288.507902][T17391] __get_compat_msghdr+0x514/0x750 [ 1288.513221][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1288.518207][T17391] ___sys_recvmsg+0x19d/0x890 [ 1288.523145][T17391] do_recvmmsg+0x682/0x1180 [ 1288.527777][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.532702][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.539073][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1288.544371][T17391] do_fast_syscall_32+0x33/0x70 [ 1288.549338][T17391] do_SYSENTER_32+0x1b/0x20 [ 1288.554053][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1288.560576][T17391] [ 1288.563043][T17391] Uninit was stored to memory at: [ 1288.568229][T17391] __get_compat_msghdr+0x514/0x750 [ 1288.573560][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1288.578544][T17391] ___sys_recvmsg+0x19d/0x890 [ 1288.583458][T17391] do_recvmmsg+0x682/0x1180 [ 1288.588087][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.593013][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.599413][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1288.604746][T17391] do_fast_syscall_32+0x33/0x70 [ 1288.609732][T17391] do_SYSENTER_32+0x1b/0x20 [ 1288.614452][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1288.620931][T17391] [ 1288.623431][T17391] Uninit was stored to memory at: [ 1288.628624][T17391] __get_compat_msghdr+0x514/0x750 [ 1288.633951][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1288.638923][T17391] ___sys_recvmsg+0x19d/0x890 [ 1288.643819][T17391] do_recvmmsg+0x682/0x1180 [ 1288.648449][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.653351][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.659746][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1288.665127][T17391] do_fast_syscall_32+0x33/0x70 [ 1288.670110][T17391] do_SYSENTER_32+0x1b/0x20 [ 1288.674870][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1288.681330][T17391] [ 1288.683793][T17391] Uninit was stored to memory at: [ 1288.688967][T17391] __get_compat_msghdr+0x514/0x750 [ 1288.694286][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1288.699254][T17391] ___sys_recvmsg+0x19d/0x890 [ 1288.704160][T17391] do_recvmmsg+0x682/0x1180 [ 1288.708796][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.713716][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.720094][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1288.725431][T17391] do_fast_syscall_32+0x33/0x70 [ 1288.730413][T17391] do_SYSENTER_32+0x1b/0x20 [ 1288.735129][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1288.742114][T17391] [ 1288.744503][T17391] Uninit was stored to memory at: [ 1288.749635][T17391] __get_compat_msghdr+0x514/0x750 [ 1288.754977][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1288.759942][T17391] ___sys_recvmsg+0x19d/0x890 [ 1288.764830][T17391] do_recvmmsg+0x682/0x1180 [ 1288.769450][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.774399][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.780788][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1288.786162][T17391] do_fast_syscall_32+0x33/0x70 [ 1288.791140][T17391] do_SYSENTER_32+0x1b/0x20 [ 1288.795866][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1288.802423][T17391] [ 1288.804806][T17391] Uninit was stored to memory at: [ 1288.809943][T17391] __get_compat_msghdr+0x514/0x750 [ 1288.815265][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1288.820237][T17391] ___sys_recvmsg+0x19d/0x890 [ 1288.825127][T17391] do_recvmmsg+0x682/0x1180 [ 1288.829757][T17391] __sys_recvmmsg+0x113/0x450 [ 1288.834671][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1288.841059][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1288.846439][T17391] do_fast_syscall_32+0x33/0x70 [ 1288.851409][T17391] do_SYSENTER_32+0x1b/0x20 [ 1288.856103][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1288.862656][T17391] [ 1288.865048][T17391] Local variable msg_sys created at: [ 1288.870411][T17391] do_recvmmsg+0x5c/0x1180 [ 1288.875042][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.084492][T17391] not chained 630000 origins [ 1289.089152][T17391] CPU: 0 PID: 17391 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1289.099385][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1289.109502][T17391] Call Trace: [ 1289.112840][T17391] [ 1289.115847][T17391] dump_stack_lvl+0x1c8/0x256 [ 1289.120685][T17391] dump_stack+0x1a/0x1c [ 1289.124948][T17391] kmsan_internal_chain_origin+0x78/0x120 [ 1289.130833][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1289.137240][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1289.143215][T17391] ? ____sys_recvmsg+0x5c1/0x810 [ 1289.148275][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1289.153563][T17391] ? get_compat_msghdr+0x8c/0x1c0 [ 1289.158714][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1289.164624][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1289.169940][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1289.175861][T17391] ? should_fail+0x3f/0x810 [ 1289.180497][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1289.185710][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1289.192065][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1289.198008][T17391] __msan_chain_origin+0xbd/0x140 [ 1289.203110][T17391] __get_compat_msghdr+0x514/0x750 [ 1289.208308][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1289.213271][T17391] ? ___sys_recvmsg+0xa9/0x890 [ 1289.218169][T17391] ? do_recvmmsg+0x682/0x1180 [ 1289.222982][T17391] ___sys_recvmsg+0x19d/0x890 [ 1289.227773][T17391] ? do_recvmmsg+0x6e4/0x1180 [ 1289.232554][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1289.237791][T17391] ? kmsan_internal_check_memory+0x94/0x530 [ 1289.243790][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1289.249735][T17391] do_recvmmsg+0x682/0x1180 [ 1289.254351][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1289.260736][T17391] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.267236][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.272015][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.278433][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1289.283685][T17391] ? exit_to_user_mode_prepare+0x119/0x220 [ 1289.289617][T17391] do_fast_syscall_32+0x33/0x70 [ 1289.294543][T17391] do_SYSENTER_32+0x1b/0x20 [ 1289.299114][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1289.305544][T17391] RIP: 0023:0xf7f30549 [ 1289.309700][T17391] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1289.329424][T17391] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1289.337955][T17391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1289.345983][T17391] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1289.354029][T17391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1289.362102][T17391] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1289.370278][T17391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1289.378324][T17391] [ 1289.386399][T17391] Uninit was stored to memory at: [ 1289.391607][T17391] __get_compat_msghdr+0x514/0x750 [ 1289.397411][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1289.402469][T17391] ___sys_recvmsg+0x19d/0x890 [ 1289.407272][T17391] do_recvmmsg+0x682/0x1180 [ 1289.411973][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.416774][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.423288][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1289.428525][T17391] do_fast_syscall_32+0x33/0x70 [ 1289.433590][T17391] do_SYSENTER_32+0x1b/0x20 [ 1289.438216][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1289.444785][T17391] [ 1289.447155][T17391] Uninit was stored to memory at: [ 1289.452445][T17391] __get_compat_msghdr+0x514/0x750 [ 1289.457668][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1289.462728][T17391] ___sys_recvmsg+0x19d/0x890 [ 1289.467533][T17391] do_recvmmsg+0x682/0x1180 [ 1289.472278][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.477090][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.483607][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1289.488837][T17391] do_fast_syscall_32+0x33/0x70 [ 1289.493897][T17391] do_SYSENTER_32+0x1b/0x20 [ 1289.498537][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1289.505127][T17391] [ 1289.507524][T17391] Uninit was stored to memory at: [ 1289.512845][T17391] __get_compat_msghdr+0x514/0x750 [ 1289.518089][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1289.523155][T17391] ___sys_recvmsg+0x19d/0x890 [ 1289.527963][T17391] do_recvmmsg+0x682/0x1180 [ 1289.532723][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.537513][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.543975][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1289.549242][T17391] do_fast_syscall_32+0x33/0x70 [ 1289.554352][T17391] do_SYSENTER_32+0x1b/0x20 [ 1289.558972][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1289.565628][T17391] [ 1289.568006][T17391] Uninit was stored to memory at: [ 1289.573292][T17391] __get_compat_msghdr+0x514/0x750 [ 1289.578518][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1289.583579][T17391] ___sys_recvmsg+0x19d/0x890 [ 1289.588385][T17391] do_recvmmsg+0x682/0x1180 [ 1289.593086][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.597871][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.604334][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1289.609569][T17391] do_fast_syscall_32+0x33/0x70 [ 1289.614631][T17391] do_SYSENTER_32+0x1b/0x20 [ 1289.619262][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1289.625788][T17391] [ 1289.628161][T17391] Uninit was stored to memory at: [ 1289.633453][T17391] __get_compat_msghdr+0x514/0x750 [ 1289.638676][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1289.643734][T17391] ___sys_recvmsg+0x19d/0x890 [ 1289.648520][T17391] do_recvmmsg+0x682/0x1180 [ 1289.653224][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.658038][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.664529][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1289.669759][T17391] do_fast_syscall_32+0x33/0x70 [ 1289.674785][T17391] do_SYSENTER_32+0x1b/0x20 [ 1289.679405][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1289.685961][T17391] [ 1289.688355][T17391] Uninit was stored to memory at: [ 1289.693663][T17391] __get_compat_msghdr+0x514/0x750 [ 1289.698891][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1289.703955][T17391] ___sys_recvmsg+0x19d/0x890 [ 1289.708745][T17391] do_recvmmsg+0x682/0x1180 [ 1289.713453][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.718260][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.724788][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1289.730022][T17391] do_fast_syscall_32+0x33/0x70 [ 1289.735079][T17391] do_SYSENTER_32+0x1b/0x20 [ 1289.739713][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1289.746233][T17391] [ 1289.748604][T17391] Uninit was stored to memory at: [ 1289.753895][T17391] __get_compat_msghdr+0x514/0x750 [ 1289.759116][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1289.764170][T17391] ___sys_recvmsg+0x19d/0x890 [ 1289.768972][T17391] do_recvmmsg+0x682/0x1180 [ 1289.773674][T17391] __sys_recvmmsg+0x113/0x450 [ 1289.778458][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1289.784931][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1289.790161][T17391] do_fast_syscall_32+0x33/0x70 [ 1289.795227][T17391] do_SYSENTER_32+0x1b/0x20 [ 1289.799838][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1289.806392][T17391] [ 1289.808764][T17391] Local variable msg_sys created at: [ 1289.814222][T17391] do_recvmmsg+0x5c/0x1180 [ 1289.818740][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.013665][T17391] not chained 640000 origins [ 1290.018356][T17391] CPU: 0 PID: 17391 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1290.028605][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1290.038716][T17391] Call Trace: [ 1290.042051][T17391] [ 1290.045057][T17391] dump_stack_lvl+0x1c8/0x256 [ 1290.049897][T17391] dump_stack+0x1a/0x1c [ 1290.054158][T17391] kmsan_internal_chain_origin+0x78/0x120 [ 1290.060015][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1290.066344][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1290.072251][T17391] ? ____sys_recvmsg+0x5c1/0x810 [ 1290.077326][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1290.082653][T17391] ? get_compat_msghdr+0x8c/0x1c0 [ 1290.087809][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1290.093781][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1290.099120][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1290.105089][T17391] ? should_fail+0x3f/0x810 [ 1290.109723][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1290.114919][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1290.121249][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1290.127147][T17391] __msan_chain_origin+0xbd/0x140 [ 1290.132270][T17391] __get_compat_msghdr+0x514/0x750 [ 1290.137530][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1290.142474][T17391] ? ___sys_recvmsg+0xa9/0x890 [ 1290.147349][T17391] ? do_recvmmsg+0x682/0x1180 [ 1290.152128][T17391] ___sys_recvmsg+0x19d/0x890 [ 1290.156927][T17391] ? do_recvmmsg+0x6e4/0x1180 [ 1290.161704][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1290.166969][T17391] ? kmsan_internal_check_memory+0x94/0x530 [ 1290.173023][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1290.178988][T17391] do_recvmmsg+0x682/0x1180 [ 1290.183645][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1290.190050][T17391] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.196624][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.201451][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.207862][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1290.213120][T17391] ? exit_to_user_mode_prepare+0x119/0x220 [ 1290.219100][T17391] do_fast_syscall_32+0x33/0x70 [ 1290.224090][T17391] do_SYSENTER_32+0x1b/0x20 [ 1290.228723][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1290.235203][T17391] RIP: 0023:0xf7f30549 [ 1290.239366][T17391] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1290.259129][T17391] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1290.267621][T17391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1290.275680][T17391] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1290.283739][T17391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.291784][T17391] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1290.299871][T17391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.307947][T17391] [ 1290.320962][T17391] Uninit was stored to memory at: [ 1290.327750][T17391] __get_compat_msghdr+0x514/0x750 [ 1290.333085][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1290.338062][T17391] ___sys_recvmsg+0x19d/0x890 [ 1290.342949][T17391] do_recvmmsg+0x682/0x1180 [ 1290.347577][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.352455][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.358841][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1290.364208][T17391] do_fast_syscall_32+0x33/0x70 [ 1290.369173][T17391] do_SYSENTER_32+0x1b/0x20 [ 1290.373894][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1290.380371][T17391] [ 1290.382847][T17391] Uninit was stored to memory at: [ 1290.387997][T17391] __get_compat_msghdr+0x514/0x750 [ 1290.393319][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1290.398379][T17391] ___sys_recvmsg+0x19d/0x890 [ 1290.403282][T17391] do_recvmmsg+0x682/0x1180 [ 1290.407900][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.412788][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.419164][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1290.424494][T17391] do_fast_syscall_32+0x33/0x70 [ 1290.429480][T17391] do_SYSENTER_32+0x1b/0x20 [ 1290.434237][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1290.440696][T17391] [ 1290.443241][T17391] Uninit was stored to memory at: [ 1290.448380][T17391] __get_compat_msghdr+0x514/0x750 [ 1290.453738][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1290.458936][T17391] ___sys_recvmsg+0x19d/0x890 [ 1290.463859][T17391] do_recvmmsg+0x682/0x1180 [ 1290.468482][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.473379][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.479751][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1290.485082][T17391] do_fast_syscall_32+0x33/0x70 [ 1290.490053][T17391] do_SYSENTER_32+0x1b/0x20 [ 1290.494777][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1290.501237][T17391] [ 1290.503730][T17391] Uninit was stored to memory at: [ 1290.508872][T17391] __get_compat_msghdr+0x514/0x750 [ 1290.514196][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1290.519158][T17391] ___sys_recvmsg+0x19d/0x890 [ 1290.524024][T17391] do_recvmmsg+0x682/0x1180 [ 1290.528641][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.533528][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.539925][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1290.545301][T17391] do_fast_syscall_32+0x33/0x70 [ 1290.550268][T17391] do_SYSENTER_32+0x1b/0x20 [ 1290.554956][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1290.561415][T17391] [ 1290.563916][T17391] Uninit was stored to memory at: [ 1290.569105][T17391] __get_compat_msghdr+0x514/0x750 [ 1290.574504][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1290.579472][T17391] ___sys_recvmsg+0x19d/0x890 [ 1290.584362][T17391] do_recvmmsg+0x682/0x1180 [ 1290.588976][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.593880][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.600253][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1290.605565][T17391] do_fast_syscall_32+0x33/0x70 [ 1290.610551][T17391] do_SYSENTER_32+0x1b/0x20 [ 1290.615234][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1290.621782][T17391] [ 1290.624190][T17391] Uninit was stored to memory at: [ 1290.629326][T17391] __get_compat_msghdr+0x514/0x750 [ 1290.634610][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1290.639572][T17391] ___sys_recvmsg+0x19d/0x890 [ 1290.644455][T17391] do_recvmmsg+0x682/0x1180 [ 1290.649087][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.654043][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.660411][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1290.665713][T17391] do_fast_syscall_32+0x33/0x70 [ 1290.670676][T17391] do_SYSENTER_32+0x1b/0x20 [ 1290.675391][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1290.681941][T17391] [ 1290.684327][T17391] Uninit was stored to memory at: [ 1290.689486][T17391] __get_compat_msghdr+0x514/0x750 [ 1290.694806][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1290.699770][T17391] ___sys_recvmsg+0x19d/0x890 [ 1290.704662][T17391] do_recvmmsg+0x682/0x1180 [ 1290.709289][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.714216][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1290.720587][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1290.725882][T17391] do_fast_syscall_32+0x33/0x70 [ 1290.730846][T17391] do_SYSENTER_32+0x1b/0x20 [ 1290.735562][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1290.742107][T17391] [ 1290.744478][T17391] Local variable msg_sys created at: [ 1290.749789][T17391] do_recvmmsg+0x5c/0x1180 [ 1290.754413][T17391] __sys_recvmmsg+0x113/0x450 [ 1290.947185][T17391] not chained 650000 origins [ 1290.951987][T17391] CPU: 0 PID: 17391 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1290.962277][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1290.972441][T17391] Call Trace: [ 1290.975799][T17391] [ 1290.978809][T17391] dump_stack_lvl+0x1c8/0x256 [ 1290.983674][T17391] dump_stack+0x1a/0x1c [ 1290.987966][T17391] kmsan_internal_chain_origin+0x78/0x120 [ 1290.993796][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1291.000181][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.006074][T17391] ? ____sys_recvmsg+0x5c1/0x810 [ 1291.011082][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1291.016366][T17391] ? get_compat_msghdr+0x8c/0x1c0 [ 1291.021520][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.027419][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1291.032713][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.038666][T17391] ? should_fail+0x3f/0x810 [ 1291.043272][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1291.048533][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1291.054914][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.060883][T17391] __msan_chain_origin+0xbd/0x140 [ 1291.065985][T17391] __get_compat_msghdr+0x514/0x750 [ 1291.071196][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1291.076114][T17391] ? ___sys_recvmsg+0xa9/0x890 [ 1291.080945][T17391] ? do_recvmmsg+0x682/0x1180 [ 1291.085713][T17391] ___sys_recvmsg+0x19d/0x890 [ 1291.090520][T17391] ? do_recvmmsg+0x6e4/0x1180 [ 1291.095319][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1291.100516][T17391] ? kmsan_internal_check_memory+0x94/0x530 [ 1291.106518][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.112439][T17391] do_recvmmsg+0x682/0x1180 [ 1291.117095][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1291.123501][T17391] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.130079][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.134906][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.141288][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1291.146479][T17391] ? exit_to_user_mode_prepare+0x119/0x220 [ 1291.152383][T17391] do_fast_syscall_32+0x33/0x70 [ 1291.157366][T17391] do_SYSENTER_32+0x1b/0x20 [ 1291.161981][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1291.168394][T17391] RIP: 0023:0xf7f30549 [ 1291.172529][T17391] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1291.192296][T17391] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1291.200849][T17391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1291.208938][T17391] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1291.217016][T17391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1291.225094][T17391] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1291.233172][T17391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1291.241266][T17391] [ 1291.249420][T17391] Uninit was stored to memory at: [ 1291.255125][T17391] __get_compat_msghdr+0x514/0x750 [ 1291.260365][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1291.265424][T17391] ___sys_recvmsg+0x19d/0x890 [ 1291.270228][T17391] do_recvmmsg+0x682/0x1180 [ 1291.274936][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.279743][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.286260][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1291.291521][T17391] do_fast_syscall_32+0x33/0x70 [ 1291.296652][T17391] do_SYSENTER_32+0x1b/0x20 [ 1291.301284][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1291.307851][T17391] [ 1291.310244][T17391] Uninit was stored to memory at: [ 1291.315588][T17391] __get_compat_msghdr+0x514/0x750 [ 1291.320852][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1291.325957][T17391] ___sys_recvmsg+0x19d/0x890 [ 1291.330753][T17391] do_recvmmsg+0x682/0x1180 [ 1291.335471][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.340260][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.346699][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1291.352020][T17391] do_fast_syscall_32+0x33/0x70 [ 1291.357007][T17391] do_SYSENTER_32+0x1b/0x20 [ 1291.361575][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1291.368106][T17391] [ 1291.370455][T17391] Uninit was stored to memory at: [ 1291.375746][T17391] __get_compat_msghdr+0x514/0x750 [ 1291.380969][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1291.385995][T17391] ___sys_recvmsg+0x19d/0x890 [ 1291.390838][T17391] do_recvmmsg+0x682/0x1180 [ 1291.395553][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.400340][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.406774][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1291.412092][T17391] do_fast_syscall_32+0x33/0x70 [ 1291.417073][T17391] do_SYSENTER_32+0x1b/0x20 [ 1291.421826][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1291.428303][T17391] [ 1291.430678][T17391] Uninit was stored to memory at: [ 1291.436009][T17391] __get_compat_msghdr+0x514/0x750 [ 1291.441231][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1291.446258][T17391] ___sys_recvmsg+0x19d/0x890 [ 1291.451052][T17391] do_recvmmsg+0x682/0x1180 [ 1291.455758][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.460547][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.466979][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1291.472306][T17391] do_fast_syscall_32+0x33/0x70 [ 1291.477297][T17391] do_SYSENTER_32+0x1b/0x20 [ 1291.482155][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1291.488623][T17391] [ 1291.490991][T17391] Uninit was stored to memory at: [ 1291.496251][T17391] __get_compat_msghdr+0x514/0x750 [ 1291.501484][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1291.506528][T17391] ___sys_recvmsg+0x19d/0x890 [ 1291.511317][T17391] do_recvmmsg+0x682/0x1180 [ 1291.516023][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.520816][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.527293][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1291.532621][T17391] do_fast_syscall_32+0x33/0x70 [ 1291.537599][T17391] do_SYSENTER_32+0x1b/0x20 [ 1291.542321][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1291.548786][T17391] [ 1291.551136][T17391] Uninit was stored to memory at: [ 1291.556432][T17391] __get_compat_msghdr+0x514/0x750 [ 1291.561652][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1291.566744][T17391] ___sys_recvmsg+0x19d/0x890 [ 1291.571532][T17391] do_recvmmsg+0x682/0x1180 [ 1291.576244][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.581038][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.587469][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1291.592791][T17391] do_fast_syscall_32+0x33/0x70 [ 1291.597768][T17391] do_SYSENTER_32+0x1b/0x20 [ 1291.602520][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1291.608983][T17391] [ 1291.611331][T17391] Uninit was stored to memory at: [ 1291.616632][T17391] __get_compat_msghdr+0x514/0x750 [ 1291.621941][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1291.626877][T17391] ___sys_recvmsg+0x19d/0x890 [ 1291.631624][T17391] do_recvmmsg+0x682/0x1180 [ 1291.636346][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.641159][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1291.647663][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1291.652980][T17391] do_fast_syscall_32+0x33/0x70 [ 1291.657908][T17391] do_SYSENTER_32+0x1b/0x20 [ 1291.662616][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1291.669076][T17391] [ 1291.671427][T17391] Local variable msg_sys created at: [ 1291.676852][T17391] do_recvmmsg+0x5c/0x1180 [ 1291.681376][T17391] __sys_recvmmsg+0x113/0x450 [ 1291.877502][T17391] not chained 660000 origins [ 1291.882275][T17391] CPU: 0 PID: 17391 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1291.892572][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1291.902734][T17391] Call Trace: [ 1291.906089][T17391] [ 1291.909078][T17391] dump_stack_lvl+0x1c8/0x256 [ 1291.913886][T17391] dump_stack+0x1a/0x1c [ 1291.918181][T17391] kmsan_internal_chain_origin+0x78/0x120 [ 1291.924010][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1291.930394][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.936303][T17391] ? ____sys_recvmsg+0x5c1/0x810 [ 1291.941365][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1291.946657][T17391] ? get_compat_msghdr+0x8c/0x1c0 [ 1291.951809][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.957770][T17391] ? __get_compat_msghdr+0x5b/0x750 [ 1291.963060][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.969027][T17391] ? should_fail+0x3f/0x810 [ 1291.973674][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1291.978913][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1291.985240][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1291.991134][T17391] __msan_chain_origin+0xbd/0x140 [ 1291.996233][T17391] __get_compat_msghdr+0x514/0x750 [ 1292.001430][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1292.006372][T17391] ? ___sys_recvmsg+0xa9/0x890 [ 1292.011250][T17391] ? do_recvmmsg+0x682/0x1180 [ 1292.016000][T17391] ___sys_recvmsg+0x19d/0x890 [ 1292.020761][T17391] ? do_recvmmsg+0x6e4/0x1180 [ 1292.025563][T17391] ? __stack_depot_save+0x21/0x4b0 [ 1292.030803][T17391] ? kmsan_internal_check_memory+0x94/0x530 [ 1292.036808][T17391] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1292.042734][T17391] do_recvmmsg+0x682/0x1180 [ 1292.047372][T17391] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1292.053727][T17391] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.060278][T17391] __sys_recvmmsg+0x113/0x450 [ 1292.065071][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.071420][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1292.076638][T17391] ? exit_to_user_mode_prepare+0x119/0x220 [ 1292.082600][T17391] do_fast_syscall_32+0x33/0x70 [ 1292.087591][T17391] do_SYSENTER_32+0x1b/0x20 [ 1292.092228][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1292.098702][T17391] RIP: 0023:0xf7f30549 [ 1292.102836][T17391] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1292.122621][T17391] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1292.131154][T17391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1292.139185][T17391] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1292.147214][T17391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1292.155259][T17391] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1292.163304][T17391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1292.171454][T17391] [ 1292.179636][T17391] Uninit was stored to memory at: [ 1292.185352][T17391] __get_compat_msghdr+0x514/0x750 [ 1292.190635][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1292.195694][T17391] ___sys_recvmsg+0x19d/0x890 [ 1292.200504][T17391] do_recvmmsg+0x682/0x1180 [ 1292.205210][T17391] __sys_recvmmsg+0x113/0x450 [ 1292.210016][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.216491][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1292.221859][T17391] do_fast_syscall_32+0x33/0x70 [ 1292.226840][T17391] do_SYSENTER_32+0x1b/0x20 [ 1292.231450][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1292.237969][T17391] [ 1292.240380][T17391] Uninit was stored to memory at: [ 1292.245694][T17391] __get_compat_msghdr+0x514/0x750 [ 1292.250985][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1292.256096][T17391] ___sys_recvmsg+0x19d/0x890 [ 1292.260904][T17391] do_recvmmsg+0x682/0x1180 [ 1292.265659][T17391] __sys_recvmmsg+0x113/0x450 [ 1292.270509][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.276990][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1292.282310][T17391] do_fast_syscall_32+0x33/0x70 [ 1292.287298][T17391] do_SYSENTER_32+0x1b/0x20 [ 1292.292024][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1292.298499][T17391] [ 1292.300870][T17391] Uninit was stored to memory at: [ 1292.306151][T17391] __get_compat_msghdr+0x514/0x750 [ 1292.311397][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1292.316484][T17391] ___sys_recvmsg+0x19d/0x890 [ 1292.321276][T17391] do_recvmmsg+0x682/0x1180 [ 1292.326007][T17391] __sys_recvmmsg+0x113/0x450 [ 1292.330824][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.337270][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1292.342600][T17391] do_fast_syscall_32+0x33/0x70 [ 1292.347583][T17391] do_SYSENTER_32+0x1b/0x20 [ 1292.352328][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1292.358795][T17391] [ 1292.361143][T17391] Uninit was stored to memory at: [ 1292.366434][T17391] __get_compat_msghdr+0x514/0x750 [ 1292.371656][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1292.376736][T17391] ___sys_recvmsg+0x19d/0x890 [ 1292.381480][T17391] do_recvmmsg+0x682/0x1180 [ 1292.386189][T17391] __sys_recvmmsg+0x113/0x450 [ 1292.390998][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.397493][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1292.402836][T17391] do_fast_syscall_32+0x33/0x70 [ 1292.407816][T17391] do_SYSENTER_32+0x1b/0x20 [ 1292.412562][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1292.419020][T17391] [ 1292.421397][T17391] Uninit was stored to memory at: [ 1292.426682][T17391] __get_compat_msghdr+0x514/0x750 [ 1292.432002][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1292.436965][T17391] ___sys_recvmsg+0x19d/0x890 [ 1292.441912][T17391] do_recvmmsg+0x682/0x1180 [ 1292.446558][T17391] __sys_recvmmsg+0x113/0x450 [ 1292.451364][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.457849][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1292.463178][T17391] do_fast_syscall_32+0x33/0x70 [ 1292.468165][T17391] do_SYSENTER_32+0x1b/0x20 [ 1292.472879][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1292.479337][T17391] [ 1292.481814][T17391] Uninit was stored to memory at: [ 1292.486963][T17391] __get_compat_msghdr+0x514/0x750 [ 1292.492282][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1292.497256][T17391] ___sys_recvmsg+0x19d/0x890 [ 1292.502185][T17391] do_recvmmsg+0x682/0x1180 [ 1292.506797][T17391] __sys_recvmmsg+0x113/0x450 [ 1292.511544][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.518008][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1292.523332][T17391] do_fast_syscall_32+0x33/0x70 [ 1292.528295][T17391] do_SYSENTER_32+0x1b/0x20 [ 1292.533012][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1292.539474][T17391] [ 1292.541966][T17391] Uninit was stored to memory at: [ 1292.547111][T17391] __get_compat_msghdr+0x514/0x750 [ 1292.552420][T17391] get_compat_msghdr+0x8c/0x1c0 [ 1292.557396][T17391] ___sys_recvmsg+0x19d/0x890 [ 1292.562273][T17391] do_recvmmsg+0x682/0x1180 [ 1292.566887][T17391] __sys_recvmmsg+0x113/0x450 [ 1292.571633][T17391] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1292.578123][T17391] __do_fast_syscall_32+0xa2/0x100 [ 1292.583492][T17391] do_fast_syscall_32+0x33/0x70 [ 1292.588457][T17391] do_SYSENTER_32+0x1b/0x20 [ 1292.593170][T17391] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1292.599645][T17391] [ 1292.602134][T17391] Local variable msg_sys created at: [ 1292.607475][T17391] do_recvmmsg+0x5c/0x1180 [ 1292.612082][T17391] __sys_recvmmsg+0x113/0x450 09:38:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) getpgid(r4) r5 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) mkdirat(r5, &(0x7f0000000100)='./file1\x00', 0x5000000) 09:38:38 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 09:38:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="ef90e7e8fcb5", @dev, @void, {@ipv4={0x800, @tipc={{0x10, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x0, 0x7, "f8197c8793"}, @generic={0x0, 0x8, "ee1a5d1ea2bb"}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @multicast2, @empty]}, @lsrr={0x83, 0xb, 0x0, [@empty, @rand_addr]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 09:38:38 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f00000001c0)) 09:38:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:38 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1081, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1081, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 09:38:38 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000640), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 09:38:38 executing program 3: request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='encrypted\x00', 0xffffffffffffffff) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='$]\x00', 0x0) 09:38:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1293.205564][T17428] loop4: detected capacity change from 0 to 6 [ 1293.302405][T17428] Dev loop4: unable to read RDB block 6 [ 1293.308319][T17428] loop4: unable to read partition table [ 1293.414308][T17428] loop4: partition table beyond EOD, truncated 09:38:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1293.467512][T17428] FAT-fs (loop4): Directory bread(block 6) failed 09:38:39 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)) [ 1294.115107][T17427] not chained 670000 origins [ 1294.119909][T17427] CPU: 0 PID: 17427 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1294.130212][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1294.140380][T17427] Call Trace: [ 1294.143739][T17427] [ 1294.146749][T17427] dump_stack_lvl+0x1c8/0x256 [ 1294.151622][T17427] dump_stack+0x1a/0x1c [ 1294.155946][T17427] kmsan_internal_chain_origin+0x78/0x120 [ 1294.161835][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1294.168251][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1294.174224][T17427] ? ____sys_recvmsg+0x5c1/0x810 [ 1294.179478][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1294.184818][T17427] ? get_compat_msghdr+0x8c/0x1c0 [ 1294.189983][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1294.195945][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1294.201279][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1294.207254][T17427] ? should_fail+0x3f/0x810 [ 1294.211915][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1294.217186][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1294.223592][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1294.229569][T17427] __msan_chain_origin+0xbd/0x140 [ 1294.234744][T17427] __get_compat_msghdr+0x514/0x750 [ 1294.240030][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1294.245020][T17427] ? ___sys_recvmsg+0xa9/0x890 [ 1294.249922][T17427] ? do_recvmmsg+0x682/0x1180 [ 1294.254742][T17427] ___sys_recvmsg+0x19d/0x890 [ 1294.259556][T17427] ? do_recvmmsg+0x6e4/0x1180 [ 1294.264414][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1294.269708][T17427] ? kmsan_internal_check_memory+0x94/0x530 [ 1294.275807][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1294.281775][T17427] do_recvmmsg+0x682/0x1180 [ 1294.286446][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1294.292854][T17427] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.299479][T17427] __sys_recvmmsg+0x113/0x450 [ 1294.304311][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.310728][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1294.315973][T17427] ? exit_to_user_mode_prepare+0x119/0x220 [ 1294.321927][T17427] do_fast_syscall_32+0x33/0x70 [ 1294.326930][T17427] do_SYSENTER_32+0x1b/0x20 [ 1294.331571][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1294.338054][T17427] RIP: 0023:0xf7f30549 [ 1294.342231][T17427] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1294.362007][T17427] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1294.370548][T17427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1294.378643][T17427] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1294.386716][T17427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1294.394784][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.402867][T17427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1294.410955][T17427] [ 1294.420260][T17427] Uninit was stored to memory at: [ 1294.426137][T17427] __get_compat_msghdr+0x514/0x750 [ 1294.431389][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1294.436441][T17427] ___sys_recvmsg+0x19d/0x890 [ 1294.441500][T17427] do_recvmmsg+0x682/0x1180 [ 1294.446192][T17427] __sys_recvmmsg+0x113/0x450 [ 1294.450988][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.457467][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1294.462789][T17427] do_fast_syscall_32+0x33/0x70 [ 1294.467759][T17427] do_SYSENTER_32+0x1b/0x20 [ 1294.472460][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1294.478927][T17427] [ 1294.481310][T17427] Uninit was stored to memory at: [ 1294.486568][T17427] __get_compat_msghdr+0x514/0x750 [ 1294.491893][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1294.496895][T17427] ___sys_recvmsg+0x19d/0x890 [ 1294.501794][T17427] do_recvmmsg+0x682/0x1180 [ 1294.506425][T17427] __sys_recvmmsg+0x113/0x450 [ 1294.511223][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.517684][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1294.523013][T17427] do_fast_syscall_32+0x33/0x70 [ 1294.528006][T17427] do_SYSENTER_32+0x1b/0x20 [ 1294.532716][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1294.539194][T17427] [ 1294.541580][T17427] Uninit was stored to memory at: [ 1294.546831][T17427] __get_compat_msghdr+0x514/0x750 [ 1294.552283][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1294.557267][T17427] ___sys_recvmsg+0x19d/0x890 [ 1294.562160][T17427] do_recvmmsg+0x682/0x1180 [ 1294.566793][T17427] __sys_recvmmsg+0x113/0x450 [ 1294.571598][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.578061][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1294.583388][T17427] do_fast_syscall_32+0x33/0x70 [ 1294.588383][T17427] do_SYSENTER_32+0x1b/0x20 [ 1294.593095][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1294.599574][T17427] [ 1294.602040][T17427] Uninit was stored to memory at: [ 1294.607221][T17427] __get_compat_msghdr+0x514/0x750 [ 1294.612538][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1294.617528][T17427] ___sys_recvmsg+0x19d/0x890 [ 1294.622412][T17427] do_recvmmsg+0x682/0x1180 [ 1294.627047][T17427] __sys_recvmmsg+0x113/0x450 [ 1294.631921][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.638306][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1294.643652][T17427] do_fast_syscall_32+0x33/0x70 [ 1294.648639][T17427] do_SYSENTER_32+0x1b/0x20 [ 1294.653348][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1294.659832][T17427] [ 1294.662344][T17427] Uninit was stored to memory at: [ 1294.667528][T17427] __get_compat_msghdr+0x514/0x750 [ 1294.672878][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1294.677862][T17427] ___sys_recvmsg+0x19d/0x890 [ 1294.682797][T17427] do_recvmmsg+0x682/0x1180 [ 1294.687435][T17427] __sys_recvmmsg+0x113/0x450 [ 1294.692385][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.698772][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1294.704127][T17427] do_fast_syscall_32+0x33/0x70 [ 1294.709118][T17427] do_SYSENTER_32+0x1b/0x20 [ 1294.713877][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1294.720365][T17427] [ 1294.722884][T17427] Uninit was stored to memory at: [ 1294.728066][T17427] __get_compat_msghdr+0x514/0x750 [ 1294.733420][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1294.738420][T17427] ___sys_recvmsg+0x19d/0x890 [ 1294.743352][T17427] do_recvmmsg+0x682/0x1180 [ 1294.747992][T17427] __sys_recvmmsg+0x113/0x450 [ 1294.752926][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.759319][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1294.764703][T17427] do_fast_syscall_32+0x33/0x70 [ 1294.769688][T17427] do_SYSENTER_32+0x1b/0x20 [ 1294.774452][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1294.780933][T17427] [ 1294.783451][T17427] Uninit was stored to memory at: [ 1294.788631][T17427] __get_compat_msghdr+0x514/0x750 [ 1294.793989][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1294.798969][T17427] ___sys_recvmsg+0x19d/0x890 [ 1294.803889][T17427] do_recvmmsg+0x682/0x1180 [ 1294.808523][T17427] __sys_recvmmsg+0x113/0x450 [ 1294.813478][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1294.819871][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1294.825240][T17427] do_fast_syscall_32+0x33/0x70 [ 1294.830228][T17427] do_SYSENTER_32+0x1b/0x20 [ 1294.834983][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1294.841464][T17427] [ 1294.843984][T17427] Local variable msg_sys created at: [ 1294.849350][T17427] do_recvmmsg+0x5c/0x1180 [ 1294.854017][T17427] __sys_recvmmsg+0x113/0x450 [ 1295.503147][T17427] not chained 680000 origins [ 1295.507840][T17427] CPU: 0 PID: 17427 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1295.518113][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1295.528266][T17427] Call Trace: [ 1295.531605][T17427] [ 1295.534591][T17427] dump_stack_lvl+0x1c8/0x256 [ 1295.539456][T17427] dump_stack+0x1a/0x1c [ 1295.543735][T17427] kmsan_internal_chain_origin+0x78/0x120 [ 1295.549604][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1295.555961][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1295.561929][T17427] ? ____sys_recvmsg+0x5c1/0x810 [ 1295.566992][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1295.572284][T17427] ? get_compat_msghdr+0x8c/0x1c0 [ 1295.577443][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1295.583406][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1295.588725][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1295.594677][T17427] ? should_fail+0x3f/0x810 [ 1295.599308][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1295.604547][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1295.610885][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1295.616803][T17427] __msan_chain_origin+0xbd/0x140 [ 1295.621939][T17427] __get_compat_msghdr+0x514/0x750 [ 1295.627215][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1295.632203][T17427] ? ___sys_recvmsg+0xa9/0x890 [ 1295.637097][T17427] ? do_recvmmsg+0x682/0x1180 [ 1295.641891][T17427] ___sys_recvmsg+0x19d/0x890 [ 1295.646709][T17427] ? do_recvmmsg+0x6e4/0x1180 [ 1295.651531][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1295.656757][T17427] ? kmsan_internal_check_memory+0x94/0x530 [ 1295.662818][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1295.668774][T17427] do_recvmmsg+0x682/0x1180 [ 1295.673404][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1295.679795][T17427] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1295.686329][T17427] __sys_recvmmsg+0x113/0x450 [ 1295.691175][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1295.697594][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1295.702837][T17427] ? exit_to_user_mode_prepare+0x119/0x220 [ 1295.708729][T17427] do_fast_syscall_32+0x33/0x70 [ 1295.713679][T17427] do_SYSENTER_32+0x1b/0x20 [ 1295.718295][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1295.724741][T17427] RIP: 0023:0xf7f30549 [ 1295.728894][T17427] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1295.748594][T17427] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1295.757099][T17427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1295.765190][T17427] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1295.773271][T17427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1295.781353][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.789441][T17427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1295.797490][T17427] [ 1295.805574][T17427] Uninit was stored to memory at: [ 1295.810777][T17427] __get_compat_msghdr+0x514/0x750 [ 1295.816549][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1295.821530][T17427] ___sys_recvmsg+0x19d/0x890 [ 1295.826413][T17427] do_recvmmsg+0x682/0x1180 [ 1295.831044][T17427] __sys_recvmmsg+0x113/0x450 [ 1295.835973][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1295.842438][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1295.847689][T17427] do_fast_syscall_32+0x33/0x70 [ 1295.852798][T17427] do_SYSENTER_32+0x1b/0x20 [ 1295.857432][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1295.864035][T17427] [ 1295.866428][T17427] Uninit was stored to memory at: [ 1295.871571][T17427] __get_compat_msghdr+0x514/0x750 [ 1295.876880][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1295.881927][T17427] ___sys_recvmsg+0x19d/0x890 [ 1295.886713][T17427] do_recvmmsg+0x682/0x1180 [ 1295.891281][T17427] __sys_recvmmsg+0x113/0x450 [ 1295.896168][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1295.902636][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1295.907865][T17427] do_fast_syscall_32+0x33/0x70 [ 1295.912925][T17427] do_SYSENTER_32+0x1b/0x20 [ 1295.917559][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1295.924140][T17427] [ 1295.926528][T17427] Uninit was stored to memory at: [ 1295.931836][T17427] __get_compat_msghdr+0x514/0x750 [ 1295.937102][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1295.942198][T17427] ___sys_recvmsg+0x19d/0x890 [ 1295.946991][T17427] do_recvmmsg+0x682/0x1180 [ 1295.951560][T17427] __sys_recvmmsg+0x113/0x450 [ 1295.956448][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1295.962910][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1295.968139][T17427] do_fast_syscall_32+0x33/0x70 [ 1295.973193][T17427] do_SYSENTER_32+0x1b/0x20 [ 1295.977828][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1295.984432][T17427] [ 1295.986824][T17427] Uninit was stored to memory at: [ 1295.992136][T17427] __get_compat_msghdr+0x514/0x750 [ 1295.997383][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.002498][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.007307][T17427] do_recvmmsg+0x682/0x1180 [ 1296.012072][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.016882][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.023429][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.028680][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.033781][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.038421][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.044993][T17427] [ 1296.047387][T17427] Uninit was stored to memory at: [ 1296.052679][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.057904][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.062955][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.067765][T17427] do_recvmmsg+0x682/0x1180 [ 1296.072523][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.077331][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.083844][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.089077][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.094138][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.098770][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.105344][T17427] [ 1296.107742][T17427] Uninit was stored to memory at: [ 1296.113059][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.118283][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.123358][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.128174][T17427] do_recvmmsg+0x682/0x1180 [ 1296.132943][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.137751][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.144269][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.149513][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.154571][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.159187][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.165711][T17427] [ 1296.168088][T17427] Uninit was stored to memory at: [ 1296.173381][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.178619][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.183720][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.188512][T17427] do_recvmmsg+0x682/0x1180 [ 1296.193228][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.198040][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.204560][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.209795][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.214849][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.219464][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.226009][T17427] [ 1296.228404][T17427] Local variable msg_sys created at: [ 1296.233884][T17427] do_recvmmsg+0x5c/0x1180 [ 1296.238426][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.433218][T17427] not chained 690000 origins [ 1296.437906][T17427] CPU: 1 PID: 17427 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1296.448154][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1296.458300][T17427] Call Trace: [ 1296.461626][T17427] [ 1296.464609][T17427] dump_stack_lvl+0x1c8/0x256 [ 1296.469446][T17427] dump_stack+0x1a/0x1c [ 1296.473707][T17427] kmsan_internal_chain_origin+0x78/0x120 [ 1296.479535][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1296.485889][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1296.491849][T17427] ? ____sys_recvmsg+0x5c1/0x810 [ 1296.496904][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1296.502169][T17427] ? get_compat_msghdr+0x8c/0x1c0 [ 1296.507258][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1296.513148][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1296.518434][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1296.524330][T17427] ? should_fail+0x3f/0x810 [ 1296.528908][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1296.534116][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1296.540495][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1296.546408][T17427] __msan_chain_origin+0xbd/0x140 [ 1296.551566][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.556765][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.561688][T17427] ? ___sys_recvmsg+0xa9/0x890 [ 1296.566538][T17427] ? do_recvmmsg+0x682/0x1180 [ 1296.571281][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.576023][T17427] ? do_recvmmsg+0x6e4/0x1180 [ 1296.580776][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1296.585992][T17427] ? kmsan_internal_check_memory+0x94/0x530 [ 1296.592023][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1296.597919][T17427] do_recvmmsg+0x682/0x1180 [ 1296.602525][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1296.608870][T17427] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.615384][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.620136][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.626465][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.631655][T17427] ? exit_to_user_mode_prepare+0x119/0x220 [ 1296.637602][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.642589][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.647221][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.653683][T17427] RIP: 0023:0xf7f30549 [ 1296.657800][T17427] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1296.677495][T17427] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1296.686004][T17427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1296.694070][T17427] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1296.702110][T17427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1296.710132][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1296.718155][T17427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1296.726191][T17427] [ 1296.731881][T17427] Uninit was stored to memory at: [ 1296.737259][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.742792][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.747794][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.752700][T17427] do_recvmmsg+0x682/0x1180 [ 1296.757315][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.762220][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.768630][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.773987][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.778970][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.783734][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.790193][T17427] [ 1296.792676][T17427] Uninit was stored to memory at: [ 1296.797820][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.803166][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.808134][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.813042][T17427] do_recvmmsg+0x682/0x1180 [ 1296.817655][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.822567][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.828935][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.834281][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.839245][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.843935][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.850410][T17427] [ 1296.852906][T17427] Uninit was stored to memory at: [ 1296.858094][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.863478][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.868442][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.873346][T17427] do_recvmmsg+0x682/0x1180 [ 1296.877957][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.882864][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.889256][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.894643][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.899626][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.904384][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.910847][T17427] [ 1296.913341][T17427] Uninit was stored to memory at: [ 1296.918481][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.923827][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.928806][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.933660][T17427] do_recvmmsg+0x682/0x1180 [ 1296.938271][T17427] __sys_recvmmsg+0x113/0x450 [ 1296.943194][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1296.949656][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1296.955056][T17427] do_fast_syscall_32+0x33/0x70 [ 1296.960037][T17427] do_SYSENTER_32+0x1b/0x20 [ 1296.964841][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1296.971316][T17427] [ 1296.973848][T17427] Uninit was stored to memory at: [ 1296.979036][T17427] __get_compat_msghdr+0x514/0x750 [ 1296.984393][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1296.989357][T17427] ___sys_recvmsg+0x19d/0x890 [ 1296.994261][T17427] do_recvmmsg+0x682/0x1180 [ 1296.998877][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.003785][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.010175][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.015535][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.020500][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.025192][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.031652][T17427] [ 1297.034150][T17427] Uninit was stored to memory at: [ 1297.039285][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.044594][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1297.049555][T17427] ___sys_recvmsg+0x19d/0x890 [ 1297.054421][T17427] do_recvmmsg+0x682/0x1180 [ 1297.059057][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.064001][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.070373][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.075705][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.080668][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.085361][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.091913][T17427] [ 1297.094297][T17427] Uninit was stored to memory at: [ 1297.099432][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.104739][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1297.109722][T17427] ___sys_recvmsg+0x19d/0x890 [ 1297.114636][T17427] do_recvmmsg+0x682/0x1180 [ 1297.119250][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.124159][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.130555][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.135907][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.140870][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.145568][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.152119][T17427] [ 1297.154513][T17427] Local variable msg_sys created at: [ 1297.159869][T17427] do_recvmmsg+0x5c/0x1180 [ 1297.164580][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.383146][T17427] not chained 700000 origins [ 1297.387803][T17427] CPU: 0 PID: 17427 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1297.398029][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1297.408135][T17427] Call Trace: [ 1297.411449][T17427] [ 1297.414417][T17427] dump_stack_lvl+0x1c8/0x256 [ 1297.419197][T17427] dump_stack+0x1a/0x1c [ 1297.423456][T17427] kmsan_internal_chain_origin+0x78/0x120 [ 1297.429263][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1297.435615][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1297.441574][T17427] ? ____sys_recvmsg+0x5c1/0x810 [ 1297.446649][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1297.451960][T17427] ? get_compat_msghdr+0x8c/0x1c0 [ 1297.457076][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1297.462966][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1297.468241][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1297.474138][T17427] ? should_fail+0x3f/0x810 [ 1297.478717][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1297.483939][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1297.490317][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1297.496207][T17427] __msan_chain_origin+0xbd/0x140 [ 1297.501318][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.506539][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1297.511464][T17427] ? ___sys_recvmsg+0xa9/0x890 [ 1297.516297][T17427] ? do_recvmmsg+0x682/0x1180 [ 1297.521064][T17427] ___sys_recvmsg+0x19d/0x890 [ 1297.525822][T17427] ? do_recvmmsg+0x6e4/0x1180 [ 1297.530578][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1297.535793][T17427] ? kmsan_internal_check_memory+0x94/0x530 [ 1297.541821][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1297.547716][T17427] do_recvmmsg+0x682/0x1180 [ 1297.552301][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1297.558635][T17427] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.565130][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.569907][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.576287][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.581477][T17427] ? exit_to_user_mode_prepare+0x119/0x220 [ 1297.587388][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.592379][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.597010][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.603488][T17427] RIP: 0023:0xf7f30549 [ 1297.607606][T17427] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1297.627295][T17427] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1297.635800][T17427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1297.643865][T17427] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1297.651887][T17427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1297.659909][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.667930][T17427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1297.675969][T17427] [ 1297.684088][T17427] Uninit was stored to memory at: [ 1297.689297][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.695086][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1297.700062][T17427] ___sys_recvmsg+0x19d/0x890 [ 1297.704961][T17427] do_recvmmsg+0x682/0x1180 [ 1297.709591][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.714498][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.720889][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.726233][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.731202][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.735896][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.742453][T17427] [ 1297.744838][T17427] Uninit was stored to memory at: [ 1297.749970][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.755276][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1297.760243][T17427] ___sys_recvmsg+0x19d/0x890 [ 1297.765110][T17427] do_recvmmsg+0x682/0x1180 [ 1297.769724][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.774625][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.781015][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.786376][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.791340][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.796039][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.802593][T17427] [ 1297.804976][T17427] Uninit was stored to memory at: [ 1297.810111][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.815414][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1297.820379][T17427] ___sys_recvmsg+0x19d/0x890 [ 1297.825294][T17427] do_recvmmsg+0x682/0x1180 [ 1297.829926][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.834835][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.841224][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.846580][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.851564][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.856279][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.862839][T17427] [ 1297.865223][T17427] Uninit was stored to memory at: [ 1297.870357][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.875686][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1297.880656][T17427] ___sys_recvmsg+0x19d/0x890 [ 1297.885535][T17427] do_recvmmsg+0x682/0x1180 [ 1297.890143][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.895051][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.901421][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.906730][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.911781][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.916414][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.922993][T17427] [ 1297.925368][T17427] Uninit was stored to memory at: [ 1297.930482][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.935788][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1297.940750][T17427] ___sys_recvmsg+0x19d/0x890 [ 1297.945663][T17427] do_recvmmsg+0x682/0x1180 [ 1297.950292][T17427] __sys_recvmmsg+0x113/0x450 [ 1297.955249][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1297.961626][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1297.967006][T17427] do_fast_syscall_32+0x33/0x70 [ 1297.972112][T17427] do_SYSENTER_32+0x1b/0x20 [ 1297.976742][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1297.983326][T17427] [ 1297.985706][T17427] Uninit was stored to memory at: [ 1297.990817][T17427] __get_compat_msghdr+0x514/0x750 [ 1297.996158][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.001116][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.005982][T17427] do_recvmmsg+0x682/0x1180 [ 1298.010595][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.015501][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.021970][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.027198][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.032256][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.036873][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.043444][T17427] [ 1298.045830][T17427] Uninit was stored to memory at: [ 1298.050966][T17427] __get_compat_msghdr+0x514/0x750 [ 1298.056305][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.061291][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.066165][T17427] do_recvmmsg+0x682/0x1180 [ 1298.070778][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.075682][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.082149][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.087382][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.092430][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.097043][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.103614][T17427] [ 1298.105987][T17427] Local variable msg_sys created at: [ 1298.111318][T17427] do_recvmmsg+0x5c/0x1180 [ 1298.115927][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.334461][T17427] not chained 710000 origins [ 1298.339163][T17427] CPU: 0 PID: 17427 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1298.349440][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1298.359551][T17427] Call Trace: [ 1298.362887][T17427] [ 1298.365901][T17427] dump_stack_lvl+0x1c8/0x256 [ 1298.370760][T17427] dump_stack+0x1a/0x1c [ 1298.375069][T17427] kmsan_internal_chain_origin+0x78/0x120 [ 1298.380952][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1298.387361][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1298.393328][T17427] ? ____sys_recvmsg+0x5c1/0x810 [ 1298.398423][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1298.403752][T17427] ? get_compat_msghdr+0x8c/0x1c0 [ 1298.408908][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1298.414867][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1298.420220][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1298.426191][T17427] ? should_fail+0x3f/0x810 [ 1298.430836][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1298.436097][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1298.442502][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1298.448464][T17427] __msan_chain_origin+0xbd/0x140 [ 1298.453632][T17427] __get_compat_msghdr+0x514/0x750 [ 1298.458937][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.463931][T17427] ? ___sys_recvmsg+0xa9/0x890 [ 1298.468825][T17427] ? do_recvmmsg+0x682/0x1180 [ 1298.473644][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.478454][T17427] ? do_recvmmsg+0x6e4/0x1180 [ 1298.483281][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1298.488483][T17427] ? kmsan_internal_check_memory+0x94/0x530 [ 1298.494543][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1298.500496][T17427] do_recvmmsg+0x682/0x1180 [ 1298.505103][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1298.511435][T17427] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.517934][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.522691][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.529018][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.534201][T17427] ? exit_to_user_mode_prepare+0x119/0x220 [ 1298.540083][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.545022][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.549653][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.556129][T17427] RIP: 0023:0xf7f30549 [ 1298.560276][T17427] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1298.579966][T17427] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1298.588449][T17427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1298.596498][T17427] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1298.604568][T17427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1298.612593][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.620615][T17427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1298.628651][T17427] [ 1298.636592][T17427] Uninit was stored to memory at: [ 1298.642322][T17427] __get_compat_msghdr+0x514/0x750 [ 1298.647572][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.652652][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.657455][T17427] do_recvmmsg+0x682/0x1180 [ 1298.662185][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.666988][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.673521][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.678753][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.683841][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.688464][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.695030][T17427] [ 1298.697418][T17427] Uninit was stored to memory at: [ 1298.702715][T17427] __get_compat_msghdr+0x514/0x750 [ 1298.707938][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.713032][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.717842][T17427] do_recvmmsg+0x682/0x1180 [ 1298.722583][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.727371][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.733860][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.739095][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.744184][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.748797][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.755329][T17427] [ 1298.757700][T17427] Uninit was stored to memory at: [ 1298.762994][T17427] __get_compat_msghdr+0x514/0x750 [ 1298.768214][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.773298][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.778088][T17427] do_recvmmsg+0x682/0x1180 [ 1298.782817][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.787625][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.794110][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.799357][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.804445][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.809059][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.815591][T17427] [ 1298.817964][T17427] Uninit was stored to memory at: [ 1298.823255][T17427] __get_compat_msghdr+0x514/0x750 [ 1298.828495][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.833612][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.838402][T17427] do_recvmmsg+0x682/0x1180 [ 1298.843127][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.847920][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.854399][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.859626][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.864727][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.869343][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.875877][T17427] [ 1298.878279][T17427] Uninit was stored to memory at: [ 1298.883569][T17427] __get_compat_msghdr+0x514/0x750 [ 1298.888792][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.893879][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.898695][T17427] do_recvmmsg+0x682/0x1180 [ 1298.903449][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.908259][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.914744][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.919992][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.925035][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.929651][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.936179][T17427] [ 1298.938551][T17427] Uninit was stored to memory at: [ 1298.943861][T17427] __get_compat_msghdr+0x514/0x750 [ 1298.949087][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1298.954167][T17427] ___sys_recvmsg+0x19d/0x890 [ 1298.958956][T17427] do_recvmmsg+0x682/0x1180 [ 1298.963635][T17427] __sys_recvmmsg+0x113/0x450 [ 1298.968421][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1298.974907][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1298.980139][T17427] do_fast_syscall_32+0x33/0x70 [ 1298.985218][T17427] do_SYSENTER_32+0x1b/0x20 [ 1298.989852][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1298.996444][T17427] [ 1298.998840][T17427] Uninit was stored to memory at: [ 1299.004151][T17427] __get_compat_msghdr+0x514/0x750 [ 1299.009373][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1299.014414][T17427] ___sys_recvmsg+0x19d/0x890 [ 1299.019200][T17427] do_recvmmsg+0x682/0x1180 [ 1299.023932][T17427] __sys_recvmmsg+0x113/0x450 [ 1299.028735][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1299.035217][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1299.040444][T17427] do_fast_syscall_32+0x33/0x70 [ 1299.045490][T17427] do_SYSENTER_32+0x1b/0x20 [ 1299.050103][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1299.056635][T17427] [ 1299.059010][T17427] Local variable msg_sys created at: [ 1299.064489][T17427] do_recvmmsg+0x5c/0x1180 [ 1299.069011][T17427] __sys_recvmmsg+0x113/0x450 [ 1299.420683][T17427] not chained 720000 origins [ 1299.425498][T17427] CPU: 1 PID: 17427 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1299.435807][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1299.445944][T17427] Call Trace: [ 1299.449306][T17427] [ 1299.452314][T17427] dump_stack_lvl+0x1c8/0x256 [ 1299.457155][T17427] dump_stack+0x1a/0x1c [ 1299.461396][T17427] kmsan_internal_chain_origin+0x78/0x120 [ 1299.467206][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1299.473565][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1299.479505][T17427] ? ____sys_recvmsg+0x5c1/0x810 [ 1299.484545][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1299.489862][T17427] ? get_compat_msghdr+0x8c/0x1c0 [ 1299.494980][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1299.500892][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1299.506164][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1299.512081][T17427] ? should_fail+0x3f/0x810 [ 1299.516729][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1299.521991][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1299.528375][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1299.534268][T17427] __msan_chain_origin+0xbd/0x140 [ 1299.539372][T17427] __get_compat_msghdr+0x514/0x750 [ 1299.544601][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1299.549565][T17427] ? ___sys_recvmsg+0xa9/0x890 [ 1299.554420][T17427] ? do_recvmmsg+0x682/0x1180 [ 1299.559232][T17427] ___sys_recvmsg+0x19d/0x890 [ 1299.564036][T17427] ? do_recvmmsg+0x6e4/0x1180 [ 1299.568835][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1299.574038][T17427] ? kmsan_internal_check_memory+0x94/0x530 [ 1299.580024][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1299.585922][T17427] do_recvmmsg+0x682/0x1180 [ 1299.590510][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1299.596839][T17427] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1299.603367][T17427] __sys_recvmmsg+0x113/0x450 [ 1299.608167][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1299.614498][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1299.619704][T17427] ? exit_to_user_mode_prepare+0x119/0x220 [ 1299.625658][T17427] do_fast_syscall_32+0x33/0x70 [ 1299.630626][T17427] do_SYSENTER_32+0x1b/0x20 [ 1299.635202][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1299.641613][T17427] RIP: 0023:0xf7f30549 [ 1299.645753][T17427] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1299.665629][T17427] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1299.674202][T17427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1299.682286][T17427] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1299.690345][T17427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1299.698378][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.706404][T17427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1299.714471][T17427] [ 1299.719951][T17427] Uninit was stored to memory at: [ 1299.725396][T17427] __get_compat_msghdr+0x514/0x750 [ 1299.730667][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1299.735727][T17427] ___sys_recvmsg+0x19d/0x890 [ 1299.740539][T17427] do_recvmmsg+0x682/0x1180 [ 1299.745246][T17427] __sys_recvmmsg+0x113/0x450 [ 1299.750051][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1299.756554][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1299.761897][T17427] do_fast_syscall_32+0x33/0x70 [ 1299.766882][T17427] do_SYSENTER_32+0x1b/0x20 [ 1299.771512][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1299.778064][T17427] [ 1299.780438][T17427] Uninit was stored to memory at: [ 1299.785730][T17427] __get_compat_msghdr+0x514/0x750 [ 1299.790955][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1299.795982][T17427] ___sys_recvmsg+0x19d/0x890 [ 1299.800772][T17427] do_recvmmsg+0x682/0x1180 [ 1299.805482][T17427] __sys_recvmmsg+0x113/0x450 [ 1299.810269][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1299.816699][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1299.822017][T17427] do_fast_syscall_32+0x33/0x70 [ 1299.827001][T17427] do_SYSENTER_32+0x1b/0x20 [ 1299.831628][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1299.838241][T17427] [ 1299.840591][T17427] Uninit was stored to memory at: [ 1299.845881][T17427] __get_compat_msghdr+0x514/0x750 [ 1299.851101][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1299.856122][T17427] ___sys_recvmsg+0x19d/0x890 [ 1299.860910][T17427] do_recvmmsg+0x682/0x1180 [ 1299.865638][T17427] __sys_recvmmsg+0x113/0x450 [ 1299.870425][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1299.876858][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1299.882180][T17427] do_fast_syscall_32+0x33/0x70 [ 1299.887160][T17427] do_SYSENTER_32+0x1b/0x20 [ 1299.891908][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1299.898378][T17427] [ 1299.900727][T17427] Uninit was stored to memory at: [ 1299.905983][T17427] __get_compat_msghdr+0x514/0x750 [ 1299.911206][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1299.916229][T17427] ___sys_recvmsg+0x19d/0x890 [ 1299.921017][T17427] do_recvmmsg+0x682/0x1180 [ 1299.925724][T17427] __sys_recvmmsg+0x113/0x450 [ 1299.930538][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1299.937020][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1299.942341][T17427] do_fast_syscall_32+0x33/0x70 [ 1299.947327][T17427] do_SYSENTER_32+0x1b/0x20 [ 1299.952020][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1299.958486][T17427] [ 1299.960834][T17427] Uninit was stored to memory at: [ 1299.966098][T17427] __get_compat_msghdr+0x514/0x750 [ 1299.971319][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1299.976377][T17427] ___sys_recvmsg+0x19d/0x890 [ 1299.981166][T17427] do_recvmmsg+0x682/0x1180 [ 1299.985843][T17427] __sys_recvmmsg+0x113/0x450 [ 1299.990660][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1299.997147][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.002469][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.007430][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.012135][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.018596][T17427] [ 1300.020968][T17427] Uninit was stored to memory at: [ 1300.026253][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.031494][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.036601][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.041399][T17427] do_recvmmsg+0x682/0x1180 [ 1300.046080][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.050894][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.057327][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.062650][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.067630][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.072335][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.078793][T17427] [ 1300.081142][T17427] Uninit was stored to memory at: [ 1300.086399][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.091619][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.096669][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.101413][T17427] do_recvmmsg+0x682/0x1180 [ 1300.106123][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.110929][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.117411][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.122731][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.127713][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.132477][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.138953][T17427] [ 1300.141343][T17427] Local variable msg_sys created at: [ 1300.146890][T17427] do_recvmmsg+0x5c/0x1180 [ 1300.151413][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.346480][T17427] not chained 730000 origins [ 1300.351186][T17427] CPU: 1 PID: 17427 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1300.361464][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1300.371578][T17427] Call Trace: [ 1300.374918][T17427] [ 1300.377913][T17427] dump_stack_lvl+0x1c8/0x256 [ 1300.382717][T17427] dump_stack+0x1a/0x1c [ 1300.387013][T17427] kmsan_internal_chain_origin+0x78/0x120 [ 1300.392841][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1300.399223][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1300.405134][T17427] ? ____sys_recvmsg+0x5c1/0x810 [ 1300.410192][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1300.415462][T17427] ? get_compat_msghdr+0x8c/0x1c0 [ 1300.420567][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1300.426459][T17427] ? __get_compat_msghdr+0x5b/0x750 [ 1300.431750][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1300.437725][T17427] ? should_fail+0x3f/0x810 [ 1300.442387][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1300.447651][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1300.454060][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1300.460041][T17427] __msan_chain_origin+0xbd/0x140 [ 1300.465219][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.470469][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.475410][T17427] ? ___sys_recvmsg+0xa9/0x890 [ 1300.480286][T17427] ? do_recvmmsg+0x682/0x1180 [ 1300.485048][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.489844][T17427] ? do_recvmmsg+0x6e4/0x1180 [ 1300.494653][T17427] ? __stack_depot_save+0x21/0x4b0 [ 1300.499900][T17427] ? kmsan_internal_check_memory+0x94/0x530 [ 1300.505887][T17427] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1300.511808][T17427] do_recvmmsg+0x682/0x1180 [ 1300.516469][T17427] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1300.522871][T17427] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.529377][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.534167][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.540587][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.545863][T17427] ? exit_to_user_mode_prepare+0x119/0x220 [ 1300.551828][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.556820][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.561443][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.567858][T17427] RIP: 0023:0xf7f30549 [ 1300.572001][T17427] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1300.591767][T17427] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1300.600305][T17427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1300.608355][T17427] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1300.616400][T17427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1300.624459][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.632501][T17427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1300.640607][T17427] [ 1300.646134][T17427] Uninit was stored to memory at: [ 1300.651517][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.656845][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.661910][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.666713][T17427] do_recvmmsg+0x682/0x1180 [ 1300.671341][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.676225][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.682687][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.687930][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.693022][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.697666][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.704248][T17427] [ 1300.706623][T17427] Uninit was stored to memory at: [ 1300.711886][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.717126][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.722221][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.727007][T17427] do_recvmmsg+0x682/0x1180 [ 1300.731576][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.736471][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.742934][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.748182][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.753296][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.757934][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.764564][T17427] [ 1300.766952][T17427] Uninit was stored to memory at: [ 1300.772251][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.777494][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.782596][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.787389][T17427] do_recvmmsg+0x682/0x1180 [ 1300.792087][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.796894][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.803377][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.808607][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.813670][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.818284][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.824904][T17427] [ 1300.827276][T17427] Uninit was stored to memory at: [ 1300.832569][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.837825][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.842926][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.847732][T17427] do_recvmmsg+0x682/0x1180 [ 1300.852480][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.857288][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.863805][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.869036][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.874096][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.878728][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.885327][T17427] [ 1300.887731][T17427] Uninit was stored to memory at: [ 1300.893015][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.898238][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.903264][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.908055][T17427] do_recvmmsg+0x682/0x1180 [ 1300.912764][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.917569][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.924048][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.929278][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.934345][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.938966][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1300.945491][T17427] [ 1300.947884][T17427] Uninit was stored to memory at: [ 1300.953192][T17427] __get_compat_msghdr+0x514/0x750 [ 1300.958432][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1300.963449][T17427] ___sys_recvmsg+0x19d/0x890 [ 1300.968195][T17427] do_recvmmsg+0x682/0x1180 [ 1300.972897][T17427] __sys_recvmmsg+0x113/0x450 [ 1300.977741][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1300.984260][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1300.989499][T17427] do_fast_syscall_32+0x33/0x70 [ 1300.994566][T17427] do_SYSENTER_32+0x1b/0x20 [ 1300.999197][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1301.005768][T17427] [ 1301.008143][T17427] Uninit was stored to memory at: [ 1301.013439][T17427] __get_compat_msghdr+0x514/0x750 [ 1301.018662][T17427] get_compat_msghdr+0x8c/0x1c0 [ 1301.023688][T17427] ___sys_recvmsg+0x19d/0x890 [ 1301.028477][T17427] do_recvmmsg+0x682/0x1180 [ 1301.033190][T17427] __sys_recvmmsg+0x113/0x450 [ 1301.037990][T17427] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1301.044429][T17427] __do_fast_syscall_32+0xa2/0x100 [ 1301.049679][T17427] do_fast_syscall_32+0x33/0x70 [ 1301.054778][T17427] do_SYSENTER_32+0x1b/0x20 [ 1301.059414][T17427] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1301.065980][T17427] [ 1301.068353][T17427] Local variable msg_sys created at: [ 1301.073815][T17427] do_recvmmsg+0x5c/0x1180 [ 1301.078339][T17427] __sys_recvmmsg+0x113/0x450 09:38:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) getpgid(r4) r5 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) mkdirat(r5, &(0x7f0000000100)='./file1\x00', 0x5000000) 09:38:46 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 09:38:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a001106000000000000000009200000804000007beb"], 0x1c}}, 0x0) 09:38:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:46 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 09:38:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:47 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="ef90e7e8fcb5", @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x88, 0x2}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 09:38:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {}, [@NDA_DST_IPV4={0x8}]}, 0x24}}, 0x0) 09:38:47 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 09:38:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:47 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) [ 1302.044053][T17482] loop4: detected capacity change from 0 to 6 [ 1302.252089][T17482] Dev loop4: unable to read RDB block 6 [ 1302.257992][T17482] loop4: unable to read partition table [ 1302.267393][T17482] loop4: partition table beyond EOD, truncated [ 1302.310629][T17482] FAT-fs (loop4): Directory bread(block 6) failed [ 1303.030616][T17480] not chained 740000 origins [ 1303.035666][T17480] CPU: 0 PID: 17480 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1303.045971][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1303.056144][T17480] Call Trace: [ 1303.059507][T17480] [ 1303.062514][T17480] dump_stack_lvl+0x1c8/0x256 [ 1303.067389][T17480] dump_stack+0x1a/0x1c [ 1303.071636][T17480] kmsan_internal_chain_origin+0x78/0x120 [ 1303.077495][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1303.083829][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1303.089724][T17480] ? ____sys_recvmsg+0x5c1/0x810 [ 1303.094755][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1303.100094][T17480] ? get_compat_msghdr+0x8c/0x1c0 [ 1303.105336][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1303.111283][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1303.116597][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1303.122569][T17480] ? should_fail+0x3f/0x810 [ 1303.127205][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1303.132449][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1303.138780][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1303.144699][T17480] __msan_chain_origin+0xbd/0x140 [ 1303.149875][T17480] __get_compat_msghdr+0x514/0x750 [ 1303.155145][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1303.160177][T17480] ? ___sys_recvmsg+0xa9/0x890 [ 1303.165011][T17480] ? do_recvmmsg+0x682/0x1180 [ 1303.169761][T17480] ___sys_recvmsg+0x19d/0x890 [ 1303.174507][T17480] ? do_recvmmsg+0x6e4/0x1180 [ 1303.179283][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1303.184499][T17480] ? kmsan_internal_check_memory+0x94/0x530 [ 1303.190539][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1303.196463][T17480] do_recvmmsg+0x682/0x1180 [ 1303.201125][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1303.207557][T17480] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.214079][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.218912][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.225276][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1303.230466][T17480] ? exit_to_user_mode_prepare+0x119/0x220 [ 1303.236382][T17480] do_fast_syscall_32+0x33/0x70 [ 1303.241360][T17480] do_SYSENTER_32+0x1b/0x20 [ 1303.245951][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1303.252429][T17480] RIP: 0023:0xf7f30549 [ 1303.256597][T17480] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1303.276339][T17480] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1303.284828][T17480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1303.292890][T17480] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1303.300967][T17480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1303.309046][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1303.317109][T17480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1303.325181][T17480] [ 1303.338898][T17480] Uninit was stored to memory at: [ 1303.345756][T17480] __get_compat_msghdr+0x514/0x750 [ 1303.351003][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1303.356086][T17480] ___sys_recvmsg+0x19d/0x890 [ 1303.360902][T17480] do_recvmmsg+0x682/0x1180 [ 1303.365638][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.370435][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.376903][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1303.382232][T17480] do_fast_syscall_32+0x33/0x70 [ 1303.387216][T17480] do_SYSENTER_32+0x1b/0x20 [ 1303.391946][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1303.398430][T17480] [ 1303.400818][T17480] Uninit was stored to memory at: [ 1303.406100][T17480] __get_compat_msghdr+0x514/0x750 [ 1303.411341][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1303.416476][T17480] ___sys_recvmsg+0x19d/0x890 [ 1303.421283][T17480] do_recvmmsg+0x682/0x1180 [ 1303.426062][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.430873][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.437376][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1303.442698][T17480] do_fast_syscall_32+0x33/0x70 [ 1303.447662][T17480] do_SYSENTER_32+0x1b/0x20 [ 1303.452397][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1303.458860][T17480] [ 1303.461211][T17480] Uninit was stored to memory at: [ 1303.466547][T17480] __get_compat_msghdr+0x514/0x750 [ 1303.471860][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1303.476841][T17480] ___sys_recvmsg+0x19d/0x890 [ 1303.481642][T17480] do_recvmmsg+0x682/0x1180 [ 1303.486466][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.491273][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.497727][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1303.503055][T17480] do_fast_syscall_32+0x33/0x70 [ 1303.508036][T17480] do_SYSENTER_32+0x1b/0x20 [ 1303.512806][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1303.519283][T17480] [ 1303.521647][T17480] Uninit was stored to memory at: [ 1303.526956][T17480] __get_compat_msghdr+0x514/0x750 [ 1303.532303][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1303.537272][T17480] ___sys_recvmsg+0x19d/0x890 [ 1303.542184][T17480] do_recvmmsg+0x682/0x1180 [ 1303.546814][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.551604][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.558140][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1303.563549][T17480] do_fast_syscall_32+0x33/0x70 [ 1303.568534][T17480] do_SYSENTER_32+0x1b/0x20 [ 1303.573306][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1303.579786][T17480] [ 1303.582311][T17480] Uninit was stored to memory at: [ 1303.587462][T17480] __get_compat_msghdr+0x514/0x750 [ 1303.592795][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1303.597769][T17480] ___sys_recvmsg+0x19d/0x890 [ 1303.602667][T17480] do_recvmmsg+0x682/0x1180 [ 1303.607281][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.612191][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.618562][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1303.623909][T17480] do_fast_syscall_32+0x33/0x70 [ 1303.628878][T17480] do_SYSENTER_32+0x1b/0x20 [ 1303.633589][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1303.640064][T17480] [ 1303.642575][T17480] Uninit was stored to memory at: [ 1303.647759][T17480] __get_compat_msghdr+0x514/0x750 [ 1303.653095][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1303.658055][T17480] ___sys_recvmsg+0x19d/0x890 [ 1303.662986][T17480] do_recvmmsg+0x682/0x1180 [ 1303.667603][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.672511][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.678884][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1303.684275][T17480] do_fast_syscall_32+0x33/0x70 [ 1303.689244][T17480] do_SYSENTER_32+0x1b/0x20 [ 1303.693968][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1303.700442][T17480] [ 1303.702931][T17480] Uninit was stored to memory at: [ 1303.708074][T17480] __get_compat_msghdr+0x514/0x750 [ 1303.713419][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1303.718413][T17480] ___sys_recvmsg+0x19d/0x890 [ 1303.723315][T17480] do_recvmmsg+0x682/0x1180 [ 1303.727943][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.732890][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1303.739279][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1303.744601][T17480] do_fast_syscall_32+0x33/0x70 [ 1303.749567][T17480] do_SYSENTER_32+0x1b/0x20 [ 1303.754302][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1303.760781][T17480] [ 1303.763283][T17480] Local variable msg_sys created at: [ 1303.768637][T17480] do_recvmmsg+0x5c/0x1180 [ 1303.773270][T17480] __sys_recvmmsg+0x113/0x450 [ 1303.995869][T17480] not chained 750000 origins [ 1304.000530][T17480] CPU: 0 PID: 17480 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1304.010755][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1304.020887][T17480] Call Trace: [ 1304.024228][T17480] [ 1304.027201][T17480] dump_stack_lvl+0x1c8/0x256 [ 1304.032041][T17480] dump_stack+0x1a/0x1c [ 1304.036324][T17480] kmsan_internal_chain_origin+0x78/0x120 [ 1304.042140][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1304.048498][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1304.054459][T17480] ? ____sys_recvmsg+0x5c1/0x810 [ 1304.059533][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1304.064863][T17480] ? get_compat_msghdr+0x8c/0x1c0 [ 1304.070000][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1304.075895][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1304.081167][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1304.087081][T17480] ? should_fail+0x3f/0x810 [ 1304.091668][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1304.096904][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1304.103288][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1304.109256][T17480] __msan_chain_origin+0xbd/0x140 [ 1304.114431][T17480] __get_compat_msghdr+0x514/0x750 [ 1304.119697][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1304.124679][T17480] ? ___sys_recvmsg+0xa9/0x890 [ 1304.129561][T17480] ? do_recvmmsg+0x682/0x1180 [ 1304.134315][T17480] ___sys_recvmsg+0x19d/0x890 [ 1304.139068][T17480] ? do_recvmmsg+0x6e4/0x1180 [ 1304.143825][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1304.149037][T17480] ? kmsan_internal_check_memory+0x94/0x530 [ 1304.155096][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1304.161063][T17480] do_recvmmsg+0x682/0x1180 [ 1304.165655][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1304.171986][T17480] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.178487][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.183245][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.189602][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1304.194816][T17480] ? exit_to_user_mode_prepare+0x119/0x220 [ 1304.200731][T17480] do_fast_syscall_32+0x33/0x70 [ 1304.205681][T17480] do_SYSENTER_32+0x1b/0x20 [ 1304.210316][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1304.216786][T17480] RIP: 0023:0xf7f30549 [ 1304.220925][T17480] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1304.240686][T17480] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1304.249178][T17480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1304.257233][T17480] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1304.265301][T17480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1304.273355][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.281390][T17480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1304.289460][T17480] [ 1304.297570][T17480] Uninit was stored to memory at: [ 1304.303263][T17480] __get_compat_msghdr+0x514/0x750 [ 1304.308520][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1304.313607][T17480] ___sys_recvmsg+0x19d/0x890 [ 1304.318427][T17480] do_recvmmsg+0x682/0x1180 [ 1304.323165][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.327989][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.334539][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1304.339796][T17480] do_fast_syscall_32+0x33/0x70 [ 1304.344876][T17480] do_SYSENTER_32+0x1b/0x20 [ 1304.349509][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1304.356107][T17480] [ 1304.358484][T17480] Uninit was stored to memory at: [ 1304.363782][T17480] __get_compat_msghdr+0x514/0x750 [ 1304.369028][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1304.374153][T17480] ___sys_recvmsg+0x19d/0x890 [ 1304.378960][T17480] do_recvmmsg+0x682/0x1180 [ 1304.383670][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.388486][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.394966][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1304.400227][T17480] do_fast_syscall_32+0x33/0x70 [ 1304.405354][T17480] do_SYSENTER_32+0x1b/0x20 [ 1304.409997][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1304.416609][T17480] [ 1304.418999][T17480] Uninit was stored to memory at: [ 1304.424322][T17480] __get_compat_msghdr+0x514/0x750 [ 1304.429572][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1304.434707][T17480] ___sys_recvmsg+0x19d/0x890 [ 1304.439502][T17480] do_recvmmsg+0x682/0x1180 [ 1304.444285][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.449083][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.455578][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1304.460829][T17480] do_fast_syscall_32+0x33/0x70 [ 1304.465957][T17480] do_SYSENTER_32+0x1b/0x20 [ 1304.470594][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1304.477203][T17480] [ 1304.479593][T17480] Uninit was stored to memory at: [ 1304.484932][T17480] __get_compat_msghdr+0x514/0x750 [ 1304.490159][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1304.495262][T17480] ___sys_recvmsg+0x19d/0x890 [ 1304.500081][T17480] do_recvmmsg+0x682/0x1180 [ 1304.504861][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.509652][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.516099][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1304.521335][T17480] do_fast_syscall_32+0x33/0x70 [ 1304.526397][T17480] do_SYSENTER_32+0x1b/0x20 [ 1304.531032][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1304.537645][T17480] [ 1304.540036][T17480] Uninit was stored to memory at: [ 1304.545367][T17480] __get_compat_msghdr+0x514/0x750 [ 1304.550618][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1304.555694][T17480] ___sys_recvmsg+0x19d/0x890 [ 1304.560494][T17480] do_recvmmsg+0x682/0x1180 [ 1304.565246][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.570061][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.576601][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1304.581943][T17480] do_fast_syscall_32+0x33/0x70 [ 1304.586911][T17480] do_SYSENTER_32+0x1b/0x20 [ 1304.591513][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1304.598051][T17480] [ 1304.600431][T17480] Uninit was stored to memory at: [ 1304.605714][T17480] __get_compat_msghdr+0x514/0x750 [ 1304.610940][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1304.616038][T17480] ___sys_recvmsg+0x19d/0x890 [ 1304.620848][T17480] do_recvmmsg+0x682/0x1180 [ 1304.625637][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.630438][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.636895][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1304.642226][T17480] do_fast_syscall_32+0x33/0x70 [ 1304.647213][T17480] do_SYSENTER_32+0x1b/0x20 [ 1304.651933][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1304.658429][T17480] [ 1304.660799][T17480] Uninit was stored to memory at: [ 1304.666085][T17480] __get_compat_msghdr+0x514/0x750 [ 1304.671312][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1304.676391][T17480] ___sys_recvmsg+0x19d/0x890 [ 1304.681184][T17480] do_recvmmsg+0x682/0x1180 [ 1304.685924][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.690732][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1304.697230][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1304.702526][T17480] do_fast_syscall_32+0x33/0x70 [ 1304.707451][T17480] do_SYSENTER_32+0x1b/0x20 [ 1304.712197][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1304.718676][T17480] [ 1304.721048][T17480] Local variable msg_sys created at: [ 1304.726495][T17480] do_recvmmsg+0x5c/0x1180 [ 1304.731022][T17480] __sys_recvmmsg+0x113/0x450 [ 1304.931611][T17480] not chained 760000 origins [ 1304.936402][T17480] CPU: 0 PID: 17480 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1304.946656][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1304.956825][T17480] Call Trace: [ 1304.960160][T17480] [ 1304.963129][T17480] dump_stack_lvl+0x1c8/0x256 [ 1304.967988][T17480] dump_stack+0x1a/0x1c [ 1304.972258][T17480] kmsan_internal_chain_origin+0x78/0x120 [ 1304.978082][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1304.984454][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1304.990406][T17480] ? ____sys_recvmsg+0x5c1/0x810 [ 1304.995443][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1305.000768][T17480] ? get_compat_msghdr+0x8c/0x1c0 [ 1305.005905][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1305.011809][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1305.017079][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1305.022989][T17480] ? should_fail+0x3f/0x810 [ 1305.027571][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1305.032758][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1305.039083][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1305.044995][T17480] __msan_chain_origin+0xbd/0x140 [ 1305.050164][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.055433][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.060421][T17480] ? ___sys_recvmsg+0xa9/0x890 [ 1305.065315][T17480] ? do_recvmmsg+0x682/0x1180 [ 1305.070066][T17480] ___sys_recvmsg+0x19d/0x890 [ 1305.074807][T17480] ? do_recvmmsg+0x6e4/0x1180 [ 1305.079559][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1305.084751][T17480] ? kmsan_internal_check_memory+0x94/0x530 [ 1305.090727][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1305.096641][T17480] do_recvmmsg+0x682/0x1180 [ 1305.101292][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1305.107629][T17480] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.114129][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.118882][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.125211][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1305.130414][T17480] ? exit_to_user_mode_prepare+0x119/0x220 [ 1305.136297][T17480] do_fast_syscall_32+0x33/0x70 [ 1305.141221][T17480] do_SYSENTER_32+0x1b/0x20 [ 1305.145809][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1305.152287][T17480] RIP: 0023:0xf7f30549 [ 1305.156447][T17480] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1305.176138][T17480] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1305.184623][T17480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1305.192673][T17480] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1305.200750][T17480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1305.208822][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1305.216848][T17480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1305.224885][T17480] [ 1305.233029][T17480] Uninit was stored to memory at: [ 1305.238237][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.244008][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.249012][T17480] ___sys_recvmsg+0x19d/0x890 [ 1305.253969][T17480] do_recvmmsg+0x682/0x1180 [ 1305.258606][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.263539][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.269920][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1305.275238][T17480] do_fast_syscall_32+0x33/0x70 [ 1305.280211][T17480] do_SYSENTER_32+0x1b/0x20 [ 1305.284956][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1305.291417][T17480] [ 1305.293893][T17480] Uninit was stored to memory at: [ 1305.299044][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.304351][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.309319][T17480] ___sys_recvmsg+0x19d/0x890 [ 1305.314255][T17480] do_recvmmsg+0x682/0x1180 [ 1305.318957][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.323872][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.330243][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1305.335556][T17480] do_fast_syscall_32+0x33/0x70 [ 1305.340520][T17480] do_SYSENTER_32+0x1b/0x20 [ 1305.345220][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1305.351779][T17480] [ 1305.354169][T17480] Uninit was stored to memory at: [ 1305.359311][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.364623][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.369587][T17480] ___sys_recvmsg+0x19d/0x890 [ 1305.374468][T17480] do_recvmmsg+0x682/0x1180 [ 1305.379079][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.383994][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.390386][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1305.395739][T17480] do_fast_syscall_32+0x33/0x70 [ 1305.400703][T17480] do_SYSENTER_32+0x1b/0x20 [ 1305.405407][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1305.411974][T17480] [ 1305.414361][T17480] Uninit was stored to memory at: [ 1305.419505][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.424810][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.429774][T17480] ___sys_recvmsg+0x19d/0x890 [ 1305.434684][T17480] do_recvmmsg+0x682/0x1180 [ 1305.439309][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.444216][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.450613][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1305.455926][T17480] do_fast_syscall_32+0x33/0x70 [ 1305.460892][T17480] do_SYSENTER_32+0x1b/0x20 [ 1305.465588][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1305.472138][T17480] [ 1305.474521][T17480] Uninit was stored to memory at: [ 1305.479657][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.484958][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.489923][T17480] ___sys_recvmsg+0x19d/0x890 [ 1305.494793][T17480] do_recvmmsg+0x682/0x1180 [ 1305.499422][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.504341][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.510736][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1305.516093][T17480] do_fast_syscall_32+0x33/0x70 [ 1305.521057][T17480] do_SYSENTER_32+0x1b/0x20 [ 1305.525756][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1305.532306][T17480] [ 1305.534695][T17480] Uninit was stored to memory at: [ 1305.539833][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.545132][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.550093][T17480] ___sys_recvmsg+0x19d/0x890 [ 1305.555004][T17480] do_recvmmsg+0x682/0x1180 [ 1305.559635][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.564589][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.570980][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1305.576332][T17480] do_fast_syscall_32+0x33/0x70 [ 1305.581302][T17480] do_SYSENTER_32+0x1b/0x20 [ 1305.586021][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1305.592578][T17480] [ 1305.594964][T17480] Uninit was stored to memory at: [ 1305.600101][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.605407][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.610367][T17480] ___sys_recvmsg+0x19d/0x890 [ 1305.615238][T17480] do_recvmmsg+0x682/0x1180 [ 1305.619853][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.624768][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1305.631157][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1305.636514][T17480] do_fast_syscall_32+0x33/0x70 [ 1305.641477][T17480] do_SYSENTER_32+0x1b/0x20 [ 1305.646172][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1305.652720][T17480] [ 1305.655108][T17480] Local variable msg_sys created at: [ 1305.660462][T17480] do_recvmmsg+0x5c/0x1180 [ 1305.665111][T17480] __sys_recvmmsg+0x113/0x450 [ 1305.857132][T17480] not chained 770000 origins [ 1305.866643][T17480] CPU: 0 PID: 17480 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1305.876928][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1305.887035][T17480] Call Trace: [ 1305.890346][T17480] [ 1305.893315][T17480] dump_stack_lvl+0x1c8/0x256 [ 1305.898108][T17480] dump_stack+0x1a/0x1c [ 1305.902349][T17480] kmsan_internal_chain_origin+0x78/0x120 [ 1305.908158][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1305.914485][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1305.920392][T17480] ? ____sys_recvmsg+0x5c1/0x810 [ 1305.925424][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1305.930754][T17480] ? get_compat_msghdr+0x8c/0x1c0 [ 1305.935908][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1305.941851][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1305.947125][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1305.953017][T17480] ? should_fail+0x3f/0x810 [ 1305.957597][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1305.962787][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1305.969119][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1305.975034][T17480] __msan_chain_origin+0xbd/0x140 [ 1305.980202][T17480] __get_compat_msghdr+0x514/0x750 [ 1305.985441][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1305.990360][T17480] ? ___sys_recvmsg+0xa9/0x890 [ 1305.995193][T17480] ? do_recvmmsg+0x682/0x1180 [ 1305.999939][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.004680][T17480] ? do_recvmmsg+0x6e4/0x1180 [ 1306.009432][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1306.014622][T17480] ? kmsan_internal_check_memory+0x94/0x530 [ 1306.020599][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1306.026520][T17480] do_recvmmsg+0x682/0x1180 [ 1306.031149][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1306.037477][T17480] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.043975][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.048732][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.055060][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.060264][T17480] ? exit_to_user_mode_prepare+0x119/0x220 [ 1306.066223][T17480] do_fast_syscall_32+0x33/0x70 [ 1306.071209][T17480] do_SYSENTER_32+0x1b/0x20 [ 1306.075844][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1306.082323][T17480] RIP: 0023:0xf7f30549 [ 1306.086495][T17480] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1306.106259][T17480] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1306.114816][T17480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1306.122904][T17480] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1306.130984][T17480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1306.139064][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.147146][T17480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.155248][T17480] [ 1306.163459][T17480] Uninit was stored to memory at: [ 1306.174166][T17480] __get_compat_msghdr+0x514/0x750 [ 1306.179417][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1306.184878][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.189685][T17480] do_recvmmsg+0x682/0x1180 [ 1306.194413][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.199219][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.205712][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.210963][T17480] do_fast_syscall_32+0x33/0x70 [ 1306.216039][T17480] do_SYSENTER_32+0x1b/0x20 [ 1306.220672][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1306.227248][T17480] [ 1306.229635][T17480] Uninit was stored to memory at: [ 1306.234917][T17480] __get_compat_msghdr+0x514/0x750 [ 1306.240157][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1306.245226][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.250034][T17480] do_recvmmsg+0x682/0x1180 [ 1306.254815][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.259621][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.266111][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.271381][T17480] do_fast_syscall_32+0x33/0x70 [ 1306.276489][T17480] do_SYSENTER_32+0x1b/0x20 [ 1306.281105][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1306.287666][T17480] [ 1306.290042][T17480] Uninit was stored to memory at: [ 1306.295358][T17480] __get_compat_msghdr+0x514/0x750 [ 1306.300583][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1306.305631][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.310425][T17480] do_recvmmsg+0x682/0x1180 [ 1306.315163][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.319972][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.326475][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.331810][T17480] do_fast_syscall_32+0x33/0x70 [ 1306.336788][T17480] do_SYSENTER_32+0x1b/0x20 [ 1306.341421][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1306.347996][T17480] [ 1306.350368][T17480] Uninit was stored to memory at: [ 1306.355642][T17480] __get_compat_msghdr+0x514/0x750 [ 1306.360861][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1306.365941][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.370746][T17480] do_recvmmsg+0x682/0x1180 [ 1306.375519][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.380343][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.386800][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.392119][T17480] do_fast_syscall_32+0x33/0x70 [ 1306.397098][T17480] do_SYSENTER_32+0x1b/0x20 [ 1306.401864][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1306.408323][T17480] [ 1306.410695][T17480] Uninit was stored to memory at: [ 1306.415973][T17480] __get_compat_msghdr+0x514/0x750 [ 1306.421213][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1306.426301][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.431115][T17480] do_recvmmsg+0x682/0x1180 [ 1306.435852][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.440641][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.447095][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.452424][T17480] do_fast_syscall_32+0x33/0x70 [ 1306.457407][T17480] do_SYSENTER_32+0x1b/0x20 [ 1306.462158][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1306.468618][T17480] [ 1306.470968][T17480] Uninit was stored to memory at: [ 1306.476273][T17480] __get_compat_msghdr+0x514/0x750 [ 1306.481528][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1306.486576][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.491365][T17480] do_recvmmsg+0x682/0x1180 [ 1306.496096][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.500885][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.507333][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.512664][T17480] do_fast_syscall_32+0x33/0x70 [ 1306.517627][T17480] do_SYSENTER_32+0x1b/0x20 [ 1306.522356][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1306.528821][T17480] [ 1306.531171][T17480] Uninit was stored to memory at: [ 1306.536446][T17480] __get_compat_msghdr+0x514/0x750 [ 1306.541749][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1306.546727][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.551530][T17480] do_recvmmsg+0x682/0x1180 [ 1306.556285][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.561084][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.567535][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.572870][T17480] do_fast_syscall_32+0x33/0x70 [ 1306.577851][T17480] do_SYSENTER_32+0x1b/0x20 [ 1306.582625][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1306.589101][T17480] [ 1306.591473][T17480] Local variable msg_sys created at: [ 1306.596939][T17480] do_recvmmsg+0x5c/0x1180 [ 1306.601462][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.798742][T17480] not chained 780000 origins [ 1306.803510][T17480] CPU: 0 PID: 17480 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1306.813756][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1306.823901][T17480] Call Trace: [ 1306.827218][T17480] [ 1306.830183][T17480] dump_stack_lvl+0x1c8/0x256 [ 1306.834981][T17480] dump_stack+0x1a/0x1c [ 1306.839222][T17480] kmsan_internal_chain_origin+0x78/0x120 [ 1306.845029][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1306.851355][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1306.857246][T17480] ? ____sys_recvmsg+0x5c1/0x810 [ 1306.862274][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1306.867605][T17480] ? get_compat_msghdr+0x8c/0x1c0 [ 1306.872741][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1306.878632][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1306.883900][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1306.889797][T17480] ? should_fail+0x3f/0x810 [ 1306.894407][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1306.899599][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1306.905929][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1306.911836][T17480] __msan_chain_origin+0xbd/0x140 [ 1306.917000][T17480] __get_compat_msghdr+0x514/0x750 [ 1306.922268][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1306.927239][T17480] ? ___sys_recvmsg+0xa9/0x890 [ 1306.932133][T17480] ? do_recvmmsg+0x682/0x1180 [ 1306.936947][T17480] ___sys_recvmsg+0x19d/0x890 [ 1306.941750][T17480] ? do_recvmmsg+0x6e4/0x1180 [ 1306.946508][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1306.951715][T17480] ? kmsan_internal_check_memory+0x94/0x530 [ 1306.957706][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1306.963643][T17480] do_recvmmsg+0x682/0x1180 [ 1306.968272][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1306.974606][T17480] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.981104][T17480] __sys_recvmmsg+0x113/0x450 [ 1306.985856][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1306.992189][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1306.997380][T17480] ? exit_to_user_mode_prepare+0x119/0x220 [ 1307.003263][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.008183][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.012771][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.019230][T17480] RIP: 0023:0xf7f30549 [ 1307.023347][T17480] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1307.043042][T17480] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1307.051524][T17480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1307.059549][T17480] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1307.067591][T17480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1307.075665][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.083722][T17480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1307.091784][T17480] [ 1307.099882][T17480] Uninit was stored to memory at: [ 1307.105576][T17480] __get_compat_msghdr+0x514/0x750 [ 1307.110819][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1307.115897][T17480] ___sys_recvmsg+0x19d/0x890 [ 1307.120699][T17480] do_recvmmsg+0x682/0x1180 [ 1307.125390][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.130133][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.136581][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1307.141908][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.146889][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.151499][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.158033][T17480] [ 1307.160409][T17480] Uninit was stored to memory at: [ 1307.165686][T17480] __get_compat_msghdr+0x514/0x750 [ 1307.170910][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1307.175994][T17480] ___sys_recvmsg+0x19d/0x890 [ 1307.180785][T17480] do_recvmmsg+0x682/0x1180 [ 1307.185527][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.190332][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.196829][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1307.202202][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.207183][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.211927][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.218421][T17480] [ 1307.220811][T17480] Uninit was stored to memory at: [ 1307.226144][T17480] __get_compat_msghdr+0x514/0x750 [ 1307.231366][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1307.236418][T17480] ___sys_recvmsg+0x19d/0x890 [ 1307.241207][T17480] do_recvmmsg+0x682/0x1180 [ 1307.245899][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.250686][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.257171][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1307.262480][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.267405][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.272135][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.278596][T17480] [ 1307.280947][T17480] Uninit was stored to memory at: [ 1307.286224][T17480] __get_compat_msghdr+0x514/0x750 [ 1307.291466][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1307.296575][T17480] ___sys_recvmsg+0x19d/0x890 [ 1307.301402][T17480] do_recvmmsg+0x682/0x1180 [ 1307.306139][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.310950][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.317447][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1307.322809][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.327799][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.332527][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.338987][T17480] [ 1307.341339][T17480] Uninit was stored to memory at: [ 1307.346663][T17480] __get_compat_msghdr+0x514/0x750 [ 1307.351980][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1307.356905][T17480] ___sys_recvmsg+0x19d/0x890 [ 1307.361806][T17480] do_recvmmsg+0x682/0x1180 [ 1307.366435][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.371211][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.377660][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1307.382945][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.387865][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.392597][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.399076][T17480] [ 1307.401467][T17480] Uninit was stored to memory at: [ 1307.406766][T17480] __get_compat_msghdr+0x514/0x750 [ 1307.412042][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1307.416977][T17480] ___sys_recvmsg+0x19d/0x890 [ 1307.421877][T17480] do_recvmmsg+0x682/0x1180 [ 1307.426499][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.431305][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.437807][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1307.443130][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.448112][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.452885][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.459370][T17480] [ 1307.461909][T17480] Uninit was stored to memory at: [ 1307.467055][T17480] __get_compat_msghdr+0x514/0x750 [ 1307.472364][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1307.477346][T17480] ___sys_recvmsg+0x19d/0x890 [ 1307.482297][T17480] do_recvmmsg+0x682/0x1180 [ 1307.486936][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.491883][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.498261][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1307.503596][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.508565][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.513303][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.519766][T17480] [ 1307.522247][T17480] Local variable msg_sys created at: [ 1307.527606][T17480] do_recvmmsg+0x5c/0x1180 [ 1307.532250][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.728332][T17480] not chained 790000 origins [ 1307.733055][T17480] CPU: 0 PID: 17480 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1307.743282][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1307.753389][T17480] Call Trace: [ 1307.756701][T17480] [ 1307.759668][T17480] dump_stack_lvl+0x1c8/0x256 [ 1307.764450][T17480] dump_stack+0x1a/0x1c [ 1307.768689][T17480] kmsan_internal_chain_origin+0x78/0x120 [ 1307.774496][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1307.780823][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1307.786715][T17480] ? ____sys_recvmsg+0x5c1/0x810 [ 1307.791740][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1307.797072][T17480] ? get_compat_msghdr+0x8c/0x1c0 [ 1307.802226][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1307.808187][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1307.813525][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1307.819483][T17480] ? should_fail+0x3f/0x810 [ 1307.824067][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1307.829258][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1307.835604][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1307.841495][T17480] __msan_chain_origin+0xbd/0x140 [ 1307.846616][T17480] __get_compat_msghdr+0x514/0x750 [ 1307.851895][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1307.856860][T17480] ? ___sys_recvmsg+0xa9/0x890 [ 1307.861710][T17480] ? do_recvmmsg+0x682/0x1180 [ 1307.866473][T17480] ___sys_recvmsg+0x19d/0x890 [ 1307.871212][T17480] ? do_recvmmsg+0x6e4/0x1180 [ 1307.875964][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1307.881156][T17480] ? kmsan_internal_check_memory+0x94/0x530 [ 1307.887133][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1307.893048][T17480] do_recvmmsg+0x682/0x1180 [ 1307.897705][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1307.904084][T17480] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.910606][T17480] __sys_recvmmsg+0x113/0x450 [ 1307.915408][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1307.921762][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1307.926951][T17480] ? exit_to_user_mode_prepare+0x119/0x220 [ 1307.932834][T17480] do_fast_syscall_32+0x33/0x70 [ 1307.937760][T17480] do_SYSENTER_32+0x1b/0x20 [ 1307.942345][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1307.948820][T17480] RIP: 0023:0xf7f30549 [ 1307.952989][T17480] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1307.972752][T17480] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1307.981255][T17480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1307.989283][T17480] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1307.997346][T17480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1308.005404][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1308.013446][T17480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.021519][T17480] [ 1308.029635][T17480] Uninit was stored to memory at: [ 1308.035321][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.040570][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.045655][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.050460][T17480] do_recvmmsg+0x682/0x1180 [ 1308.055185][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.059991][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.066534][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.071861][T17480] do_fast_syscall_32+0x33/0x70 [ 1308.076847][T17480] do_SYSENTER_32+0x1b/0x20 [ 1308.081479][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1308.088064][T17480] [ 1308.090442][T17480] Uninit was stored to memory at: [ 1308.095716][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.100938][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.106033][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.110820][T17480] do_recvmmsg+0x682/0x1180 [ 1308.115543][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.120329][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.126779][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.132107][T17480] do_fast_syscall_32+0x33/0x70 [ 1308.137071][T17480] do_SYSENTER_32+0x1b/0x20 [ 1308.141636][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1308.148654][T17480] [ 1308.151028][T17480] Uninit was stored to memory at: [ 1308.156305][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.161525][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.166570][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.171355][T17480] do_recvmmsg+0x682/0x1180 [ 1308.176088][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.180877][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.187361][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.192685][T17480] do_fast_syscall_32+0x33/0x70 [ 1308.197668][T17480] do_SYSENTER_32+0x1b/0x20 [ 1308.202435][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1308.208900][T17480] [ 1308.211252][T17480] Uninit was stored to memory at: [ 1308.216563][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.221876][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.226795][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.231538][T17480] do_recvmmsg+0x682/0x1180 [ 1308.236270][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.241061][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.247532][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.252855][T17480] do_fast_syscall_32+0x33/0x70 [ 1308.257838][T17480] do_SYSENTER_32+0x1b/0x20 [ 1308.262613][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1308.269089][T17480] [ 1308.271474][T17480] Uninit was stored to memory at: [ 1308.276789][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.282115][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.287077][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.291970][T17480] do_recvmmsg+0x682/0x1180 [ 1308.296598][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.301403][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.307903][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.313229][T17480] do_fast_syscall_32+0x33/0x70 [ 1308.318238][T17480] do_SYSENTER_32+0x1b/0x20 [ 1308.323029][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1308.329509][T17480] [ 1308.332038][T17480] Uninit was stored to memory at: [ 1308.337183][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.342483][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.347461][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.352368][T17480] do_recvmmsg+0x682/0x1180 [ 1308.356996][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.361933][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.368308][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.373640][T17480] do_fast_syscall_32+0x33/0x70 [ 1308.378605][T17480] do_SYSENTER_32+0x1b/0x20 [ 1308.383344][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1308.389800][T17480] [ 1308.392296][T17480] Uninit was stored to memory at: [ 1308.397435][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.402774][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.407738][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.412652][T17480] do_recvmmsg+0x682/0x1180 [ 1308.417278][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.422229][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.428621][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.433982][T17480] do_fast_syscall_32+0x33/0x70 [ 1308.438944][T17480] do_SYSENTER_32+0x1b/0x20 [ 1308.443658][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1308.450114][T17480] [ 1308.452633][T17480] Local variable msg_sys created at: [ 1308.457972][T17480] do_recvmmsg+0x5c/0x1180 [ 1308.462615][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.656351][T17480] not chained 800000 origins [ 1308.661034][T17480] CPU: 0 PID: 17480 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1308.671260][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1308.681370][T17480] Call Trace: [ 1308.684684][T17480] [ 1308.687671][T17480] dump_stack_lvl+0x1c8/0x256 [ 1308.692454][T17480] dump_stack+0x1a/0x1c [ 1308.696695][T17480] kmsan_internal_chain_origin+0x78/0x120 [ 1308.702527][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1308.708912][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1308.714801][T17480] ? ____sys_recvmsg+0x5c1/0x810 [ 1308.719828][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1308.725098][T17480] ? get_compat_msghdr+0x8c/0x1c0 [ 1308.730207][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1308.736152][T17480] ? __get_compat_msghdr+0x5b/0x750 [ 1308.741426][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1308.747317][T17480] ? should_fail+0x3f/0x810 [ 1308.751923][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1308.757182][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1308.763586][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1308.769551][T17480] __msan_chain_origin+0xbd/0x140 [ 1308.774702][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.779903][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.784819][T17480] ? ___sys_recvmsg+0xa9/0x890 [ 1308.789651][T17480] ? do_recvmmsg+0x682/0x1180 [ 1308.794394][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.799135][T17480] ? do_recvmmsg+0x6e4/0x1180 [ 1308.803919][T17480] ? __stack_depot_save+0x21/0x4b0 [ 1308.809179][T17480] ? kmsan_internal_check_memory+0x94/0x530 [ 1308.815204][T17480] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1308.821119][T17480] do_recvmmsg+0x682/0x1180 [ 1308.825722][T17480] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1308.832074][T17480] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.838648][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.843425][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.849753][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.854958][T17480] ? exit_to_user_mode_prepare+0x119/0x220 [ 1308.860895][T17480] do_fast_syscall_32+0x33/0x70 [ 1308.865820][T17480] do_SYSENTER_32+0x1b/0x20 [ 1308.870395][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1308.876803][T17480] RIP: 0023:0xf7f30549 [ 1308.880923][T17480] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1308.900633][T17480] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1308.909134][T17480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1308.917220][T17480] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1308.925298][T17480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1308.933377][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1308.941438][T17480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.949479][T17480] [ 1308.957526][T17480] Uninit was stored to memory at: [ 1308.963300][T17480] __get_compat_msghdr+0x514/0x750 [ 1308.968547][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1308.973634][T17480] ___sys_recvmsg+0x19d/0x890 [ 1308.978442][T17480] do_recvmmsg+0x682/0x1180 [ 1308.983178][T17480] __sys_recvmmsg+0x113/0x450 [ 1308.987965][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1308.994452][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1308.999681][T17480] do_fast_syscall_32+0x33/0x70 [ 1309.004730][T17480] do_SYSENTER_32+0x1b/0x20 [ 1309.009345][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1309.015884][T17480] [ 1309.018258][T17480] Uninit was stored to memory at: [ 1309.023547][T17480] __get_compat_msghdr+0x514/0x750 [ 1309.028784][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1309.033898][T17480] ___sys_recvmsg+0x19d/0x890 [ 1309.038757][T17480] do_recvmmsg+0x682/0x1180 [ 1309.043520][T17480] __sys_recvmmsg+0x113/0x450 [ 1309.048312][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1309.054805][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1309.060044][T17480] do_fast_syscall_32+0x33/0x70 [ 1309.065115][T17480] do_SYSENTER_32+0x1b/0x20 [ 1309.069728][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1309.076259][T17480] [ 1309.078653][T17480] Uninit was stored to memory at: [ 1309.083993][T17480] __get_compat_msghdr+0x514/0x750 [ 1309.089304][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1309.094385][T17480] ___sys_recvmsg+0x19d/0x890 [ 1309.099173][T17480] do_recvmmsg+0x682/0x1180 [ 1309.103867][T17480] __sys_recvmmsg+0x113/0x450 [ 1309.108659][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1309.115146][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1309.120394][T17480] do_fast_syscall_32+0x33/0x70 [ 1309.125442][T17480] do_SYSENTER_32+0x1b/0x20 [ 1309.130056][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1309.136591][T17480] [ 1309.138980][T17480] Uninit was stored to memory at: [ 1309.144319][T17480] __get_compat_msghdr+0x514/0x750 [ 1309.149555][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1309.154631][T17480] ___sys_recvmsg+0x19d/0x890 [ 1309.159430][T17480] do_recvmmsg+0x682/0x1180 [ 1309.164164][T17480] __sys_recvmmsg+0x113/0x450 [ 1309.168954][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1309.175400][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1309.180653][T17480] do_fast_syscall_32+0x33/0x70 [ 1309.185744][T17480] do_SYSENTER_32+0x1b/0x20 [ 1309.190390][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1309.196937][T17480] [ 1309.199310][T17480] Uninit was stored to memory at: [ 1309.204623][T17480] __get_compat_msghdr+0x514/0x750 [ 1309.209864][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1309.214964][T17480] ___sys_recvmsg+0x19d/0x890 [ 1309.219753][T17480] do_recvmmsg+0x682/0x1180 [ 1309.224447][T17480] __sys_recvmmsg+0x113/0x450 [ 1309.229236][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1309.235685][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1309.240939][T17480] do_fast_syscall_32+0x33/0x70 [ 1309.246075][T17480] do_SYSENTER_32+0x1b/0x20 [ 1309.250715][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1309.257250][T17480] [ 1309.259643][T17480] Uninit was stored to memory at: [ 1309.264960][T17480] __get_compat_msghdr+0x514/0x750 [ 1309.270198][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1309.275350][T17480] ___sys_recvmsg+0x19d/0x890 [ 1309.280165][T17480] do_recvmmsg+0x682/0x1180 [ 1309.284913][T17480] __sys_recvmmsg+0x113/0x450 [ 1309.289707][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1309.296203][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1309.301455][T17480] do_fast_syscall_32+0x33/0x70 [ 1309.306600][T17480] do_SYSENTER_32+0x1b/0x20 [ 1309.311233][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1309.317818][T17480] [ 1309.320194][T17480] Uninit was stored to memory at: [ 1309.325463][T17480] __get_compat_msghdr+0x514/0x750 [ 1309.330691][T17480] get_compat_msghdr+0x8c/0x1c0 [ 1309.335795][T17480] ___sys_recvmsg+0x19d/0x890 [ 1309.340684][T17480] do_recvmmsg+0x682/0x1180 [ 1309.345416][T17480] __sys_recvmmsg+0x113/0x450 [ 1309.350209][T17480] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1309.356658][T17480] __do_fast_syscall_32+0xa2/0x100 [ 1309.361984][T17480] do_fast_syscall_32+0x33/0x70 [ 1309.366951][T17480] do_SYSENTER_32+0x1b/0x20 [ 1309.371520][T17480] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1309.378054][T17480] [ 1309.380436][T17480] Local variable msg_sys created at: [ 1309.385921][T17480] do_recvmmsg+0x5c/0x1180 [ 1309.390461][T17480] __sys_recvmmsg+0x113/0x450 09:38:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) getpgid(r4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:38:55 executing program 3: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:38:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x28}], 0x1, 0x0, 0x5}, 0x0) 09:38:55 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 09:38:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:38:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hopopts_2292={{0x18}}, @flowinfo={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x48}}], 0x1, 0x0) 09:38:55 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 09:38:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) connect(r0, 0x0, 0x0) 09:38:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1310.131470][T17530] loop4: detected capacity change from 0 to 6 09:38:55 executing program 3: syz_emit_ethernet(0xfc0, &(0x7f0000000200)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c3d11e", 0xf86, 0x2f, 0x0, @dev, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xe33, 0x0, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0], "b1446460ed585ea55093ba5d5cce699074c9d6f9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "9a3edc4211ce854a5b4a1f05e8ddbea1ba8cc9a6d93fa40686b7ceed22ef"}, {}, {}, {0x8, 0x6558, 0x0, "8484d816df7b08f3081705d22413ab115619204ba047d451d5addf09dc3b0980863d53c2bb46372c336ea791d3f482584949fdf795d4ae15f152c0b75ea39e21cf58ad778350c8fb4a20e50aa574f5a42aa19b075b8a358d18890e0abf93e18a4a70f6852107f5aa96d55259186af6e2ea7dba12e8d4e7112ccd06e556884c18933202ce4a08f38a15b767c7a84dda4fd6aff74d796cbff8bc8451a2889b63c9f10cfba98257298489785a50223496de9baab8905bbf6e70d834ab4c403811afe9b22d8b27aea01e523b2d88b10a7cd27d640a4db4525bcd60"}}}}}}}, 0x0) [ 1310.333354][T17530] Dev loop4: unable to read RDB block 6 [ 1310.339306][T17530] loop4: unable to read partition table [ 1310.454054][T17530] loop4: partition table beyond EOD, truncated [ 1310.578501][T17530] FAT-fs (loop4): Directory bread(block 6) failed [ 1311.077621][T17526] not chained 810000 origins [ 1311.082510][T17526] CPU: 0 PID: 17526 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1311.092810][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1311.102978][T17526] Call Trace: [ 1311.106341][T17526] [ 1311.109348][T17526] dump_stack_lvl+0x1c8/0x256 [ 1311.114216][T17526] dump_stack+0x1a/0x1c [ 1311.118541][T17526] kmsan_internal_chain_origin+0x78/0x120 [ 1311.124430][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1311.130850][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1311.136823][T17526] ? ____sys_recvmsg+0x5c1/0x810 [ 1311.141912][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1311.147244][T17526] ? get_compat_msghdr+0x8c/0x1c0 [ 1311.152401][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1311.158379][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1311.163721][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1311.169702][T17526] ? should_fail+0x3f/0x810 [ 1311.174362][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1311.179625][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1311.186032][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1311.191998][T17526] __msan_chain_origin+0xbd/0x140 [ 1311.197202][T17526] __get_compat_msghdr+0x514/0x750 [ 1311.202473][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1311.207458][T17526] ? ___sys_recvmsg+0xa9/0x890 [ 1311.212354][T17526] ? do_recvmmsg+0x682/0x1180 [ 1311.217174][T17526] ___sys_recvmsg+0x19d/0x890 [ 1311.221989][T17526] ? do_recvmmsg+0x6e4/0x1180 [ 1311.226816][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1311.232090][T17526] ? kmsan_internal_check_memory+0x94/0x530 [ 1311.238149][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1311.244126][T17526] do_recvmmsg+0x682/0x1180 [ 1311.248788][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1311.255203][T17526] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.261784][T17526] __sys_recvmmsg+0x113/0x450 [ 1311.266620][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.273034][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1311.278291][T17526] ? exit_to_user_mode_prepare+0x119/0x220 [ 1311.284267][T17526] do_fast_syscall_32+0x33/0x70 [ 1311.289259][T17526] do_SYSENTER_32+0x1b/0x20 [ 1311.293905][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1311.300383][T17526] RIP: 0023:0xf7f30549 [ 1311.304551][T17526] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1311.324327][T17526] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1311.332941][T17526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1311.341039][T17526] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1311.349122][T17526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1311.357230][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.365314][T17526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1311.373429][T17526] [ 1311.381583][T17526] Uninit was stored to memory at: [ 1311.387273][T17526] __get_compat_msghdr+0x514/0x750 [ 1311.392617][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1311.397595][T17526] ___sys_recvmsg+0x19d/0x890 [ 1311.402513][T17526] do_recvmmsg+0x682/0x1180 [ 1311.407147][T17526] __sys_recvmmsg+0x113/0x450 [ 1311.412054][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.418441][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1311.423828][T17526] do_fast_syscall_32+0x33/0x70 [ 1311.428814][T17526] do_SYSENTER_32+0x1b/0x20 [ 1311.433528][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1311.440009][T17526] [ 1311.442524][T17526] Uninit was stored to memory at: [ 1311.447675][T17526] __get_compat_msghdr+0x514/0x750 [ 1311.453028][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1311.458014][T17526] ___sys_recvmsg+0x19d/0x890 [ 1311.462973][T17526] do_recvmmsg+0x682/0x1180 [ 1311.467609][T17526] __sys_recvmmsg+0x113/0x450 [ 1311.472525][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.478916][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1311.484382][T17526] do_fast_syscall_32+0x33/0x70 [ 1311.489379][T17526] do_SYSENTER_32+0x1b/0x20 [ 1311.494160][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1311.500624][T17526] [ 1311.503115][T17526] Uninit was stored to memory at: [ 1311.508311][T17526] __get_compat_msghdr+0x514/0x750 [ 1311.513691][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1311.518657][T17526] ___sys_recvmsg+0x19d/0x890 [ 1311.523593][T17526] do_recvmmsg+0x682/0x1180 [ 1311.528226][T17526] __sys_recvmmsg+0x113/0x450 [ 1311.533180][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.539571][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1311.544961][T17526] do_fast_syscall_32+0x33/0x70 [ 1311.549944][T17526] do_SYSENTER_32+0x1b/0x20 [ 1311.554690][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1311.561149][T17526] [ 1311.563648][T17526] Uninit was stored to memory at: [ 1311.568793][T17526] __get_compat_msghdr+0x514/0x750 [ 1311.574132][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1311.579112][T17526] ___sys_recvmsg+0x19d/0x890 [ 1311.584020][T17526] do_recvmmsg+0x682/0x1180 [ 1311.588646][T17526] __sys_recvmmsg+0x113/0x450 [ 1311.593568][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.599943][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1311.605257][T17526] do_fast_syscall_32+0x33/0x70 [ 1311.610244][T17526] do_SYSENTER_32+0x1b/0x20 [ 1311.615022][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1311.621504][T17526] [ 1311.624038][T17526] Uninit was stored to memory at: [ 1311.629182][T17526] __get_compat_msghdr+0x514/0x750 [ 1311.634522][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1311.639488][T17526] ___sys_recvmsg+0x19d/0x890 [ 1311.644425][T17526] do_recvmmsg+0x682/0x1180 [ 1311.649060][T17526] __sys_recvmmsg+0x113/0x450 [ 1311.654007][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.660398][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1311.665836][T17526] do_fast_syscall_32+0x33/0x70 [ 1311.670821][T17526] do_SYSENTER_32+0x1b/0x20 [ 1311.675573][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1311.682178][T17526] [ 1311.684566][T17526] Uninit was stored to memory at: [ 1311.689708][T17526] __get_compat_msghdr+0x514/0x750 [ 1311.695051][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1311.700029][T17526] ___sys_recvmsg+0x19d/0x890 [ 1311.704981][T17526] do_recvmmsg+0x682/0x1180 [ 1311.709610][T17526] __sys_recvmmsg+0x113/0x450 [ 1311.714516][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.720890][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1311.726493][T17526] do_fast_syscall_32+0x33/0x70 [ 1311.731480][T17526] do_SYSENTER_32+0x1b/0x20 [ 1311.736253][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1311.742810][T17526] [ 1311.745199][T17526] Uninit was stored to memory at: [ 1311.750336][T17526] __get_compat_msghdr+0x514/0x750 [ 1311.755696][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1311.760662][T17526] ___sys_recvmsg+0x19d/0x890 [ 1311.765540][T17526] do_recvmmsg+0x682/0x1180 [ 1311.770179][T17526] __sys_recvmmsg+0x113/0x450 [ 1311.775104][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1311.781501][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1311.786907][T17526] do_fast_syscall_32+0x33/0x70 [ 1311.791940][T17526] do_SYSENTER_32+0x1b/0x20 [ 1311.796517][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1311.803083][T17526] [ 1311.805473][T17526] Local variable msg_sys created at: [ 1311.810833][T17526] do_recvmmsg+0x5c/0x1180 [ 1311.815490][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.040047][T17526] not chained 820000 origins [ 1312.044835][T17526] CPU: 1 PID: 17526 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1312.055131][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1312.065293][T17526] Call Trace: [ 1312.068635][T17526] [ 1312.071604][T17526] dump_stack_lvl+0x1c8/0x256 [ 1312.076447][T17526] dump_stack+0x1a/0x1c [ 1312.080718][T17526] kmsan_internal_chain_origin+0x78/0x120 [ 1312.086541][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1312.092902][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1312.098871][T17526] ? ____sys_recvmsg+0x5c1/0x810 [ 1312.103941][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1312.109272][T17526] ? get_compat_msghdr+0x8c/0x1c0 [ 1312.114458][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1312.120406][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1312.125682][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1312.131581][T17526] ? should_fail+0x3f/0x810 [ 1312.136193][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1312.141438][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1312.147795][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1312.153732][T17526] __msan_chain_origin+0xbd/0x140 [ 1312.158918][T17526] __get_compat_msghdr+0x514/0x750 [ 1312.164198][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1312.169168][T17526] ? ___sys_recvmsg+0xa9/0x890 [ 1312.174026][T17526] ? do_recvmmsg+0x682/0x1180 [ 1312.178844][T17526] ___sys_recvmsg+0x19d/0x890 [ 1312.183643][T17526] ? do_recvmmsg+0x6e4/0x1180 [ 1312.188473][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1312.193698][T17526] ? kmsan_internal_check_memory+0x94/0x530 [ 1312.199732][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1312.205652][T17526] do_recvmmsg+0x682/0x1180 [ 1312.210310][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1312.216720][T17526] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.223302][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.228107][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.234442][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1312.239632][T17526] ? exit_to_user_mode_prepare+0x119/0x220 [ 1312.245543][T17526] do_fast_syscall_32+0x33/0x70 [ 1312.250517][T17526] do_SYSENTER_32+0x1b/0x20 [ 1312.255091][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1312.261503][T17526] RIP: 0023:0xf7f30549 [ 1312.265641][T17526] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1312.285389][T17526] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1312.293899][T17526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1312.301988][T17526] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1312.310051][T17526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1312.318100][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.326161][T17526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1312.334243][T17526] [ 1312.339688][T17526] Uninit was stored to memory at: [ 1312.345144][T17526] __get_compat_msghdr+0x514/0x750 [ 1312.350390][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1312.355455][T17526] ___sys_recvmsg+0x19d/0x890 [ 1312.360266][T17526] do_recvmmsg+0x682/0x1180 [ 1312.364988][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.369869][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.376399][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1312.381654][T17526] do_fast_syscall_32+0x33/0x70 [ 1312.386775][T17526] do_SYSENTER_32+0x1b/0x20 [ 1312.391394][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1312.397966][T17526] [ 1312.400341][T17526] Uninit was stored to memory at: [ 1312.405619][T17526] __get_compat_msghdr+0x514/0x750 [ 1312.410845][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1312.415921][T17526] ___sys_recvmsg+0x19d/0x890 [ 1312.420728][T17526] do_recvmmsg+0x682/0x1180 [ 1312.425482][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.430283][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.436754][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1312.442081][T17526] do_fast_syscall_32+0x33/0x70 [ 1312.447050][T17526] do_SYSENTER_32+0x1b/0x20 [ 1312.451660][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1312.458251][T17526] [ 1312.460603][T17526] Uninit was stored to memory at: [ 1312.465890][T17526] __get_compat_msghdr+0x514/0x750 [ 1312.471114][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1312.476190][T17526] ___sys_recvmsg+0x19d/0x890 [ 1312.481007][T17526] do_recvmmsg+0x682/0x1180 [ 1312.485735][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.490547][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.497030][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1312.502367][T17526] do_fast_syscall_32+0x33/0x70 [ 1312.507341][T17526] do_SYSENTER_32+0x1b/0x20 [ 1312.512043][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1312.518526][T17526] [ 1312.520911][T17526] Uninit was stored to memory at: [ 1312.526217][T17526] __get_compat_msghdr+0x514/0x750 [ 1312.531441][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1312.536511][T17526] ___sys_recvmsg+0x19d/0x890 [ 1312.541321][T17526] do_recvmmsg+0x682/0x1180 [ 1312.546013][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.550805][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.557234][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1312.562561][T17526] do_fast_syscall_32+0x33/0x70 [ 1312.567526][T17526] do_SYSENTER_32+0x1b/0x20 [ 1312.572272][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1312.578738][T17526] [ 1312.581112][T17526] Uninit was stored to memory at: [ 1312.586400][T17526] __get_compat_msghdr+0x514/0x750 [ 1312.591624][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1312.596719][T17526] ___sys_recvmsg+0x19d/0x890 [ 1312.601527][T17526] do_recvmmsg+0x682/0x1180 [ 1312.606277][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.611178][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.617666][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1312.622987][T17526] do_fast_syscall_32+0x33/0x70 [ 1312.627969][T17526] do_SYSENTER_32+0x1b/0x20 [ 1312.632722][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1312.639182][T17526] [ 1312.641553][T17526] Uninit was stored to memory at: [ 1312.646824][T17526] __get_compat_msghdr+0x514/0x750 [ 1312.652138][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1312.657099][T17526] ___sys_recvmsg+0x19d/0x890 [ 1312.662085][T17526] do_recvmmsg+0x682/0x1180 [ 1312.666722][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.671513][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.677945][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1312.683268][T17526] do_fast_syscall_32+0x33/0x70 [ 1312.688243][T17526] do_SYSENTER_32+0x1b/0x20 [ 1312.692952][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1312.699428][T17526] [ 1312.701906][T17526] Uninit was stored to memory at: [ 1312.707093][T17526] __get_compat_msghdr+0x514/0x750 [ 1312.712462][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1312.717446][T17526] ___sys_recvmsg+0x19d/0x890 [ 1312.722373][T17526] do_recvmmsg+0x682/0x1180 [ 1312.727015][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.731890][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1312.738261][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1312.743568][T17526] do_fast_syscall_32+0x33/0x70 [ 1312.748554][T17526] do_SYSENTER_32+0x1b/0x20 [ 1312.753336][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1312.759818][T17526] [ 1312.762311][T17526] Local variable msg_sys created at: [ 1312.767708][T17526] do_recvmmsg+0x5c/0x1180 [ 1312.772389][T17526] __sys_recvmmsg+0x113/0x450 [ 1312.984383][T17526] not chained 830000 origins [ 1312.989067][T17526] CPU: 0 PID: 17526 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1312.999313][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1313.009460][T17526] Call Trace: [ 1313.012775][T17526] [ 1313.015758][T17526] dump_stack_lvl+0x1c8/0x256 [ 1313.020544][T17526] dump_stack+0x1a/0x1c [ 1313.024808][T17526] kmsan_internal_chain_origin+0x78/0x120 [ 1313.030645][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1313.037055][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1313.043020][T17526] ? ____sys_recvmsg+0x5c1/0x810 [ 1313.048091][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1313.053402][T17526] ? get_compat_msghdr+0x8c/0x1c0 [ 1313.058515][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1313.064404][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1313.069670][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1313.075562][T17526] ? should_fail+0x3f/0x810 [ 1313.080143][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1313.085351][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1313.091753][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1313.097646][T17526] __msan_chain_origin+0xbd/0x140 [ 1313.102745][T17526] __get_compat_msghdr+0x514/0x750 [ 1313.107939][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1313.112853][T17526] ? ___sys_recvmsg+0xa9/0x890 [ 1313.117686][T17526] ? do_recvmmsg+0x682/0x1180 [ 1313.122429][T17526] ___sys_recvmsg+0x19d/0x890 [ 1313.127170][T17526] ? do_recvmmsg+0x6e4/0x1180 [ 1313.131949][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1313.137207][T17526] ? kmsan_internal_check_memory+0x94/0x530 [ 1313.143239][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1313.149136][T17526] do_recvmmsg+0x682/0x1180 [ 1313.153723][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1313.160052][T17526] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.166549][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.171303][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.177630][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1313.182835][T17526] ? exit_to_user_mode_prepare+0x119/0x220 [ 1313.188794][T17526] do_fast_syscall_32+0x33/0x70 [ 1313.193786][T17526] do_SYSENTER_32+0x1b/0x20 [ 1313.198432][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1313.204895][T17526] RIP: 0023:0xf7f30549 [ 1313.209013][T17526] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1313.228722][T17526] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1313.237226][T17526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1313.245300][T17526] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1313.253327][T17526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1313.261349][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.269392][T17526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1313.277446][T17526] [ 1313.285744][T17526] Uninit was stored to memory at: [ 1313.290961][T17526] __get_compat_msghdr+0x514/0x750 [ 1313.296727][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1313.301792][T17526] ___sys_recvmsg+0x19d/0x890 [ 1313.306614][T17526] do_recvmmsg+0x682/0x1180 [ 1313.311253][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.316168][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.322630][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1313.327903][T17526] do_fast_syscall_32+0x33/0x70 [ 1313.332991][T17526] do_SYSENTER_32+0x1b/0x20 [ 1313.337664][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1313.344299][T17526] [ 1313.346687][T17526] Uninit was stored to memory at: [ 1313.351985][T17526] __get_compat_msghdr+0x514/0x750 [ 1313.357210][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1313.362260][T17526] ___sys_recvmsg+0x19d/0x890 [ 1313.367057][T17526] do_recvmmsg+0x682/0x1180 [ 1313.371626][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.376553][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.383053][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1313.388302][T17526] do_fast_syscall_32+0x33/0x70 [ 1313.393353][T17526] do_SYSENTER_32+0x1b/0x20 [ 1313.398035][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1313.404630][T17526] [ 1313.407023][T17526] Uninit was stored to memory at: [ 1313.412303][T17526] __get_compat_msghdr+0x514/0x750 [ 1313.417536][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1313.422615][T17526] ___sys_recvmsg+0x19d/0x890 [ 1313.427425][T17526] do_recvmmsg+0x682/0x1180 [ 1313.432142][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.436951][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.443458][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1313.448691][T17526] do_fast_syscall_32+0x33/0x70 [ 1313.453780][T17526] do_SYSENTER_32+0x1b/0x20 [ 1313.458408][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1313.464983][T17526] [ 1313.467372][T17526] Uninit was stored to memory at: [ 1313.472652][T17526] __get_compat_msghdr+0x514/0x750 [ 1313.477874][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1313.482961][T17526] ___sys_recvmsg+0x19d/0x890 [ 1313.487753][T17526] do_recvmmsg+0x682/0x1180 [ 1313.492510][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.497301][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.503765][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1313.509010][T17526] do_fast_syscall_32+0x33/0x70 [ 1313.514091][T17526] do_SYSENTER_32+0x1b/0x20 [ 1313.518721][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1313.525298][T17526] [ 1313.527672][T17526] Uninit was stored to memory at: [ 1313.532964][T17526] __get_compat_msghdr+0x514/0x750 [ 1313.538191][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1313.543259][T17526] ___sys_recvmsg+0x19d/0x890 [ 1313.548066][T17526] do_recvmmsg+0x682/0x1180 [ 1313.552785][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.557594][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.564148][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1313.569384][T17526] do_fast_syscall_32+0x33/0x70 [ 1313.574476][T17526] do_SYSENTER_32+0x1b/0x20 [ 1313.579092][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1313.585672][T17526] [ 1313.588048][T17526] Uninit was stored to memory at: [ 1313.593334][T17526] __get_compat_msghdr+0x514/0x750 [ 1313.598564][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1313.603643][T17526] ___sys_recvmsg+0x19d/0x890 [ 1313.608430][T17526] do_recvmmsg+0x682/0x1180 [ 1313.613164][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.617954][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.624407][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1313.629637][T17526] do_fast_syscall_32+0x33/0x70 [ 1313.634721][T17526] do_SYSENTER_32+0x1b/0x20 [ 1313.639332][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1313.645903][T17526] [ 1313.648293][T17526] Uninit was stored to memory at: [ 1313.653611][T17526] __get_compat_msghdr+0x514/0x750 [ 1313.658832][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1313.663990][T17526] ___sys_recvmsg+0x19d/0x890 [ 1313.668792][T17526] do_recvmmsg+0x682/0x1180 [ 1313.673502][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.678310][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1313.684823][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1313.690057][T17526] do_fast_syscall_32+0x33/0x70 [ 1313.695144][T17526] do_SYSENTER_32+0x1b/0x20 [ 1313.699759][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1313.706298][T17526] [ 1313.708673][T17526] Local variable msg_sys created at: [ 1313.714111][T17526] do_recvmmsg+0x5c/0x1180 [ 1313.718637][T17526] __sys_recvmmsg+0x113/0x450 [ 1313.919494][T17526] not chained 840000 origins [ 1313.927923][T17526] CPU: 0 PID: 17526 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1313.938153][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1313.948272][T17526] Call Trace: [ 1313.951606][T17526] [ 1313.954597][T17526] dump_stack_lvl+0x1c8/0x256 [ 1313.959410][T17526] dump_stack+0x1a/0x1c [ 1313.963656][T17526] kmsan_internal_chain_origin+0x78/0x120 [ 1313.969467][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1313.975812][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1313.981736][T17526] ? ____sys_recvmsg+0x5c1/0x810 [ 1313.986808][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1313.992143][T17526] ? get_compat_msghdr+0x8c/0x1c0 [ 1313.997293][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1314.003194][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1314.008463][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1314.014372][T17526] ? should_fail+0x3f/0x810 [ 1314.018960][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1314.024151][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1314.030496][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1314.036414][T17526] __msan_chain_origin+0xbd/0x140 [ 1314.041586][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.046849][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.051827][T17526] ? ___sys_recvmsg+0xa9/0x890 [ 1314.056724][T17526] ? do_recvmmsg+0x682/0x1180 [ 1314.061528][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.066289][T17526] ? do_recvmmsg+0x6e4/0x1180 [ 1314.071060][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1314.076255][T17526] ? kmsan_internal_check_memory+0x94/0x530 [ 1314.082260][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1314.088233][T17526] do_recvmmsg+0x682/0x1180 [ 1314.092849][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1314.099179][T17526] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.105679][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.110478][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.116826][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1314.122011][T17526] ? exit_to_user_mode_prepare+0x119/0x220 [ 1314.127894][T17526] do_fast_syscall_32+0x33/0x70 [ 1314.132836][T17526] do_SYSENTER_32+0x1b/0x20 [ 1314.137469][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1314.143925][T17526] RIP: 0023:0xf7f30549 [ 1314.148042][T17526] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1314.167758][T17526] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1314.176242][T17526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1314.184290][T17526] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1314.192395][T17526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1314.200471][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.208533][T17526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1314.216571][T17526] [ 1314.219758][T17526] Uninit was stored to memory at: [ 1314.225055][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.230297][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.235416][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.240224][T17526] do_recvmmsg+0x682/0x1180 [ 1314.244953][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.249740][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.256190][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1314.261425][T17526] do_fast_syscall_32+0x33/0x70 [ 1314.266528][T17526] do_SYSENTER_32+0x1b/0x20 [ 1314.271143][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1314.277688][T17526] [ 1314.280066][T17526] Uninit was stored to memory at: [ 1314.285385][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.290613][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.295658][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.300446][T17526] do_recvmmsg+0x682/0x1180 [ 1314.305185][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.309991][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.316530][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1314.321851][T17526] do_fast_syscall_32+0x33/0x70 [ 1314.326834][T17526] do_SYSENTER_32+0x1b/0x20 [ 1314.331461][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1314.338090][T17526] [ 1314.340493][T17526] Uninit was stored to memory at: [ 1314.345809][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.351055][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.356099][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.360905][T17526] do_recvmmsg+0x682/0x1180 [ 1314.365683][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.370475][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.376962][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1314.382292][T17526] do_fast_syscall_32+0x33/0x70 [ 1314.387281][T17526] do_SYSENTER_32+0x1b/0x20 [ 1314.392011][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1314.398489][T17526] [ 1314.400872][T17526] Uninit was stored to memory at: [ 1314.406161][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.411404][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.416483][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.421284][T17526] do_recvmmsg+0x682/0x1180 [ 1314.426032][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.430833][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.437318][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1314.442653][T17526] do_fast_syscall_32+0x33/0x70 [ 1314.447632][T17526] do_SYSENTER_32+0x1b/0x20 [ 1314.452412][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1314.458925][T17526] [ 1314.461330][T17526] Uninit was stored to memory at: [ 1314.466669][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.471996][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.476978][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.481930][T17526] do_recvmmsg+0x682/0x1180 [ 1314.486561][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.491366][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.497914][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1314.503241][T17526] do_fast_syscall_32+0x33/0x70 [ 1314.508224][T17526] do_SYSENTER_32+0x1b/0x20 [ 1314.513027][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1314.519506][T17526] [ 1314.522054][T17526] Uninit was stored to memory at: [ 1314.527240][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.532629][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.537591][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.542500][T17526] do_recvmmsg+0x682/0x1180 [ 1314.547128][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.552023][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.558410][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1314.563719][T17526] do_fast_syscall_32+0x33/0x70 [ 1314.568688][T17526] do_SYSENTER_32+0x1b/0x20 [ 1314.573428][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1314.579887][T17526] [ 1314.582402][T17526] Uninit was stored to memory at: [ 1314.587588][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.592933][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.597894][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.602764][T17526] do_recvmmsg+0x682/0x1180 [ 1314.607380][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.612283][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1314.618682][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1314.624036][T17526] do_fast_syscall_32+0x33/0x70 [ 1314.629009][T17526] do_SYSENTER_32+0x1b/0x20 [ 1314.633691][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1314.640147][T17526] [ 1314.642667][T17526] Local variable msg_sys created at: [ 1314.648026][T17526] do_recvmmsg+0x5c/0x1180 [ 1314.652670][T17526] __sys_recvmmsg+0x113/0x450 [ 1314.847223][T17526] not chained 850000 origins [ 1314.851947][T17526] CPU: 0 PID: 17526 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1314.862192][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1314.872332][T17526] Call Trace: [ 1314.875661][T17526] [ 1314.878628][T17526] dump_stack_lvl+0x1c8/0x256 [ 1314.883413][T17526] dump_stack+0x1a/0x1c [ 1314.887674][T17526] kmsan_internal_chain_origin+0x78/0x120 [ 1314.893484][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1314.899813][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1314.905701][T17526] ? ____sys_recvmsg+0x5c1/0x810 [ 1314.910709][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1314.915996][T17526] ? get_compat_msghdr+0x8c/0x1c0 [ 1314.921153][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1314.927116][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1314.932428][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1314.938324][T17526] ? should_fail+0x3f/0x810 [ 1314.942923][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1314.948110][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1314.954434][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1314.960336][T17526] __msan_chain_origin+0xbd/0x140 [ 1314.965464][T17526] __get_compat_msghdr+0x514/0x750 [ 1314.970704][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1314.975642][T17526] ? ___sys_recvmsg+0xa9/0x890 [ 1314.980519][T17526] ? do_recvmmsg+0x682/0x1180 [ 1314.985268][T17526] ___sys_recvmsg+0x19d/0x890 [ 1314.990010][T17526] ? do_recvmmsg+0x6e4/0x1180 [ 1314.994767][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1314.999955][T17526] ? kmsan_internal_check_memory+0x94/0x530 [ 1315.005936][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1315.011847][T17526] do_recvmmsg+0x682/0x1180 [ 1315.016501][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1315.022885][T17526] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.029387][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.034140][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.040469][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.045651][T17526] ? exit_to_user_mode_prepare+0x119/0x220 [ 1315.051536][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.056456][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.061023][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.067446][T17526] RIP: 0023:0xf7f30549 [ 1315.071611][T17526] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1315.091443][T17526] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1315.099927][T17526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1315.107954][T17526] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1315.115994][T17526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1315.124051][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1315.132075][T17526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1315.140113][T17526] [ 1315.148366][T17526] Uninit was stored to memory at: [ 1315.154059][T17526] __get_compat_msghdr+0x514/0x750 [ 1315.159303][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1315.164402][T17526] ___sys_recvmsg+0x19d/0x890 [ 1315.169208][T17526] do_recvmmsg+0x682/0x1180 [ 1315.173936][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.178746][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.185283][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.190541][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.195623][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.200256][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.206885][T17526] [ 1315.209274][T17526] Uninit was stored to memory at: [ 1315.214574][T17526] __get_compat_msghdr+0x514/0x750 [ 1315.219800][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1315.224843][T17526] ___sys_recvmsg+0x19d/0x890 [ 1315.229630][T17526] do_recvmmsg+0x682/0x1180 [ 1315.234362][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.239156][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.245603][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.250858][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.255906][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.260522][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.267062][T17526] [ 1315.269436][T17526] Uninit was stored to memory at: [ 1315.274707][T17526] __get_compat_msghdr+0x514/0x750 [ 1315.279933][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1315.285006][T17526] ___sys_recvmsg+0x19d/0x890 [ 1315.289812][T17526] do_recvmmsg+0x682/0x1180 [ 1315.294562][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.299360][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.305859][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.311110][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.316196][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.320825][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.327437][T17526] [ 1315.329813][T17526] Uninit was stored to memory at: [ 1315.335086][T17526] __get_compat_msghdr+0x514/0x750 [ 1315.340308][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1315.345403][T17526] ___sys_recvmsg+0x19d/0x890 [ 1315.350195][T17526] do_recvmmsg+0x682/0x1180 [ 1315.354906][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.359693][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.366143][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.371376][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.376484][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.381141][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.387762][T17526] [ 1315.390152][T17526] Uninit was stored to memory at: [ 1315.395449][T17526] __get_compat_msghdr+0x514/0x750 [ 1315.400673][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1315.405759][T17526] ___sys_recvmsg+0x19d/0x890 [ 1315.410548][T17526] do_recvmmsg+0x682/0x1180 [ 1315.415283][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.420079][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.426577][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.431900][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.436879][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.441514][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.448052][T17526] [ 1315.450429][T17526] Uninit was stored to memory at: [ 1315.455699][T17526] __get_compat_msghdr+0x514/0x750 [ 1315.460921][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1315.466005][T17526] ___sys_recvmsg+0x19d/0x890 [ 1315.470793][T17526] do_recvmmsg+0x682/0x1180 [ 1315.475490][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.480278][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.486738][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.492064][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.497030][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.501594][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.508148][T17526] [ 1315.510500][T17526] Uninit was stored to memory at: [ 1315.515778][T17526] __get_compat_msghdr+0x514/0x750 [ 1315.520997][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1315.526041][T17526] ___sys_recvmsg+0x19d/0x890 [ 1315.530885][T17526] do_recvmmsg+0x682/0x1180 [ 1315.535621][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.540433][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.546968][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.552289][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.557258][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.561980][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.568437][T17526] [ 1315.570787][T17526] Local variable msg_sys created at: [ 1315.576224][T17526] do_recvmmsg+0x5c/0x1180 [ 1315.580752][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.777007][T17526] not chained 860000 origins [ 1315.781668][T17526] CPU: 0 PID: 17526 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1315.791895][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1315.802006][T17526] Call Trace: [ 1315.805342][T17526] [ 1315.808311][T17526] dump_stack_lvl+0x1c8/0x256 [ 1315.813116][T17526] dump_stack+0x1a/0x1c [ 1315.817355][T17526] kmsan_internal_chain_origin+0x78/0x120 [ 1315.823164][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1315.829493][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1315.835383][T17526] ? ____sys_recvmsg+0x5c1/0x810 [ 1315.840390][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1315.845657][T17526] ? get_compat_msghdr+0x8c/0x1c0 [ 1315.850752][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1315.856642][T17526] ? __get_compat_msghdr+0x5b/0x750 [ 1315.861927][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1315.867821][T17526] ? should_fail+0x3f/0x810 [ 1315.872407][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1315.877595][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1315.883924][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1315.889811][T17526] __msan_chain_origin+0xbd/0x140 [ 1315.894932][T17526] __get_compat_msghdr+0x514/0x750 [ 1315.900204][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1315.905187][T17526] ? ___sys_recvmsg+0xa9/0x890 [ 1315.910080][T17526] ? do_recvmmsg+0x682/0x1180 [ 1315.914870][T17526] ___sys_recvmsg+0x19d/0x890 [ 1315.919614][T17526] ? do_recvmmsg+0x6e4/0x1180 [ 1315.924366][T17526] ? __stack_depot_save+0x21/0x4b0 [ 1315.929570][T17526] ? kmsan_internal_check_memory+0x94/0x530 [ 1315.935548][T17526] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1315.941459][T17526] do_recvmmsg+0x682/0x1180 [ 1315.946046][T17526] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1315.952376][T17526] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.958878][T17526] __sys_recvmmsg+0x113/0x450 [ 1315.963632][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1315.969960][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1315.975143][T17526] ? exit_to_user_mode_prepare+0x119/0x220 [ 1315.981027][T17526] do_fast_syscall_32+0x33/0x70 [ 1315.985945][T17526] do_SYSENTER_32+0x1b/0x20 [ 1315.990514][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1315.996922][T17526] RIP: 0023:0xf7f30549 [ 1316.001062][T17526] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1316.020803][T17526] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1316.029284][T17526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1316.037313][T17526] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1316.045359][T17526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1316.053447][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.061502][T17526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1316.069542][T17526] [ 1316.082571][T17526] Uninit was stored to memory at: [ 1316.087780][T17526] __get_compat_msghdr+0x514/0x750 [ 1316.094681][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1316.099666][T17526] ___sys_recvmsg+0x19d/0x890 [ 1316.104579][T17526] do_recvmmsg+0x682/0x1180 [ 1316.109209][T17526] __sys_recvmmsg+0x113/0x450 [ 1316.114114][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1316.120493][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1316.125803][T17526] do_fast_syscall_32+0x33/0x70 [ 1316.130768][T17526] do_SYSENTER_32+0x1b/0x20 [ 1316.135506][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1316.142020][T17526] [ 1316.144371][T17526] Uninit was stored to memory at: [ 1316.149489][T17526] __get_compat_msghdr+0x514/0x750 [ 1316.154834][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1316.159793][T17526] ___sys_recvmsg+0x19d/0x890 [ 1316.164694][T17526] do_recvmmsg+0x682/0x1180 [ 1316.169321][T17526] __sys_recvmmsg+0x113/0x450 [ 1316.174225][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1316.180622][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1316.185974][T17526] do_fast_syscall_32+0x33/0x70 [ 1316.190938][T17526] do_SYSENTER_32+0x1b/0x20 [ 1316.195639][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1316.202193][T17526] [ 1316.204576][T17526] Uninit was stored to memory at: [ 1316.209760][T17526] __get_compat_msghdr+0x514/0x750 [ 1316.215106][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1316.220068][T17526] ___sys_recvmsg+0x19d/0x890 [ 1316.224938][T17526] do_recvmmsg+0x682/0x1180 [ 1316.229546][T17526] __sys_recvmmsg+0x113/0x450 [ 1316.234460][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1316.240833][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1316.246141][T17526] do_fast_syscall_32+0x33/0x70 [ 1316.251105][T17526] do_SYSENTER_32+0x1b/0x20 [ 1316.255838][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1316.262403][T17526] [ 1316.264790][T17526] Uninit was stored to memory at: [ 1316.269976][T17526] __get_compat_msghdr+0x514/0x750 [ 1316.275403][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1316.280410][T17526] ___sys_recvmsg+0x19d/0x890 [ 1316.285329][T17526] do_recvmmsg+0x682/0x1180 [ 1316.289967][T17526] __sys_recvmmsg+0x113/0x450 [ 1316.294877][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1316.301266][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1316.306655][T17526] do_fast_syscall_32+0x33/0x70 [ 1316.311622][T17526] do_SYSENTER_32+0x1b/0x20 [ 1316.316359][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1316.322951][T17526] [ 1316.325324][T17526] Uninit was stored to memory at: [ 1316.330445][T17526] __get_compat_msghdr+0x514/0x750 [ 1316.335747][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1316.340710][T17526] ___sys_recvmsg+0x19d/0x890 [ 1316.345640][T17526] do_recvmmsg+0x682/0x1180 [ 1316.350254][T17526] __sys_recvmmsg+0x113/0x450 [ 1316.355126][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1316.361500][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1316.366851][T17526] do_fast_syscall_32+0x33/0x70 [ 1316.371915][T17526] do_SYSENTER_32+0x1b/0x20 [ 1316.376554][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1316.383135][T17526] [ 1316.385528][T17526] Uninit was stored to memory at: [ 1316.390664][T17526] __get_compat_msghdr+0x514/0x750 [ 1316.395968][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1316.400929][T17526] ___sys_recvmsg+0x19d/0x890 [ 1316.405841][T17526] do_recvmmsg+0x682/0x1180 [ 1316.410471][T17526] __sys_recvmmsg+0x113/0x450 [ 1316.415383][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1316.421890][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1316.427147][T17526] do_fast_syscall_32+0x33/0x70 [ 1316.432277][T17526] do_SYSENTER_32+0x1b/0x20 [ 1316.436896][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1316.443487][T17526] [ 1316.445876][T17526] Uninit was stored to memory at: [ 1316.451033][T17526] __get_compat_msghdr+0x514/0x750 [ 1316.456341][T17526] get_compat_msghdr+0x8c/0x1c0 [ 1316.461371][T17526] ___sys_recvmsg+0x19d/0x890 [ 1316.466313][T17526] do_recvmmsg+0x682/0x1180 [ 1316.470937][T17526] __sys_recvmmsg+0x113/0x450 [ 1316.475829][T17526] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1316.482298][T17526] __do_fast_syscall_32+0xa2/0x100 [ 1316.487536][T17526] do_fast_syscall_32+0x33/0x70 [ 1316.492611][T17526] do_SYSENTER_32+0x1b/0x20 [ 1316.497223][T17526] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1316.503757][T17526] [ 1316.506147][T17526] Local variable msg_sys created at: [ 1316.511483][T17526] do_recvmmsg+0x5c/0x1180 [ 1316.516177][T17526] __sys_recvmmsg+0x113/0x450 09:39:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010000000000000000000a0084"], 0x30}}, 0x0) 09:39:02 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 09:39:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:39:02 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x201) write$proc_mixer(r0, &(0x7f0000000040)=[{'SPEAKER', @val={' \'', 'Master Playback Volume'}}], 0x36) 09:39:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:02 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x201) write$proc_mixer(r0, &(0x7f0000000040)=[{'SPEAKER', @val={' \'', 'Master Playback Volume'}}], 0x36) [ 1316.856898][T17552] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:39:02 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "0e44433a2104646f25401cc386a94e875c678ed21999baf4ac6afdcd496fd06286b273a295396fa5e3dadccce6e17f12d2e3bcc026a36e71cebcc897224ffa41"}, 0x48, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r0, 0x0, 0x0) 09:39:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x34}}, 0x0) 09:39:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1317.206927][T17567] loop4: detected capacity change from 0 to 6 [ 1317.306141][T17567] Dev loop4: unable to read RDB block 6 [ 1317.312277][T17567] loop4: unable to read partition table 09:39:03 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x620100, 0x0) [ 1317.384091][T17567] loop4: partition table beyond EOD, truncated 09:39:03 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x201) write$proc_mixer(r0, &(0x7f0000000040)=[{'SPEAKER', @val={' \'', 'Master Playback Volume'}}], 0x36) 09:39:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1317.464092][T17567] FAT-fs (loop4): Directory bread(block 6) failed 09:39:03 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000037c0), 0x1, 0x2041) write$FUSE_POLL(r0, &(0x7f0000003800)={0x18}, 0x18) write$tcp_congestion(r0, &(0x7f0000000000)='cubic\x00', 0x6) 09:39:03 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) [ 1318.394725][T17566] not chained 870000 origins [ 1318.399529][T17566] CPU: 0 PID: 17566 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1318.409821][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1318.419972][T17566] Call Trace: [ 1318.423318][T17566] [ 1318.426319][T17566] dump_stack_lvl+0x1c8/0x256 [ 1318.431170][T17566] dump_stack+0x1a/0x1c [ 1318.435470][T17566] kmsan_internal_chain_origin+0x78/0x120 [ 1318.441335][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1318.447732][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1318.453681][T17566] ? ____sys_recvmsg+0x5c1/0x810 [ 1318.458742][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1318.464060][T17566] ? get_compat_msghdr+0x8c/0x1c0 [ 1318.469205][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1318.475154][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1318.480474][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1318.486431][T17566] ? should_fail+0x3f/0x810 [ 1318.491083][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1318.496386][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1318.502791][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1318.508741][T17566] __msan_chain_origin+0xbd/0x140 [ 1318.513899][T17566] __get_compat_msghdr+0x514/0x750 [ 1318.519156][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1318.524125][T17566] ? ___sys_recvmsg+0xa9/0x890 [ 1318.529010][T17566] ? do_recvmmsg+0x682/0x1180 [ 1318.533807][T17566] ___sys_recvmsg+0x19d/0x890 [ 1318.538608][T17566] ? do_recvmmsg+0x6e4/0x1180 [ 1318.543422][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1318.548669][T17566] ? kmsan_internal_check_memory+0x94/0x530 [ 1318.554706][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1318.560661][T17566] do_recvmmsg+0x682/0x1180 [ 1318.565304][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1318.571699][T17566] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1318.578256][T17566] __sys_recvmmsg+0x113/0x450 [ 1318.583082][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1318.589475][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1318.594716][T17566] ? exit_to_user_mode_prepare+0x119/0x220 [ 1318.600655][T17566] do_fast_syscall_32+0x33/0x70 [ 1318.605626][T17566] do_SYSENTER_32+0x1b/0x20 [ 1318.610246][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1318.616715][T17566] RIP: 0023:0xf7f30549 [ 1318.620871][T17566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1318.640618][T17566] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1318.649150][T17566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1318.657221][T17566] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1318.665283][T17566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1318.673351][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1318.681425][T17566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1318.689511][T17566] [ 1318.698058][T17566] Uninit was stored to memory at: [ 1318.704129][T17566] __get_compat_msghdr+0x514/0x750 [ 1318.709370][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1318.714458][T17566] ___sys_recvmsg+0x19d/0x890 [ 1318.719261][T17566] do_recvmmsg+0x682/0x1180 [ 1318.723989][T17566] __sys_recvmmsg+0x113/0x450 [ 1318.728793][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1318.735278][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1318.740529][T17566] do_fast_syscall_32+0x33/0x70 [ 1318.745614][T17566] do_SYSENTER_32+0x1b/0x20 [ 1318.750246][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1318.756825][T17566] [ 1318.759215][T17566] Uninit was stored to memory at: [ 1318.764500][T17566] __get_compat_msghdr+0x514/0x750 [ 1318.769745][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1318.774827][T17566] ___sys_recvmsg+0x19d/0x890 [ 1318.779637][T17566] do_recvmmsg+0x682/0x1180 [ 1318.784366][T17566] __sys_recvmmsg+0x113/0x450 [ 1318.789179][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1318.795663][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1318.800914][T17566] do_fast_syscall_32+0x33/0x70 [ 1318.805997][T17566] do_SYSENTER_32+0x1b/0x20 [ 1318.810630][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1318.817206][T17566] [ 1318.819600][T17566] Uninit was stored to memory at: [ 1318.824889][T17566] __get_compat_msghdr+0x514/0x750 [ 1318.830129][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1318.835252][T17566] ___sys_recvmsg+0x19d/0x890 [ 1318.840060][T17566] do_recvmmsg+0x682/0x1180 [ 1318.844787][T17566] __sys_recvmmsg+0x113/0x450 [ 1318.849591][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1318.856079][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1318.861332][T17566] do_fast_syscall_32+0x33/0x70 [ 1318.866467][T17566] do_SYSENTER_32+0x1b/0x20 [ 1318.871101][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1318.877722][T17566] [ 1318.880115][T17566] Uninit was stored to memory at: [ 1318.885454][T17566] __get_compat_msghdr+0x514/0x750 [ 1318.890704][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1318.895824][T17566] ___sys_recvmsg+0x19d/0x890 [ 1318.900636][T17566] do_recvmmsg+0x682/0x1180 [ 1318.905425][T17566] __sys_recvmmsg+0x113/0x450 [ 1318.910234][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1318.916777][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1318.922111][T17566] do_fast_syscall_32+0x33/0x70 [ 1318.927093][T17566] do_SYSENTER_32+0x1b/0x20 [ 1318.931879][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1318.938359][T17566] [ 1318.940768][T17566] Uninit was stored to memory at: [ 1318.946098][T17566] __get_compat_msghdr+0x514/0x750 [ 1318.951341][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1318.956481][T17566] ___sys_recvmsg+0x19d/0x890 [ 1318.961289][T17566] do_recvmmsg+0x682/0x1180 [ 1318.966078][T17566] __sys_recvmmsg+0x113/0x450 [ 1318.970886][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1318.977432][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1318.982766][T17566] do_fast_syscall_32+0x33/0x70 [ 1318.987750][T17566] do_SYSENTER_32+0x1b/0x20 [ 1318.992531][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1318.999031][T17566] [ 1319.001436][T17566] Uninit was stored to memory at: [ 1319.006771][T17566] __get_compat_msghdr+0x514/0x750 [ 1319.012099][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1319.017087][T17566] ___sys_recvmsg+0x19d/0x890 [ 1319.022036][T17566] do_recvmmsg+0x682/0x1180 [ 1319.026677][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.031499][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.038039][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1319.043370][T17566] do_fast_syscall_32+0x33/0x70 [ 1319.048359][T17566] do_SYSENTER_32+0x1b/0x20 [ 1319.053156][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.059640][T17566] [ 1319.062186][T17566] Uninit was stored to memory at: [ 1319.067370][T17566] __get_compat_msghdr+0x514/0x750 [ 1319.072747][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1319.077728][T17566] ___sys_recvmsg+0x19d/0x890 [ 1319.082632][T17566] do_recvmmsg+0x682/0x1180 [ 1319.087276][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.092188][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.098587][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1319.103936][T17566] do_fast_syscall_32+0x33/0x70 [ 1319.108929][T17566] do_SYSENTER_32+0x1b/0x20 [ 1319.113648][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.120136][T17566] [ 1319.122629][T17566] Local variable msg_sys created at: [ 1319.127987][T17566] do_recvmmsg+0x5c/0x1180 [ 1319.132682][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.157297][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1319.163976][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 1319.397653][T17566] not chained 880000 origins [ 1319.402491][T17566] CPU: 0 PID: 17566 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1319.412741][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1319.422888][T17566] Call Trace: [ 1319.426205][T17566] [ 1319.429191][T17566] dump_stack_lvl+0x1c8/0x256 [ 1319.434050][T17566] dump_stack+0x1a/0x1c [ 1319.438312][T17566] kmsan_internal_chain_origin+0x78/0x120 [ 1319.444133][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1319.450494][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1319.456489][T17566] ? ____sys_recvmsg+0x5c1/0x810 [ 1319.461547][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1319.466837][T17566] ? get_compat_msghdr+0x8c/0x1c0 [ 1319.471994][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1319.477954][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1319.483295][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1319.489254][T17566] ? should_fail+0x3f/0x810 [ 1319.493844][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1319.499046][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1319.505424][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1319.511369][T17566] __msan_chain_origin+0xbd/0x140 [ 1319.516502][T17566] __get_compat_msghdr+0x514/0x750 [ 1319.521769][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1319.526755][T17566] ? ___sys_recvmsg+0xa9/0x890 [ 1319.531590][T17566] ? do_recvmmsg+0x682/0x1180 [ 1319.536345][T17566] ___sys_recvmsg+0x19d/0x890 [ 1319.541095][T17566] ? do_recvmmsg+0x6e4/0x1180 [ 1319.545858][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1319.551050][T17566] ? kmsan_internal_check_memory+0x94/0x530 [ 1319.557083][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1319.563058][T17566] do_recvmmsg+0x682/0x1180 [ 1319.567714][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1319.574119][T17566] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.580665][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.585457][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.591843][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1319.597039][T17566] ? exit_to_user_mode_prepare+0x119/0x220 [ 1319.602932][T17566] do_fast_syscall_32+0x33/0x70 [ 1319.607857][T17566] do_SYSENTER_32+0x1b/0x20 [ 1319.612448][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.618925][T17566] RIP: 0023:0xf7f30549 [ 1319.623092][T17566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1319.642836][T17566] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1319.651319][T17566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1319.659354][T17566] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1319.667412][T17566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1319.675471][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.683499][T17566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1319.691542][T17566] [ 1319.699464][T17566] Uninit was stored to memory at: [ 1319.705149][T17566] __get_compat_msghdr+0x514/0x750 [ 1319.710477][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1319.715559][T17566] ___sys_recvmsg+0x19d/0x890 [ 1319.720365][T17566] do_recvmmsg+0x682/0x1180 [ 1319.725100][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.729888][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.736385][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1319.741737][T17566] do_fast_syscall_32+0x33/0x70 [ 1319.746713][T17566] do_SYSENTER_32+0x1b/0x20 [ 1319.751333][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.757889][T17566] [ 1319.760267][T17566] Uninit was stored to memory at: [ 1319.765572][T17566] __get_compat_msghdr+0x514/0x750 [ 1319.770796][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1319.775883][T17566] ___sys_recvmsg+0x19d/0x890 [ 1319.780692][T17566] do_recvmmsg+0x682/0x1180 [ 1319.785482][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.790309][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.796837][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1319.802162][T17566] do_fast_syscall_32+0x33/0x70 [ 1319.807125][T17566] do_SYSENTER_32+0x1b/0x20 [ 1319.811840][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.818297][T17566] [ 1319.820648][T17566] Uninit was stored to memory at: [ 1319.825915][T17566] __get_compat_msghdr+0x514/0x750 [ 1319.831139][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1319.836180][T17566] ___sys_recvmsg+0x19d/0x890 [ 1319.840976][T17566] do_recvmmsg+0x682/0x1180 [ 1319.845715][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.850505][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.856986][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1319.862309][T17566] do_fast_syscall_32+0x33/0x70 [ 1319.867279][T17566] do_SYSENTER_32+0x1b/0x20 [ 1319.872006][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.878476][T17566] [ 1319.880855][T17566] Uninit was stored to memory at: [ 1319.886146][T17566] __get_compat_msghdr+0x514/0x750 [ 1319.891393][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1319.896518][T17566] ___sys_recvmsg+0x19d/0x890 [ 1319.901308][T17566] do_recvmmsg+0x682/0x1180 [ 1319.906106][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.911000][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.917461][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1319.922879][T17566] do_fast_syscall_32+0x33/0x70 [ 1319.928021][T17566] do_SYSENTER_32+0x1b/0x20 [ 1319.932748][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.939213][T17566] [ 1319.941565][T17566] Uninit was stored to memory at: [ 1319.946857][T17566] __get_compat_msghdr+0x514/0x750 [ 1319.952174][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1319.957156][T17566] ___sys_recvmsg+0x19d/0x890 [ 1319.962091][T17566] do_recvmmsg+0x682/0x1180 [ 1319.966723][T17566] __sys_recvmmsg+0x113/0x450 [ 1319.971512][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1319.977958][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1319.983284][T17566] do_fast_syscall_32+0x33/0x70 [ 1319.988271][T17566] do_SYSENTER_32+0x1b/0x20 [ 1319.993046][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.999524][T17566] [ 1320.002067][T17566] Uninit was stored to memory at: [ 1320.007266][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.012656][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.017639][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.022565][T17566] do_recvmmsg+0x682/0x1180 [ 1320.027197][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.032177][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.038567][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.043920][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.048903][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.053586][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1320.060061][T17566] [ 1320.062581][T17566] Uninit was stored to memory at: [ 1320.067770][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.073159][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.078122][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.083036][T17566] do_recvmmsg+0x682/0x1180 [ 1320.087669][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.092588][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.098978][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.104366][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.109337][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.114058][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1320.120517][T17566] [ 1320.123024][T17566] Local variable msg_sys created at: [ 1320.128382][T17566] do_recvmmsg+0x5c/0x1180 [ 1320.133074][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.339878][T17566] not chained 890000 origins [ 1320.344654][T17566] CPU: 0 PID: 17566 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1320.354905][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1320.365066][T17566] Call Trace: [ 1320.368381][T17566] [ 1320.371348][T17566] dump_stack_lvl+0x1c8/0x256 [ 1320.376131][T17566] dump_stack+0x1a/0x1c [ 1320.380423][T17566] kmsan_internal_chain_origin+0x78/0x120 [ 1320.386235][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1320.392575][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1320.398490][T17566] ? ____sys_recvmsg+0x5c1/0x810 [ 1320.403526][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1320.408855][T17566] ? get_compat_msghdr+0x8c/0x1c0 [ 1320.414015][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1320.419978][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1320.425252][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1320.431160][T17566] ? should_fail+0x3f/0x810 [ 1320.435757][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1320.440946][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1320.447272][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1320.453276][T17566] __msan_chain_origin+0xbd/0x140 [ 1320.458451][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.463717][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.468676][T17566] ? ___sys_recvmsg+0xa9/0x890 [ 1320.473507][T17566] ? do_recvmmsg+0x682/0x1180 [ 1320.478263][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.483020][T17566] ? do_recvmmsg+0x6e4/0x1180 [ 1320.487795][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1320.493041][T17566] ? kmsan_internal_check_memory+0x94/0x530 [ 1320.499018][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1320.504935][T17566] do_recvmmsg+0x682/0x1180 [ 1320.509596][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1320.515981][T17566] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.522482][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.527235][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.533566][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.538767][T17566] ? exit_to_user_mode_prepare+0x119/0x220 [ 1320.544649][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.549568][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.554158][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1320.560641][T17566] RIP: 0023:0xf7f30549 [ 1320.564792][T17566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1320.584489][T17566] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1320.592976][T17566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1320.601008][T17566] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1320.609059][T17566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1320.617136][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1320.625196][T17566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1320.633256][T17566] [ 1320.641298][T17566] Uninit was stored to memory at: [ 1320.647029][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.652368][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.657358][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.662272][T17566] do_recvmmsg+0x682/0x1180 [ 1320.666911][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.671864][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.678254][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.683635][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.688623][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.693365][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1320.699849][T17566] [ 1320.702365][T17566] Uninit was stored to memory at: [ 1320.707526][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.712865][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.717824][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.722733][T17566] do_recvmmsg+0x682/0x1180 [ 1320.727360][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.732260][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.738654][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.743975][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.748992][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.753676][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1320.760135][T17566] [ 1320.762652][T17566] Uninit was stored to memory at: [ 1320.767847][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.773197][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.778160][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.783071][T17566] do_recvmmsg+0x682/0x1180 [ 1320.787704][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.792608][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.798997][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.804351][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.809321][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.814046][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1320.820506][T17566] [ 1320.823005][T17566] Uninit was stored to memory at: [ 1320.828192][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.833545][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.838508][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.843422][T17566] do_recvmmsg+0x682/0x1180 [ 1320.848051][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.852948][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.859340][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.864658][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.869625][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.874321][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1320.880788][T17566] [ 1320.883290][T17566] Uninit was stored to memory at: [ 1320.888484][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.893879][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.898836][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.903696][T17566] do_recvmmsg+0x682/0x1180 [ 1320.908309][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.913214][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.919618][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.925015][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.929979][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.934676][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1320.941135][T17566] [ 1320.943641][T17566] Uninit was stored to memory at: [ 1320.948782][T17566] __get_compat_msghdr+0x514/0x750 [ 1320.954085][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1320.959047][T17566] ___sys_recvmsg+0x19d/0x890 [ 1320.963953][T17566] do_recvmmsg+0x682/0x1180 [ 1320.968583][T17566] __sys_recvmmsg+0x113/0x450 [ 1320.973468][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1320.979859][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1320.985167][T17566] do_fast_syscall_32+0x33/0x70 [ 1320.990150][T17566] do_SYSENTER_32+0x1b/0x20 [ 1320.994845][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.001302][T17566] [ 1321.003821][T17566] Uninit was stored to memory at: [ 1321.008993][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.014300][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.019284][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.024207][T17566] do_recvmmsg+0x682/0x1180 [ 1321.028819][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.033701][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.040097][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.045458][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.050437][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.055159][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.061617][T17566] [ 1321.064139][T17566] Local variable msg_sys created at: [ 1321.069507][T17566] do_recvmmsg+0x5c/0x1180 [ 1321.074116][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.268328][T17566] not chained 900000 origins [ 1321.273100][T17566] CPU: 0 PID: 17566 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1321.283342][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1321.293488][T17566] Call Trace: [ 1321.296799][T17566] [ 1321.299764][T17566] dump_stack_lvl+0x1c8/0x256 [ 1321.304549][T17566] dump_stack+0x1a/0x1c [ 1321.308788][T17566] kmsan_internal_chain_origin+0x78/0x120 [ 1321.314597][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1321.320923][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1321.326842][T17566] ? ____sys_recvmsg+0x5c1/0x810 [ 1321.331928][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1321.337255][T17566] ? get_compat_msghdr+0x8c/0x1c0 [ 1321.342425][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1321.348401][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1321.353749][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1321.359728][T17566] ? should_fail+0x3f/0x810 [ 1321.364365][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1321.369563][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1321.375900][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1321.381811][T17566] __msan_chain_origin+0xbd/0x140 [ 1321.386995][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.392262][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.397254][T17566] ? ___sys_recvmsg+0xa9/0x890 [ 1321.402154][T17566] ? do_recvmmsg+0x682/0x1180 [ 1321.406952][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.411709][T17566] ? do_recvmmsg+0x6e4/0x1180 [ 1321.416483][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1321.421682][T17566] ? kmsan_internal_check_memory+0x94/0x530 [ 1321.427706][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1321.433678][T17566] do_recvmmsg+0x682/0x1180 [ 1321.438313][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1321.444658][T17566] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.451157][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.455917][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.462269][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.467475][T17566] ? exit_to_user_mode_prepare+0x119/0x220 [ 1321.473360][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.478305][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.482915][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.489393][T17566] RIP: 0023:0xf7f30549 [ 1321.493565][T17566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1321.513401][T17566] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1321.521895][T17566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1321.529946][T17566] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1321.538044][T17566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1321.546103][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.554129][T17566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.562170][T17566] [ 1321.570217][T17566] Uninit was stored to memory at: [ 1321.575947][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.581195][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.586281][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.591091][T17566] do_recvmmsg+0x682/0x1180 [ 1321.595829][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.600615][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.607109][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.612445][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.617432][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.622170][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.628631][T17566] [ 1321.631013][T17566] Uninit was stored to memory at: [ 1321.636309][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.641541][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.646629][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.651441][T17566] do_recvmmsg+0x682/0x1180 [ 1321.656137][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.660923][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.667372][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.672704][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.677665][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.682397][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.688857][T17566] [ 1321.691205][T17566] Uninit was stored to memory at: [ 1321.696478][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.701787][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.706759][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.711545][T17566] do_recvmmsg+0x682/0x1180 [ 1321.716236][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.721027][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.727523][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.732852][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.737835][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.742639][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.749100][T17566] [ 1321.751452][T17566] Uninit was stored to memory at: [ 1321.756721][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.762033][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.767013][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.771947][T17566] do_recvmmsg+0x682/0x1180 [ 1321.776567][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.781310][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.787762][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.793089][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.798051][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.802784][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.809244][T17566] [ 1321.811591][T17566] Uninit was stored to memory at: [ 1321.816858][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.822171][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.827146][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.832085][T17566] do_recvmmsg+0x682/0x1180 [ 1321.836714][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.841519][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.848021][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.853342][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.858325][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.863100][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.869560][T17566] [ 1321.872060][T17566] Uninit was stored to memory at: [ 1321.877200][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.882543][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.887526][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.892478][T17566] do_recvmmsg+0x682/0x1180 [ 1321.897090][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.901984][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.908355][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.913714][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.918679][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.923425][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.929881][T17566] [ 1321.932395][T17566] Uninit was stored to memory at: [ 1321.937533][T17566] __get_compat_msghdr+0x514/0x750 [ 1321.942880][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1321.947860][T17566] ___sys_recvmsg+0x19d/0x890 [ 1321.952803][T17566] do_recvmmsg+0x682/0x1180 [ 1321.957436][T17566] __sys_recvmmsg+0x113/0x450 [ 1321.962389][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1321.968760][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1321.974107][T17566] do_fast_syscall_32+0x33/0x70 [ 1321.979074][T17566] do_SYSENTER_32+0x1b/0x20 [ 1321.983813][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1321.990272][T17566] [ 1321.992770][T17566] Local variable msg_sys created at: [ 1321.998109][T17566] do_recvmmsg+0x5c/0x1180 [ 1322.002751][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.260655][T17566] not chained 910000 origins [ 1322.265436][T17566] CPU: 1 PID: 17566 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1322.275685][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1322.285827][T17566] Call Trace: [ 1322.289141][T17566] [ 1322.292128][T17566] dump_stack_lvl+0x1c8/0x256 [ 1322.296985][T17566] dump_stack+0x1a/0x1c [ 1322.301228][T17566] kmsan_internal_chain_origin+0x78/0x120 [ 1322.307034][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1322.313390][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1322.319330][T17566] ? ____sys_recvmsg+0x5c1/0x810 [ 1322.324341][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1322.329607][T17566] ? get_compat_msghdr+0x8c/0x1c0 [ 1322.334750][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1322.340714][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1322.346050][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1322.352026][T17566] ? should_fail+0x3f/0x810 [ 1322.356685][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1322.361953][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1322.368335][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1322.374246][T17566] __msan_chain_origin+0xbd/0x140 [ 1322.379396][T17566] __get_compat_msghdr+0x514/0x750 [ 1322.384614][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1322.389533][T17566] ? ___sys_recvmsg+0xa9/0x890 [ 1322.394384][T17566] ? do_recvmmsg+0x682/0x1180 [ 1322.399196][T17566] ___sys_recvmsg+0x19d/0x890 [ 1322.403941][T17566] ? do_recvmmsg+0x6e4/0x1180 [ 1322.408697][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1322.413916][T17566] ? kmsan_internal_check_memory+0x94/0x530 [ 1322.419947][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1322.425840][T17566] do_recvmmsg+0x682/0x1180 [ 1322.430432][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1322.436784][T17566] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.443363][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.448187][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.454548][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1322.459808][T17566] ? exit_to_user_mode_prepare+0x119/0x220 [ 1322.465771][T17566] do_fast_syscall_32+0x33/0x70 [ 1322.470743][T17566] do_SYSENTER_32+0x1b/0x20 [ 1322.475315][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1322.481744][T17566] RIP: 0023:0xf7f30549 [ 1322.485936][T17566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1322.505702][T17566] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1322.514233][T17566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1322.522280][T17566] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1322.530338][T17566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1322.538362][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.546419][T17566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1322.554518][T17566] [ 1322.560261][T17566] Uninit was stored to memory at: [ 1322.565751][T17566] __get_compat_msghdr+0x514/0x750 [ 1322.570997][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1322.576049][T17566] ___sys_recvmsg+0x19d/0x890 [ 1322.580858][T17566] do_recvmmsg+0x682/0x1180 [ 1322.585566][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.590366][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.596832][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1322.602157][T17566] do_fast_syscall_32+0x33/0x70 [ 1322.607136][T17566] do_SYSENTER_32+0x1b/0x20 [ 1322.611837][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1322.618318][T17566] [ 1322.620717][T17566] Uninit was stored to memory at: [ 1322.625982][T17566] __get_compat_msghdr+0x514/0x750 [ 1322.631222][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1322.636279][T17566] ___sys_recvmsg+0x19d/0x890 [ 1322.641069][T17566] do_recvmmsg+0x682/0x1180 [ 1322.645753][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.650547][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.657025][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1322.662436][T17566] do_fast_syscall_32+0x33/0x70 [ 1322.667415][T17566] do_SYSENTER_32+0x1b/0x20 [ 1322.672157][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1322.678634][T17566] [ 1322.681002][T17566] Uninit was stored to memory at: [ 1322.686258][T17566] __get_compat_msghdr+0x514/0x750 [ 1322.691479][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1322.696507][T17566] ___sys_recvmsg+0x19d/0x890 [ 1322.701292][T17566] do_recvmmsg+0x682/0x1180 [ 1322.705971][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.710760][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.717192][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1322.722513][T17566] do_fast_syscall_32+0x33/0x70 [ 1322.727475][T17566] do_SYSENTER_32+0x1b/0x20 [ 1322.732180][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1322.738637][T17566] [ 1322.740985][T17566] Uninit was stored to memory at: [ 1322.746239][T17566] __get_compat_msghdr+0x514/0x750 [ 1322.751459][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1322.756486][T17566] ___sys_recvmsg+0x19d/0x890 [ 1322.761296][T17566] do_recvmmsg+0x682/0x1180 [ 1322.766052][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.770842][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.777311][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1322.782635][T17566] do_fast_syscall_32+0x33/0x70 [ 1322.787614][T17566] do_SYSENTER_32+0x1b/0x20 [ 1322.792359][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1322.798818][T17566] [ 1322.801168][T17566] Uninit was stored to memory at: [ 1322.806419][T17566] __get_compat_msghdr+0x514/0x750 [ 1322.811642][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1322.816705][T17566] ___sys_recvmsg+0x19d/0x890 [ 1322.821448][T17566] do_recvmmsg+0x682/0x1180 [ 1322.826122][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.830915][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.837345][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1322.842667][T17566] do_fast_syscall_32+0x33/0x70 [ 1322.847628][T17566] do_SYSENTER_32+0x1b/0x20 [ 1322.852334][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1322.858792][T17566] [ 1322.861160][T17566] Uninit was stored to memory at: [ 1322.866456][T17566] __get_compat_msghdr+0x514/0x750 [ 1322.871773][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1322.876737][T17566] ___sys_recvmsg+0x19d/0x890 [ 1322.881479][T17566] do_recvmmsg+0x682/0x1180 [ 1322.886190][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.890980][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.897447][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1322.902766][T17566] do_fast_syscall_32+0x33/0x70 [ 1322.907732][T17566] do_SYSENTER_32+0x1b/0x20 [ 1322.912446][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1322.918908][T17566] [ 1322.921256][T17566] Uninit was stored to memory at: [ 1322.926531][T17566] __get_compat_msghdr+0x514/0x750 [ 1322.931842][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1322.936802][T17566] ___sys_recvmsg+0x19d/0x890 [ 1322.941546][T17566] do_recvmmsg+0x682/0x1180 [ 1322.946220][T17566] __sys_recvmmsg+0x113/0x450 [ 1322.951009][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1322.957473][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1322.962792][T17566] do_fast_syscall_32+0x33/0x70 [ 1322.967777][T17566] do_SYSENTER_32+0x1b/0x20 [ 1322.972537][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1322.978996][T17566] [ 1322.981345][T17566] Local variable msg_sys created at: [ 1322.986822][T17566] do_recvmmsg+0x5c/0x1180 [ 1322.991391][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.190558][T17566] not chained 920000 origins [ 1323.195307][T17566] CPU: 0 PID: 17566 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1323.205554][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1323.215695][T17566] Call Trace: [ 1323.219010][T17566] [ 1323.221976][T17566] dump_stack_lvl+0x1c8/0x256 [ 1323.226790][T17566] dump_stack+0x1a/0x1c [ 1323.231032][T17566] kmsan_internal_chain_origin+0x78/0x120 [ 1323.236838][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1323.243234][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1323.249143][T17566] ? ____sys_recvmsg+0x5c1/0x810 [ 1323.254177][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1323.259513][T17566] ? get_compat_msghdr+0x8c/0x1c0 [ 1323.264714][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1323.270680][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1323.275998][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1323.281895][T17566] ? should_fail+0x3f/0x810 [ 1323.286481][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1323.291680][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1323.298033][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1323.303953][T17566] __msan_chain_origin+0xbd/0x140 [ 1323.309109][T17566] __get_compat_msghdr+0x514/0x750 [ 1323.314322][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1323.319254][T17566] ? ___sys_recvmsg+0xa9/0x890 [ 1323.324083][T17566] ? do_recvmmsg+0x682/0x1180 [ 1323.328829][T17566] ___sys_recvmsg+0x19d/0x890 [ 1323.333572][T17566] ? do_recvmmsg+0x6e4/0x1180 [ 1323.338323][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1323.343532][T17566] ? kmsan_internal_check_memory+0x94/0x530 [ 1323.349513][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1323.355438][T17566] do_recvmmsg+0x682/0x1180 [ 1323.360085][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1323.366435][T17566] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.372958][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.377765][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.384114][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1323.389298][T17566] ? exit_to_user_mode_prepare+0x119/0x220 [ 1323.395188][T17566] do_fast_syscall_32+0x33/0x70 [ 1323.400107][T17566] do_SYSENTER_32+0x1b/0x20 [ 1323.404695][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1323.411168][T17566] RIP: 0023:0xf7f30549 [ 1323.415334][T17566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1323.435098][T17566] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1323.443584][T17566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1323.451612][T17566] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1323.459666][T17566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1323.467693][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1323.475732][T17566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1323.483820][T17566] [ 1323.492059][T17566] Uninit was stored to memory at: [ 1323.497267][T17566] __get_compat_msghdr+0x514/0x750 [ 1323.503073][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1323.508057][T17566] ___sys_recvmsg+0x19d/0x890 [ 1323.512960][T17566] do_recvmmsg+0x682/0x1180 [ 1323.517593][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.522548][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.528934][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1323.534280][T17566] do_fast_syscall_32+0x33/0x70 [ 1323.539264][T17566] do_SYSENTER_32+0x1b/0x20 [ 1323.544065][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1323.550548][T17566] [ 1323.553043][T17566] Uninit was stored to memory at: [ 1323.558200][T17566] __get_compat_msghdr+0x514/0x750 [ 1323.563547][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1323.568508][T17566] ___sys_recvmsg+0x19d/0x890 [ 1323.573406][T17566] do_recvmmsg+0x682/0x1180 [ 1323.578057][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.583004][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.589377][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1323.594730][T17566] do_fast_syscall_32+0x33/0x70 [ 1323.599693][T17566] do_SYSENTER_32+0x1b/0x20 [ 1323.604391][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1323.610853][T17566] [ 1323.613348][T17566] Uninit was stored to memory at: [ 1323.618495][T17566] __get_compat_msghdr+0x514/0x750 [ 1323.623835][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1323.628795][T17566] ___sys_recvmsg+0x19d/0x890 [ 1323.633654][T17566] do_recvmmsg+0x682/0x1180 [ 1323.638265][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.643166][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.649573][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1323.654917][T17566] do_fast_syscall_32+0x33/0x70 [ 1323.659894][T17566] do_SYSENTER_32+0x1b/0x20 [ 1323.664733][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1323.671197][T17566] [ 1323.673660][T17566] Uninit was stored to memory at: [ 1323.678800][T17566] __get_compat_msghdr+0x514/0x750 [ 1323.684149][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1323.689117][T17566] ___sys_recvmsg+0x19d/0x890 [ 1323.694037][T17566] do_recvmmsg+0x682/0x1180 [ 1323.698700][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.703591][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.709962][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1323.715306][T17566] do_fast_syscall_32+0x33/0x70 [ 1323.720292][T17566] do_SYSENTER_32+0x1b/0x20 [ 1323.724989][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1323.731447][T17566] [ 1323.733958][T17566] Uninit was stored to memory at: [ 1323.739101][T17566] __get_compat_msghdr+0x514/0x750 [ 1323.744408][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1323.749364][T17566] ___sys_recvmsg+0x19d/0x890 [ 1323.754237][T17566] do_recvmmsg+0x682/0x1180 [ 1323.758849][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.763751][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.770138][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1323.775481][T17566] do_fast_syscall_32+0x33/0x70 [ 1323.780462][T17566] do_SYSENTER_32+0x1b/0x20 [ 1323.785230][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1323.791810][T17566] [ 1323.794199][T17566] Uninit was stored to memory at: [ 1323.799334][T17566] __get_compat_msghdr+0x514/0x750 [ 1323.804644][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1323.809606][T17566] ___sys_recvmsg+0x19d/0x890 [ 1323.814478][T17566] do_recvmmsg+0x682/0x1180 [ 1323.819089][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.823998][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.830367][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1323.835678][T17566] do_fast_syscall_32+0x33/0x70 [ 1323.840660][T17566] do_SYSENTER_32+0x1b/0x20 [ 1323.845358][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1323.851910][T17566] [ 1323.854297][T17566] Uninit was stored to memory at: [ 1323.859435][T17566] __get_compat_msghdr+0x514/0x750 [ 1323.864766][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1323.869750][T17566] ___sys_recvmsg+0x19d/0x890 [ 1323.874617][T17566] do_recvmmsg+0x682/0x1180 [ 1323.879227][T17566] __sys_recvmmsg+0x113/0x450 [ 1323.884129][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1323.890517][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1323.895912][T17566] do_fast_syscall_32+0x33/0x70 [ 1323.900890][T17566] do_SYSENTER_32+0x1b/0x20 [ 1323.905668][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1323.912178][T17566] [ 1323.914533][T17566] Local variable msg_sys created at: [ 1323.919843][T17566] do_recvmmsg+0x5c/0x1180 [ 1323.924483][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.149257][T17566] not chained 930000 origins [ 1324.154043][T17566] CPU: 0 PID: 17566 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1324.164295][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1324.174458][T17566] Call Trace: [ 1324.177771][T17566] [ 1324.180734][T17566] dump_stack_lvl+0x1c8/0x256 [ 1324.185520][T17566] dump_stack+0x1a/0x1c [ 1324.189759][T17566] kmsan_internal_chain_origin+0x78/0x120 [ 1324.195571][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1324.201911][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1324.207799][T17566] ? ____sys_recvmsg+0x5c1/0x810 [ 1324.212825][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1324.218152][T17566] ? get_compat_msghdr+0x8c/0x1c0 [ 1324.223310][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1324.229260][T17566] ? __get_compat_msghdr+0x5b/0x750 [ 1324.234531][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1324.240430][T17566] ? should_fail+0x3f/0x810 [ 1324.245013][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1324.250202][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1324.256531][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1324.262445][T17566] __msan_chain_origin+0xbd/0x140 [ 1324.267614][T17566] __get_compat_msghdr+0x514/0x750 [ 1324.272881][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1324.277840][T17566] ? ___sys_recvmsg+0xa9/0x890 [ 1324.282669][T17566] ? do_recvmmsg+0x682/0x1180 [ 1324.287440][T17566] ___sys_recvmsg+0x19d/0x890 [ 1324.292199][T17566] ? do_recvmmsg+0x6e4/0x1180 [ 1324.296956][T17566] ? __stack_depot_save+0x21/0x4b0 [ 1324.302152][T17566] ? kmsan_internal_check_memory+0x94/0x530 [ 1324.308153][T17566] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1324.314075][T17566] do_recvmmsg+0x682/0x1180 [ 1324.318705][T17566] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1324.325036][T17566] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.331537][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.336293][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.342622][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1324.347805][T17566] ? exit_to_user_mode_prepare+0x119/0x220 [ 1324.353687][T17566] do_fast_syscall_32+0x33/0x70 [ 1324.358605][T17566] do_SYSENTER_32+0x1b/0x20 [ 1324.363194][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1324.369670][T17566] RIP: 0023:0xf7f30549 [ 1324.373835][T17566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1324.393577][T17566] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1324.402066][T17566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1324.410097][T17566] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1324.418138][T17566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1324.426196][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.434217][T17566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1324.442273][T17566] [ 1324.455219][T17566] Uninit was stored to memory at: [ 1324.460434][T17566] __get_compat_msghdr+0x514/0x750 [ 1324.467349][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1324.472424][T17566] ___sys_recvmsg+0x19d/0x890 [ 1324.477238][T17566] do_recvmmsg+0x682/0x1180 [ 1324.481964][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.486786][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.493267][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1324.498539][T17566] do_fast_syscall_32+0x33/0x70 [ 1324.503634][T17566] do_SYSENTER_32+0x1b/0x20 [ 1324.508249][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1324.514784][T17566] [ 1324.517179][T17566] Uninit was stored to memory at: [ 1324.522475][T17566] __get_compat_msghdr+0x514/0x750 [ 1324.527700][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1324.532780][T17566] ___sys_recvmsg+0x19d/0x890 [ 1324.537582][T17566] do_recvmmsg+0x682/0x1180 [ 1324.542258][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.547001][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.553487][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1324.558716][T17566] do_fast_syscall_32+0x33/0x70 [ 1324.563804][T17566] do_SYSENTER_32+0x1b/0x20 [ 1324.568421][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1324.574998][T17566] [ 1324.577389][T17566] Uninit was stored to memory at: [ 1324.582704][T17566] __get_compat_msghdr+0x514/0x750 [ 1324.587926][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1324.593004][T17566] ___sys_recvmsg+0x19d/0x890 [ 1324.597789][T17566] do_recvmmsg+0x682/0x1180 [ 1324.602522][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.607325][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.613817][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1324.619044][T17566] do_fast_syscall_32+0x33/0x70 [ 1324.624084][T17566] do_SYSENTER_32+0x1b/0x20 [ 1324.628697][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1324.635230][T17566] [ 1324.637603][T17566] Uninit was stored to memory at: [ 1324.642889][T17566] __get_compat_msghdr+0x514/0x750 [ 1324.648112][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1324.653190][T17566] ___sys_recvmsg+0x19d/0x890 [ 1324.657989][T17566] do_recvmmsg+0x682/0x1180 [ 1324.662668][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.667419][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.673904][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1324.679132][T17566] do_fast_syscall_32+0x33/0x70 [ 1324.684175][T17566] do_SYSENTER_32+0x1b/0x20 [ 1324.688788][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1324.695319][T17566] [ 1324.697696][T17566] Uninit was stored to memory at: [ 1324.702985][T17566] __get_compat_msghdr+0x514/0x750 [ 1324.708221][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1324.713311][T17566] ___sys_recvmsg+0x19d/0x890 [ 1324.718190][T17566] do_recvmmsg+0x682/0x1180 [ 1324.722920][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.727722][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.734204][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1324.739431][T17566] do_fast_syscall_32+0x33/0x70 [ 1324.744474][T17566] do_SYSENTER_32+0x1b/0x20 [ 1324.749085][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1324.755615][T17566] [ 1324.757986][T17566] Uninit was stored to memory at: [ 1324.763275][T17566] __get_compat_msghdr+0x514/0x750 [ 1324.768501][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1324.773586][T17566] ___sys_recvmsg+0x19d/0x890 [ 1324.778411][T17566] do_recvmmsg+0x682/0x1180 [ 1324.783113][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.787860][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.794341][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1324.799575][T17566] do_fast_syscall_32+0x33/0x70 [ 1324.804662][T17566] do_SYSENTER_32+0x1b/0x20 [ 1324.809291][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1324.815866][T17566] [ 1324.818262][T17566] Uninit was stored to memory at: [ 1324.823555][T17566] __get_compat_msghdr+0x514/0x750 [ 1324.828775][T17566] get_compat_msghdr+0x8c/0x1c0 [ 1324.833856][T17566] ___sys_recvmsg+0x19d/0x890 [ 1324.838647][T17566] do_recvmmsg+0x682/0x1180 [ 1324.843356][T17566] __sys_recvmmsg+0x113/0x450 [ 1324.848164][T17566] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1324.854647][T17566] __do_fast_syscall_32+0xa2/0x100 [ 1324.859872][T17566] do_fast_syscall_32+0x33/0x70 [ 1324.864913][T17566] do_SYSENTER_32+0x1b/0x20 [ 1324.869528][T17566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1324.876061][T17566] [ 1324.878436][T17566] Local variable msg_sys created at: [ 1324.883912][T17566] do_recvmmsg+0x5c/0x1180 [ 1324.888435][T17566] __sys_recvmmsg+0x113/0x450 09:39:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) getpid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:39:10 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 09:39:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 09:39:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:10 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x201) write$proc_mixer(r0, &(0x7f0000000040)=[{'SPEAKER', @val={' \'', 'Master Playback Volume'}}], 0x36) [ 1325.088002][T17603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:39:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x71, &(0x7f00000000c0)=ANY=[], 0x0) 09:39:11 executing program 3: r0 = timerfd_create(0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 09:39:11 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 09:39:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003000000080003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1325.608362][T17617] loop4: detected capacity change from 0 to 6 09:39:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000080)={0x10, 0xa1, 0x8ef9289c62194c73}, 0x10}], 0x1}, 0x0) 09:39:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) [ 1325.732517][T17617] Dev loop4: unable to read RDB block 6 [ 1325.738338][T17617] loop4: unable to read partition table [ 1325.828910][T17617] loop4: partition table beyond EOD, truncated [ 1325.943658][T17617] FAT-fs (loop4): Directory bread(block 6) failed [ 1326.759212][T17615] not chained 940000 origins [ 1326.764813][T17615] CPU: 0 PID: 17615 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1326.775127][T17615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1326.785258][T17615] Call Trace: [ 1326.788577][T17615] [ 1326.791545][T17615] dump_stack_lvl+0x1c8/0x256 [ 1326.796333][T17615] dump_stack+0x1a/0x1c [ 1326.800602][T17615] kmsan_internal_chain_origin+0x78/0x120 [ 1326.806433][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1326.812772][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1326.818668][T17615] ? ____sys_recvmsg+0x5c1/0x810 [ 1326.823701][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1326.829029][T17615] ? get_compat_msghdr+0x8c/0x1c0 [ 1326.834192][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1326.840139][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1326.845438][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1326.851361][T17615] ? should_fail+0x3f/0x810 [ 1326.855972][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1326.861238][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1326.867618][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1326.873532][T17615] __msan_chain_origin+0xbd/0x140 [ 1326.878702][T17615] __get_compat_msghdr+0x514/0x750 [ 1326.883952][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1326.888914][T17615] ? ___sys_recvmsg+0xa9/0x890 [ 1326.893749][T17615] ? do_recvmmsg+0x682/0x1180 [ 1326.898499][T17615] ___sys_recvmsg+0x19d/0x890 [ 1326.903243][T17615] ? do_recvmmsg+0x6e4/0x1180 [ 1326.907999][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1326.913192][T17615] ? kmsan_internal_check_memory+0x94/0x530 [ 1326.919178][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1326.925099][T17615] do_recvmmsg+0x682/0x1180 [ 1326.929731][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1326.936065][T17615] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1326.942565][T17615] __sys_recvmmsg+0x113/0x450 [ 1326.947322][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1326.953657][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1326.958871][T17615] ? exit_to_user_mode_prepare+0x119/0x220 [ 1326.964814][T17615] do_fast_syscall_32+0x33/0x70 [ 1326.969780][T17615] do_SYSENTER_32+0x1b/0x20 [ 1326.974376][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1326.980855][T17615] RIP: 0023:0xf7f30549 [ 1326.985024][T17615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1327.004791][T17615] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1327.013286][T17615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1327.021317][T17615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1327.029374][T17615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1327.037438][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.045462][T17615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.053502][T17615] [ 1327.061903][T17615] Uninit was stored to memory at: [ 1327.067108][T17615] __get_compat_msghdr+0x514/0x750 [ 1327.074313][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1327.079299][T17615] ___sys_recvmsg+0x19d/0x890 [ 1327.085079][T17615] do_recvmmsg+0x682/0x1180 [ 1327.089705][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.094657][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.101045][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1327.106416][T17615] do_fast_syscall_32+0x33/0x70 [ 1327.111396][T17615] do_SYSENTER_32+0x1b/0x20 [ 1327.116170][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1327.122729][T17615] [ 1327.125102][T17615] Uninit was stored to memory at: [ 1327.130217][T17615] __get_compat_msghdr+0x514/0x750 [ 1327.135560][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1327.140544][T17615] ___sys_recvmsg+0x19d/0x890 [ 1327.145490][T17615] do_recvmmsg+0x682/0x1180 [ 1327.150121][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.155033][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.161442][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1327.166839][T17615] do_fast_syscall_32+0x33/0x70 [ 1327.171912][T17615] do_SYSENTER_32+0x1b/0x20 [ 1327.176528][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1327.183066][T17615] [ 1327.185465][T17615] Uninit was stored to memory at: [ 1327.190602][T17615] __get_compat_msghdr+0x514/0x750 [ 1327.195937][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1327.200923][T17615] ___sys_recvmsg+0x19d/0x890 [ 1327.205862][T17615] do_recvmmsg+0x682/0x1180 [ 1327.210480][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.215395][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.221882][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1327.227138][T17615] do_fast_syscall_32+0x33/0x70 [ 1327.232266][T17615] do_SYSENTER_32+0x1b/0x20 [ 1327.236901][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1327.243538][T17615] [ 1327.245928][T17615] Uninit was stored to memory at: [ 1327.251046][T17615] __get_compat_msghdr+0x514/0x750 [ 1327.256386][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1327.261352][T17615] ___sys_recvmsg+0x19d/0x890 [ 1327.266298][T17615] do_recvmmsg+0x682/0x1180 [ 1327.270939][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.275851][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.282327][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1327.287577][T17615] do_fast_syscall_32+0x33/0x70 [ 1327.292665][T17615] do_SYSENTER_32+0x1b/0x20 [ 1327.297297][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1327.303920][T17615] [ 1327.306309][T17615] Uninit was stored to memory at: [ 1327.311450][T17615] __get_compat_msghdr+0x514/0x750 [ 1327.316782][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1327.321841][T17615] ___sys_recvmsg+0x19d/0x890 [ 1327.326659][T17615] do_recvmmsg+0x682/0x1180 [ 1327.331287][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.336244][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.342726][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1327.347960][T17615] do_fast_syscall_32+0x33/0x70 [ 1327.353068][T17615] do_SYSENTER_32+0x1b/0x20 [ 1327.357700][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1327.364327][T17615] [ 1327.366716][T17615] Uninit was stored to memory at: [ 1327.371980][T17615] __get_compat_msghdr+0x514/0x750 [ 1327.377219][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1327.382303][T17615] ___sys_recvmsg+0x19d/0x890 [ 1327.387098][T17615] do_recvmmsg+0x682/0x1180 [ 1327.391828][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.396634][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.403141][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1327.408371][T17615] do_fast_syscall_32+0x33/0x70 [ 1327.413425][T17615] do_SYSENTER_32+0x1b/0x20 [ 1327.418057][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1327.424672][T17615] [ 1327.427058][T17615] Uninit was stored to memory at: [ 1327.432338][T17615] __get_compat_msghdr+0x514/0x750 [ 1327.437568][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1327.442643][T17615] ___sys_recvmsg+0x19d/0x890 [ 1327.447452][T17615] do_recvmmsg+0x682/0x1180 [ 1327.452188][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.456997][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.463519][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1327.468771][T17615] do_fast_syscall_32+0x33/0x70 [ 1327.473870][T17615] do_SYSENTER_32+0x1b/0x20 [ 1327.478509][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1327.485133][T17615] [ 1327.487526][T17615] Local variable msg_sys created at: [ 1327.493002][T17615] do_recvmmsg+0x5c/0x1180 [ 1327.497530][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.699575][T17615] not chained 950000 origins [ 1327.704418][T17615] CPU: 0 PID: 17615 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1327.714668][T17615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1327.724832][T17615] Call Trace: [ 1327.728168][T17615] [ 1327.731160][T17615] dump_stack_lvl+0x1c8/0x256 [ 1327.735946][T17615] dump_stack+0x1a/0x1c [ 1327.740195][T17615] kmsan_internal_chain_origin+0x78/0x120 [ 1327.746023][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1327.752364][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1327.758288][T17615] ? ____sys_recvmsg+0x5c1/0x810 [ 1327.763335][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1327.768653][T17615] ? get_compat_msghdr+0x8c/0x1c0 [ 1327.773750][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1327.779647][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1327.784921][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1327.790819][T17615] ? should_fail+0x3f/0x810 [ 1327.795428][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1327.800644][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1327.807009][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1327.812926][T17615] __msan_chain_origin+0xbd/0x140 [ 1327.818095][T17615] __get_compat_msghdr+0x514/0x750 [ 1327.823361][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1327.828349][T17615] ? ___sys_recvmsg+0xa9/0x890 [ 1327.833229][T17615] ? do_recvmmsg+0x682/0x1180 [ 1327.837979][T17615] ___sys_recvmsg+0x19d/0x890 [ 1327.842722][T17615] ? do_recvmmsg+0x6e4/0x1180 [ 1327.847480][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1327.852677][T17615] ? kmsan_internal_check_memory+0x94/0x530 [ 1327.858659][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1327.864588][T17615] do_recvmmsg+0x682/0x1180 [ 1327.869245][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1327.875619][T17615] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.882128][T17615] __sys_recvmmsg+0x113/0x450 [ 1327.886887][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1327.893223][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1327.898437][T17615] ? exit_to_user_mode_prepare+0x119/0x220 [ 1327.904327][T17615] do_fast_syscall_32+0x33/0x70 [ 1327.909255][T17615] do_SYSENTER_32+0x1b/0x20 [ 1327.913849][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1327.920309][T17615] RIP: 0023:0xf7f30549 [ 1327.924449][T17615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1327.944150][T17615] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1327.952637][T17615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1327.960666][T17615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1327.968709][T17615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1327.976789][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.984868][T17615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.992945][T17615] [ 1328.000934][T17615] Uninit was stored to memory at: [ 1328.006670][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.011989][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.016969][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.021876][T17615] do_recvmmsg+0x682/0x1180 [ 1328.026509][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.031317][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.037774][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.043100][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.048063][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.052801][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.059261][T17615] [ 1328.061612][T17615] Uninit was stored to memory at: [ 1328.066887][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.072267][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.077250][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.082165][T17615] do_recvmmsg+0x682/0x1180 [ 1328.086789][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.091593][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.098081][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.103481][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.108457][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.113195][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.119656][T17615] [ 1328.122174][T17615] Uninit was stored to memory at: [ 1328.127312][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.132659][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.137641][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.142596][T17615] do_recvmmsg+0x682/0x1180 [ 1328.147230][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.152160][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.158553][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.163940][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.168907][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.173588][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.180067][T17615] [ 1328.182589][T17615] Uninit was stored to memory at: [ 1328.187790][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.193190][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.198172][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.203080][T17615] do_recvmmsg+0x682/0x1180 [ 1328.207708][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.212613][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.219004][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.224398][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.229363][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.234093][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.240557][T17615] [ 1328.243055][T17615] Uninit was stored to memory at: [ 1328.248243][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.253630][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.258590][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.263467][T17615] do_recvmmsg+0x682/0x1180 [ 1328.268101][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.273041][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.279435][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.284788][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.289775][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.294520][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.300982][T17615] [ 1328.303484][T17615] Uninit was stored to memory at: [ 1328.308673][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.314016][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.318982][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.323892][T17615] do_recvmmsg+0x682/0x1180 [ 1328.328523][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.333413][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.339805][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.345228][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.350210][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.354996][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.361476][T17615] [ 1328.363972][T17615] Uninit was stored to memory at: [ 1328.369114][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.374425][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.379395][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.384319][T17615] do_recvmmsg+0x682/0x1180 [ 1328.388951][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.393870][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.400245][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.405561][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.410535][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.415292][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.421845][T17615] [ 1328.424233][T17615] Local variable msg_sys created at: [ 1328.429569][T17615] do_recvmmsg+0x5c/0x1180 [ 1328.434173][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.636000][T17615] not chained 960000 origins [ 1328.640651][T17615] CPU: 0 PID: 17615 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1328.650874][T17615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1328.660979][T17615] Call Trace: [ 1328.664294][T17615] [ 1328.667262][T17615] dump_stack_lvl+0x1c8/0x256 [ 1328.672062][T17615] dump_stack+0x1a/0x1c [ 1328.676302][T17615] kmsan_internal_chain_origin+0x78/0x120 [ 1328.682151][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1328.688556][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1328.694514][T17615] ? ____sys_recvmsg+0x5c1/0x810 [ 1328.699588][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1328.704919][T17615] ? get_compat_msghdr+0x8c/0x1c0 [ 1328.710031][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1328.715919][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1328.721186][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1328.727077][T17615] ? should_fail+0x3f/0x810 [ 1328.731657][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1328.736911][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1328.743292][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1328.749186][T17615] __msan_chain_origin+0xbd/0x140 [ 1328.754284][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.759497][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.764416][T17615] ? ___sys_recvmsg+0xa9/0x890 [ 1328.769245][T17615] ? do_recvmmsg+0x682/0x1180 [ 1328.773993][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.778732][T17615] ? do_recvmmsg+0x6e4/0x1180 [ 1328.783515][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1328.788753][T17615] ? kmsan_internal_check_memory+0x94/0x530 [ 1328.794750][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1328.800666][T17615] do_recvmmsg+0x682/0x1180 [ 1328.805312][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1328.811647][T17615] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.818175][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.822928][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.829256][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.834461][T17615] ? exit_to_user_mode_prepare+0x119/0x220 [ 1328.840416][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.845407][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.850036][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.856494][T17615] RIP: 0023:0xf7f30549 [ 1328.860611][T17615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1328.880300][T17615] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1328.888788][T17615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1328.896818][T17615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1328.904842][T17615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1328.912865][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.920887][T17615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1328.928924][T17615] [ 1328.936924][T17615] Uninit was stored to memory at: [ 1328.942601][T17615] __get_compat_msghdr+0x514/0x750 [ 1328.947849][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1328.952927][T17615] ___sys_recvmsg+0x19d/0x890 [ 1328.957730][T17615] do_recvmmsg+0x682/0x1180 [ 1328.962453][T17615] __sys_recvmmsg+0x113/0x450 [ 1328.967261][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1328.973750][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1328.979001][T17615] do_fast_syscall_32+0x33/0x70 [ 1328.984075][T17615] do_SYSENTER_32+0x1b/0x20 [ 1328.988712][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1328.995346][T17615] [ 1328.997741][T17615] Uninit was stored to memory at: [ 1329.003054][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.008312][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.013407][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.018196][T17615] do_recvmmsg+0x682/0x1180 [ 1329.022930][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.027717][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.034160][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.039393][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.044441][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.049055][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.055630][T17615] [ 1329.058018][T17615] Uninit was stored to memory at: [ 1329.063297][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.068551][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.073625][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.078443][T17615] do_recvmmsg+0x682/0x1180 [ 1329.083166][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.087972][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.094509][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.099738][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.104780][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.109400][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.115980][T17615] [ 1329.118383][T17615] Uninit was stored to memory at: [ 1329.123669][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.128895][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.133963][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.138752][T17615] do_recvmmsg+0x682/0x1180 [ 1329.143476][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.148263][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.154709][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.159936][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.165022][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.169637][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.176169][T17615] [ 1329.178543][T17615] Uninit was stored to memory at: [ 1329.183855][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.189081][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.194158][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.198962][T17615] do_recvmmsg+0x682/0x1180 [ 1329.203670][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.208475][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.215008][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.220235][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.225279][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.229895][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.236472][T17615] [ 1329.238856][T17615] Uninit was stored to memory at: [ 1329.244130][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.249353][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.254443][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.259228][T17615] do_recvmmsg+0x682/0x1180 [ 1329.263962][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.268748][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.275191][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.280426][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.285472][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.290087][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.296668][T17615] [ 1329.299055][T17615] Uninit was stored to memory at: [ 1329.304333][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.309565][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.314673][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.319478][T17615] do_recvmmsg+0x682/0x1180 [ 1329.324206][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.329013][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.335553][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.340785][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.345885][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.350503][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.357080][T17615] [ 1329.359454][T17615] Local variable msg_sys created at: [ 1329.364912][T17615] do_recvmmsg+0x5c/0x1180 [ 1329.369440][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.566310][T17615] not chained 970000 origins [ 1329.570996][T17615] CPU: 0 PID: 17615 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1329.581220][T17615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1329.591351][T17615] Call Trace: [ 1329.594666][T17615] [ 1329.597649][T17615] dump_stack_lvl+0x1c8/0x256 [ 1329.602469][T17615] dump_stack+0x1a/0x1c [ 1329.606799][T17615] kmsan_internal_chain_origin+0x78/0x120 [ 1329.612705][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1329.619118][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1329.625066][T17615] ? ____sys_recvmsg+0x5c1/0x810 [ 1329.630078][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1329.635367][T17615] ? get_compat_msghdr+0x8c/0x1c0 [ 1329.640506][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1329.646419][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1329.651758][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1329.657735][T17615] ? should_fail+0x3f/0x810 [ 1329.662389][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1329.667648][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1329.674005][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1329.679946][T17615] __msan_chain_origin+0xbd/0x140 [ 1329.685047][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.690243][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.695175][T17615] ? ___sys_recvmsg+0xa9/0x890 [ 1329.700046][T17615] ? do_recvmmsg+0x682/0x1180 [ 1329.704793][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.709538][T17615] ? do_recvmmsg+0x6e4/0x1180 [ 1329.714319][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1329.719562][T17615] ? kmsan_internal_check_memory+0x94/0x530 [ 1329.725592][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1329.731542][T17615] do_recvmmsg+0x682/0x1180 [ 1329.736129][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1329.742483][T17615] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.749033][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.753812][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.760241][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.765497][T17615] ? exit_to_user_mode_prepare+0x119/0x220 [ 1329.771433][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.776374][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.780988][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.787418][T17615] RIP: 0023:0xf7f30549 [ 1329.791584][T17615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1329.811287][T17615] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1329.819775][T17615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1329.827829][T17615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1329.835924][T17615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1329.843969][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.852047][T17615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1329.860123][T17615] [ 1329.868322][T17615] Uninit was stored to memory at: [ 1329.873979][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.879223][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.884283][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.889099][T17615] do_recvmmsg+0x682/0x1180 [ 1329.893813][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.898616][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.905124][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.910377][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.915491][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.920121][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.926678][T17615] [ 1329.929060][T17615] Uninit was stored to memory at: [ 1329.934327][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.939574][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1329.944681][T17615] ___sys_recvmsg+0x19d/0x890 [ 1329.949492][T17615] do_recvmmsg+0x682/0x1180 [ 1329.954249][T17615] __sys_recvmmsg+0x113/0x450 [ 1329.959058][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1329.965573][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1329.970819][T17615] do_fast_syscall_32+0x33/0x70 [ 1329.975868][T17615] do_SYSENTER_32+0x1b/0x20 [ 1329.980497][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1329.987048][T17615] [ 1329.989438][T17615] Uninit was stored to memory at: [ 1329.994696][T17615] __get_compat_msghdr+0x514/0x750 [ 1329.999940][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.004995][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.009799][T17615] do_recvmmsg+0x682/0x1180 [ 1330.014500][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.019300][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.025766][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.031021][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.036129][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.040743][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.047260][T17615] [ 1330.049635][T17615] Uninit was stored to memory at: [ 1330.054927][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.060154][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.065180][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.069971][T17615] do_recvmmsg+0x682/0x1180 [ 1330.074684][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.079470][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.085938][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.091170][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.096233][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.100849][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.107371][T17615] [ 1330.109745][T17615] Uninit was stored to memory at: [ 1330.115031][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.120273][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.125372][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.130180][T17615] do_recvmmsg+0x682/0x1180 [ 1330.134936][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.139729][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.146158][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.151386][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.156412][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.161027][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.167585][T17615] [ 1330.170036][T17615] Uninit was stored to memory at: [ 1330.175337][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.180614][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.185676][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.190465][T17615] do_recvmmsg+0x682/0x1180 [ 1330.195182][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.199989][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.206465][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.211783][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.216748][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.221313][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.227866][T17615] [ 1330.230263][T17615] Uninit was stored to memory at: [ 1330.235563][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.240811][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.245843][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.250633][T17615] do_recvmmsg+0x682/0x1180 [ 1330.255344][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.260134][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.266590][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.271910][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.276887][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.281499][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.288015][T17615] [ 1330.290410][T17615] Local variable msg_sys created at: [ 1330.295899][T17615] do_recvmmsg+0x5c/0x1180 [ 1330.300424][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.501322][T17615] not chained 980000 origins [ 1330.506072][T17615] CPU: 1 PID: 17615 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1330.516326][T17615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1330.526452][T17615] Call Trace: [ 1330.529764][T17615] [ 1330.532729][T17615] dump_stack_lvl+0x1c8/0x256 [ 1330.537512][T17615] dump_stack+0x1a/0x1c [ 1330.541775][T17615] kmsan_internal_chain_origin+0x78/0x120 [ 1330.547638][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1330.553973][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1330.559863][T17615] ? ____sys_recvmsg+0x5c1/0x810 [ 1330.564891][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1330.570219][T17615] ? get_compat_msghdr+0x8c/0x1c0 [ 1330.575380][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1330.581280][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1330.586549][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1330.592446][T17615] ? should_fail+0x3f/0x810 [ 1330.597026][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1330.602214][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1330.608557][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1330.614468][T17615] __msan_chain_origin+0xbd/0x140 [ 1330.619618][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.624812][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.629730][T17615] ? ___sys_recvmsg+0xa9/0x890 [ 1330.634561][T17615] ? do_recvmmsg+0x682/0x1180 [ 1330.639306][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.644068][T17615] ? do_recvmmsg+0x6e4/0x1180 [ 1330.648894][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1330.654138][T17615] ? kmsan_internal_check_memory+0x94/0x530 [ 1330.660117][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1330.666029][T17615] do_recvmmsg+0x682/0x1180 [ 1330.670690][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1330.677070][T17615] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.683569][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.688326][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.694660][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.699845][T17615] ? exit_to_user_mode_prepare+0x119/0x220 [ 1330.705728][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.710648][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.715239][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.721732][T17615] RIP: 0023:0xf7f30549 [ 1330.725886][T17615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1330.745616][T17615] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1330.754152][T17615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1330.762205][T17615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1330.770281][T17615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1330.778302][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.786331][T17615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1330.794374][T17615] [ 1330.800051][T17615] Uninit was stored to memory at: [ 1330.805548][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.810791][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.815868][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.820675][T17615] do_recvmmsg+0x682/0x1180 [ 1330.825397][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.830205][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.836741][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.842064][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.847086][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.851811][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.858272][T17615] [ 1330.860621][T17615] Uninit was stored to memory at: [ 1330.865891][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.871110][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.876195][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.880984][T17615] do_recvmmsg+0x682/0x1180 [ 1330.885676][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.890461][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.896907][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.902230][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.907190][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.911905][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.918399][T17615] [ 1330.920749][T17615] Uninit was stored to memory at: [ 1330.926019][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.931241][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.936302][T17615] ___sys_recvmsg+0x19d/0x890 [ 1330.941102][T17615] do_recvmmsg+0x682/0x1180 [ 1330.945831][T17615] __sys_recvmmsg+0x113/0x450 [ 1330.950640][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1330.957177][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1330.962513][T17615] do_fast_syscall_32+0x33/0x70 [ 1330.967475][T17615] do_SYSENTER_32+0x1b/0x20 [ 1330.972204][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1330.978660][T17615] [ 1330.981007][T17615] Uninit was stored to memory at: [ 1330.986278][T17615] __get_compat_msghdr+0x514/0x750 [ 1330.991507][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1330.996550][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.001357][T17615] do_recvmmsg+0x682/0x1180 [ 1331.006098][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.010889][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.017332][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.022657][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.027620][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.032348][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.038807][T17615] [ 1331.041154][T17615] Uninit was stored to memory at: [ 1331.046421][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.051643][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.056726][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.061529][T17615] do_recvmmsg+0x682/0x1180 [ 1331.066306][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.071099][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.077573][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.082893][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.087857][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.092585][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.099041][T17615] [ 1331.101395][T17615] Uninit was stored to memory at: [ 1331.106663][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.111980][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.116962][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.121867][T17615] do_recvmmsg+0x682/0x1180 [ 1331.126499][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.131283][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.137730][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.143049][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.148009][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.152742][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.159215][T17615] [ 1331.161606][T17615] Uninit was stored to memory at: [ 1331.166902][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.172254][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.177218][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.182124][T17615] do_recvmmsg+0x682/0x1180 [ 1331.186760][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.191602][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.198116][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.203433][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.208421][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.213155][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.219612][T17615] [ 1331.222126][T17615] Local variable msg_sys created at: [ 1331.227467][T17615] do_recvmmsg+0x5c/0x1180 [ 1331.232110][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.424635][T17615] not chained 990000 origins [ 1331.429303][T17615] CPU: 1 PID: 17615 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1331.439533][T17615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1331.449657][T17615] Call Trace: [ 1331.452973][T17615] [ 1331.455956][T17615] dump_stack_lvl+0x1c8/0x256 [ 1331.460738][T17615] dump_stack+0x1a/0x1c [ 1331.464995][T17615] kmsan_internal_chain_origin+0x78/0x120 [ 1331.470883][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1331.477330][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1331.483285][T17615] ? ____sys_recvmsg+0x5c1/0x810 [ 1331.488298][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1331.493567][T17615] ? get_compat_msghdr+0x8c/0x1c0 [ 1331.498657][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1331.504570][T17615] ? __get_compat_msghdr+0x5b/0x750 [ 1331.509838][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1331.515749][T17615] ? should_fail+0x3f/0x810 [ 1331.520333][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1331.525552][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1331.531957][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1331.537920][T17615] __msan_chain_origin+0xbd/0x140 [ 1331.543058][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.548257][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.553172][T17615] ? ___sys_recvmsg+0xa9/0x890 [ 1331.558014][T17615] ? do_recvmmsg+0x682/0x1180 [ 1331.565706][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.570508][T17615] ? do_recvmmsg+0x6e4/0x1180 [ 1331.575336][T17615] ? __stack_depot_save+0x21/0x4b0 [ 1331.580671][T17615] ? kmsan_internal_check_memory+0x94/0x530 [ 1331.586655][T17615] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1331.592552][T17615] do_recvmmsg+0x682/0x1180 [ 1331.597139][T17615] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1331.603467][T17615] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.609965][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.614718][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.621106][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.626314][T17615] ? exit_to_user_mode_prepare+0x119/0x220 [ 1331.632274][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.637265][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.641885][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.648368][T17615] RIP: 0023:0xf7f30549 [ 1331.652493][T17615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1331.672218][T17615] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1331.680774][T17615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1331.688872][T17615] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1331.696899][T17615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1331.704922][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1331.712944][T17615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1331.720996][T17615] [ 1331.729026][T17615] Uninit was stored to memory at: [ 1331.735650][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.740958][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.746050][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.750859][T17615] do_recvmmsg+0x682/0x1180 [ 1331.755612][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.760419][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.766925][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.772252][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.777236][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.782009][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.788468][T17615] [ 1331.790816][T17615] Uninit was stored to memory at: [ 1331.796129][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.801351][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.806430][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.811224][T17615] do_recvmmsg+0x682/0x1180 [ 1331.815920][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.820709][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.827156][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.832496][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.837482][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.842220][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.848699][T17615] [ 1331.851047][T17615] Uninit was stored to memory at: [ 1331.856363][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.861605][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.866709][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.871513][T17615] do_recvmmsg+0x682/0x1180 [ 1331.876284][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.881180][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.887714][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.893044][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.898015][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.902753][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.909278][T17615] [ 1331.911812][T17615] Uninit was stored to memory at: [ 1331.917075][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.922442][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.927426][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.932342][T17615] do_recvmmsg+0x682/0x1180 [ 1331.936959][T17615] __sys_recvmmsg+0x113/0x450 [ 1331.941855][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1331.948226][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1331.953568][T17615] do_fast_syscall_32+0x33/0x70 [ 1331.958553][T17615] do_SYSENTER_32+0x1b/0x20 [ 1331.963248][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1331.969709][T17615] [ 1331.972217][T17615] Uninit was stored to memory at: [ 1331.977407][T17615] __get_compat_msghdr+0x514/0x750 [ 1331.982744][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1331.987747][T17615] ___sys_recvmsg+0x19d/0x890 [ 1331.992681][T17615] do_recvmmsg+0x682/0x1180 [ 1331.997298][T17615] __sys_recvmmsg+0x113/0x450 [ 1332.002199][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1332.008586][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1332.013933][T17615] do_fast_syscall_32+0x33/0x70 [ 1332.018896][T17615] do_SYSENTER_32+0x1b/0x20 [ 1332.023606][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1332.030065][T17615] [ 1332.032582][T17615] Uninit was stored to memory at: [ 1332.037767][T17615] __get_compat_msghdr+0x514/0x750 [ 1332.043164][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1332.048130][T17615] ___sys_recvmsg+0x19d/0x890 [ 1332.053000][T17615] do_recvmmsg+0x682/0x1180 [ 1332.057613][T17615] __sys_recvmmsg+0x113/0x450 [ 1332.062538][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1332.068972][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1332.074334][T17615] do_fast_syscall_32+0x33/0x70 [ 1332.079315][T17615] do_SYSENTER_32+0x1b/0x20 [ 1332.084046][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1332.090558][T17615] [ 1332.093049][T17615] Uninit was stored to memory at: [ 1332.098188][T17615] __get_compat_msghdr+0x514/0x750 [ 1332.103529][T17615] get_compat_msghdr+0x8c/0x1c0 [ 1332.108490][T17615] ___sys_recvmsg+0x19d/0x890 [ 1332.113357][T17615] do_recvmmsg+0x682/0x1180 [ 1332.117970][T17615] __sys_recvmmsg+0x113/0x450 [ 1332.122876][T17615] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1332.129253][T17615] __do_fast_syscall_32+0xa2/0x100 [ 1332.134558][T17615] do_fast_syscall_32+0x33/0x70 [ 1332.139521][T17615] do_SYSENTER_32+0x1b/0x20 [ 1332.144249][T17615] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1332.150708][T17615] [ 1332.153208][T17615] Local variable msg_sys created at: [ 1332.158570][T17615] do_recvmmsg+0x5c/0x1180 [ 1332.163220][T17615] __sys_recvmmsg+0x113/0x450 09:39:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:39:18 executing program 0: syz_open_dev$midi(&(0x7f0000000040), 0x2, 0xc0d02) 09:39:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 09:39:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003000000080003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0x0) 09:39:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 09:39:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 09:39:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 1332.728740][T17658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1332.736220][T17658] IPv6: NLM_F_CREATE should be set when creating new route [ 1332.743693][T17658] IPv6: NLM_F_CREATE should be set when creating new route 09:39:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003000000080003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:18 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}], 0x10}, 0x0) 09:39:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003000000080003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1333.247025][T17668] loop4: detected capacity change from 0 to 6 [ 1333.441615][T17668] Dev loop4: unable to read RDB block 6 [ 1333.447690][T17668] loop4: unable to read partition table [ 1333.458549][T17668] loop4: partition table beyond EOD, truncated [ 1333.522639][T17668] FAT-fs (loop4): Directory bread(block 6) failed [ 1333.969410][T17665] not chained 1000000 origins [ 1333.974536][T17665] CPU: 0 PID: 17665 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1333.984831][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1333.994994][T17665] Call Trace: [ 1333.998344][T17665] [ 1334.001357][T17665] dump_stack_lvl+0x1c8/0x256 [ 1334.006210][T17665] dump_stack+0x1a/0x1c [ 1334.010512][T17665] kmsan_internal_chain_origin+0x78/0x120 [ 1334.016381][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1334.022775][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1334.028735][T17665] ? ____sys_recvmsg+0x5c1/0x810 [ 1334.033796][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1334.039120][T17665] ? get_compat_msghdr+0x8c/0x1c0 [ 1334.044261][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1334.050210][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1334.055531][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1334.061488][T17665] ? should_fail+0x3f/0x810 [ 1334.066122][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1334.071366][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1334.077757][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1334.083711][T17665] __msan_chain_origin+0xbd/0x140 [ 1334.088896][T17665] __get_compat_msghdr+0x514/0x750 [ 1334.094162][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1334.099135][T17665] ? ___sys_recvmsg+0xa9/0x890 [ 1334.104016][T17665] ? do_recvmmsg+0x682/0x1180 [ 1334.108816][T17665] ___sys_recvmsg+0x19d/0x890 [ 1334.113619][T17665] ? do_recvmmsg+0x6e4/0x1180 [ 1334.118441][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1334.123694][T17665] ? kmsan_internal_check_memory+0x94/0x530 [ 1334.129735][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1334.135688][T17665] do_recvmmsg+0x682/0x1180 [ 1334.140330][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1334.146721][T17665] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.153293][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.158101][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.164508][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1334.169764][T17665] ? exit_to_user_mode_prepare+0x119/0x220 [ 1334.175706][T17665] do_fast_syscall_32+0x33/0x70 [ 1334.180698][T17665] do_SYSENTER_32+0x1b/0x20 [ 1334.185318][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1334.191785][T17665] RIP: 0023:0xf7f30549 [ 1334.195944][T17665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1334.215694][T17665] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1334.224245][T17665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1334.232320][T17665] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1334.240389][T17665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1334.248470][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1334.256538][T17665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1334.264621][T17665] [ 1334.273023][T17665] Uninit was stored to memory at: [ 1334.278226][T17665] __get_compat_msghdr+0x514/0x750 [ 1334.283949][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1334.288945][T17665] ___sys_recvmsg+0x19d/0x890 [ 1334.293833][T17665] do_recvmmsg+0x682/0x1180 [ 1334.298493][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.303400][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.309799][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1334.315132][T17665] do_fast_syscall_32+0x33/0x70 [ 1334.320126][T17665] do_SYSENTER_32+0x1b/0x20 [ 1334.324839][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1334.331343][T17665] [ 1334.333830][T17665] Uninit was stored to memory at: [ 1334.339030][T17665] __get_compat_msghdr+0x514/0x750 [ 1334.344351][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1334.349372][T17665] ___sys_recvmsg+0x19d/0x890 [ 1334.354260][T17665] do_recvmmsg+0x682/0x1180 [ 1334.358904][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.363810][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.370209][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1334.375540][T17665] do_fast_syscall_32+0x33/0x70 [ 1334.380535][T17665] do_SYSENTER_32+0x1b/0x20 [ 1334.385265][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1334.391823][T17665] [ 1334.394225][T17665] Uninit was stored to memory at: [ 1334.399422][T17665] __get_compat_msghdr+0x514/0x750 [ 1334.404741][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1334.409729][T17665] ___sys_recvmsg+0x19d/0x890 [ 1334.414618][T17665] do_recvmmsg+0x682/0x1180 [ 1334.419256][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.424166][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.430568][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1334.435897][T17665] do_fast_syscall_32+0x33/0x70 [ 1334.440891][T17665] do_SYSENTER_32+0x1b/0x20 [ 1334.445598][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1334.452150][T17665] [ 1334.454551][T17665] Uninit was stored to memory at: [ 1334.459746][T17665] __get_compat_msghdr+0x514/0x750 [ 1334.465086][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1334.470072][T17665] ___sys_recvmsg+0x19d/0x890 [ 1334.474956][T17665] do_recvmmsg+0x682/0x1180 [ 1334.479585][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.484472][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.490863][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1334.496222][T17665] do_fast_syscall_32+0x33/0x70 [ 1334.501203][T17665] do_SYSENTER_32+0x1b/0x20 [ 1334.505907][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1334.512460][T17665] [ 1334.514854][T17665] Uninit was stored to memory at: [ 1334.520037][T17665] __get_compat_msghdr+0x514/0x750 [ 1334.525355][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1334.530338][T17665] ___sys_recvmsg+0x19d/0x890 [ 1334.535228][T17665] do_recvmmsg+0x682/0x1180 [ 1334.539859][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.544742][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.551130][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1334.556453][T17665] do_fast_syscall_32+0x33/0x70 [ 1334.561468][T17665] do_SYSENTER_32+0x1b/0x20 [ 1334.566174][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1334.572728][T17665] [ 1334.575117][T17665] Uninit was stored to memory at: [ 1334.580332][T17665] __get_compat_msghdr+0x514/0x750 [ 1334.585714][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1334.590695][T17665] ___sys_recvmsg+0x19d/0x890 [ 1334.595625][T17665] do_recvmmsg+0x682/0x1180 [ 1334.600258][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.605193][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.611584][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1334.616959][T17665] do_fast_syscall_32+0x33/0x70 [ 1334.622014][T17665] do_SYSENTER_32+0x1b/0x20 [ 1334.626636][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1334.633235][T17665] [ 1334.635620][T17665] Uninit was stored to memory at: [ 1334.640806][T17665] __get_compat_msghdr+0x514/0x750 [ 1334.646163][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1334.651125][T17665] ___sys_recvmsg+0x19d/0x890 [ 1334.656004][T17665] do_recvmmsg+0x682/0x1180 [ 1334.660648][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.665651][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1334.672076][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1334.677260][T17665] do_fast_syscall_32+0x33/0x70 [ 1334.682318][T17665] do_SYSENTER_32+0x1b/0x20 [ 1334.686958][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1334.693545][T17665] [ 1334.695937][T17665] Local variable msg_sys created at: [ 1334.701259][T17665] do_recvmmsg+0x5c/0x1180 [ 1334.705875][T17665] __sys_recvmmsg+0x113/0x450 [ 1334.922527][T17665] not chained 1010000 origins [ 1334.927311][T17665] CPU: 0 PID: 17665 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1334.937588][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1334.947722][T17665] Call Trace: [ 1334.951081][T17665] [ 1334.954091][T17665] dump_stack_lvl+0x1c8/0x256 [ 1334.958951][T17665] dump_stack+0x1a/0x1c [ 1334.963236][T17665] kmsan_internal_chain_origin+0x78/0x120 [ 1334.969123][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1334.975524][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1334.981486][T17665] ? ____sys_recvmsg+0x5c1/0x810 [ 1334.986503][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1334.991793][T17665] ? get_compat_msghdr+0x8c/0x1c0 [ 1334.996951][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1335.002915][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1335.008232][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1335.014157][T17665] ? should_fail+0x3f/0x810 [ 1335.018810][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1335.024005][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1335.030380][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1335.036299][T17665] __msan_chain_origin+0xbd/0x140 [ 1335.041455][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.046679][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.051644][T17665] ? ___sys_recvmsg+0xa9/0x890 [ 1335.056536][T17665] ? do_recvmmsg+0x682/0x1180 [ 1335.061345][T17665] ___sys_recvmsg+0x19d/0x890 [ 1335.066188][T17665] ? do_recvmmsg+0x6e4/0x1180 [ 1335.070949][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1335.076165][T17665] ? kmsan_internal_check_memory+0x94/0x530 [ 1335.082219][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1335.088171][T17665] do_recvmmsg+0x682/0x1180 [ 1335.092847][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1335.099227][T17665] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.105753][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.110568][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.116950][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1335.122159][T17665] ? exit_to_user_mode_prepare+0x119/0x220 [ 1335.128094][T17665] do_fast_syscall_32+0x33/0x70 [ 1335.133053][T17665] do_SYSENTER_32+0x1b/0x20 [ 1335.137670][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1335.144150][T17665] RIP: 0023:0xf7f30549 [ 1335.148316][T17665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1335.168086][T17665] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1335.176622][T17665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1335.184671][T17665] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1335.192749][T17665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1335.200816][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.208914][T17665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1335.216991][T17665] [ 1335.225053][T17665] Uninit was stored to memory at: [ 1335.230261][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.236101][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.241085][T17665] ___sys_recvmsg+0x19d/0x890 [ 1335.245968][T17665] do_recvmmsg+0x682/0x1180 [ 1335.250613][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.255540][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.262005][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1335.267249][T17665] do_fast_syscall_32+0x33/0x70 [ 1335.272343][T17665] do_SYSENTER_32+0x1b/0x20 [ 1335.276981][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1335.283533][T17665] [ 1335.285918][T17665] Uninit was stored to memory at: [ 1335.291056][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.296369][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.301338][T17665] ___sys_recvmsg+0x19d/0x890 [ 1335.306244][T17665] do_recvmmsg+0x682/0x1180 [ 1335.310857][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.315710][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.322172][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1335.327421][T17665] do_fast_syscall_32+0x33/0x70 [ 1335.332522][T17665] do_SYSENTER_32+0x1b/0x20 [ 1335.337144][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1335.343694][T17665] [ 1335.346081][T17665] Uninit was stored to memory at: [ 1335.351217][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.356530][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.361515][T17665] ___sys_recvmsg+0x19d/0x890 [ 1335.366427][T17665] do_recvmmsg+0x682/0x1180 [ 1335.371059][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.375956][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.382419][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1335.387669][T17665] do_fast_syscall_32+0x33/0x70 [ 1335.392768][T17665] do_SYSENTER_32+0x1b/0x20 [ 1335.397388][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1335.403943][T17665] [ 1335.406331][T17665] Uninit was stored to memory at: [ 1335.411468][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.416772][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.421833][T17665] ___sys_recvmsg+0x19d/0x890 [ 1335.426626][T17665] do_recvmmsg+0x682/0x1180 [ 1335.431216][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.436118][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.442583][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1335.447812][T17665] do_fast_syscall_32+0x33/0x70 [ 1335.453837][T17665] do_SYSENTER_32+0x1b/0x20 [ 1335.458467][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1335.464982][T17665] [ 1335.467335][T17665] Uninit was stored to memory at: [ 1335.472616][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.477855][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.482955][T17665] ___sys_recvmsg+0x19d/0x890 [ 1335.487771][T17665] do_recvmmsg+0x682/0x1180 [ 1335.492478][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.497279][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.503771][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1335.508999][T17665] do_fast_syscall_32+0x33/0x70 [ 1335.514062][T17665] do_SYSENTER_32+0x1b/0x20 [ 1335.518678][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1335.525249][T17665] [ 1335.527645][T17665] Uninit was stored to memory at: [ 1335.532948][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.538173][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.543231][T17665] ___sys_recvmsg+0x19d/0x890 [ 1335.548034][T17665] do_recvmmsg+0x682/0x1180 [ 1335.552777][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.557588][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.564094][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1335.569325][T17665] do_fast_syscall_32+0x33/0x70 [ 1335.574409][T17665] do_SYSENTER_32+0x1b/0x20 [ 1335.579041][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1335.585641][T17665] [ 1335.588032][T17665] Uninit was stored to memory at: [ 1335.593337][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.598586][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.603688][T17665] ___sys_recvmsg+0x19d/0x890 [ 1335.608516][T17665] do_recvmmsg+0x682/0x1180 [ 1335.613218][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.618020][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1335.624541][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1335.629772][T17665] do_fast_syscall_32+0x33/0x70 [ 1335.634824][T17665] do_SYSENTER_32+0x1b/0x20 [ 1335.639441][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1335.645959][T17665] [ 1335.648357][T17665] Local variable msg_sys created at: [ 1335.653809][T17665] do_recvmmsg+0x5c/0x1180 [ 1335.658333][T17665] __sys_recvmmsg+0x113/0x450 [ 1335.862590][T17665] not chained 1020000 origins [ 1335.871100][T17665] CPU: 0 PID: 17665 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1335.881344][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1335.891486][T17665] Call Trace: [ 1335.894823][T17665] [ 1335.897814][T17665] dump_stack_lvl+0x1c8/0x256 [ 1335.902641][T17665] dump_stack+0x1a/0x1c [ 1335.906939][T17665] kmsan_internal_chain_origin+0x78/0x120 [ 1335.912776][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1335.919185][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1335.925148][T17665] ? ____sys_recvmsg+0x5c1/0x810 [ 1335.930224][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1335.935548][T17665] ? get_compat_msghdr+0x8c/0x1c0 [ 1335.940704][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1335.946646][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1335.951938][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1335.957908][T17665] ? should_fail+0x3f/0x810 [ 1335.962560][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1335.967824][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1335.974232][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1335.980183][T17665] __msan_chain_origin+0xbd/0x140 [ 1335.985312][T17665] __get_compat_msghdr+0x514/0x750 [ 1335.990518][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1335.995448][T17665] ? ___sys_recvmsg+0xa9/0x890 [ 1336.000283][T17665] ? do_recvmmsg+0x682/0x1180 [ 1336.005056][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.009847][T17665] ? do_recvmmsg+0x6e4/0x1180 [ 1336.014633][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1336.019895][T17665] ? kmsan_internal_check_memory+0x94/0x530 [ 1336.025949][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.031921][T17665] do_recvmmsg+0x682/0x1180 [ 1336.036553][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1336.042908][T17665] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.049481][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.054300][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.060691][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1336.065900][T17665] ? exit_to_user_mode_prepare+0x119/0x220 [ 1336.071858][T17665] do_fast_syscall_32+0x33/0x70 [ 1336.076847][T17665] do_SYSENTER_32+0x1b/0x20 [ 1336.081481][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.087940][T17665] RIP: 0023:0xf7f30549 [ 1336.092075][T17665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1336.111842][T17665] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1336.120373][T17665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1336.128410][T17665] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1336.136461][T17665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1336.144522][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.152563][T17665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1336.160663][T17665] [ 1336.169215][T17665] Uninit was stored to memory at: [ 1336.179884][T17665] __get_compat_msghdr+0x514/0x750 [ 1336.185616][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1336.190599][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.195496][T17665] do_recvmmsg+0x682/0x1180 [ 1336.200120][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.204995][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.211366][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1336.216703][T17665] do_fast_syscall_32+0x33/0x70 [ 1336.221746][T17665] do_SYSENTER_32+0x1b/0x20 [ 1336.226361][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.232913][T17665] [ 1336.235300][T17665] Uninit was stored to memory at: [ 1336.240439][T17665] __get_compat_msghdr+0x514/0x750 [ 1336.245726][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1336.250686][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.255580][T17665] do_recvmmsg+0x682/0x1180 [ 1336.260193][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.265082][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.271475][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1336.276810][T17665] do_fast_syscall_32+0x33/0x70 [ 1336.281859][T17665] do_SYSENTER_32+0x1b/0x20 [ 1336.286504][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.293105][T17665] [ 1336.295494][T17665] Uninit was stored to memory at: [ 1336.300630][T17665] __get_compat_msghdr+0x514/0x750 [ 1336.305934][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1336.310895][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.315786][T17665] do_recvmmsg+0x682/0x1180 [ 1336.320403][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.325255][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.331650][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1336.337015][T17665] do_fast_syscall_32+0x33/0x70 [ 1336.342124][T17665] do_SYSENTER_32+0x1b/0x20 [ 1336.346749][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.353291][T17665] [ 1336.355681][T17665] Uninit was stored to memory at: [ 1336.360862][T17665] __get_compat_msghdr+0x514/0x750 [ 1336.366189][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1336.371167][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.376054][T17665] do_recvmmsg+0x682/0x1180 [ 1336.380682][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.385563][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.392089][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1336.397321][T17665] do_fast_syscall_32+0x33/0x70 [ 1336.402382][T17665] do_SYSENTER_32+0x1b/0x20 [ 1336.407017][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.413585][T17665] [ 1336.415960][T17665] Uninit was stored to memory at: [ 1336.421073][T17665] __get_compat_msghdr+0x514/0x750 [ 1336.426390][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1336.431355][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.436211][T17665] do_recvmmsg+0x682/0x1180 [ 1336.440841][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.445723][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.452147][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1336.457330][T17665] do_fast_syscall_32+0x33/0x70 [ 1336.462385][T17665] do_SYSENTER_32+0x1b/0x20 [ 1336.467021][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.473586][T17665] [ 1336.475967][T17665] Uninit was stored to memory at: [ 1336.481136][T17665] __get_compat_msghdr+0x514/0x750 [ 1336.486532][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1336.491515][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.496445][T17665] do_recvmmsg+0x682/0x1180 [ 1336.501058][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.505944][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.512413][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1336.517638][T17665] do_fast_syscall_32+0x33/0x70 [ 1336.522687][T17665] do_SYSENTER_32+0x1b/0x20 [ 1336.527320][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.533905][T17665] [ 1336.536280][T17665] Uninit was stored to memory at: [ 1336.541398][T17665] __get_compat_msghdr+0x514/0x750 [ 1336.546734][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1336.551810][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.556599][T17665] do_recvmmsg+0x682/0x1180 [ 1336.561165][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.566052][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.572536][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1336.577772][T17665] do_fast_syscall_32+0x33/0x70 [ 1336.582829][T17665] do_SYSENTER_32+0x1b/0x20 [ 1336.587461][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.594063][T17665] [ 1336.596465][T17665] Local variable msg_sys created at: [ 1336.601933][T17665] do_recvmmsg+0x5c/0x1180 [ 1336.606483][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.801213][T17665] not chained 1030000 origins [ 1336.806198][T17665] CPU: 0 PID: 17665 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1336.816494][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1336.826636][T17665] Call Trace: [ 1336.829951][T17665] [ 1336.832940][T17665] dump_stack_lvl+0x1c8/0x256 [ 1336.837775][T17665] dump_stack+0x1a/0x1c [ 1336.842037][T17665] kmsan_internal_chain_origin+0x78/0x120 [ 1336.847925][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1336.854279][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.860221][T17665] ? ____sys_recvmsg+0x5c1/0x810 [ 1336.865229][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1336.870495][T17665] ? get_compat_msghdr+0x8c/0x1c0 [ 1336.875604][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.881545][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1336.886820][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.892747][T17665] ? should_fail+0x3f/0x810 [ 1336.897388][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1336.902602][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1336.908980][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.914891][T17665] __msan_chain_origin+0xbd/0x140 [ 1336.920060][T17665] __get_compat_msghdr+0x514/0x750 [ 1336.925327][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1336.930287][T17665] ? ___sys_recvmsg+0xa9/0x890 [ 1336.935134][T17665] ? do_recvmmsg+0x682/0x1180 [ 1336.939949][T17665] ___sys_recvmsg+0x19d/0x890 [ 1336.944735][T17665] ? do_recvmmsg+0x6e4/0x1180 [ 1336.949494][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1336.954708][T17665] ? kmsan_internal_check_memory+0x94/0x530 [ 1336.960746][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.966691][T17665] do_recvmmsg+0x682/0x1180 [ 1336.971322][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1336.977656][T17665] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.984180][T17665] __sys_recvmmsg+0x113/0x450 [ 1336.988937][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.995293][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.000525][T17665] ? exit_to_user_mode_prepare+0x119/0x220 [ 1337.006412][T17665] do_fast_syscall_32+0x33/0x70 [ 1337.011336][T17665] do_SYSENTER_32+0x1b/0x20 [ 1337.015926][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.022406][T17665] RIP: 0023:0xf7f30549 [ 1337.026557][T17665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1337.046272][T17665] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1337.054823][T17665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1337.062916][T17665] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1337.070975][T17665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1337.079000][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1337.087024][T17665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.095091][T17665] [ 1337.108130][T17665] Uninit was stored to memory at: [ 1337.114955][T17665] __get_compat_msghdr+0x514/0x750 [ 1337.120196][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1337.125249][T17665] ___sys_recvmsg+0x19d/0x890 [ 1337.130043][T17665] do_recvmmsg+0x682/0x1180 [ 1337.134750][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.139540][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.146009][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.151236][T17665] do_fast_syscall_32+0x33/0x70 [ 1337.156299][T17665] do_SYSENTER_32+0x1b/0x20 [ 1337.160916][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.167432][T17665] [ 1337.169804][T17665] Uninit was stored to memory at: [ 1337.175103][T17665] __get_compat_msghdr+0x514/0x750 [ 1337.180326][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1337.185349][T17665] ___sys_recvmsg+0x19d/0x890 [ 1337.190161][T17665] do_recvmmsg+0x682/0x1180 [ 1337.194877][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.199684][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.206110][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.211337][T17665] do_fast_syscall_32+0x33/0x70 [ 1337.216360][T17665] do_SYSENTER_32+0x1b/0x20 [ 1337.220971][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.227486][T17665] [ 1337.229860][T17665] Uninit was stored to memory at: [ 1337.235152][T17665] __get_compat_msghdr+0x514/0x750 [ 1337.240375][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1337.245459][T17665] ___sys_recvmsg+0x19d/0x890 [ 1337.250272][T17665] do_recvmmsg+0x682/0x1180 [ 1337.254997][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.259787][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.266244][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.271478][T17665] do_fast_syscall_32+0x33/0x70 [ 1337.276502][T17665] do_SYSENTER_32+0x1b/0x20 [ 1337.281113][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.287658][T17665] [ 1337.290047][T17665] Uninit was stored to memory at: [ 1337.295320][T17665] __get_compat_msghdr+0x514/0x750 [ 1337.300565][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1337.305670][T17665] ___sys_recvmsg+0x19d/0x890 [ 1337.310463][T17665] do_recvmmsg+0x682/0x1180 [ 1337.315193][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.319980][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.326409][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.331638][T17665] do_fast_syscall_32+0x33/0x70 [ 1337.336725][T17665] do_SYSENTER_32+0x1b/0x20 [ 1337.341315][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.347831][T17665] [ 1337.350210][T17665] Uninit was stored to memory at: [ 1337.355488][T17665] __get_compat_msghdr+0x514/0x750 [ 1337.360710][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1337.365771][T17665] ___sys_recvmsg+0x19d/0x890 [ 1337.370565][T17665] do_recvmmsg+0x682/0x1180 [ 1337.375278][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.380069][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.386497][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.391819][T17665] do_fast_syscall_32+0x33/0x70 [ 1337.396804][T17665] do_SYSENTER_32+0x1b/0x20 [ 1337.401435][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.408009][T17665] [ 1337.410387][T17665] Uninit was stored to memory at: [ 1337.415639][T17665] __get_compat_msghdr+0x514/0x750 [ 1337.420860][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1337.425886][T17665] ___sys_recvmsg+0x19d/0x890 [ 1337.430685][T17665] do_recvmmsg+0x682/0x1180 [ 1337.435362][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.440167][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.446597][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.451917][T17665] do_fast_syscall_32+0x33/0x70 [ 1337.456879][T17665] do_SYSENTER_32+0x1b/0x20 [ 1337.461463][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.468019][T17665] [ 1337.470413][T17665] Uninit was stored to memory at: [ 1337.475695][T17665] __get_compat_msghdr+0x514/0x750 [ 1337.480922][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1337.485976][T17665] ___sys_recvmsg+0x19d/0x890 [ 1337.490763][T17665] do_recvmmsg+0x682/0x1180 [ 1337.495437][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.500274][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.506743][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.512067][T17665] do_fast_syscall_32+0x33/0x70 [ 1337.517031][T17665] do_SYSENTER_32+0x1b/0x20 [ 1337.521599][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.528139][T17665] [ 1337.530493][T17665] Local variable msg_sys created at: [ 1337.535952][T17665] do_recvmmsg+0x5c/0x1180 [ 1337.540480][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.797126][T17665] not chained 1040000 origins [ 1337.802093][T17665] CPU: 1 PID: 17665 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1337.812386][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1337.822546][T17665] Call Trace: [ 1337.825859][T17665] [ 1337.828823][T17665] dump_stack_lvl+0x1c8/0x256 [ 1337.833658][T17665] dump_stack+0x1a/0x1c [ 1337.837898][T17665] kmsan_internal_chain_origin+0x78/0x120 [ 1337.843712][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1337.850045][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1337.855931][T17665] ? ____sys_recvmsg+0x5c1/0x810 [ 1337.860947][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1337.866232][T17665] ? get_compat_msghdr+0x8c/0x1c0 [ 1337.871387][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1337.877278][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1337.882550][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1337.888466][T17665] ? should_fail+0x3f/0x810 [ 1337.893049][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1337.898238][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1337.904562][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1337.910448][T17665] __msan_chain_origin+0xbd/0x140 [ 1337.915572][T17665] __get_compat_msghdr+0x514/0x750 [ 1337.920842][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1337.925822][T17665] ? ___sys_recvmsg+0xa9/0x890 [ 1337.930715][T17665] ? do_recvmmsg+0x682/0x1180 [ 1337.935505][T17665] ___sys_recvmsg+0x19d/0x890 [ 1337.940266][T17665] ? do_recvmmsg+0x6e4/0x1180 [ 1337.945021][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1337.950215][T17665] ? kmsan_internal_check_memory+0x94/0x530 [ 1337.956194][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1337.962116][T17665] do_recvmmsg+0x682/0x1180 [ 1337.966775][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1337.973155][T17665] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.979671][T17665] __sys_recvmmsg+0x113/0x450 [ 1337.984444][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.990771][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1337.995957][T17665] ? exit_to_user_mode_prepare+0x119/0x220 [ 1338.001844][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.006781][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.011350][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.017802][T17665] RIP: 0023:0xf7f30549 [ 1338.021971][T17665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1338.041745][T17665] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1338.050228][T17665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1338.058253][T17665] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1338.066294][T17665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1338.074368][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.082426][T17665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1338.090461][T17665] [ 1338.098751][T17665] Uninit was stored to memory at: [ 1338.104769][T17665] __get_compat_msghdr+0x514/0x750 [ 1338.110001][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1338.115069][T17665] ___sys_recvmsg+0x19d/0x890 [ 1338.119971][T17665] do_recvmmsg+0x682/0x1180 [ 1338.124699][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.129505][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.135988][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1338.141247][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.146324][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.150954][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.157587][T17665] [ 1338.159975][T17665] Uninit was stored to memory at: [ 1338.165272][T17665] __get_compat_msghdr+0x514/0x750 [ 1338.170495][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1338.175531][T17665] ___sys_recvmsg+0x19d/0x890 [ 1338.180320][T17665] do_recvmmsg+0x682/0x1180 [ 1338.185055][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.189860][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.196347][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1338.201574][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.206620][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.211230][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.217800][T17665] [ 1338.220188][T17665] Uninit was stored to memory at: [ 1338.225508][T17665] __get_compat_msghdr+0x514/0x750 [ 1338.230754][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1338.235857][T17665] ___sys_recvmsg+0x19d/0x890 [ 1338.240643][T17665] do_recvmmsg+0x682/0x1180 [ 1338.245333][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.250141][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.256581][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1338.261896][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.266881][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.271510][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.278073][T17665] [ 1338.280467][T17665] Uninit was stored to memory at: [ 1338.285775][T17665] __get_compat_msghdr+0x514/0x750 [ 1338.291001][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1338.296102][T17665] ___sys_recvmsg+0x19d/0x890 [ 1338.300897][T17665] do_recvmmsg+0x682/0x1180 [ 1338.305638][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.310459][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.316910][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1338.322228][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.327210][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.331978][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.338442][T17665] [ 1338.340790][T17665] Uninit was stored to memory at: [ 1338.346091][T17665] __get_compat_msghdr+0x514/0x750 [ 1338.351329][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1338.356376][T17665] ___sys_recvmsg+0x19d/0x890 [ 1338.361173][T17665] do_recvmmsg+0x682/0x1180 [ 1338.365906][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.370739][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.377191][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1338.382519][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.387484][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.392207][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.398679][T17665] [ 1338.401029][T17665] Uninit was stored to memory at: [ 1338.406298][T17665] __get_compat_msghdr+0x514/0x750 [ 1338.411526][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1338.416609][T17665] ___sys_recvmsg+0x19d/0x890 [ 1338.421399][T17665] do_recvmmsg+0x682/0x1180 [ 1338.426151][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.430954][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.437448][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1338.442815][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.447803][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.452538][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.459003][T17665] [ 1338.461360][T17665] Uninit was stored to memory at: [ 1338.466650][T17665] __get_compat_msghdr+0x514/0x750 [ 1338.471962][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1338.476936][T17665] ___sys_recvmsg+0x19d/0x890 [ 1338.481816][T17665] do_recvmmsg+0x682/0x1180 [ 1338.486451][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.491235][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.497683][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1338.503002][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.507965][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.512697][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.519155][T17665] [ 1338.521508][T17665] Local variable msg_sys created at: [ 1338.526945][T17665] do_recvmmsg+0x5c/0x1180 [ 1338.531486][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.721866][T17665] not chained 1050000 origins [ 1338.726660][T17665] CPU: 0 PID: 17665 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1338.736960][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1338.747105][T17665] Call Trace: [ 1338.750418][T17665] [ 1338.753403][T17665] dump_stack_lvl+0x1c8/0x256 [ 1338.758242][T17665] dump_stack+0x1a/0x1c [ 1338.762507][T17665] kmsan_internal_chain_origin+0x78/0x120 [ 1338.768384][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1338.774789][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1338.780734][T17665] ? ____sys_recvmsg+0x5c1/0x810 [ 1338.785744][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1338.791011][T17665] ? get_compat_msghdr+0x8c/0x1c0 [ 1338.796100][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1338.802008][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1338.807342][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1338.813306][T17665] ? should_fail+0x3f/0x810 [ 1338.817941][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1338.823133][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1338.829463][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1338.835375][T17665] __msan_chain_origin+0xbd/0x140 [ 1338.840527][T17665] __get_compat_msghdr+0x514/0x750 [ 1338.845725][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1338.850643][T17665] ? ___sys_recvmsg+0xa9/0x890 [ 1338.855493][T17665] ? do_recvmmsg+0x682/0x1180 [ 1338.860282][T17665] ___sys_recvmsg+0x19d/0x890 [ 1338.865044][T17665] ? do_recvmmsg+0x6e4/0x1180 [ 1338.869841][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1338.875061][T17665] ? kmsan_internal_check_memory+0x94/0x530 [ 1338.881113][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1338.887076][T17665] do_recvmmsg+0x682/0x1180 [ 1338.891724][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1338.898128][T17665] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.904651][T17665] __sys_recvmmsg+0x113/0x450 [ 1338.909449][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1338.915800][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1338.920991][T17665] ? exit_to_user_mode_prepare+0x119/0x220 [ 1338.926877][T17665] do_fast_syscall_32+0x33/0x70 [ 1338.931820][T17665] do_SYSENTER_32+0x1b/0x20 [ 1338.936440][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1338.942910][T17665] RIP: 0023:0xf7f30549 [ 1338.947058][T17665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1338.966755][T17665] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1338.975260][T17665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1338.983354][T17665] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1338.991453][T17665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1338.999527][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.007558][T17665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.015617][T17665] [ 1339.023743][T17665] Uninit was stored to memory at: [ 1339.028946][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.034717][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.039719][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.044604][T17665] do_recvmmsg+0x682/0x1180 [ 1339.049237][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.054195][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.060572][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1339.065933][T17665] do_fast_syscall_32+0x33/0x70 [ 1339.070904][T17665] do_SYSENTER_32+0x1b/0x20 [ 1339.075584][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.082131][T17665] [ 1339.084518][T17665] Uninit was stored to memory at: [ 1339.089653][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.094973][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.099953][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.104880][T17665] do_recvmmsg+0x682/0x1180 [ 1339.109516][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.114409][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.120777][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1339.126103][T17665] do_fast_syscall_32+0x33/0x70 [ 1339.131065][T17665] do_SYSENTER_32+0x1b/0x20 [ 1339.135743][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.142292][T17665] [ 1339.144681][T17665] Uninit was stored to memory at: [ 1339.149867][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.155201][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.160167][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.165059][T17665] do_recvmmsg+0x682/0x1180 [ 1339.169672][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.174524][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.180901][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1339.186226][T17665] do_fast_syscall_32+0x33/0x70 [ 1339.191188][T17665] do_SYSENTER_32+0x1b/0x20 [ 1339.195896][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.202447][T17665] [ 1339.204833][T17665] Uninit was stored to memory at: [ 1339.210021][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.215378][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.220337][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.225188][T17665] do_recvmmsg+0x682/0x1180 [ 1339.229800][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.234683][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.241051][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1339.246366][T17665] do_fast_syscall_32+0x33/0x70 [ 1339.251345][T17665] do_SYSENTER_32+0x1b/0x20 [ 1339.256047][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.262593][T17665] [ 1339.264979][T17665] Uninit was stored to memory at: [ 1339.270109][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.275389][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.280352][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.285206][T17665] do_recvmmsg+0x682/0x1180 [ 1339.289820][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.294721][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.301099][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1339.306444][T17665] do_fast_syscall_32+0x33/0x70 [ 1339.311468][T17665] do_SYSENTER_32+0x1b/0x20 [ 1339.316198][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.322763][T17665] [ 1339.325160][T17665] Uninit was stored to memory at: [ 1339.330299][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.335589][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.340557][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.345454][T17665] do_recvmmsg+0x682/0x1180 [ 1339.350091][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.354983][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.361303][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1339.366597][T17665] do_fast_syscall_32+0x33/0x70 [ 1339.371565][T17665] do_SYSENTER_32+0x1b/0x20 [ 1339.376244][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.382799][T17665] [ 1339.385183][T17665] Uninit was stored to memory at: [ 1339.390323][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.395618][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.400587][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.405479][T17665] do_recvmmsg+0x682/0x1180 [ 1339.410091][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.414970][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.421342][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1339.426671][T17665] do_fast_syscall_32+0x33/0x70 [ 1339.431655][T17665] do_SYSENTER_32+0x1b/0x20 [ 1339.436427][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.443060][T17665] [ 1339.445440][T17665] Local variable msg_sys created at: [ 1339.450781][T17665] do_recvmmsg+0x5c/0x1180 [ 1339.455454][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.649061][T17665] not chained 1060000 origins [ 1339.659034][T17665] CPU: 0 PID: 17665 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1339.669316][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1339.679439][T17665] Call Trace: [ 1339.682784][T17665] [ 1339.685794][T17665] dump_stack_lvl+0x1c8/0x256 [ 1339.690658][T17665] dump_stack+0x1a/0x1c [ 1339.694961][T17665] kmsan_internal_chain_origin+0x78/0x120 [ 1339.700771][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1339.707104][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.713014][T17665] ? ____sys_recvmsg+0x5c1/0x810 [ 1339.718047][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1339.723330][T17665] ? get_compat_msghdr+0x8c/0x1c0 [ 1339.728465][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.734354][T17665] ? __get_compat_msghdr+0x5b/0x750 [ 1339.739625][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.745553][T17665] ? should_fail+0x3f/0x810 [ 1339.750206][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1339.755469][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1339.761874][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.767848][T17665] __msan_chain_origin+0xbd/0x140 [ 1339.773021][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.778266][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.783207][T17665] ? ___sys_recvmsg+0xa9/0x890 [ 1339.788105][T17665] ? do_recvmmsg+0x682/0x1180 [ 1339.792881][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.797670][T17665] ? do_recvmmsg+0x6e4/0x1180 [ 1339.802462][T17665] ? __stack_depot_save+0x21/0x4b0 [ 1339.807713][T17665] ? kmsan_internal_check_memory+0x94/0x530 [ 1339.813722][T17665] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.819667][T17665] do_recvmmsg+0x682/0x1180 [ 1339.824281][T17665] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1339.830664][T17665] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.837163][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.841940][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.848343][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1339.853604][T17665] ? exit_to_user_mode_prepare+0x119/0x220 [ 1339.859559][T17665] do_fast_syscall_32+0x33/0x70 [ 1339.864545][T17665] do_SYSENTER_32+0x1b/0x20 [ 1339.869180][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.875653][T17665] RIP: 0023:0xf7f30549 [ 1339.879799][T17665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1339.899495][T17665] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1339.907981][T17665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1339.916027][T17665] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1339.924087][T17665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1339.932129][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.940185][T17665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.948224][T17665] [ 1339.956760][T17665] Uninit was stored to memory at: [ 1339.967479][T17665] __get_compat_msghdr+0x514/0x750 [ 1339.973097][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1339.978073][T17665] ___sys_recvmsg+0x19d/0x890 [ 1339.982956][T17665] do_recvmmsg+0x682/0x1180 [ 1339.987588][T17665] __sys_recvmmsg+0x113/0x450 [ 1339.992467][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.998852][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1340.004175][T17665] do_fast_syscall_32+0x33/0x70 [ 1340.009156][T17665] do_SYSENTER_32+0x1b/0x20 [ 1340.013858][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.020316][T17665] [ 1340.022811][T17665] Uninit was stored to memory at: [ 1340.027952][T17665] __get_compat_msghdr+0x514/0x750 [ 1340.033274][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1340.038237][T17665] ___sys_recvmsg+0x19d/0x890 [ 1340.043103][T17665] do_recvmmsg+0x682/0x1180 [ 1340.047712][T17665] __sys_recvmmsg+0x113/0x450 [ 1340.052594][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1340.058961][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1340.064287][T17665] do_fast_syscall_32+0x33/0x70 [ 1340.069256][T17665] do_SYSENTER_32+0x1b/0x20 [ 1340.073965][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.080448][T17665] [ 1340.082955][T17665] Uninit was stored to memory at: [ 1340.088135][T17665] __get_compat_msghdr+0x514/0x750 [ 1340.093448][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1340.098427][T17665] ___sys_recvmsg+0x19d/0x890 [ 1340.103274][T17665] do_recvmmsg+0x682/0x1180 [ 1340.107890][T17665] __sys_recvmmsg+0x113/0x450 [ 1340.112768][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1340.119155][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1340.124496][T17665] do_fast_syscall_32+0x33/0x70 [ 1340.129459][T17665] do_SYSENTER_32+0x1b/0x20 [ 1340.134172][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.140631][T17665] [ 1340.143100][T17665] Uninit was stored to memory at: [ 1340.148237][T17665] __get_compat_msghdr+0x514/0x750 [ 1340.153558][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1340.158516][T17665] ___sys_recvmsg+0x19d/0x890 [ 1340.163385][T17665] do_recvmmsg+0x682/0x1180 [ 1340.168023][T17665] __sys_recvmmsg+0x113/0x450 [ 1340.172955][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1340.179332][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1340.184667][T17665] do_fast_syscall_32+0x33/0x70 [ 1340.189643][T17665] do_SYSENTER_32+0x1b/0x20 [ 1340.194361][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.201021][T17665] [ 1340.203537][T17665] Uninit was stored to memory at: [ 1340.208680][T17665] __get_compat_msghdr+0x514/0x750 [ 1340.213997][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1340.218977][T17665] ___sys_recvmsg+0x19d/0x890 [ 1340.223859][T17665] do_recvmmsg+0x682/0x1180 [ 1340.228489][T17665] __sys_recvmmsg+0x113/0x450 [ 1340.233435][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1340.239807][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1340.245137][T17665] do_fast_syscall_32+0x33/0x70 [ 1340.250100][T17665] do_SYSENTER_32+0x1b/0x20 [ 1340.254778][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.261234][T17665] [ 1340.263731][T17665] Uninit was stored to memory at: [ 1340.268914][T17665] __get_compat_msghdr+0x514/0x750 [ 1340.274256][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1340.279214][T17665] ___sys_recvmsg+0x19d/0x890 [ 1340.284105][T17665] do_recvmmsg+0x682/0x1180 [ 1340.288719][T17665] __sys_recvmmsg+0x113/0x450 [ 1340.293602][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1340.299974][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1340.305315][T17665] do_fast_syscall_32+0x33/0x70 [ 1340.310302][T17665] do_SYSENTER_32+0x1b/0x20 [ 1340.315063][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.321523][T17665] [ 1340.324016][T17665] Uninit was stored to memory at: [ 1340.329248][T17665] __get_compat_msghdr+0x514/0x750 [ 1340.334575][T17665] get_compat_msghdr+0x8c/0x1c0 [ 1340.339556][T17665] ___sys_recvmsg+0x19d/0x890 [ 1340.344454][T17665] do_recvmmsg+0x682/0x1180 [ 1340.349065][T17665] __sys_recvmmsg+0x113/0x450 [ 1340.353951][T17665] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1340.360342][T17665] __do_fast_syscall_32+0xa2/0x100 [ 1340.365644][T17665] do_fast_syscall_32+0x33/0x70 [ 1340.370627][T17665] do_SYSENTER_32+0x1b/0x20 [ 1340.375382][T17665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.381937][T17665] [ 1340.384309][T17665] Local variable msg_sys created at: [ 1340.389620][T17665] do_recvmmsg+0x5c/0x1180 [ 1340.394240][T17665] __sys_recvmmsg+0x113/0x450 09:39:26 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000008e80), 0x101040, 0x0) 09:39:26 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000008e80), 0x0, 0x0) 09:39:26 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x1) 09:39:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003000000080003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:39:26 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000640), 0x0) 09:39:26 executing program 3: syz_emit_ethernet(0x15, &(0x7f0000000040)={@dev, @multicast, @val={@void}, {@mpls_uc={0x8847, {[], @llc={@llc={0x0, 0x0, "df"}}}}}}, 0x0) 09:39:26 executing program 0: syz_emit_ethernet(0x15, &(0x7f0000000040)={@random="d994ce70cc24", @random="5b8b90c7c9de", @val={@void}, {@llc_tr={0x11, {@llc={0x0, 0x0, '6'}}}}}, 0x0) 09:39:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf25000800010003000000080003", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1341.150738][T17705] loop4: detected capacity change from 0 to 6 09:39:26 executing program 3: request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "4f5a0759a23807e58d0d840c28920d9a13daac2eef15f19038797c2a6103903c62c546575c172fdfce9f51dd2dff464e824ce8e42fd1dba265f5875f7c47f9dd"}, 0x48, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0x0, 0x0) 09:39:26 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "462b2acbc0e459e1e08a6b5142723ecd12c1cf60c6c5b21198f4176b51414a130e4768a5e9cdd9362a6f4d5fe17cc33cea777522fa3ab7c916c4bdebad02d6f0"}, 0x48, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='ceph\x00', &(0x7f0000000180)='/dev/uinput\x00') 09:39:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) [ 1341.336078][T17705] Dev loop4: unable to read RDB block 6 [ 1341.342829][T17705] loop4: unable to read partition table [ 1341.445676][T17705] loop4: partition table beyond EOD, truncated [ 1341.646004][T17705] FAT-fs (loop4): Directory bread(block 6) failed [ 1342.270180][T17704] not chained 1070000 origins [ 1342.275139][T17704] CPU: 0 PID: 17704 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1342.285440][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1342.295602][T17704] Call Trace: [ 1342.298950][T17704] [ 1342.301948][T17704] dump_stack_lvl+0x1c8/0x256 [ 1342.306811][T17704] dump_stack+0x1a/0x1c [ 1342.311134][T17704] kmsan_internal_chain_origin+0x78/0x120 [ 1342.317004][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1342.323420][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.329381][T17704] ? ____sys_recvmsg+0x5c1/0x810 [ 1342.334462][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1342.339735][T17704] ? get_compat_msghdr+0x8c/0x1c0 [ 1342.344854][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.350818][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1342.356162][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.362133][T17704] ? should_fail+0x3f/0x810 [ 1342.366787][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1342.372049][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1342.378446][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.384419][T17704] __msan_chain_origin+0xbd/0x140 [ 1342.389595][T17704] __get_compat_msghdr+0x514/0x750 [ 1342.394857][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1342.399804][T17704] ? ___sys_recvmsg+0xa9/0x890 [ 1342.404702][T17704] ? do_recvmmsg+0x682/0x1180 [ 1342.409517][T17704] ___sys_recvmsg+0x19d/0x890 [ 1342.414323][T17704] ? do_recvmmsg+0x6e4/0x1180 [ 1342.419156][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1342.424424][T17704] ? kmsan_internal_check_memory+0x94/0x530 [ 1342.430477][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.436433][T17704] do_recvmmsg+0x682/0x1180 [ 1342.441053][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1342.447469][T17704] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.454047][T17704] __sys_recvmmsg+0x113/0x450 [ 1342.458873][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.465283][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1342.470528][T17704] ? exit_to_user_mode_prepare+0x119/0x220 [ 1342.476430][T17704] do_fast_syscall_32+0x33/0x70 [ 1342.481379][T17704] do_SYSENTER_32+0x1b/0x20 [ 1342.486022][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.492511][T17704] RIP: 0023:0xf7f30549 [ 1342.496683][T17704] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1342.516478][T17704] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1342.525032][T17704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1342.533125][T17704] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1342.541206][T17704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.549285][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.557368][T17704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.565470][T17704] [ 1342.573655][T17704] Uninit was stored to memory at: [ 1342.578865][T17704] __get_compat_msghdr+0x514/0x750 [ 1342.584593][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1342.589578][T17704] ___sys_recvmsg+0x19d/0x890 [ 1342.594466][T17704] do_recvmmsg+0x682/0x1180 [ 1342.599101][T17704] __sys_recvmmsg+0x113/0x450 [ 1342.603994][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.610387][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1342.615710][T17704] do_fast_syscall_32+0x33/0x70 [ 1342.620693][T17704] do_SYSENTER_32+0x1b/0x20 [ 1342.625442][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.631999][T17704] [ 1342.634389][T17704] Uninit was stored to memory at: [ 1342.639575][T17704] __get_compat_msghdr+0x514/0x750 [ 1342.644947][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1342.649933][T17704] ___sys_recvmsg+0x19d/0x890 [ 1342.654856][T17704] do_recvmmsg+0x682/0x1180 [ 1342.659493][T17704] __sys_recvmmsg+0x113/0x450 [ 1342.664427][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.670815][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1342.676178][T17704] do_fast_syscall_32+0x33/0x70 [ 1342.681164][T17704] do_SYSENTER_32+0x1b/0x20 [ 1342.685914][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.692467][T17704] [ 1342.694855][T17704] Uninit was stored to memory at: [ 1342.700052][T17704] __get_compat_msghdr+0x514/0x750 [ 1342.705414][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1342.710376][T17704] ___sys_recvmsg+0x19d/0x890 [ 1342.715269][T17704] do_recvmmsg+0x682/0x1180 [ 1342.719894][T17704] __sys_recvmmsg+0x113/0x450 [ 1342.724783][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.731188][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1342.736573][T17704] do_fast_syscall_32+0x33/0x70 [ 1342.741538][T17704] do_SYSENTER_32+0x1b/0x20 [ 1342.746247][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.752796][T17704] [ 1342.755181][T17704] Uninit was stored to memory at: [ 1342.760363][T17704] __get_compat_msghdr+0x514/0x750 [ 1342.765708][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1342.770689][T17704] ___sys_recvmsg+0x19d/0x890 [ 1342.775610][T17704] do_recvmmsg+0x682/0x1180 [ 1342.780240][T17704] __sys_recvmmsg+0x113/0x450 [ 1342.785169][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.791563][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1342.796940][T17704] do_fast_syscall_32+0x33/0x70 [ 1342.802073][T17704] do_SYSENTER_32+0x1b/0x20 [ 1342.806709][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.813314][T17704] [ 1342.815705][T17704] Uninit was stored to memory at: [ 1342.820889][T17704] __get_compat_msghdr+0x514/0x750 [ 1342.826253][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1342.831232][T17704] ___sys_recvmsg+0x19d/0x890 [ 1342.836165][T17704] do_recvmmsg+0x682/0x1180 [ 1342.840800][T17704] __sys_recvmmsg+0x113/0x450 [ 1342.845740][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.852204][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1342.857454][T17704] do_fast_syscall_32+0x33/0x70 [ 1342.862557][T17704] do_SYSENTER_32+0x1b/0x20 [ 1342.867190][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.873791][T17704] [ 1342.876178][T17704] Uninit was stored to memory at: [ 1342.881363][T17704] __get_compat_msghdr+0x514/0x750 [ 1342.886728][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1342.891789][T17704] ___sys_recvmsg+0x19d/0x890 [ 1342.896601][T17704] do_recvmmsg+0x682/0x1180 [ 1342.901248][T17704] __sys_recvmmsg+0x113/0x450 [ 1342.906176][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.912657][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1342.917920][T17704] do_fast_syscall_32+0x33/0x70 [ 1342.923031][T17704] do_SYSENTER_32+0x1b/0x20 [ 1342.927679][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.934278][T17704] [ 1342.936665][T17704] Uninit was stored to memory at: [ 1342.941932][T17704] __get_compat_msghdr+0x514/0x750 [ 1342.947167][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1342.952259][T17704] ___sys_recvmsg+0x19d/0x890 [ 1342.957065][T17704] do_recvmmsg+0x682/0x1180 [ 1342.961829][T17704] __sys_recvmmsg+0x113/0x450 [ 1342.966635][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.973141][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1342.978402][T17704] do_fast_syscall_32+0x33/0x70 [ 1342.983515][T17704] do_SYSENTER_32+0x1b/0x20 [ 1342.988164][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.994763][T17704] [ 1342.997153][T17704] Local variable msg_sys created at: [ 1343.002641][T17704] do_recvmmsg+0x5c/0x1180 [ 1343.007186][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.230796][T17704] not chained 1080000 origins [ 1343.235637][T17704] CPU: 0 PID: 17704 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1343.245890][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1343.256062][T17704] Call Trace: [ 1343.259380][T17704] [ 1343.262366][T17704] dump_stack_lvl+0x1c8/0x256 [ 1343.267232][T17704] dump_stack+0x1a/0x1c [ 1343.271549][T17704] kmsan_internal_chain_origin+0x78/0x120 [ 1343.277365][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1343.283725][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.289684][T17704] ? ____sys_recvmsg+0x5c1/0x810 [ 1343.294740][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1343.300057][T17704] ? get_compat_msghdr+0x8c/0x1c0 [ 1343.305174][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.311121][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1343.316415][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.322387][T17704] ? should_fail+0x3f/0x810 [ 1343.327086][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1343.332308][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1343.338696][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.344617][T17704] __msan_chain_origin+0xbd/0x140 [ 1343.349774][T17704] __get_compat_msghdr+0x514/0x750 [ 1343.354976][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1343.359905][T17704] ? ___sys_recvmsg+0xa9/0x890 [ 1343.364790][T17704] ? do_recvmmsg+0x682/0x1180 [ 1343.369589][T17704] ___sys_recvmsg+0x19d/0x890 [ 1343.374407][T17704] ? do_recvmmsg+0x6e4/0x1180 [ 1343.379208][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1343.384429][T17704] ? kmsan_internal_check_memory+0x94/0x530 [ 1343.390522][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.396451][T17704] do_recvmmsg+0x682/0x1180 [ 1343.401110][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1343.407491][T17704] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.414015][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.418833][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.425199][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1343.430437][T17704] ? exit_to_user_mode_prepare+0x119/0x220 [ 1343.436328][T17704] do_fast_syscall_32+0x33/0x70 [ 1343.441254][T17704] do_SYSENTER_32+0x1b/0x20 [ 1343.445851][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.452358][T17704] RIP: 0023:0xf7f30549 [ 1343.456537][T17704] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1343.476280][T17704] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1343.484784][T17704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1343.492873][T17704] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1343.500943][T17704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1343.508988][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1343.517050][T17704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.525119][T17704] [ 1343.533241][T17704] Uninit was stored to memory at: [ 1343.538456][T17704] __get_compat_msghdr+0x514/0x750 [ 1343.544297][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1343.549301][T17704] ___sys_recvmsg+0x19d/0x890 [ 1343.554181][T17704] do_recvmmsg+0x682/0x1180 [ 1343.558812][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.563698][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.570085][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1343.575420][T17704] do_fast_syscall_32+0x33/0x70 [ 1343.580390][T17704] do_SYSENTER_32+0x1b/0x20 [ 1343.585074][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.591553][T17704] [ 1343.594066][T17704] Uninit was stored to memory at: [ 1343.599254][T17704] __get_compat_msghdr+0x514/0x750 [ 1343.604584][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1343.609548][T17704] ___sys_recvmsg+0x19d/0x890 [ 1343.614432][T17704] do_recvmmsg+0x682/0x1180 [ 1343.619067][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.623968][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.630399][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1343.635727][T17704] do_fast_syscall_32+0x33/0x70 [ 1343.640713][T17704] do_SYSENTER_32+0x1b/0x20 [ 1343.645496][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.652050][T17704] [ 1343.654440][T17704] Uninit was stored to memory at: [ 1343.659599][T17704] __get_compat_msghdr+0x514/0x750 [ 1343.664896][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1343.669867][T17704] ___sys_recvmsg+0x19d/0x890 [ 1343.674762][T17704] do_recvmmsg+0x682/0x1180 [ 1343.679374][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.684231][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.690610][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1343.695941][T17704] do_fast_syscall_32+0x33/0x70 [ 1343.700912][T17704] do_SYSENTER_32+0x1b/0x20 [ 1343.705667][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.712214][T17704] [ 1343.714605][T17704] Uninit was stored to memory at: [ 1343.719773][T17704] __get_compat_msghdr+0x514/0x750 [ 1343.725155][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1343.730127][T17704] ___sys_recvmsg+0x19d/0x890 [ 1343.735017][T17704] do_recvmmsg+0x682/0x1180 [ 1343.739632][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.744529][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.750926][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1343.756303][T17704] do_fast_syscall_32+0x33/0x70 [ 1343.761288][T17704] do_SYSENTER_32+0x1b/0x20 [ 1343.766017][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.772574][T17704] [ 1343.774962][T17704] Uninit was stored to memory at: [ 1343.780100][T17704] __get_compat_msghdr+0x514/0x750 [ 1343.785454][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1343.790418][T17704] ___sys_recvmsg+0x19d/0x890 [ 1343.795334][T17704] do_recvmmsg+0x682/0x1180 [ 1343.799950][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.804806][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.811186][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1343.816512][T17704] do_fast_syscall_32+0x33/0x70 [ 1343.821480][T17704] do_SYSENTER_32+0x1b/0x20 [ 1343.826181][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.832746][T17704] [ 1343.835136][T17704] Uninit was stored to memory at: [ 1343.840272][T17704] __get_compat_msghdr+0x514/0x750 [ 1343.845586][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1343.850575][T17704] ___sys_recvmsg+0x19d/0x890 [ 1343.855460][T17704] do_recvmmsg+0x682/0x1180 [ 1343.860091][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.865049][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.871463][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1343.876764][T17704] do_fast_syscall_32+0x33/0x70 [ 1343.881826][T17704] do_SYSENTER_32+0x1b/0x20 [ 1343.886445][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.892999][T17704] [ 1343.895386][T17704] Uninit was stored to memory at: [ 1343.900549][T17704] __get_compat_msghdr+0x514/0x750 [ 1343.905910][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1343.910879][T17704] ___sys_recvmsg+0x19d/0x890 [ 1343.915740][T17704] do_recvmmsg+0x682/0x1180 [ 1343.920369][T17704] __sys_recvmmsg+0x113/0x450 [ 1343.925297][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.931752][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1343.936986][T17704] do_fast_syscall_32+0x33/0x70 [ 1343.942045][T17704] do_SYSENTER_32+0x1b/0x20 [ 1343.946677][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.953284][T17704] [ 1343.955675][T17704] Local variable msg_sys created at: [ 1343.961020][T17704] do_recvmmsg+0x5c/0x1180 [ 1343.965643][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.178685][T17704] not chained 1090000 origins [ 1344.183606][T17704] CPU: 0 PID: 17704 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1344.193899][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1344.204067][T17704] Call Trace: [ 1344.207381][T17704] [ 1344.210348][T17704] dump_stack_lvl+0x1c8/0x256 [ 1344.215170][T17704] dump_stack+0x1a/0x1c [ 1344.219466][T17704] kmsan_internal_chain_origin+0x78/0x120 [ 1344.225362][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1344.231700][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.237643][T17704] ? ____sys_recvmsg+0x5c1/0x810 [ 1344.242670][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1344.247978][T17704] ? get_compat_msghdr+0x8c/0x1c0 [ 1344.253090][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.259053][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1344.264394][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.270347][T17704] ? should_fail+0x3f/0x810 [ 1344.274955][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1344.280218][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1344.286598][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.292510][T17704] __msan_chain_origin+0xbd/0x140 [ 1344.297680][T17704] __get_compat_msghdr+0x514/0x750 [ 1344.302952][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1344.307920][T17704] ? ___sys_recvmsg+0xa9/0x890 [ 1344.312774][T17704] ? do_recvmmsg+0x682/0x1180 [ 1344.317567][T17704] ___sys_recvmsg+0x19d/0x890 [ 1344.322326][T17704] ? do_recvmmsg+0x6e4/0x1180 [ 1344.327127][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1344.332344][T17704] ? kmsan_internal_check_memory+0x94/0x530 [ 1344.338373][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.344279][T17704] do_recvmmsg+0x682/0x1180 [ 1344.348866][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1344.355221][T17704] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.361792][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.366623][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.373033][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1344.378269][T17704] ? exit_to_user_mode_prepare+0x119/0x220 [ 1344.384178][T17704] do_fast_syscall_32+0x33/0x70 [ 1344.389148][T17704] do_SYSENTER_32+0x1b/0x20 [ 1344.393742][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.400200][T17704] RIP: 0023:0xf7f30549 [ 1344.404332][T17704] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1344.424083][T17704] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1344.432600][T17704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1344.440676][T17704] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1344.448699][T17704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1344.456755][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.464833][T17704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1344.472932][T17704] [ 1344.480982][T17704] Uninit was stored to memory at: [ 1344.486678][T17704] __get_compat_msghdr+0x514/0x750 [ 1344.492004][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1344.496978][T17704] ___sys_recvmsg+0x19d/0x890 [ 1344.501854][T17704] do_recvmmsg+0x682/0x1180 [ 1344.506489][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.511299][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.517791][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1344.523121][T17704] do_fast_syscall_32+0x33/0x70 [ 1344.528085][T17704] do_SYSENTER_32+0x1b/0x20 [ 1344.532796][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.539260][T17704] [ 1344.541609][T17704] Uninit was stored to memory at: [ 1344.546876][T17704] __get_compat_msghdr+0x514/0x750 [ 1344.552195][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1344.557154][T17704] ___sys_recvmsg+0x19d/0x890 [ 1344.562038][T17704] do_recvmmsg+0x682/0x1180 [ 1344.566650][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.571429][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.577913][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1344.583231][T17704] do_fast_syscall_32+0x33/0x70 [ 1344.588214][T17704] do_SYSENTER_32+0x1b/0x20 [ 1344.592930][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.599389][T17704] [ 1344.601876][T17704] Uninit was stored to memory at: [ 1344.607068][T17704] __get_compat_msghdr+0x514/0x750 [ 1344.612428][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1344.617388][T17704] ___sys_recvmsg+0x19d/0x890 [ 1344.622264][T17704] do_recvmmsg+0x682/0x1180 [ 1344.626894][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.631830][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.638248][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1344.643648][T17704] do_fast_syscall_32+0x33/0x70 [ 1344.648631][T17704] do_SYSENTER_32+0x1b/0x20 [ 1344.653341][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.659800][T17704] [ 1344.662280][T17704] Uninit was stored to memory at: [ 1344.667419][T17704] __get_compat_msghdr+0x514/0x750 [ 1344.672725][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1344.677701][T17704] ___sys_recvmsg+0x19d/0x890 [ 1344.682637][T17704] do_recvmmsg+0x682/0x1180 [ 1344.687248][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.692138][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.698531][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1344.703898][T17704] do_fast_syscall_32+0x33/0x70 [ 1344.708889][T17704] do_SYSENTER_32+0x1b/0x20 [ 1344.713600][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.720078][T17704] [ 1344.722587][T17704] Uninit was stored to memory at: [ 1344.727770][T17704] __get_compat_msghdr+0x514/0x750 [ 1344.733132][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1344.738109][T17704] ___sys_recvmsg+0x19d/0x890 [ 1344.743035][T17704] do_recvmmsg+0x682/0x1180 [ 1344.747672][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.752596][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.758965][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1344.764261][T17704] do_fast_syscall_32+0x33/0x70 [ 1344.769222][T17704] do_SYSENTER_32+0x1b/0x20 [ 1344.773936][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.780396][T17704] [ 1344.782887][T17704] Uninit was stored to memory at: [ 1344.788028][T17704] __get_compat_msghdr+0x514/0x750 [ 1344.793348][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1344.798310][T17704] ___sys_recvmsg+0x19d/0x890 [ 1344.803207][T17704] do_recvmmsg+0x682/0x1180 [ 1344.807840][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.812774][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.819173][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1344.824500][T17704] do_fast_syscall_32+0x33/0x70 [ 1344.829466][T17704] do_SYSENTER_32+0x1b/0x20 [ 1344.834185][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.840647][T17704] [ 1344.843131][T17704] Uninit was stored to memory at: [ 1344.848289][T17704] __get_compat_msghdr+0x514/0x750 [ 1344.853614][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1344.858593][T17704] ___sys_recvmsg+0x19d/0x890 [ 1344.863521][T17704] do_recvmmsg+0x682/0x1180 [ 1344.868139][T17704] __sys_recvmmsg+0x113/0x450 [ 1344.873027][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.879419][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1344.884757][T17704] do_fast_syscall_32+0x33/0x70 [ 1344.889720][T17704] do_SYSENTER_32+0x1b/0x20 [ 1344.894430][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.900887][T17704] [ 1344.903389][T17704] Local variable msg_sys created at: [ 1344.908729][T17704] do_recvmmsg+0x5c/0x1180 [ 1344.913349][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.113084][T17704] not chained 1100000 origins [ 1345.117855][T17704] CPU: 0 PID: 17704 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1345.128109][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1345.138271][T17704] Call Trace: [ 1345.141628][T17704] [ 1345.144635][T17704] dump_stack_lvl+0x1c8/0x256 [ 1345.149475][T17704] dump_stack+0x1a/0x1c [ 1345.153734][T17704] kmsan_internal_chain_origin+0x78/0x120 [ 1345.159596][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1345.165956][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.171921][T17704] ? ____sys_recvmsg+0x5c1/0x810 [ 1345.176978][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1345.182262][T17704] ? get_compat_msghdr+0x8c/0x1c0 [ 1345.187417][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.193381][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1345.198722][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.204646][T17704] ? should_fail+0x3f/0x810 [ 1345.209279][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1345.214492][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1345.220870][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.226764][T17704] __msan_chain_origin+0xbd/0x140 [ 1345.231887][T17704] __get_compat_msghdr+0x514/0x750 [ 1345.237131][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1345.242068][T17704] ? ___sys_recvmsg+0xa9/0x890 [ 1345.246966][T17704] ? do_recvmmsg+0x682/0x1180 [ 1345.251775][T17704] ___sys_recvmsg+0x19d/0x890 [ 1345.256564][T17704] ? do_recvmmsg+0x6e4/0x1180 [ 1345.261320][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1345.266535][T17704] ? kmsan_internal_check_memory+0x94/0x530 [ 1345.272585][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.278531][T17704] do_recvmmsg+0x682/0x1180 [ 1345.283143][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1345.289548][T17704] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.296122][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.300924][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.307282][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1345.312499][T17704] ? exit_to_user_mode_prepare+0x119/0x220 [ 1345.318442][T17704] do_fast_syscall_32+0x33/0x70 [ 1345.323392][T17704] do_SYSENTER_32+0x1b/0x20 [ 1345.328013][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.334461][T17704] RIP: 0023:0xf7f30549 [ 1345.338609][T17704] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1345.358333][T17704] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1345.366877][T17704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1345.374937][T17704] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1345.383031][T17704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1345.391111][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1345.399157][T17704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1345.407249][T17704] [ 1345.415281][T17704] Uninit was stored to memory at: [ 1345.420491][T17704] __get_compat_msghdr+0x514/0x750 [ 1345.426287][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1345.431275][T17704] ___sys_recvmsg+0x19d/0x890 [ 1345.436161][T17704] do_recvmmsg+0x682/0x1180 [ 1345.440791][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.445634][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.452095][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1345.457325][T17704] do_fast_syscall_32+0x33/0x70 [ 1345.462383][T17704] do_SYSENTER_32+0x1b/0x20 [ 1345.467018][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.473618][T17704] [ 1345.476005][T17704] Uninit was stored to memory at: [ 1345.481141][T17704] __get_compat_msghdr+0x514/0x750 [ 1345.486468][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1345.491471][T17704] ___sys_recvmsg+0x19d/0x890 [ 1345.496408][T17704] do_recvmmsg+0x682/0x1180 [ 1345.501027][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.505933][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.512400][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1345.517648][T17704] do_fast_syscall_32+0x33/0x70 [ 1345.522777][T17704] do_SYSENTER_32+0x1b/0x20 [ 1345.527494][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.534061][T17704] [ 1345.536433][T17704] Uninit was stored to memory at: [ 1345.541548][T17704] __get_compat_msghdr+0x514/0x750 [ 1345.546834][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1345.551888][T17704] ___sys_recvmsg+0x19d/0x890 [ 1345.556679][T17704] do_recvmmsg+0x682/0x1180 [ 1345.561242][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.566088][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.572556][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1345.577806][T17704] do_fast_syscall_32+0x33/0x70 [ 1345.582920][T17704] do_SYSENTER_32+0x1b/0x20 [ 1345.587535][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.594081][T17704] [ 1345.596466][T17704] Uninit was stored to memory at: [ 1345.601651][T17704] __get_compat_msghdr+0x514/0x750 [ 1345.607010][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1345.612057][T17704] ___sys_recvmsg+0x19d/0x890 [ 1345.616865][T17704] do_recvmmsg+0x682/0x1180 [ 1345.621477][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.626363][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.632824][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1345.638072][T17704] do_fast_syscall_32+0x33/0x70 [ 1345.643128][T17704] do_SYSENTER_32+0x1b/0x20 [ 1345.647740][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.654255][T17704] [ 1345.656629][T17704] Uninit was stored to memory at: [ 1345.661900][T17704] __get_compat_msghdr+0x514/0x750 [ 1345.667138][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1345.672233][T17704] ___sys_recvmsg+0x19d/0x890 [ 1345.677018][T17704] do_recvmmsg+0x682/0x1180 [ 1345.681605][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.686491][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.693014][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1345.698246][T17704] do_fast_syscall_32+0x33/0x70 [ 1345.703323][T17704] do_SYSENTER_32+0x1b/0x20 [ 1345.707959][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.714523][T17704] [ 1345.716895][T17704] Uninit was stored to memory at: [ 1345.722201][T17704] __get_compat_msghdr+0x514/0x750 [ 1345.727440][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1345.732532][T17704] ___sys_recvmsg+0x19d/0x890 [ 1345.737336][T17704] do_recvmmsg+0x682/0x1180 [ 1345.742100][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.746911][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.753390][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1345.758618][T17704] do_fast_syscall_32+0x33/0x70 [ 1345.763700][T17704] do_SYSENTER_32+0x1b/0x20 [ 1345.768310][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.774829][T17704] [ 1345.777202][T17704] Uninit was stored to memory at: [ 1345.782483][T17704] __get_compat_msghdr+0x514/0x750 [ 1345.787706][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1345.792755][T17704] ___sys_recvmsg+0x19d/0x890 [ 1345.797561][T17704] do_recvmmsg+0x682/0x1180 [ 1345.802312][T17704] __sys_recvmmsg+0x113/0x450 [ 1345.807100][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.813561][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1345.818791][T17704] do_fast_syscall_32+0x33/0x70 [ 1345.823849][T17704] do_SYSENTER_32+0x1b/0x20 [ 1345.828464][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.835020][T17704] [ 1345.837412][T17704] Local variable msg_sys created at: [ 1345.842886][T17704] do_recvmmsg+0x5c/0x1180 [ 1345.847428][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.038208][T17704] not chained 1110000 origins [ 1346.043145][T17704] CPU: 0 PID: 17704 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1346.053437][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1346.063599][T17704] Call Trace: [ 1346.066958][T17704] [ 1346.069965][T17704] dump_stack_lvl+0x1c8/0x256 [ 1346.074824][T17704] dump_stack+0x1a/0x1c [ 1346.079163][T17704] kmsan_internal_chain_origin+0x78/0x120 [ 1346.085042][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1346.091451][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1346.097412][T17704] ? ____sys_recvmsg+0x5c1/0x810 [ 1346.102485][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1346.107815][T17704] ? get_compat_msghdr+0x8c/0x1c0 [ 1346.112981][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1346.118950][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1346.124288][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1346.130261][T17704] ? should_fail+0x3f/0x810 [ 1346.134919][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1346.140180][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1346.146587][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1346.152556][T17704] __msan_chain_origin+0xbd/0x140 [ 1346.157726][T17704] __get_compat_msghdr+0x514/0x750 [ 1346.162998][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1346.167981][T17704] ? ___sys_recvmsg+0xa9/0x890 [ 1346.172871][T17704] ? do_recvmmsg+0x682/0x1180 [ 1346.177685][T17704] ___sys_recvmsg+0x19d/0x890 [ 1346.182494][T17704] ? do_recvmmsg+0x6e4/0x1180 [ 1346.187318][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1346.192582][T17704] ? kmsan_internal_check_memory+0x94/0x530 [ 1346.198637][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1346.204586][T17704] do_recvmmsg+0x682/0x1180 [ 1346.209206][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1346.215614][T17704] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.222188][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.226985][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.233339][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1346.238571][T17704] ? exit_to_user_mode_prepare+0x119/0x220 [ 1346.244478][T17704] do_fast_syscall_32+0x33/0x70 [ 1346.249469][T17704] do_SYSENTER_32+0x1b/0x20 [ 1346.254103][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.260586][T17704] RIP: 0023:0xf7f30549 [ 1346.264706][T17704] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1346.284402][T17704] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1346.292910][T17704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1346.300975][T17704] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1346.309022][T17704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.317069][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1346.325146][T17704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.333257][T17704] [ 1346.341434][T17704] Uninit was stored to memory at: [ 1346.347140][T17704] __get_compat_msghdr+0x514/0x750 [ 1346.352465][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1346.357444][T17704] ___sys_recvmsg+0x19d/0x890 [ 1346.362413][T17704] do_recvmmsg+0x682/0x1180 [ 1346.367051][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.371967][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.378364][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1346.383751][T17704] do_fast_syscall_32+0x33/0x70 [ 1346.388730][T17704] do_SYSENTER_32+0x1b/0x20 [ 1346.393490][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.399965][T17704] [ 1346.402423][T17704] Uninit was stored to memory at: [ 1346.407609][T17704] __get_compat_msghdr+0x514/0x750 [ 1346.412972][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1346.417936][T17704] ___sys_recvmsg+0x19d/0x890 [ 1346.422829][T17704] do_recvmmsg+0x682/0x1180 [ 1346.427466][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.432386][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.438759][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1346.444085][T17704] do_fast_syscall_32+0x33/0x70 [ 1346.449051][T17704] do_SYSENTER_32+0x1b/0x20 [ 1346.453727][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.460193][T17704] [ 1346.462684][T17704] Uninit was stored to memory at: [ 1346.467880][T17704] __get_compat_msghdr+0x514/0x750 [ 1346.473242][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1346.478230][T17704] ___sys_recvmsg+0x19d/0x890 [ 1346.483153][T17704] do_recvmmsg+0x682/0x1180 [ 1346.487793][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.492722][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.499095][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1346.504422][T17704] do_fast_syscall_32+0x33/0x70 [ 1346.509390][T17704] do_SYSENTER_32+0x1b/0x20 [ 1346.514071][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.520530][T17704] [ 1346.523026][T17704] Uninit was stored to memory at: [ 1346.528212][T17704] __get_compat_msghdr+0x514/0x750 [ 1346.533731][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1346.538693][T17704] ___sys_recvmsg+0x19d/0x890 [ 1346.543583][T17704] do_recvmmsg+0x682/0x1180 [ 1346.548216][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.553114][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.559489][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1346.564819][T17704] do_fast_syscall_32+0x33/0x70 [ 1346.569803][T17704] do_SYSENTER_32+0x1b/0x20 [ 1346.574525][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.581017][T17704] [ 1346.583521][T17704] Uninit was stored to memory at: [ 1346.588708][T17704] __get_compat_msghdr+0x514/0x750 [ 1346.594037][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1346.598994][T17704] ___sys_recvmsg+0x19d/0x890 [ 1346.603876][T17704] do_recvmmsg+0x682/0x1180 [ 1346.608505][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.613399][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.619798][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1346.625126][T17704] do_fast_syscall_32+0x33/0x70 [ 1346.630107][T17704] do_SYSENTER_32+0x1b/0x20 [ 1346.634785][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.641245][T17704] [ 1346.643739][T17704] Uninit was stored to memory at: [ 1346.648877][T17704] __get_compat_msghdr+0x514/0x750 [ 1346.654203][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1346.659164][T17704] ___sys_recvmsg+0x19d/0x890 [ 1346.664045][T17704] do_recvmmsg+0x682/0x1180 [ 1346.668657][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.673511][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.679901][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1346.685226][T17704] do_fast_syscall_32+0x33/0x70 [ 1346.690210][T17704] do_SYSENTER_32+0x1b/0x20 [ 1346.694962][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.701420][T17704] [ 1346.703915][T17704] Uninit was stored to memory at: [ 1346.709052][T17704] __get_compat_msghdr+0x514/0x750 [ 1346.714367][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1346.719351][T17704] ___sys_recvmsg+0x19d/0x890 [ 1346.724279][T17704] do_recvmmsg+0x682/0x1180 [ 1346.728893][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.733743][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.740113][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1346.745443][T17704] do_fast_syscall_32+0x33/0x70 [ 1346.750406][T17704] do_SYSENTER_32+0x1b/0x20 [ 1346.755108][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.761566][T17704] [ 1346.764056][T17704] Local variable msg_sys created at: [ 1346.769413][T17704] do_recvmmsg+0x5c/0x1180 [ 1346.774042][T17704] __sys_recvmmsg+0x113/0x450 [ 1346.967808][T17704] not chained 1120000 origins [ 1346.972676][T17704] CPU: 0 PID: 17704 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1346.982939][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1346.993086][T17704] Call Trace: [ 1346.996400][T17704] [ 1346.999371][T17704] dump_stack_lvl+0x1c8/0x256 [ 1347.004182][T17704] dump_stack+0x1a/0x1c [ 1347.008474][T17704] kmsan_internal_chain_origin+0x78/0x120 [ 1347.014306][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1347.020691][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1347.026601][T17704] ? ____sys_recvmsg+0x5c1/0x810 [ 1347.031680][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1347.036994][T17704] ? get_compat_msghdr+0x8c/0x1c0 [ 1347.042105][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1347.048064][T17704] ? __get_compat_msghdr+0x5b/0x750 [ 1347.053398][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1347.059347][T17704] ? should_fail+0x3f/0x810 [ 1347.063951][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1347.069191][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1347.075523][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1347.081411][T17704] __msan_chain_origin+0xbd/0x140 [ 1347.086518][T17704] __get_compat_msghdr+0x514/0x750 [ 1347.091755][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1347.096736][T17704] ? ___sys_recvmsg+0xa9/0x890 [ 1347.101608][T17704] ? do_recvmmsg+0x682/0x1180 [ 1347.106373][T17704] ___sys_recvmsg+0x19d/0x890 [ 1347.111119][T17704] ? do_recvmmsg+0x6e4/0x1180 [ 1347.115874][T17704] ? __stack_depot_save+0x21/0x4b0 [ 1347.121083][T17704] ? kmsan_internal_check_memory+0x94/0x530 [ 1347.127084][T17704] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1347.133057][T17704] do_recvmmsg+0x682/0x1180 [ 1347.137715][T17704] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1347.144121][T17704] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.150669][T17704] __sys_recvmmsg+0x113/0x450 [ 1347.155451][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.161852][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1347.167086][T17704] ? exit_to_user_mode_prepare+0x119/0x220 [ 1347.172993][T17704] do_fast_syscall_32+0x33/0x70 [ 1347.177959][T17704] do_SYSENTER_32+0x1b/0x20 [ 1347.182550][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1347.189006][T17704] RIP: 0023:0xf7f30549 [ 1347.193138][T17704] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1347.212929][T17704] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1347.221486][T17704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1347.229554][T17704] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1347.237604][T17704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1347.245684][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.253765][T17704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1347.261864][T17704] [ 1347.269955][T17704] Uninit was stored to memory at: [ 1347.275625][T17704] __get_compat_msghdr+0x514/0x750 [ 1347.280874][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1347.285926][T17704] ___sys_recvmsg+0x19d/0x890 [ 1347.290732][T17704] do_recvmmsg+0x682/0x1180 [ 1347.295441][T17704] __sys_recvmmsg+0x113/0x450 [ 1347.300252][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.306770][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1347.312093][T17704] do_fast_syscall_32+0x33/0x70 [ 1347.317074][T17704] do_SYSENTER_32+0x1b/0x20 [ 1347.321800][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1347.328260][T17704] [ 1347.330607][T17704] Uninit was stored to memory at: [ 1347.335891][T17704] __get_compat_msghdr+0x514/0x750 [ 1347.341115][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1347.346171][T17704] ___sys_recvmsg+0x19d/0x890 [ 1347.350959][T17704] do_recvmmsg+0x682/0x1180 [ 1347.355665][T17704] __sys_recvmmsg+0x113/0x450 [ 1347.360456][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.366916][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1347.372233][T17704] do_fast_syscall_32+0x33/0x70 [ 1347.377212][T17704] do_SYSENTER_32+0x1b/0x20 [ 1347.381915][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1347.388397][T17704] [ 1347.390747][T17704] Uninit was stored to memory at: [ 1347.395997][T17704] __get_compat_msghdr+0x514/0x750 [ 1347.401215][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1347.406240][T17704] ___sys_recvmsg+0x19d/0x890 [ 1347.411024][T17704] do_recvmmsg+0x682/0x1180 [ 1347.415703][T17704] __sys_recvmmsg+0x113/0x450 [ 1347.420488][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.426945][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1347.432261][T17704] do_fast_syscall_32+0x33/0x70 [ 1347.437240][T17704] do_SYSENTER_32+0x1b/0x20 [ 1347.441993][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1347.448475][T17704] [ 1347.450861][T17704] Uninit was stored to memory at: [ 1347.456168][T17704] __get_compat_msghdr+0x514/0x750 [ 1347.461389][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1347.466457][T17704] ___sys_recvmsg+0x19d/0x890 [ 1347.471244][T17704] do_recvmmsg+0x682/0x1180 [ 1347.475953][T17704] __sys_recvmmsg+0x113/0x450 [ 1347.480741][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.487192][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1347.492513][T17704] do_fast_syscall_32+0x33/0x70 [ 1347.497475][T17704] do_SYSENTER_32+0x1b/0x20 [ 1347.502180][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1347.508640][T17704] [ 1347.510990][T17704] Uninit was stored to memory at: [ 1347.516269][T17704] __get_compat_msghdr+0x514/0x750 [ 1347.521497][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1347.526545][T17704] ___sys_recvmsg+0x19d/0x890 [ 1347.531338][T17704] do_recvmmsg+0x682/0x1180 [ 1347.536038][T17704] __sys_recvmmsg+0x113/0x450 [ 1347.540844][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.547323][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1347.552647][T17704] do_fast_syscall_32+0x33/0x70 [ 1347.557605][T17704] do_SYSENTER_32+0x1b/0x20 [ 1347.562302][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1347.568784][T17704] [ 1347.571154][T17704] Uninit was stored to memory at: [ 1347.576442][T17704] __get_compat_msghdr+0x514/0x750 [ 1347.581773][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1347.586734][T17704] ___sys_recvmsg+0x19d/0x890 [ 1347.591478][T17704] do_recvmmsg+0x682/0x1180 [ 1347.596181][T17704] __sys_recvmmsg+0x113/0x450 [ 1347.600968][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.607399][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1347.612726][T17704] do_fast_syscall_32+0x33/0x70 [ 1347.617688][T17704] do_SYSENTER_32+0x1b/0x20 [ 1347.622389][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1347.628855][T17704] [ 1347.631204][T17704] Uninit was stored to memory at: [ 1347.636473][T17704] __get_compat_msghdr+0x514/0x750 [ 1347.641787][T17704] get_compat_msghdr+0x8c/0x1c0 [ 1347.646763][T17704] ___sys_recvmsg+0x19d/0x890 [ 1347.651551][T17704] do_recvmmsg+0x682/0x1180 [ 1347.656227][T17704] __sys_recvmmsg+0x113/0x450 [ 1347.661015][T17704] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1347.667475][T17704] __do_fast_syscall_32+0xa2/0x100 [ 1347.672790][T17704] do_fast_syscall_32+0x33/0x70 [ 1347.677777][T17704] do_SYSENTER_32+0x1b/0x20 [ 1347.682484][T17704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1347.688964][T17704] [ 1347.691349][T17704] Local variable msg_sys created at: [ 1347.696826][T17704] do_recvmmsg+0x5c/0x1180 [ 1347.701362][T17704] __sys_recvmmsg+0x113/0x450 09:39:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:39:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x4004556d, 0x0) 09:39:33 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000002140), &(0x7f0000002180)=@v2, 0x14, 0x0) 09:39:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x48, 0x0, 0x0) 09:39:33 executing program 1: syz_clone(0x30049000, 0x0, 0x0, 0x0, 0x0, 0x0) 09:39:33 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) fchmod(r0, 0x0) 09:39:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$input_event(r0, 0x0, 0x0) 09:39:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1348.636498][T17753] loop4: detected capacity change from 0 to 6 09:39:34 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0xd, 0x0, 0x0) [ 1348.827628][T17753] Dev loop4: unable to read RDB block 6 [ 1348.834423][T17753] loop4: unable to read partition table [ 1348.890366][T17753] loop4: partition table beyond EOD, truncated [ 1348.995060][T17753] FAT-fs (loop4): Directory bread(block 6) failed [ 1349.245187][T17749] not chained 1130000 origins [ 1349.249979][T17749] CPU: 0 PID: 17749 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1349.260274][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1349.270431][T17749] Call Trace: [ 1349.273783][T17749] [ 1349.276797][T17749] dump_stack_lvl+0x1c8/0x256 [ 1349.281659][T17749] dump_stack+0x1a/0x1c [ 1349.286063][T17749] kmsan_internal_chain_origin+0x78/0x120 [ 1349.291935][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1349.298325][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1349.304294][T17749] ? ____sys_recvmsg+0x5c1/0x810 [ 1349.309361][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1349.314682][T17749] ? get_compat_msghdr+0x8c/0x1c0 [ 1349.319825][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1349.325774][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1349.331094][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1349.337048][T17749] ? should_fail+0x3f/0x810 [ 1349.341686][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1349.346936][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1349.353325][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1349.359300][T17749] __msan_chain_origin+0xbd/0x140 [ 1349.364467][T17749] __get_compat_msghdr+0x514/0x750 [ 1349.369722][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1349.374690][T17749] ? ___sys_recvmsg+0xa9/0x890 [ 1349.379575][T17749] ? do_recvmmsg+0x682/0x1180 [ 1349.384372][T17749] ___sys_recvmsg+0x19d/0x890 [ 1349.389169][T17749] ? do_recvmmsg+0x6e4/0x1180 [ 1349.393980][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1349.399224][T17749] ? kmsan_internal_check_memory+0x94/0x530 [ 1349.405262][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1349.411221][T17749] do_recvmmsg+0x682/0x1180 [ 1349.415863][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1349.422259][T17749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.428820][T17749] __sys_recvmmsg+0x113/0x450 [ 1349.433631][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.440023][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1349.445265][T17749] ? exit_to_user_mode_prepare+0x119/0x220 [ 1349.451227][T17749] do_fast_syscall_32+0x33/0x70 [ 1349.456202][T17749] do_SYSENTER_32+0x1b/0x20 [ 1349.460823][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1349.467297][T17749] RIP: 0023:0xf7f30549 [ 1349.471464][T17749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1349.491228][T17749] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1349.499773][T17749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1349.507850][T17749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1349.515916][T17749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1349.523982][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1349.532065][T17749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1349.540153][T17749] [ 1349.549246][T17749] Uninit was stored to memory at: [ 1349.555396][T17749] __get_compat_msghdr+0x514/0x750 [ 1349.560643][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1349.565697][T17749] ___sys_recvmsg+0x19d/0x890 [ 1349.570503][T17749] do_recvmmsg+0x682/0x1180 [ 1349.575209][T17749] __sys_recvmmsg+0x113/0x450 [ 1349.580013][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.586486][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1349.591818][T17749] do_fast_syscall_32+0x33/0x70 [ 1349.596802][T17749] do_SYSENTER_32+0x1b/0x20 [ 1349.601443][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1349.608003][T17749] [ 1349.610410][T17749] Uninit was stored to memory at: [ 1349.615712][T17749] __get_compat_msghdr+0x514/0x750 [ 1349.620947][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1349.626013][T17749] ___sys_recvmsg+0x19d/0x890 [ 1349.630822][T17749] do_recvmmsg+0x682/0x1180 [ 1349.635561][T17749] __sys_recvmmsg+0x113/0x450 [ 1349.640363][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.646847][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1349.652187][T17749] do_fast_syscall_32+0x33/0x70 [ 1349.657162][T17749] do_SYSENTER_32+0x1b/0x20 [ 1349.661905][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1349.668382][T17749] [ 1349.670775][T17749] Uninit was stored to memory at: [ 1349.676035][T17749] __get_compat_msghdr+0x514/0x750 [ 1349.681272][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1349.686347][T17749] ___sys_recvmsg+0x19d/0x890 [ 1349.691173][T17749] do_recvmmsg+0x682/0x1180 [ 1349.695945][T17749] __sys_recvmmsg+0x113/0x450 [ 1349.700752][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.707237][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1349.712615][T17749] do_fast_syscall_32+0x33/0x70 [ 1349.717596][T17749] do_SYSENTER_32+0x1b/0x20 [ 1349.722366][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1349.728894][T17749] [ 1349.731291][T17749] Uninit was stored to memory at: [ 1349.736564][T17749] __get_compat_msghdr+0x514/0x750 [ 1349.741920][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1349.746911][T17749] ___sys_recvmsg+0x19d/0x890 [ 1349.751865][T17749] do_recvmmsg+0x682/0x1180 [ 1349.756518][T17749] __sys_recvmmsg+0x113/0x450 [ 1349.761348][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.767882][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1349.773232][T17749] do_fast_syscall_32+0x33/0x70 [ 1349.778244][T17749] do_SYSENTER_32+0x1b/0x20 [ 1349.782999][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1349.789476][T17749] [ 1349.791983][T17749] Uninit was stored to memory at: [ 1349.797183][T17749] __get_compat_msghdr+0x514/0x750 [ 1349.802562][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1349.807543][T17749] ___sys_recvmsg+0x19d/0x890 [ 1349.812480][T17749] do_recvmmsg+0x682/0x1180 [ 1349.817150][T17749] __sys_recvmmsg+0x113/0x450 [ 1349.822078][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.828471][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1349.833844][T17749] do_fast_syscall_32+0x33/0x70 [ 1349.838836][T17749] do_SYSENTER_32+0x1b/0x20 [ 1349.843600][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1349.850076][T17749] [ 1349.852598][T17749] Uninit was stored to memory at: [ 1349.857796][T17749] __get_compat_msghdr+0x514/0x750 [ 1349.863131][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1349.868105][T17749] ___sys_recvmsg+0x19d/0x890 [ 1349.873056][T17749] do_recvmmsg+0x682/0x1180 [ 1349.877691][T17749] __sys_recvmmsg+0x113/0x450 [ 1349.882621][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.889009][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1349.894334][T17749] do_fast_syscall_32+0x33/0x70 [ 1349.899316][T17749] do_SYSENTER_32+0x1b/0x20 [ 1349.904075][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1349.910558][T17749] [ 1349.913097][T17749] Uninit was stored to memory at: [ 1349.918296][T17749] __get_compat_msghdr+0x514/0x750 [ 1349.923676][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1349.928658][T17749] ___sys_recvmsg+0x19d/0x890 [ 1349.933601][T17749] do_recvmmsg+0x682/0x1180 [ 1349.938255][T17749] __sys_recvmmsg+0x113/0x450 [ 1349.943249][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1349.949657][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1349.955041][T17749] do_fast_syscall_32+0x33/0x70 [ 1349.960038][T17749] do_SYSENTER_32+0x1b/0x20 [ 1349.964791][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1349.971281][T17749] [ 1349.973793][T17749] Local variable msg_sys created at: [ 1349.979156][T17749] do_recvmmsg+0x5c/0x1180 [ 1349.983814][T17749] __sys_recvmmsg+0x113/0x450 [ 1350.543401][T17749] not chained 1140000 origins [ 1350.548171][T17749] CPU: 0 PID: 17749 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1350.558410][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1350.568527][T17749] Call Trace: [ 1350.571866][T17749] [ 1350.574878][T17749] dump_stack_lvl+0x1c8/0x256 [ 1350.579749][T17749] dump_stack+0x1a/0x1c [ 1350.584069][T17749] kmsan_internal_chain_origin+0x78/0x120 [ 1350.589933][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1350.596288][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1350.602252][T17749] ? ____sys_recvmsg+0x5c1/0x810 [ 1350.607309][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1350.612601][T17749] ? get_compat_msghdr+0x8c/0x1c0 [ 1350.617763][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1350.623718][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1350.629003][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1350.634926][T17749] ? should_fail+0x3f/0x810 [ 1350.639577][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1350.644837][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1350.651271][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1350.657237][T17749] __msan_chain_origin+0xbd/0x140 [ 1350.662409][T17749] __get_compat_msghdr+0x514/0x750 [ 1350.667684][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1350.672670][T17749] ? ___sys_recvmsg+0xa9/0x890 [ 1350.677564][T17749] ? do_recvmmsg+0x682/0x1180 [ 1350.682376][T17749] ___sys_recvmsg+0x19d/0x890 [ 1350.687187][T17749] ? do_recvmmsg+0x6e4/0x1180 [ 1350.691977][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1350.697236][T17749] ? kmsan_internal_check_memory+0x94/0x530 [ 1350.703290][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1350.709241][T17749] do_recvmmsg+0x682/0x1180 [ 1350.713859][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1350.720271][T17749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1350.726849][T17749] __sys_recvmmsg+0x113/0x450 [ 1350.731632][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1350.738002][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1350.743214][T17749] ? exit_to_user_mode_prepare+0x119/0x220 [ 1350.749206][T17749] do_fast_syscall_32+0x33/0x70 [ 1350.754189][T17749] do_SYSENTER_32+0x1b/0x20 [ 1350.758805][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1350.765497][T17749] RIP: 0023:0xf7f30549 [ 1350.769649][T17749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1350.789343][T17749] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1350.797850][T17749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1350.805945][T17749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1350.814026][T17749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1350.822106][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.830212][T17749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1350.838299][T17749] [ 1350.846336][T17749] Uninit was stored to memory at: [ 1350.851571][T17749] __get_compat_msghdr+0x514/0x750 [ 1350.857324][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1350.862372][T17749] ___sys_recvmsg+0x19d/0x890 [ 1350.867175][T17749] do_recvmmsg+0x682/0x1180 [ 1350.872053][T17749] __sys_recvmmsg+0x113/0x450 [ 1350.876859][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1350.883380][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1350.888631][T17749] do_fast_syscall_32+0x33/0x70 [ 1350.893700][T17749] do_SYSENTER_32+0x1b/0x20 [ 1350.898356][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1350.904947][T17749] [ 1350.907336][T17749] Uninit was stored to memory at: [ 1350.912646][T17749] __get_compat_msghdr+0x514/0x750 [ 1350.917910][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1350.923010][T17749] ___sys_recvmsg+0x19d/0x890 [ 1350.927820][T17749] do_recvmmsg+0x682/0x1180 [ 1350.932578][T17749] __sys_recvmmsg+0x113/0x450 [ 1350.937388][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1350.943872][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1350.949116][T17749] do_fast_syscall_32+0x33/0x70 [ 1350.954179][T17749] do_SYSENTER_32+0x1b/0x20 [ 1350.958812][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1350.965392][T17749] [ 1350.967766][T17749] Uninit was stored to memory at: [ 1350.973044][T17749] __get_compat_msghdr+0x514/0x750 [ 1350.978268][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1350.983322][T17749] ___sys_recvmsg+0x19d/0x890 [ 1350.988129][T17749] do_recvmmsg+0x682/0x1180 [ 1350.992877][T17749] __sys_recvmmsg+0x113/0x450 [ 1350.997694][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.004210][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.009472][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.014551][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.019172][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.025739][T17749] [ 1351.028134][T17749] Uninit was stored to memory at: [ 1351.033448][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.038690][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.043790][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.048583][T17749] do_recvmmsg+0x682/0x1180 [ 1351.053292][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.058088][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.064555][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.069791][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.074818][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.079450][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.086054][T17749] [ 1351.088445][T17749] Uninit was stored to memory at: [ 1351.093770][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.098993][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.104049][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.108840][T17749] do_recvmmsg+0x682/0x1180 [ 1351.113556][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.118365][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.124891][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.130145][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.135259][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.139891][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.146503][T17749] [ 1351.148890][T17749] Uninit was stored to memory at: [ 1351.154196][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.159448][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.164509][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.169298][T17749] do_recvmmsg+0x682/0x1180 [ 1351.174011][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.178802][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.185262][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.190494][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.195558][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.200193][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.206788][T17749] [ 1351.209175][T17749] Uninit was stored to memory at: [ 1351.214492][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.219717][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.224777][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.229584][T17749] do_recvmmsg+0x682/0x1180 [ 1351.234323][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.239136][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.245646][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.250892][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.255978][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.260594][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.267110][T17749] [ 1351.269507][T17749] Local variable msg_sys created at: [ 1351.274965][T17749] do_recvmmsg+0x5c/0x1180 [ 1351.279488][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.483430][T17749] not chained 1150000 origins [ 1351.488216][T17749] CPU: 0 PID: 17749 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1351.498458][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1351.508573][T17749] Call Trace: [ 1351.511914][T17749] [ 1351.514926][T17749] dump_stack_lvl+0x1c8/0x256 [ 1351.519797][T17749] dump_stack+0x1a/0x1c [ 1351.524046][T17749] kmsan_internal_chain_origin+0x78/0x120 [ 1351.529855][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1351.536210][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1351.542177][T17749] ? ____sys_recvmsg+0x5c1/0x810 [ 1351.547231][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1351.552517][T17749] ? get_compat_msghdr+0x8c/0x1c0 [ 1351.557649][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1351.563559][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1351.568871][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1351.574796][T17749] ? should_fail+0x3f/0x810 [ 1351.579431][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1351.584644][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1351.591024][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1351.596921][T17749] __msan_chain_origin+0xbd/0x140 [ 1351.602040][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.607279][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.612218][T17749] ? ___sys_recvmsg+0xa9/0x890 [ 1351.617092][T17749] ? do_recvmmsg+0x682/0x1180 [ 1351.621860][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.626673][T17749] ? do_recvmmsg+0x6e4/0x1180 [ 1351.631426][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1351.636672][T17749] ? kmsan_internal_check_memory+0x94/0x530 [ 1351.642728][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1351.648697][T17749] do_recvmmsg+0x682/0x1180 [ 1351.653356][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1351.659737][T17749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.666240][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.671007][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.677361][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.682620][T17749] ? exit_to_user_mode_prepare+0x119/0x220 [ 1351.688570][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.693556][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.698191][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.704666][T17749] RIP: 0023:0xf7f30549 [ 1351.708834][T17749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1351.728581][T17749] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1351.737088][T17749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1351.745158][T17749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1351.753202][T17749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1351.761296][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.769339][T17749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1351.777406][T17749] [ 1351.785444][T17749] Uninit was stored to memory at: [ 1351.790645][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.796371][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.801350][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.806233][T17749] do_recvmmsg+0x682/0x1180 [ 1351.810865][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.815748][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.822291][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.827523][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.832585][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.837196][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.843748][T17749] [ 1351.846118][T17749] Uninit was stored to memory at: [ 1351.851228][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.856513][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.861477][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.866358][T17749] do_recvmmsg+0x682/0x1180 [ 1351.870970][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.875855][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.882322][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.887549][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.892597][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.897231][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.903820][T17749] [ 1351.906208][T17749] Uninit was stored to memory at: [ 1351.911347][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.916665][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.921624][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.926521][T17749] do_recvmmsg+0x682/0x1180 [ 1351.931091][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.935980][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1351.942442][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1351.947672][T17749] do_fast_syscall_32+0x33/0x70 [ 1351.952732][T17749] do_SYSENTER_32+0x1b/0x20 [ 1351.957354][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1351.963910][T17749] [ 1351.966286][T17749] Uninit was stored to memory at: [ 1351.971397][T17749] __get_compat_msghdr+0x514/0x750 [ 1351.976714][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1351.981753][T17749] ___sys_recvmsg+0x19d/0x890 [ 1351.986541][T17749] do_recvmmsg+0x682/0x1180 [ 1351.991103][T17749] __sys_recvmmsg+0x113/0x450 [ 1351.995988][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.002455][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.007686][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.012740][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.017372][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.023980][T17749] [ 1352.026367][T17749] Uninit was stored to memory at: [ 1352.031503][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.036813][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.041866][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.046676][T17749] do_recvmmsg+0x682/0x1180 [ 1352.051310][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.056164][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.062633][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.067857][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.072928][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.077563][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.084114][T17749] [ 1352.086501][T17749] Uninit was stored to memory at: [ 1352.091640][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.096989][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.102066][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.106853][T17749] do_recvmmsg+0x682/0x1180 [ 1352.111425][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.116308][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.122771][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.128005][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.133072][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.137700][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.144271][T17749] [ 1352.146664][T17749] Uninit was stored to memory at: [ 1352.151993][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.157239][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.162342][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.167218][T17749] do_recvmmsg+0x682/0x1180 [ 1352.171919][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.176726][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.183239][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.188470][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.193536][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.198177][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.204743][T17749] [ 1352.207121][T17749] Local variable msg_sys created at: [ 1352.212597][T17749] do_recvmmsg+0x5c/0x1180 [ 1352.217129][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.414392][T17749] not chained 1160000 origins [ 1352.419162][T17749] CPU: 0 PID: 17749 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1352.429409][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1352.439519][T17749] Call Trace: [ 1352.442855][T17749] [ 1352.445866][T17749] dump_stack_lvl+0x1c8/0x256 [ 1352.450707][T17749] dump_stack+0x1a/0x1c [ 1352.454971][T17749] kmsan_internal_chain_origin+0x78/0x120 [ 1352.460835][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1352.467227][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1352.473170][T17749] ? ____sys_recvmsg+0x5c1/0x810 [ 1352.478213][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1352.483515][T17749] ? get_compat_msghdr+0x8c/0x1c0 [ 1352.488673][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1352.494594][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1352.499865][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1352.505784][T17749] ? should_fail+0x3f/0x810 [ 1352.510420][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1352.515618][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1352.521972][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1352.527931][T17749] __msan_chain_origin+0xbd/0x140 [ 1352.533079][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.538277][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.543214][T17749] ? ___sys_recvmsg+0xa9/0x890 [ 1352.548087][T17749] ? do_recvmmsg+0x682/0x1180 [ 1352.552858][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.557668][T17749] ? do_recvmmsg+0x6e4/0x1180 [ 1352.562498][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1352.567764][T17749] ? kmsan_internal_check_memory+0x94/0x530 [ 1352.573814][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1352.579765][T17749] do_recvmmsg+0x682/0x1180 [ 1352.584378][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1352.590761][T17749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.597260][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.602041][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.608425][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.613633][T17749] ? exit_to_user_mode_prepare+0x119/0x220 [ 1352.619519][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.624465][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.629096][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.635522][T17749] RIP: 0023:0xf7f30549 [ 1352.639672][T17749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1352.659391][T17749] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1352.667953][T17749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1352.676042][T17749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1352.684119][T17749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1352.692197][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.700301][T17749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1352.708343][T17749] [ 1352.716348][T17749] Uninit was stored to memory at: [ 1352.721567][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.727292][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.732349][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.737141][T17749] do_recvmmsg+0x682/0x1180 [ 1352.741838][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.746648][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.753114][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.758361][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.763489][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.768126][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.774719][T17749] [ 1352.777106][T17749] Uninit was stored to memory at: [ 1352.782365][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.787604][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.792696][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.797487][T17749] do_recvmmsg+0x682/0x1180 [ 1352.802463][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.807271][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.813787][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.819015][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.824077][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.828711][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.835258][T17749] [ 1352.837631][T17749] Uninit was stored to memory at: [ 1352.842918][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.848141][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.853196][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.858004][T17749] do_recvmmsg+0x682/0x1180 [ 1352.862757][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.867563][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.874077][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.879307][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.884365][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.889003][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.895597][T17749] [ 1352.897983][T17749] Uninit was stored to memory at: [ 1352.903289][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.908531][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.913629][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.918433][T17749] do_recvmmsg+0x682/0x1180 [ 1352.923139][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.927944][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.934406][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.939644][T17749] do_fast_syscall_32+0x33/0x70 [ 1352.944711][T17749] do_SYSENTER_32+0x1b/0x20 [ 1352.949324][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1352.955850][T17749] [ 1352.958223][T17749] Uninit was stored to memory at: [ 1352.963506][T17749] __get_compat_msghdr+0x514/0x750 [ 1352.968754][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1352.973860][T17749] ___sys_recvmsg+0x19d/0x890 [ 1352.978658][T17749] do_recvmmsg+0x682/0x1180 [ 1352.983373][T17749] __sys_recvmmsg+0x113/0x450 [ 1352.988166][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1352.994637][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1352.999888][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.004998][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.009612][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.016162][T17749] [ 1353.018555][T17749] Uninit was stored to memory at: [ 1353.023862][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.029085][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.034144][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.038934][T17749] do_recvmmsg+0x682/0x1180 [ 1353.043642][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.048432][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.054894][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.060125][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.065152][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.069779][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.076381][T17749] [ 1353.078775][T17749] Uninit was stored to memory at: [ 1353.084080][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.089302][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.094362][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.099522][T17749] do_recvmmsg+0x682/0x1180 [ 1353.104245][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.109033][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.115499][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.120729][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.125785][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.130396][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.136919][T17749] [ 1353.139298][T17749] Local variable msg_sys created at: [ 1353.144721][T17749] do_recvmmsg+0x5c/0x1180 [ 1353.149240][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.353489][T17749] not chained 1170000 origins [ 1353.358231][T17749] CPU: 0 PID: 17749 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1353.368478][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1353.378598][T17749] Call Trace: [ 1353.381935][T17749] [ 1353.384940][T17749] dump_stack_lvl+0x1c8/0x256 [ 1353.389777][T17749] dump_stack+0x1a/0x1c [ 1353.394030][T17749] kmsan_internal_chain_origin+0x78/0x120 [ 1353.399836][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1353.406187][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1353.412132][T17749] ? ____sys_recvmsg+0x5c1/0x810 [ 1353.417140][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1353.422424][T17749] ? get_compat_msghdr+0x8c/0x1c0 [ 1353.427581][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1353.433545][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1353.438866][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1353.444783][T17749] ? should_fail+0x3f/0x810 [ 1353.449453][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1353.454718][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1353.461096][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1353.467004][T17749] __msan_chain_origin+0xbd/0x140 [ 1353.472155][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.477373][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.482361][T17749] ? ___sys_recvmsg+0xa9/0x890 [ 1353.487255][T17749] ? do_recvmmsg+0x682/0x1180 [ 1353.492046][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.496791][T17749] ? do_recvmmsg+0x6e4/0x1180 [ 1353.501549][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1353.506767][T17749] ? kmsan_internal_check_memory+0x94/0x530 [ 1353.512818][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1353.518767][T17749] do_recvmmsg+0x682/0x1180 [ 1353.523390][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1353.529769][T17749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.536269][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.541026][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.547381][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.552636][T17749] ? exit_to_user_mode_prepare+0x119/0x220 [ 1353.558592][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.563533][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.568167][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.574623][T17749] RIP: 0023:0xf7f30549 [ 1353.578742][T17749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1353.598445][T17749] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1353.606954][T17749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1353.615020][T17749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1353.623065][T17749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1353.631137][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.639168][T17749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1353.647234][T17749] [ 1353.655322][T17749] Uninit was stored to memory at: [ 1353.660523][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.666237][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.671219][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.676102][T17749] do_recvmmsg+0x682/0x1180 [ 1353.680730][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.685611][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.692077][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.697327][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.702435][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.707073][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.713687][T17749] [ 1353.716074][T17749] Uninit was stored to memory at: [ 1353.721258][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.726586][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.731560][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.736449][T17749] do_recvmmsg+0x682/0x1180 [ 1353.741084][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.745961][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.752419][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.757669][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.762728][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.767360][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.773912][T17749] [ 1353.776295][T17749] Uninit was stored to memory at: [ 1353.781474][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.786787][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.791832][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.796635][T17749] do_recvmmsg+0x682/0x1180 [ 1353.801260][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.806130][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.812591][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.817836][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.822899][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.827532][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.834083][T17749] [ 1353.836475][T17749] Uninit was stored to memory at: [ 1353.841658][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.846974][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.852023][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.856832][T17749] do_recvmmsg+0x682/0x1180 [ 1353.861465][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.866406][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.872869][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.878115][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.883170][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.887803][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.894354][T17749] [ 1353.896746][T17749] Uninit was stored to memory at: [ 1353.901998][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.907235][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.912274][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.917074][T17749] do_recvmmsg+0x682/0x1180 [ 1353.921774][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.926576][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.933031][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.938261][T17749] do_fast_syscall_32+0x33/0x70 [ 1353.943335][T17749] do_SYSENTER_32+0x1b/0x20 [ 1353.947960][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1353.954472][T17749] [ 1353.956822][T17749] Uninit was stored to memory at: [ 1353.962089][T17749] __get_compat_msghdr+0x514/0x750 [ 1353.967329][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1353.972426][T17749] ___sys_recvmsg+0x19d/0x890 [ 1353.977211][T17749] do_recvmmsg+0x682/0x1180 [ 1353.981900][T17749] __sys_recvmmsg+0x113/0x450 [ 1353.986707][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1353.993214][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1353.998449][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.003509][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.008142][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.014719][T17749] [ 1354.017106][T17749] Uninit was stored to memory at: [ 1354.022413][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.027636][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.032700][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.037508][T17749] do_recvmmsg+0x682/0x1180 [ 1354.042265][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.047051][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.053513][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.058746][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.063793][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.068404][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.074959][T17749] [ 1354.077375][T17749] Local variable msg_sys created at: [ 1354.082857][T17749] do_recvmmsg+0x5c/0x1180 [ 1354.087378][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.277894][T17749] not chained 1180000 origins [ 1354.282763][T17749] CPU: 0 PID: 17749 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1354.293058][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1354.303225][T17749] Call Trace: [ 1354.306563][T17749] [ 1354.309531][T17749] dump_stack_lvl+0x1c8/0x256 [ 1354.314317][T17749] dump_stack+0x1a/0x1c [ 1354.318582][T17749] kmsan_internal_chain_origin+0x78/0x120 [ 1354.324415][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1354.330828][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1354.336736][T17749] ? ____sys_recvmsg+0x5c1/0x810 [ 1354.341809][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1354.347152][T17749] ? get_compat_msghdr+0x8c/0x1c0 [ 1354.352309][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1354.358258][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1354.363553][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1354.369502][T17749] ? should_fail+0x3f/0x810 [ 1354.374089][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1354.379301][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1354.385660][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1354.391600][T17749] __msan_chain_origin+0xbd/0x140 [ 1354.396716][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.401944][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.406936][T17749] ? ___sys_recvmsg+0xa9/0x890 [ 1354.411826][T17749] ? do_recvmmsg+0x682/0x1180 [ 1354.416618][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.421360][T17749] ? do_recvmmsg+0x6e4/0x1180 [ 1354.426116][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1354.431311][T17749] ? kmsan_internal_check_memory+0x94/0x530 [ 1354.437301][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1354.443226][T17749] do_recvmmsg+0x682/0x1180 [ 1354.447879][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1354.454281][T17749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.460844][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.465610][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.471975][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.477213][T17749] ? exit_to_user_mode_prepare+0x119/0x220 [ 1354.483118][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.488083][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.492670][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.499146][T17749] RIP: 0023:0xf7f30549 [ 1354.503280][T17749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1354.523052][T17749] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1354.531583][T17749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1354.539615][T17749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1354.547639][T17749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1354.555682][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1354.563762][T17749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1354.571862][T17749] [ 1354.584907][T17749] Uninit was stored to memory at: [ 1354.590110][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.597002][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.602059][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.606884][T17749] do_recvmmsg+0x682/0x1180 [ 1354.611496][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.616354][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.622821][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.628069][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.633172][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.637785][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.644339][T17749] [ 1354.646728][T17749] Uninit was stored to memory at: [ 1354.652036][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.657259][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.662311][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.667122][T17749] do_recvmmsg+0x682/0x1180 [ 1354.671822][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.676629][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.683135][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.688361][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.693434][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.698047][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.704567][T17749] [ 1354.706956][T17749] Uninit was stored to memory at: [ 1354.712254][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.717496][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.722589][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.727375][T17749] do_recvmmsg+0x682/0x1180 [ 1354.732084][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.736890][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.743368][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.748604][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.753665][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.758302][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.764839][T17749] [ 1354.767211][T17749] Uninit was stored to memory at: [ 1354.772497][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.777732][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.782781][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.787587][T17749] do_recvmmsg+0x682/0x1180 [ 1354.792332][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.797124][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.803591][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.808841][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.813916][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.818529][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.825083][T17749] [ 1354.827473][T17749] Uninit was stored to memory at: [ 1354.832778][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.837997][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.843049][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.847856][T17749] do_recvmmsg+0x682/0x1180 [ 1354.852611][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.857398][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.863866][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.869095][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.874125][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.878744][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.885348][T17749] [ 1354.887743][T17749] Uninit was stored to memory at: [ 1354.893055][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.898302][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.903428][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.908239][T17749] do_recvmmsg+0x682/0x1180 [ 1354.912996][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.917808][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.924287][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.929519][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.934604][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.939215][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1354.945733][T17749] [ 1354.948123][T17749] Uninit was stored to memory at: [ 1354.953418][T17749] __get_compat_msghdr+0x514/0x750 [ 1354.958671][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1354.963818][T17749] ___sys_recvmsg+0x19d/0x890 [ 1354.968623][T17749] do_recvmmsg+0x682/0x1180 [ 1354.973380][T17749] __sys_recvmmsg+0x113/0x450 [ 1354.978195][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1354.984717][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1354.989944][T17749] do_fast_syscall_32+0x33/0x70 [ 1354.995008][T17749] do_SYSENTER_32+0x1b/0x20 [ 1354.999640][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.006236][T17749] [ 1355.008631][T17749] Local variable msg_sys created at: [ 1355.014115][T17749] do_recvmmsg+0x5c/0x1180 [ 1355.018639][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.202635][T17749] not chained 1190000 origins [ 1355.207370][T17749] CPU: 0 PID: 17749 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1355.217595][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1355.227706][T17749] Call Trace: [ 1355.231020][T17749] [ 1355.233986][T17749] dump_stack_lvl+0x1c8/0x256 [ 1355.238767][T17749] dump_stack+0x1a/0x1c [ 1355.243009][T17749] kmsan_internal_chain_origin+0x78/0x120 [ 1355.248830][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1355.255190][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1355.261149][T17749] ? ____sys_recvmsg+0x5c1/0x810 [ 1355.266217][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1355.271529][T17749] ? get_compat_msghdr+0x8c/0x1c0 [ 1355.276621][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1355.282513][T17749] ? __get_compat_msghdr+0x5b/0x750 [ 1355.287781][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1355.293672][T17749] ? should_fail+0x3f/0x810 [ 1355.298255][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1355.303491][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1355.309905][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1355.315849][T17749] __msan_chain_origin+0xbd/0x140 [ 1355.320970][T17749] __get_compat_msghdr+0x514/0x750 [ 1355.326232][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1355.331151][T17749] ? ___sys_recvmsg+0xa9/0x890 [ 1355.335998][T17749] ? do_recvmmsg+0x682/0x1180 [ 1355.340744][T17749] ___sys_recvmsg+0x19d/0x890 [ 1355.345487][T17749] ? do_recvmmsg+0x6e4/0x1180 [ 1355.350239][T17749] ? __stack_depot_save+0x21/0x4b0 [ 1355.355476][T17749] ? kmsan_internal_check_memory+0x94/0x530 [ 1355.361506][T17749] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1355.367426][T17749] do_recvmmsg+0x682/0x1180 [ 1355.372039][T17749] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1355.378366][T17749] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.384880][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.389635][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.395967][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1355.401151][T17749] ? exit_to_user_mode_prepare+0x119/0x220 [ 1355.407055][T17749] do_fast_syscall_32+0x33/0x70 [ 1355.412039][T17749] do_SYSENTER_32+0x1b/0x20 [ 1355.416669][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.423142][T17749] RIP: 0023:0xf7f30549 [ 1355.427291][T17749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1355.446983][T17749] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1355.455486][T17749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1355.463555][T17749] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1355.471580][T17749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1355.479617][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.487661][T17749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1355.495700][T17749] [ 1355.503934][T17749] Uninit was stored to memory at: [ 1355.509135][T17749] __get_compat_msghdr+0x514/0x750 [ 1355.514916][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1355.519895][T17749] ___sys_recvmsg+0x19d/0x890 [ 1355.524797][T17749] do_recvmmsg+0x682/0x1180 [ 1355.529446][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.534342][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.540732][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1355.546073][T17749] do_fast_syscall_32+0x33/0x70 [ 1355.551053][T17749] do_SYSENTER_32+0x1b/0x20 [ 1355.555787][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.562301][T17749] [ 1355.564673][T17749] Uninit was stored to memory at: [ 1355.569803][T17749] __get_compat_msghdr+0x514/0x750 [ 1355.575149][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1355.580133][T17749] ___sys_recvmsg+0x19d/0x890 [ 1355.585044][T17749] do_recvmmsg+0x682/0x1180 [ 1355.589655][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.594546][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.600918][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1355.606267][T17749] do_fast_syscall_32+0x33/0x70 [ 1355.611229][T17749] do_SYSENTER_32+0x1b/0x20 [ 1355.615921][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.622476][T17749] [ 1355.624880][T17749] Uninit was stored to memory at: [ 1355.630062][T17749] __get_compat_msghdr+0x514/0x750 [ 1355.635440][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1355.640406][T17749] ___sys_recvmsg+0x19d/0x890 [ 1355.645321][T17749] do_recvmmsg+0x682/0x1180 [ 1355.649937][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.654846][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.661234][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1355.666585][T17749] do_fast_syscall_32+0x33/0x70 [ 1355.671550][T17749] do_SYSENTER_32+0x1b/0x20 [ 1355.676264][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.682830][T17749] [ 1355.685219][T17749] Uninit was stored to memory at: [ 1355.690350][T17749] __get_compat_msghdr+0x514/0x750 [ 1355.695691][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1355.700672][T17749] ___sys_recvmsg+0x19d/0x890 [ 1355.705546][T17749] do_recvmmsg+0x682/0x1180 [ 1355.710159][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.715068][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.721463][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1355.726772][T17749] do_fast_syscall_32+0x33/0x70 [ 1355.731828][T17749] do_SYSENTER_32+0x1b/0x20 [ 1355.736462][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.743045][T17749] [ 1355.745448][T17749] Uninit was stored to memory at: [ 1355.750560][T17749] __get_compat_msghdr+0x514/0x750 [ 1355.755857][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1355.760818][T17749] ___sys_recvmsg+0x19d/0x890 [ 1355.765721][T17749] do_recvmmsg+0x682/0x1180 [ 1355.770349][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.775303][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.781764][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1355.786993][T17749] do_fast_syscall_32+0x33/0x70 [ 1355.792033][T17749] do_SYSENTER_32+0x1b/0x20 [ 1355.796644][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.803212][T17749] [ 1355.805602][T17749] Uninit was stored to memory at: [ 1355.810738][T17749] __get_compat_msghdr+0x514/0x750 [ 1355.816039][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1355.820996][T17749] ___sys_recvmsg+0x19d/0x890 [ 1355.825863][T17749] do_recvmmsg+0x682/0x1180 [ 1355.830473][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.835369][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.841844][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1355.847128][T17749] do_fast_syscall_32+0x33/0x70 [ 1355.852173][T17749] do_SYSENTER_32+0x1b/0x20 [ 1355.856787][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.863358][T17749] [ 1355.865752][T17749] Uninit was stored to memory at: [ 1355.870889][T17749] __get_compat_msghdr+0x514/0x750 [ 1355.876231][T17749] get_compat_msghdr+0x8c/0x1c0 [ 1355.881190][T17749] ___sys_recvmsg+0x19d/0x890 [ 1355.886094][T17749] do_recvmmsg+0x682/0x1180 [ 1355.890704][T17749] __sys_recvmmsg+0x113/0x450 [ 1355.895612][T17749] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1355.902097][T17749] __do_fast_syscall_32+0xa2/0x100 [ 1355.907321][T17749] do_fast_syscall_32+0x33/0x70 [ 1355.912401][T17749] do_SYSENTER_32+0x1b/0x20 [ 1355.917019][T17749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1355.923594][T17749] [ 1355.925986][T17749] Local variable msg_sys created at: [ 1355.931324][T17749] do_recvmmsg+0x5c/0x1180 [ 1355.935976][T17749] __sys_recvmmsg+0x113/0x450 09:39:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32], 0x70}}], 0x1, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:39:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "462b2acb955ca4c6c5b21198f417a5051081b3c1bd8ca5e9cdd9262a6f4d5fe17cc23cea777522fa3ab7c916c4bdebad02d6f0000800"}, 0x1e, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "462b2acbc0e459e1e08a6b5142723ecd12c1cf60c6c5b21198f4176b51414a130e4768a5e9cdd9362a6f4d5fe17cc33cea777522fa3ab7c916c4bdebad02d6f0"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0xfffffffffffffffe, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000640)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "462b2acbc0e459e1e08a6b5142723ecd12c1cf60c6c5b21198f4176b51414a130e4768a5e9cdd9362a6f4d5fe17cc33cea777522fa3ab7c916c4bdebad02d6f0"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r1, r3, 0x0, 0x0) 09:39:41 executing program 1: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)='-.\x00') 09:39:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:41 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 09:39:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:41 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x8, &(0x7f0000001280)={0x101, {{0x2, 0x0, @multicast1}}}, 0x90) 09:39:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8971, &(0x7f0000000300)={'gre0\x00', 0x0}) 09:39:42 executing program 0: fspick(0xffffffffffffff9c, 0x0, 0x2a1a6954e2bc3d31) 09:39:42 executing program 1: add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000200)="0ca7", 0x2, 0xffffffffffffffff) 09:39:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1356.822429][T17798] loop4: detected capacity change from 0 to 6 [ 1356.872948][T17798] Dev loop4: unable to read RDB block 6 [ 1356.878875][T17798] loop4: unable to read partition table [ 1356.943480][T17798] loop4: partition table beyond EOD, truncated [ 1357.008416][T17798] FAT-fs (loop4): Directory bread(block 6) failed [ 1357.704150][T17796] not chained 1200000 origins [ 1357.709026][T17796] CPU: 0 PID: 17796 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1357.719304][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1357.729441][T17796] Call Trace: [ 1357.732777][T17796] [ 1357.735743][T17796] dump_stack_lvl+0x1c8/0x256 [ 1357.740535][T17796] dump_stack+0x1a/0x1c [ 1357.744812][T17796] kmsan_internal_chain_origin+0x78/0x120 [ 1357.750623][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1357.756956][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1357.762867][T17796] ? ____sys_recvmsg+0x5c1/0x810 [ 1357.767939][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1357.773252][T17796] ? get_compat_msghdr+0x8c/0x1c0 [ 1357.778367][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1357.784330][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1357.789626][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1357.795603][T17796] ? should_fail+0x3f/0x810 [ 1357.800222][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1357.805463][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1357.811814][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1357.817774][T17796] __msan_chain_origin+0xbd/0x140 [ 1357.822945][T17796] __get_compat_msghdr+0x514/0x750 [ 1357.828209][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1357.833170][T17796] ? ___sys_recvmsg+0xa9/0x890 [ 1357.838019][T17796] ? do_recvmmsg+0x682/0x1180 [ 1357.842769][T17796] ___sys_recvmsg+0x19d/0x890 [ 1357.847514][T17796] ? do_recvmmsg+0x6e4/0x1180 [ 1357.852268][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1357.857461][T17796] ? kmsan_internal_check_memory+0x94/0x530 [ 1357.863474][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1357.869448][T17796] do_recvmmsg+0x682/0x1180 [ 1357.874102][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1357.880492][T17796] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1357.887069][T17796] __sys_recvmmsg+0x113/0x450 [ 1357.891829][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1357.898181][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1357.903371][T17796] ? exit_to_user_mode_prepare+0x119/0x220 [ 1357.909280][T17796] do_fast_syscall_32+0x33/0x70 [ 1357.914227][T17796] do_SYSENTER_32+0x1b/0x20 [ 1357.918862][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1357.925342][T17796] RIP: 0023:0xf7f30549 [ 1357.929466][T17796] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1357.949178][T17796] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1357.957661][T17796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1357.965715][T17796] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1357.973793][T17796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1357.981858][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.989887][T17796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.997957][T17796] [ 1358.006686][T17796] Uninit was stored to memory at: [ 1358.012744][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.017989][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.023064][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.027872][T17796] do_recvmmsg+0x682/0x1180 [ 1358.032604][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.037407][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.043931][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.049165][T17796] do_fast_syscall_32+0x33/0x70 [ 1358.054245][T17796] do_SYSENTER_32+0x1b/0x20 [ 1358.058879][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1358.065423][T17796] [ 1358.067811][T17796] Uninit was stored to memory at: [ 1358.073092][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.078315][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.083405][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.088236][T17796] do_recvmmsg+0x682/0x1180 [ 1358.092953][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.097761][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.104298][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.109552][T17796] do_fast_syscall_32+0x33/0x70 [ 1358.114728][T17796] do_SYSENTER_32+0x1b/0x20 [ 1358.119361][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1358.125980][T17796] [ 1358.128352][T17796] Uninit was stored to memory at: [ 1358.133643][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.138888][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.144013][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.148827][T17796] do_recvmmsg+0x682/0x1180 [ 1358.153584][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.158393][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.164909][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.170143][T17796] do_fast_syscall_32+0x33/0x70 [ 1358.175252][T17796] do_SYSENTER_32+0x1b/0x20 [ 1358.179889][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1358.186518][T17796] [ 1358.188910][T17796] Uninit was stored to memory at: [ 1358.194218][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.199447][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.204531][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.209337][T17796] do_recvmmsg+0x682/0x1180 [ 1358.214118][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.218928][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.225453][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.230694][T17796] do_fast_syscall_32+0x33/0x70 [ 1358.235741][T17796] do_SYSENTER_32+0x1b/0x20 [ 1358.240374][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1358.246955][T17796] [ 1358.249331][T17796] Uninit was stored to memory at: [ 1358.254651][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.259894][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.265021][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.269831][T17796] do_recvmmsg+0x682/0x1180 [ 1358.274616][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.279429][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.285964][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.291215][T17796] do_fast_syscall_32+0x33/0x70 [ 1358.296333][T17796] do_SYSENTER_32+0x1b/0x20 [ 1358.300961][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1358.307506][T17796] [ 1358.309891][T17796] Uninit was stored to memory at: [ 1358.315188][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.320414][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.325500][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.330309][T17796] do_recvmmsg+0x682/0x1180 [ 1358.335085][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.339892][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.346453][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.351767][T17796] do_fast_syscall_32+0x33/0x70 [ 1358.356747][T17796] do_SYSENTER_32+0x1b/0x20 [ 1358.361355][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1358.367945][T17796] [ 1358.370320][T17796] Uninit was stored to memory at: [ 1358.375586][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.380813][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.385891][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.390708][T17796] do_recvmmsg+0x682/0x1180 [ 1358.395473][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.400266][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.406717][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.412042][T17796] do_fast_syscall_32+0x33/0x70 [ 1358.417029][T17796] do_SYSENTER_32+0x1b/0x20 [ 1358.421618][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1358.428194][T17796] [ 1358.430546][T17796] Local variable msg_sys created at: [ 1358.435992][T17796] do_recvmmsg+0x5c/0x1180 [ 1358.440537][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.647968][T17796] not chained 1210000 origins [ 1358.652786][T17796] CPU: 0 PID: 17796 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1358.663030][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1358.673175][T17796] Call Trace: [ 1358.676492][T17796] [ 1358.679475][T17796] dump_stack_lvl+0x1c8/0x256 [ 1358.684264][T17796] dump_stack+0x1a/0x1c [ 1358.688510][T17796] kmsan_internal_chain_origin+0x78/0x120 [ 1358.694320][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1358.700672][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1358.706636][T17796] ? ____sys_recvmsg+0x5c1/0x810 [ 1358.711686][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1358.717012][T17796] ? get_compat_msghdr+0x8c/0x1c0 [ 1358.722167][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1358.728112][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1358.733403][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1358.739298][T17796] ? should_fail+0x3f/0x810 [ 1358.743881][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1358.749099][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1358.755437][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1358.761329][T17796] __msan_chain_origin+0xbd/0x140 [ 1358.766453][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.771743][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.776709][T17796] ? ___sys_recvmsg+0xa9/0x890 [ 1358.781539][T17796] ? do_recvmmsg+0x682/0x1180 [ 1358.786286][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.791029][T17796] ? do_recvmmsg+0x6e4/0x1180 [ 1358.795791][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1358.800985][T17796] ? kmsan_internal_check_memory+0x94/0x530 [ 1358.807000][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1358.812924][T17796] do_recvmmsg+0x682/0x1180 [ 1358.817580][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1358.823962][T17796] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.830513][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.835269][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.841598][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.846830][T17796] ? exit_to_user_mode_prepare+0x119/0x220 [ 1358.852724][T17796] do_fast_syscall_32+0x33/0x70 [ 1358.857645][T17796] do_SYSENTER_32+0x1b/0x20 [ 1358.862234][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1358.868707][T17796] RIP: 0023:0xf7f30549 [ 1358.872870][T17796] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1358.892635][T17796] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1358.901119][T17796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1358.909152][T17796] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1358.917200][T17796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1358.925275][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.933344][T17796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1358.941402][T17796] [ 1358.954434][T17796] Uninit was stored to memory at: [ 1358.959642][T17796] __get_compat_msghdr+0x514/0x750 [ 1358.966535][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1358.971520][T17796] ___sys_recvmsg+0x19d/0x890 [ 1358.976434][T17796] do_recvmmsg+0x682/0x1180 [ 1358.981051][T17796] __sys_recvmmsg+0x113/0x450 [ 1358.985977][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1358.992454][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1358.997706][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.002798][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.007456][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.014067][T17796] [ 1359.016468][T17796] Uninit was stored to memory at: [ 1359.021601][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.026932][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.032006][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.036820][T17796] do_recvmmsg+0x682/0x1180 [ 1359.041395][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.046268][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.052734][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.057963][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.063070][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.067702][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.074284][T17796] [ 1359.076674][T17796] Uninit was stored to memory at: [ 1359.081954][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.087193][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.092316][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.097118][T17796] do_recvmmsg+0x682/0x1180 [ 1359.101887][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.106701][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.113232][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.118485][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.123580][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.128213][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.134833][T17796] [ 1359.137225][T17796] Uninit was stored to memory at: [ 1359.142536][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.147775][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.152847][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.157639][T17796] do_recvmmsg+0x682/0x1180 [ 1359.162371][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.167160][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.173652][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.178881][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.183977][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.188612][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.195227][T17796] [ 1359.197625][T17796] Uninit was stored to memory at: [ 1359.202910][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.208157][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.213270][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.218081][T17796] do_recvmmsg+0x682/0x1180 [ 1359.222851][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.227662][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.234190][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.239434][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.244530][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.249169][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.255794][T17796] [ 1359.258186][T17796] Uninit was stored to memory at: [ 1359.263491][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.268727][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.273799][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.278608][T17796] do_recvmmsg+0x682/0x1180 [ 1359.283374][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.288206][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.294707][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.299961][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.305092][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.309748][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.316357][T17796] [ 1359.318733][T17796] Uninit was stored to memory at: [ 1359.324065][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.329299][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.334373][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.339187][T17796] do_recvmmsg+0x682/0x1180 [ 1359.343990][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.348797][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.355251][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.360499][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.365590][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.370208][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.376781][T17796] [ 1359.379178][T17796] Local variable msg_sys created at: [ 1359.384688][T17796] do_recvmmsg+0x5c/0x1180 [ 1359.389227][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.590078][T17796] not chained 1220000 origins [ 1359.594900][T17796] CPU: 0 PID: 17796 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1359.605126][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1359.615256][T17796] Call Trace: [ 1359.618576][T17796] [ 1359.621562][T17796] dump_stack_lvl+0x1c8/0x256 [ 1359.626405][T17796] dump_stack+0x1a/0x1c [ 1359.630664][T17796] kmsan_internal_chain_origin+0x78/0x120 [ 1359.636498][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1359.642849][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1359.648741][T17796] ? ____sys_recvmsg+0x5c1/0x810 [ 1359.653772][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1359.659103][T17796] ? get_compat_msghdr+0x8c/0x1c0 [ 1359.664258][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1359.670206][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1359.675476][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1359.681372][T17796] ? should_fail+0x3f/0x810 [ 1359.685963][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1359.691175][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1359.697542][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1359.703460][T17796] __msan_chain_origin+0xbd/0x140 [ 1359.708633][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.713901][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.718837][T17796] ? ___sys_recvmsg+0xa9/0x890 [ 1359.723671][T17796] ? do_recvmmsg+0x682/0x1180 [ 1359.728470][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.733216][T17796] ? do_recvmmsg+0x6e4/0x1180 [ 1359.737969][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1359.743159][T17796] ? kmsan_internal_check_memory+0x94/0x530 [ 1359.749137][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1359.755057][T17796] do_recvmmsg+0x682/0x1180 [ 1359.759684][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1359.766032][T17796] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.772531][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.777283][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.783614][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.788799][T17796] ? exit_to_user_mode_prepare+0x119/0x220 [ 1359.794680][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.799618][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.804206][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.810680][T17796] RIP: 0023:0xf7f30549 [ 1359.814842][T17796] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1359.834585][T17796] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1359.843066][T17796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1359.851093][T17796] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1359.859135][T17796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1359.867191][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.875215][T17796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1359.883253][T17796] [ 1359.891258][T17796] Uninit was stored to memory at: [ 1359.896933][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.902252][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.907228][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.912124][T17796] do_recvmmsg+0x682/0x1180 [ 1359.916748][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.921536][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.928028][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.933353][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.938340][T17796] do_SYSENTER_32+0x1b/0x20 [ 1359.943126][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1359.949606][T17796] [ 1359.952104][T17796] Uninit was stored to memory at: [ 1359.957244][T17796] __get_compat_msghdr+0x514/0x750 [ 1359.962594][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1359.967557][T17796] ___sys_recvmsg+0x19d/0x890 [ 1359.972466][T17796] do_recvmmsg+0x682/0x1180 [ 1359.977098][T17796] __sys_recvmmsg+0x113/0x450 [ 1359.982071][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1359.988446][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1359.993795][T17796] do_fast_syscall_32+0x33/0x70 [ 1359.998758][T17796] do_SYSENTER_32+0x1b/0x20 [ 1360.003487][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1360.009944][T17796] [ 1360.012459][T17796] Uninit was stored to memory at: [ 1360.017599][T17796] __get_compat_msghdr+0x514/0x750 [ 1360.022933][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1360.027912][T17796] ___sys_recvmsg+0x19d/0x890 [ 1360.032850][T17796] do_recvmmsg+0x682/0x1180 [ 1360.037482][T17796] __sys_recvmmsg+0x113/0x450 [ 1360.042429][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1360.048802][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1360.054151][T17796] do_fast_syscall_32+0x33/0x70 [ 1360.059115][T17796] do_SYSENTER_32+0x1b/0x20 [ 1360.063840][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1360.070318][T17796] [ 1360.072814][T17796] Uninit was stored to memory at: [ 1360.077953][T17796] __get_compat_msghdr+0x514/0x750 [ 1360.083294][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1360.088271][T17796] ___sys_recvmsg+0x19d/0x890 [ 1360.093175][T17796] do_recvmmsg+0x682/0x1180 [ 1360.097806][T17796] __sys_recvmmsg+0x113/0x450 [ 1360.102754][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1360.109125][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1360.114434][T17796] do_fast_syscall_32+0x33/0x70 [ 1360.119397][T17796] do_SYSENTER_32+0x1b/0x20 [ 1360.124128][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1360.130588][T17796] [ 1360.133080][T17796] Uninit was stored to memory at: [ 1360.138268][T17796] __get_compat_msghdr+0x514/0x750 [ 1360.143629][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1360.148589][T17796] ___sys_recvmsg+0x19d/0x890 [ 1360.153500][T17796] do_recvmmsg+0x682/0x1180 [ 1360.158132][T17796] __sys_recvmmsg+0x113/0x450 [ 1360.163083][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1360.169477][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1360.174872][T17796] do_fast_syscall_32+0x33/0x70 [ 1360.179858][T17796] do_SYSENTER_32+0x1b/0x20 [ 1360.184594][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1360.191053][T17796] [ 1360.193555][T17796] Uninit was stored to memory at: [ 1360.198693][T17796] __get_compat_msghdr+0x514/0x750 [ 1360.204036][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1360.208997][T17796] ___sys_recvmsg+0x19d/0x890 [ 1360.213897][T17796] do_recvmmsg+0x682/0x1180 [ 1360.218511][T17796] __sys_recvmmsg+0x113/0x450 [ 1360.223399][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1360.229776][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1360.235085][T17796] do_fast_syscall_32+0x33/0x70 [ 1360.240049][T17796] do_SYSENTER_32+0x1b/0x20 [ 1360.244744][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1360.251201][T17796] [ 1360.253699][T17796] Uninit was stored to memory at: [ 1360.258880][T17796] __get_compat_msghdr+0x514/0x750 [ 1360.264264][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1360.269226][T17796] ___sys_recvmsg+0x19d/0x890 [ 1360.274131][T17796] do_recvmmsg+0x682/0x1180 [ 1360.278747][T17796] __sys_recvmmsg+0x113/0x450 [ 1360.283643][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1360.290034][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1360.295425][T17796] do_fast_syscall_32+0x33/0x70 [ 1360.300389][T17796] do_SYSENTER_32+0x1b/0x20 [ 1360.305085][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1360.311546][T17796] [ 1360.314067][T17796] Local variable msg_sys created at: [ 1360.319407][T17796] do_recvmmsg+0x5c/0x1180 [ 1360.324069][T17796] __sys_recvmmsg+0x113/0x450 [ 1360.678218][T17796] not chained 1230000 origins [ 1360.683091][T17796] CPU: 0 PID: 17796 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1360.693320][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1360.703426][T17796] Call Trace: [ 1360.706736][T17796] [ 1360.709701][T17796] dump_stack_lvl+0x1c8/0x256 [ 1360.714484][T17796] dump_stack+0x1a/0x1c [ 1360.718724][T17796] kmsan_internal_chain_origin+0x78/0x120 [ 1360.724559][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1360.730972][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1360.736937][T17796] ? ____sys_recvmsg+0x5c1/0x810 [ 1360.742009][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1360.747341][T17796] ? get_compat_msghdr+0x8c/0x1c0 [ 1360.752499][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1360.758469][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1360.763803][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1360.769777][T17796] ? should_fail+0x3f/0x810 [ 1360.774455][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1360.779713][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1360.786117][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1360.792084][T17796] __msan_chain_origin+0xbd/0x140 [ 1360.797253][T17796] __get_compat_msghdr+0x514/0x750 [ 1360.802522][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1360.807501][T17796] ? ___sys_recvmsg+0xa9/0x890 [ 1360.812396][T17796] ? do_recvmmsg+0x682/0x1180 [ 1360.817215][T17796] ___sys_recvmsg+0x19d/0x890 [ 1360.822019][T17796] ? do_recvmmsg+0x6e4/0x1180 [ 1360.826850][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1360.832122][T17796] ? kmsan_internal_check_memory+0x94/0x530 [ 1360.838156][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1360.844081][T17796] do_recvmmsg+0x682/0x1180 [ 1360.848749][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1360.855083][T17796] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1360.861587][T17796] __sys_recvmmsg+0x113/0x450 [ 1360.866345][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1360.872674][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1360.877857][T17796] ? exit_to_user_mode_prepare+0x119/0x220 [ 1360.883743][T17796] do_fast_syscall_32+0x33/0x70 [ 1360.888663][T17796] do_SYSENTER_32+0x1b/0x20 [ 1360.893251][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1360.899727][T17796] RIP: 0023:0xf7f30549 [ 1360.903892][T17796] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1360.923638][T17796] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1360.932122][T17796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1360.940152][T17796] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1360.948198][T17796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1360.956258][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.964284][T17796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1360.972321][T17796] [ 1360.985356][T17796] Uninit was stored to memory at: [ 1360.990574][T17796] __get_compat_msghdr+0x514/0x750 [ 1360.997522][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.002595][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.007403][T17796] do_recvmmsg+0x682/0x1180 [ 1361.012129][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.016932][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.023483][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.028729][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.033761][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.038329][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.044871][T17796] [ 1361.047265][T17796] Uninit was stored to memory at: [ 1361.052553][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.057811][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.062931][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.067721][T17796] do_recvmmsg+0x682/0x1180 [ 1361.072411][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.077206][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.083685][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.088910][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.093966][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.098581][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.105116][T17796] [ 1361.107500][T17796] Uninit was stored to memory at: [ 1361.112789][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.118012][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.123089][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.127874][T17796] do_recvmmsg+0x682/0x1180 [ 1361.132601][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.137402][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.143890][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.149116][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.154178][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.158811][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.165411][T17796] [ 1361.167808][T17796] Uninit was stored to memory at: [ 1361.173096][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.178344][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.183501][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.188290][T17796] do_recvmmsg+0x682/0x1180 [ 1361.192982][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.197769][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.204256][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.209489][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.214579][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.219191][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.225726][T17796] [ 1361.228099][T17796] Uninit was stored to memory at: [ 1361.233381][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.238606][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.243683][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.248475][T17796] do_recvmmsg+0x682/0x1180 [ 1361.253198][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.257997][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.264483][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.269728][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.274815][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.279432][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.285967][T17796] [ 1361.288339][T17796] Uninit was stored to memory at: [ 1361.293634][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.298870][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.303989][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.308802][T17796] do_recvmmsg+0x682/0x1180 [ 1361.313544][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.318342][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.324875][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.330135][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.335183][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.339830][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.346366][T17796] [ 1361.348759][T17796] Uninit was stored to memory at: [ 1361.354078][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.359306][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.364382][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.369181][T17796] do_recvmmsg+0x682/0x1180 [ 1361.373919][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.378727][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.385268][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.390527][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.395659][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.400272][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.406806][T17796] [ 1361.409182][T17796] Local variable msg_sys created at: [ 1361.414664][T17796] do_recvmmsg+0x5c/0x1180 [ 1361.419187][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.618302][T17796] not chained 1240000 origins [ 1361.623119][T17796] CPU: 0 PID: 17796 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1361.633362][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1361.643508][T17796] Call Trace: [ 1361.646824][T17796] [ 1361.649787][T17796] dump_stack_lvl+0x1c8/0x256 [ 1361.654587][T17796] dump_stack+0x1a/0x1c [ 1361.658830][T17796] kmsan_internal_chain_origin+0x78/0x120 [ 1361.664638][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1361.670993][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1361.676934][T17796] ? ____sys_recvmsg+0x5c1/0x810 [ 1361.681960][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1361.687285][T17796] ? get_compat_msghdr+0x8c/0x1c0 [ 1361.692426][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1361.698313][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1361.703595][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1361.709487][T17796] ? should_fail+0x3f/0x810 [ 1361.714066][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1361.719254][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1361.725578][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1361.731465][T17796] __msan_chain_origin+0xbd/0x140 [ 1361.736584][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.741847][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.746826][T17796] ? ___sys_recvmsg+0xa9/0x890 [ 1361.751712][T17796] ? do_recvmmsg+0x682/0x1180 [ 1361.756473][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.761232][T17796] ? do_recvmmsg+0x6e4/0x1180 [ 1361.765983][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1361.771174][T17796] ? kmsan_internal_check_memory+0x94/0x530 [ 1361.777160][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1361.783083][T17796] do_recvmmsg+0x682/0x1180 [ 1361.787740][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1361.794118][T17796] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.800618][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.805371][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.811723][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.816916][T17796] ? exit_to_user_mode_prepare+0x119/0x220 [ 1361.822803][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.827743][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.832333][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.838819][T17796] RIP: 0023:0xf7f30549 [ 1361.842970][T17796] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1361.862765][T17796] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1361.871248][T17796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1361.879282][T17796] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1361.887332][T17796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1361.895410][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.903472][T17796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1361.911512][T17796] [ 1361.919611][T17796] Uninit was stored to memory at: [ 1361.925297][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.930545][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.935628][T17796] ___sys_recvmsg+0x19d/0x890 [ 1361.940443][T17796] do_recvmmsg+0x682/0x1180 [ 1361.945180][T17796] __sys_recvmmsg+0x113/0x450 [ 1361.949972][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1361.956430][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1361.961771][T17796] do_fast_syscall_32+0x33/0x70 [ 1361.966754][T17796] do_SYSENTER_32+0x1b/0x20 [ 1361.971364][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1361.977929][T17796] [ 1361.980318][T17796] Uninit was stored to memory at: [ 1361.985621][T17796] __get_compat_msghdr+0x514/0x750 [ 1361.990845][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1361.995925][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.000716][T17796] do_recvmmsg+0x682/0x1180 [ 1362.005454][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.010262][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.016750][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.022113][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.027076][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.031644][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.038239][T17796] [ 1362.040586][T17796] Uninit was stored to memory at: [ 1362.045854][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.051073][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.056113][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.060900][T17796] do_recvmmsg+0x682/0x1180 [ 1362.065633][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.070423][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.076869][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.082193][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.087153][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.091862][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.098337][T17796] [ 1362.100722][T17796] Uninit was stored to memory at: [ 1362.105994][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.111213][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.116256][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.121047][T17796] do_recvmmsg+0x682/0x1180 [ 1362.125783][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.130590][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.137124][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.142408][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.147332][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.152066][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.158573][T17796] [ 1362.160942][T17796] Uninit was stored to memory at: [ 1362.166214][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.171440][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.176492][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.181282][T17796] do_recvmmsg+0x682/0x1180 [ 1362.186055][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.190858][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.197359][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.202690][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.207652][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.212376][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.218842][T17796] [ 1362.221188][T17796] Uninit was stored to memory at: [ 1362.226483][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.231798][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.236772][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.241574][T17796] do_recvmmsg+0x682/0x1180 [ 1362.246347][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.251157][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.257675][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.263002][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.267964][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.272692][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.279153][T17796] [ 1362.281504][T17796] Uninit was stored to memory at: [ 1362.286819][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.292141][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.297124][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.302016][T17796] do_recvmmsg+0x682/0x1180 [ 1362.306626][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.311365][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.317814][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.323140][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.328104][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.332832][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.339307][T17796] [ 1362.341789][T17796] Local variable msg_sys created at: [ 1362.347145][T17796] do_recvmmsg+0x5c/0x1180 [ 1362.351778][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.554126][T17796] not chained 1250000 origins [ 1362.558893][T17796] CPU: 1 PID: 17796 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1362.569121][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1362.579249][T17796] Call Trace: [ 1362.582607][T17796] [ 1362.585601][T17796] dump_stack_lvl+0x1c8/0x256 [ 1362.590383][T17796] dump_stack+0x1a/0x1c [ 1362.594642][T17796] kmsan_internal_chain_origin+0x78/0x120 [ 1362.600526][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1362.606915][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1362.612827][T17796] ? ____sys_recvmsg+0x5c1/0x810 [ 1362.617885][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1362.623171][T17796] ? get_compat_msghdr+0x8c/0x1c0 [ 1362.628304][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1362.634217][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1362.639529][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1362.645446][T17796] ? should_fail+0x3f/0x810 [ 1362.650032][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1362.655224][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1362.661571][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1362.667468][T17796] __msan_chain_origin+0xbd/0x140 [ 1362.672590][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.677826][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.682765][T17796] ? ___sys_recvmsg+0xa9/0x890 [ 1362.687657][T17796] ? do_recvmmsg+0x682/0x1180 [ 1362.692469][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.697271][T17796] ? do_recvmmsg+0x6e4/0x1180 [ 1362.702092][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1362.707356][T17796] ? kmsan_internal_check_memory+0x94/0x530 [ 1362.713386][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1362.719304][T17796] do_recvmmsg+0x682/0x1180 [ 1362.723914][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1362.730304][T17796] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.736804][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.741559][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.747901][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.753114][T17796] ? exit_to_user_mode_prepare+0x119/0x220 [ 1362.758997][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.763944][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.768558][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.774966][T17796] RIP: 0023:0xf7f30549 [ 1362.779081][T17796] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1362.798802][T17796] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1362.807357][T17796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1362.815426][T17796] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1362.823470][T17796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1362.831526][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.839548][T17796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1362.847607][T17796] [ 1362.853173][T17796] Uninit was stored to memory at: [ 1362.858381][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.863909][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.868896][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.873783][T17796] do_recvmmsg+0x682/0x1180 [ 1362.878430][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.883304][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.889695][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.895071][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.900072][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.904818][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.911281][T17796] [ 1362.913769][T17796] Uninit was stored to memory at: [ 1362.918961][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.924287][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.929246][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.934128][T17796] do_recvmmsg+0x682/0x1180 [ 1362.938738][T17796] __sys_recvmmsg+0x113/0x450 [ 1362.943588][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1362.949962][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1362.955286][T17796] do_fast_syscall_32+0x33/0x70 [ 1362.960247][T17796] do_SYSENTER_32+0x1b/0x20 [ 1362.964927][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1362.971408][T17796] [ 1362.973897][T17796] Uninit was stored to memory at: [ 1362.979042][T17796] __get_compat_msghdr+0x514/0x750 [ 1362.984325][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1362.989305][T17796] ___sys_recvmsg+0x19d/0x890 [ 1362.994188][T17796] do_recvmmsg+0x682/0x1180 [ 1362.998803][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.003669][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.010062][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.015427][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.020408][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.025158][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.031616][T17796] [ 1363.034113][T17796] Uninit was stored to memory at: [ 1363.039252][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.044554][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.049512][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.054394][T17796] do_recvmmsg+0x682/0x1180 [ 1363.059007][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.063857][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.070232][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.075554][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.080514][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.085185][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.091642][T17796] [ 1363.094132][T17796] Uninit was stored to memory at: [ 1363.099266][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.104585][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.109565][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.114494][T17796] do_recvmmsg+0x682/0x1180 [ 1363.119128][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.124010][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.130406][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.135726][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.140709][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.145425][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.151973][T17796] [ 1363.154360][T17796] Uninit was stored to memory at: [ 1363.159494][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.164797][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.169763][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.174647][T17796] do_recvmmsg+0x682/0x1180 [ 1363.179280][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.184128][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.190499][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.195821][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.200789][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.205481][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.212059][T17796] [ 1363.214461][T17796] Uninit was stored to memory at: [ 1363.219595][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.224880][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.229849][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.234738][T17796] do_recvmmsg+0x682/0x1180 [ 1363.239370][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.244296][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.250671][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.256001][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.260965][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.265640][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.272191][T17796] [ 1363.274581][T17796] Local variable msg_sys created at: [ 1363.279920][T17796] do_recvmmsg+0x5c/0x1180 [ 1363.284503][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.486710][T17796] not chained 1260000 origins [ 1363.491474][T17796] CPU: 1 PID: 17796 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1363.501716][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1363.511877][T17796] Call Trace: [ 1363.515235][T17796] [ 1363.518241][T17796] dump_stack_lvl+0x1c8/0x256 [ 1363.523121][T17796] dump_stack+0x1a/0x1c [ 1363.527418][T17796] kmsan_internal_chain_origin+0x78/0x120 [ 1363.533254][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1363.539633][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1363.545544][T17796] ? ____sys_recvmsg+0x5c1/0x810 [ 1363.550594][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1363.555860][T17796] ? get_compat_msghdr+0x8c/0x1c0 [ 1363.560952][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1363.566861][T17796] ? __get_compat_msghdr+0x5b/0x750 [ 1363.572207][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1363.578153][T17796] ? should_fail+0x3f/0x810 [ 1363.582754][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1363.587992][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1363.594323][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1363.600216][T17796] __msan_chain_origin+0xbd/0x140 [ 1363.605336][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.610593][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.615536][T17796] ? ___sys_recvmsg+0xa9/0x890 [ 1363.620436][T17796] ? do_recvmmsg+0x682/0x1180 [ 1363.625247][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.630035][T17796] ? do_recvmmsg+0x6e4/0x1180 [ 1363.634795][T17796] ? __stack_depot_save+0x21/0x4b0 [ 1363.639985][T17796] ? kmsan_internal_check_memory+0x94/0x530 [ 1363.645988][T17796] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1363.651912][T17796] do_recvmmsg+0x682/0x1180 [ 1363.656544][T17796] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1363.662922][T17796] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.669481][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.674258][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.680640][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.685846][T17796] ? exit_to_user_mode_prepare+0x119/0x220 [ 1363.691809][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.696786][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.701365][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.707777][T17796] RIP: 0023:0xf7f30549 [ 1363.711911][T17796] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1363.731678][T17796] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1363.740208][T17796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1363.748238][T17796] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1363.756265][T17796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1363.764306][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1363.772382][T17796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1363.780465][T17796] [ 1363.785957][T17796] Uninit was stored to memory at: [ 1363.791151][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.796655][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.801632][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.806511][T17796] do_recvmmsg+0x682/0x1180 [ 1363.811139][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.816011][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.822478][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.827724][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.832824][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.837462][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.844036][T17796] [ 1363.846409][T17796] Uninit was stored to memory at: [ 1363.851529][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.856847][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.861886][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.866628][T17796] do_recvmmsg+0x682/0x1180 [ 1363.871189][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.876071][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.882505][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.887685][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.892735][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.897364][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.903967][T17796] [ 1363.906354][T17796] Uninit was stored to memory at: [ 1363.911495][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.916776][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.921823][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.926628][T17796] do_recvmmsg+0x682/0x1180 [ 1363.931252][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.936171][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1363.942654][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1363.947880][T17796] do_fast_syscall_32+0x33/0x70 [ 1363.952935][T17796] do_SYSENTER_32+0x1b/0x20 [ 1363.957569][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1363.964134][T17796] [ 1363.966507][T17796] Uninit was stored to memory at: [ 1363.971620][T17796] __get_compat_msghdr+0x514/0x750 [ 1363.976946][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1363.982035][T17796] ___sys_recvmsg+0x19d/0x890 [ 1363.986824][T17796] do_recvmmsg+0x682/0x1180 [ 1363.991388][T17796] __sys_recvmmsg+0x113/0x450 [ 1363.996270][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1364.002738][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1364.007965][T17796] do_fast_syscall_32+0x33/0x70 [ 1364.013020][T17796] do_SYSENTER_32+0x1b/0x20 [ 1364.017651][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1364.024236][T17796] [ 1364.026625][T17796] Uninit was stored to memory at: [ 1364.031883][T17796] __get_compat_msghdr+0x514/0x750 [ 1364.037106][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1364.042151][T17796] ___sys_recvmsg+0x19d/0x890 [ 1364.046937][T17796] do_recvmmsg+0x682/0x1180 [ 1364.051505][T17796] __sys_recvmmsg+0x113/0x450 [ 1364.056353][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1364.062825][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1364.068051][T17796] do_fast_syscall_32+0x33/0x70 [ 1364.073106][T17796] do_SYSENTER_32+0x1b/0x20 [ 1364.077717][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1364.084253][T17796] [ 1364.086630][T17796] Uninit was stored to memory at: [ 1364.091887][T17796] __get_compat_msghdr+0x514/0x750 [ 1364.097111][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1364.102170][T17796] ___sys_recvmsg+0x19d/0x890 [ 1364.106958][T17796] do_recvmmsg+0x682/0x1180 [ 1364.111539][T17796] __sys_recvmmsg+0x113/0x450 [ 1364.116422][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1364.122888][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1364.128136][T17796] do_fast_syscall_32+0x33/0x70 [ 1364.133235][T17796] do_SYSENTER_32+0x1b/0x20 [ 1364.137864][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1364.144436][T17796] [ 1364.146808][T17796] Uninit was stored to memory at: [ 1364.152075][T17796] __get_compat_msghdr+0x514/0x750 [ 1364.157296][T17796] get_compat_msghdr+0x8c/0x1c0 [ 1364.162350][T17796] ___sys_recvmsg+0x19d/0x890 [ 1364.167142][T17796] do_recvmmsg+0x682/0x1180 [ 1364.171831][T17796] __sys_recvmmsg+0x113/0x450 [ 1364.176633][T17796] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1364.183145][T17796] __do_fast_syscall_32+0xa2/0x100 [ 1364.188390][T17796] do_fast_syscall_32+0x33/0x70 [ 1364.193465][T17796] do_SYSENTER_32+0x1b/0x20 [ 1364.198076][T17796] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1364.204620][T17796] [ 1364.206993][T17796] Local variable msg_sys created at: [ 1364.212448][T17796] do_recvmmsg+0x5c/0x1180 [ 1364.216984][T17796] __sys_recvmmsg+0x113/0x450 09:39:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:39:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xf3, 0x4, 0x0, @multicast2, @empty}}}}) 09:39:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@getlink={0x44, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x5}, @IFLA_PROMISCUITY={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x44}}, 0x0) 09:39:50 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002b00)='ns/net\x00') pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 09:39:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:50 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) fallocate(r0, 0x61, 0x0, 0x5) 09:39:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x0, 0x10, r0, 0xffffffff00000000) 09:39:50 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f0000000040)) 09:39:50 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 09:39:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1364.941112][T17838] loop4: detected capacity change from 0 to 6 [ 1365.093636][T17838] Dev loop4: unable to read RDB block 6 [ 1365.099535][T17838] loop4: unable to read partition table [ 1365.283272][T17838] loop4: partition table beyond EOD, truncated [ 1365.303263][T17838] FAT-fs (loop4): Directory bread(block 6) failed [ 1366.117934][T17837] not chained 1270000 origins [ 1366.122840][T17837] CPU: 0 PID: 17837 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1366.133093][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1366.143237][T17837] Call Trace: [ 1366.146573][T17837] [ 1366.149562][T17837] dump_stack_lvl+0x1c8/0x256 [ 1366.154346][T17837] dump_stack+0x1a/0x1c [ 1366.158593][T17837] kmsan_internal_chain_origin+0x78/0x120 [ 1366.164401][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1366.170741][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1366.176651][T17837] ? ____sys_recvmsg+0x5c1/0x810 [ 1366.181733][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1366.187066][T17837] ? get_compat_msghdr+0x8c/0x1c0 [ 1366.192224][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1366.198184][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1366.203502][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1366.209401][T17837] ? should_fail+0x3f/0x810 [ 1366.214003][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1366.219196][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1366.225524][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1366.231457][T17837] __msan_chain_origin+0xbd/0x140 [ 1366.236630][T17837] __get_compat_msghdr+0x514/0x750 [ 1366.241902][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1366.246868][T17837] ? ___sys_recvmsg+0xa9/0x890 [ 1366.251743][T17837] ? do_recvmmsg+0x682/0x1180 [ 1366.256549][T17837] ___sys_recvmsg+0x19d/0x890 [ 1366.261293][T17837] ? do_recvmmsg+0x6e4/0x1180 [ 1366.266050][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1366.271244][T17837] ? kmsan_internal_check_memory+0x94/0x530 [ 1366.277224][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1366.283175][T17837] do_recvmmsg+0x682/0x1180 [ 1366.287835][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1366.294223][T17837] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.300733][T17837] __sys_recvmmsg+0x113/0x450 [ 1366.305503][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.311839][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1366.317057][T17837] ? exit_to_user_mode_prepare+0x119/0x220 [ 1366.323001][T17837] do_fast_syscall_32+0x33/0x70 [ 1366.327956][T17837] do_SYSENTER_32+0x1b/0x20 [ 1366.332547][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1366.339027][T17837] RIP: 0023:0xf7f30549 [ 1366.343194][T17837] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1366.362944][T17837] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1366.371432][T17837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1366.379463][T17837] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1366.387512][T17837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1366.395571][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.403595][T17837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1366.411656][T17837] [ 1366.419709][T17837] Uninit was stored to memory at: [ 1366.426021][T17837] __get_compat_msghdr+0x514/0x750 [ 1366.431280][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1366.436359][T17837] ___sys_recvmsg+0x19d/0x890 [ 1366.441169][T17837] do_recvmmsg+0x682/0x1180 [ 1366.445904][T17837] __sys_recvmmsg+0x113/0x450 [ 1366.450702][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.457191][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1366.462518][T17837] do_fast_syscall_32+0x33/0x70 [ 1366.467507][T17837] do_SYSENTER_32+0x1b/0x20 [ 1366.472283][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1366.478743][T17837] [ 1366.481115][T17837] Uninit was stored to memory at: [ 1366.486389][T17837] __get_compat_msghdr+0x514/0x750 [ 1366.491616][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1366.496700][T17837] ___sys_recvmsg+0x19d/0x890 [ 1366.501507][T17837] do_recvmmsg+0x682/0x1180 [ 1366.506285][T17837] __sys_recvmmsg+0x113/0x450 [ 1366.511079][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.517529][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1366.522857][T17837] do_fast_syscall_32+0x33/0x70 [ 1366.527844][T17837] do_SYSENTER_32+0x1b/0x20 [ 1366.532624][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1366.539100][T17837] [ 1366.541473][T17837] Uninit was stored to memory at: [ 1366.546746][T17837] __get_compat_msghdr+0x514/0x750 [ 1366.552061][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1366.557034][T17837] ___sys_recvmsg+0x19d/0x890 [ 1366.561971][T17837] do_recvmmsg+0x682/0x1180 [ 1366.566598][T17837] __sys_recvmmsg+0x113/0x450 [ 1366.571398][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.577836][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1366.583195][T17837] do_fast_syscall_32+0x33/0x70 [ 1366.588177][T17837] do_SYSENTER_32+0x1b/0x20 [ 1366.592909][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1366.599374][T17837] [ 1366.601895][T17837] Uninit was stored to memory at: [ 1366.607087][T17837] __get_compat_msghdr+0x514/0x750 [ 1366.612477][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1366.617437][T17837] ___sys_recvmsg+0x19d/0x890 [ 1366.622342][T17837] do_recvmmsg+0x682/0x1180 [ 1366.626958][T17837] __sys_recvmmsg+0x113/0x450 [ 1366.631852][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.638249][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1366.643615][T17837] do_fast_syscall_32+0x33/0x70 [ 1366.648582][T17837] do_SYSENTER_32+0x1b/0x20 [ 1366.653361][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1366.659835][T17837] [ 1366.662435][T17837] Uninit was stored to memory at: [ 1366.667623][T17837] __get_compat_msghdr+0x514/0x750 [ 1366.673009][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1366.677969][T17837] ___sys_recvmsg+0x19d/0x890 [ 1366.682876][T17837] do_recvmmsg+0x682/0x1180 [ 1366.687505][T17837] __sys_recvmmsg+0x113/0x450 [ 1366.692404][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.698799][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1366.704152][T17837] do_fast_syscall_32+0x33/0x70 [ 1366.709115][T17837] do_SYSENTER_32+0x1b/0x20 [ 1366.713808][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1366.720268][T17837] [ 1366.722755][T17837] Uninit was stored to memory at: [ 1366.727936][T17837] __get_compat_msghdr+0x514/0x750 [ 1366.733268][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1366.738192][T17837] ___sys_recvmsg+0x19d/0x890 [ 1366.743056][T17837] do_recvmmsg+0x682/0x1180 [ 1366.747669][T17837] __sys_recvmmsg+0x113/0x450 [ 1366.752578][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.758968][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1366.764327][T17837] do_fast_syscall_32+0x33/0x70 [ 1366.769309][T17837] do_SYSENTER_32+0x1b/0x20 [ 1366.774025][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1366.780487][T17837] [ 1366.782974][T17837] Uninit was stored to memory at: [ 1366.788162][T17837] __get_compat_msghdr+0x514/0x750 [ 1366.793540][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1366.798507][T17837] ___sys_recvmsg+0x19d/0x890 [ 1366.803408][T17837] do_recvmmsg+0x682/0x1180 [ 1366.808042][T17837] __sys_recvmmsg+0x113/0x450 [ 1366.812943][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1366.819331][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1366.824688][T17837] do_fast_syscall_32+0x33/0x70 [ 1366.829656][T17837] do_SYSENTER_32+0x1b/0x20 [ 1366.834396][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1366.840864][T17837] [ 1366.843365][T17837] Local variable msg_sys created at: [ 1366.848730][T17837] do_recvmmsg+0x5c/0x1180 [ 1366.853375][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.063169][T17837] not chained 1280000 origins [ 1367.067950][T17837] CPU: 0 PID: 17837 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1367.078221][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1367.088330][T17837] Call Trace: [ 1367.091645][T17837] [ 1367.094628][T17837] dump_stack_lvl+0x1c8/0x256 [ 1367.099442][T17837] dump_stack+0x1a/0x1c [ 1367.103748][T17837] kmsan_internal_chain_origin+0x78/0x120 [ 1367.109561][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1367.115918][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1367.121876][T17837] ? ____sys_recvmsg+0x5c1/0x810 [ 1367.126907][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1367.132220][T17837] ? get_compat_msghdr+0x8c/0x1c0 [ 1367.137311][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1367.143486][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1367.148785][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1367.154684][T17837] ? should_fail+0x3f/0x810 [ 1367.159267][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1367.164486][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1367.170890][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1367.176851][T17837] __msan_chain_origin+0xbd/0x140 [ 1367.182004][T17837] __get_compat_msghdr+0x514/0x750 [ 1367.187203][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1367.192122][T17837] ? ___sys_recvmsg+0xa9/0x890 [ 1367.196953][T17837] ? do_recvmmsg+0x682/0x1180 [ 1367.201724][T17837] ___sys_recvmsg+0x19d/0x890 [ 1367.206517][T17837] ? do_recvmmsg+0x6e4/0x1180 [ 1367.211274][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1367.216491][T17837] ? kmsan_internal_check_memory+0x94/0x530 [ 1367.222528][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1367.228502][T17837] do_recvmmsg+0x682/0x1180 [ 1367.233134][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1367.239516][T17837] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.246018][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.250787][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.257186][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1367.262394][T17837] ? exit_to_user_mode_prepare+0x119/0x220 [ 1367.268354][T17837] do_fast_syscall_32+0x33/0x70 [ 1367.273283][T17837] do_SYSENTER_32+0x1b/0x20 [ 1367.277853][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1367.284262][T17837] RIP: 0023:0xf7f30549 [ 1367.288375][T17837] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1367.308096][T17837] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1367.316642][T17837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1367.324737][T17837] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1367.332806][T17837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1367.340853][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.348907][T17837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1367.356984][T17837] [ 1367.369901][T17837] Uninit was stored to memory at: [ 1367.376745][T17837] __get_compat_msghdr+0x514/0x750 [ 1367.382068][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1367.387050][T17837] ___sys_recvmsg+0x19d/0x890 [ 1367.391951][T17837] do_recvmmsg+0x682/0x1180 [ 1367.396584][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.401385][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.407884][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1367.413237][T17837] do_fast_syscall_32+0x33/0x70 [ 1367.418205][T17837] do_SYSENTER_32+0x1b/0x20 [ 1367.422947][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1367.429409][T17837] [ 1367.431916][T17837] Uninit was stored to memory at: [ 1367.437099][T17837] __get_compat_msghdr+0x514/0x750 [ 1367.442437][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1367.447414][T17837] ___sys_recvmsg+0x19d/0x890 [ 1367.452331][T17837] do_recvmmsg+0x682/0x1180 [ 1367.456966][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.461908][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.468291][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1367.473646][T17837] do_fast_syscall_32+0x33/0x70 [ 1367.478613][T17837] do_SYSENTER_32+0x1b/0x20 [ 1367.483351][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1367.489862][T17837] [ 1367.492390][T17837] Uninit was stored to memory at: [ 1367.497533][T17837] __get_compat_msghdr+0x514/0x750 [ 1367.502870][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1367.507852][T17837] ___sys_recvmsg+0x19d/0x890 [ 1367.512814][T17837] do_recvmmsg+0x682/0x1180 [ 1367.517450][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.522399][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.528788][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1367.534150][T17837] do_fast_syscall_32+0x33/0x70 [ 1367.539552][T17837] do_SYSENTER_32+0x1b/0x20 [ 1367.544290][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1367.550748][T17837] [ 1367.553238][T17837] Uninit was stored to memory at: [ 1367.558432][T17837] __get_compat_msghdr+0x514/0x750 [ 1367.563766][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1367.568723][T17837] ___sys_recvmsg+0x19d/0x890 [ 1367.573615][T17837] do_recvmmsg+0x682/0x1180 [ 1367.578253][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.583121][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.589495][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1367.594839][T17837] do_fast_syscall_32+0x33/0x70 [ 1367.599828][T17837] do_SYSENTER_32+0x1b/0x20 [ 1367.604618][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1367.611100][T17837] [ 1367.613616][T17837] Uninit was stored to memory at: [ 1367.618761][T17837] __get_compat_msghdr+0x514/0x750 [ 1367.624108][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1367.629066][T17837] ___sys_recvmsg+0x19d/0x890 [ 1367.633989][T17837] do_recvmmsg+0x682/0x1180 [ 1367.638605][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.643499][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.649890][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1367.655258][T17837] do_fast_syscall_32+0x33/0x70 [ 1367.660224][T17837] do_SYSENTER_32+0x1b/0x20 [ 1367.664963][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1367.671421][T17837] [ 1367.673946][T17837] Uninit was stored to memory at: [ 1367.679129][T17837] __get_compat_msghdr+0x514/0x750 [ 1367.684464][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1367.689424][T17837] ___sys_recvmsg+0x19d/0x890 [ 1367.694484][T17837] do_recvmmsg+0x682/0x1180 [ 1367.699100][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.703971][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.710432][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1367.715782][T17837] do_fast_syscall_32+0x33/0x70 [ 1367.720772][T17837] do_SYSENTER_32+0x1b/0x20 [ 1367.725546][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1367.732099][T17837] [ 1367.734469][T17837] Uninit was stored to memory at: [ 1367.739584][T17837] __get_compat_msghdr+0x514/0x750 [ 1367.744931][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1367.749909][T17837] ___sys_recvmsg+0x19d/0x890 [ 1367.754787][T17837] do_recvmmsg+0x682/0x1180 [ 1367.759423][T17837] __sys_recvmmsg+0x113/0x450 [ 1367.764346][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1367.770734][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1367.776090][T17837] do_fast_syscall_32+0x33/0x70 [ 1367.781055][T17837] do_SYSENTER_32+0x1b/0x20 [ 1367.785756][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1367.792309][T17837] [ 1367.794699][T17837] Local variable msg_sys created at: [ 1367.800053][T17837] do_recvmmsg+0x5c/0x1180 [ 1367.804738][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.000542][T17837] not chained 1290000 origins [ 1368.005404][T17837] CPU: 0 PID: 17837 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1368.015652][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1368.025815][T17837] Call Trace: [ 1368.029152][T17837] [ 1368.032115][T17837] dump_stack_lvl+0x1c8/0x256 [ 1368.036894][T17837] dump_stack+0x1a/0x1c [ 1368.041138][T17837] kmsan_internal_chain_origin+0x78/0x120 [ 1368.046946][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1368.053306][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1368.059193][T17837] ? ____sys_recvmsg+0x5c1/0x810 [ 1368.064218][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1368.069546][T17837] ? get_compat_msghdr+0x8c/0x1c0 [ 1368.074703][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1368.080664][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1368.085978][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1368.091872][T17837] ? should_fail+0x3f/0x810 [ 1368.096456][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1368.101645][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1368.107999][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1368.113911][T17837] __msan_chain_origin+0xbd/0x140 [ 1368.119090][T17837] __get_compat_msghdr+0x514/0x750 [ 1368.124358][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1368.129323][T17837] ? ___sys_recvmsg+0xa9/0x890 [ 1368.134174][T17837] ? do_recvmmsg+0x682/0x1180 [ 1368.139266][T17837] ___sys_recvmsg+0x19d/0x890 [ 1368.144008][T17837] ? do_recvmmsg+0x6e4/0x1180 [ 1368.148768][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1368.153961][T17837] ? kmsan_internal_check_memory+0x94/0x530 [ 1368.159952][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1368.165889][T17837] do_recvmmsg+0x682/0x1180 [ 1368.170557][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1368.176888][T17837] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.183389][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.188140][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.194471][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1368.199653][T17837] ? exit_to_user_mode_prepare+0x119/0x220 [ 1368.205536][T17837] do_fast_syscall_32+0x33/0x70 [ 1368.210471][T17837] do_SYSENTER_32+0x1b/0x20 [ 1368.215060][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1368.221540][T17837] RIP: 0023:0xf7f30549 [ 1368.225710][T17837] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1368.245474][T17837] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1368.253973][T17837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1368.262036][T17837] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1368.270094][T17837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1368.278114][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.286154][T17837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1368.294193][T17837] [ 1368.302225][T17837] Uninit was stored to memory at: [ 1368.307429][T17837] __get_compat_msghdr+0x514/0x750 [ 1368.313205][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1368.318188][T17837] ___sys_recvmsg+0x19d/0x890 [ 1368.323091][T17837] do_recvmmsg+0x682/0x1180 [ 1368.327742][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.332649][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.339053][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1368.344441][T17837] do_fast_syscall_32+0x33/0x70 [ 1368.349424][T17837] do_SYSENTER_32+0x1b/0x20 [ 1368.354163][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1368.360642][T17837] [ 1368.363104][T17837] Uninit was stored to memory at: [ 1368.368266][T17837] __get_compat_msghdr+0x514/0x750 [ 1368.373604][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1368.378564][T17837] ___sys_recvmsg+0x19d/0x890 [ 1368.383433][T17837] do_recvmmsg+0x682/0x1180 [ 1368.388043][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.392960][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.399328][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1368.404680][T17837] do_fast_syscall_32+0x33/0x70 [ 1368.409665][T17837] do_SYSENTER_32+0x1b/0x20 [ 1368.414364][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1368.420844][T17837] [ 1368.423338][T17837] Uninit was stored to memory at: [ 1368.428523][T17837] __get_compat_msghdr+0x514/0x750 [ 1368.433909][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1368.438878][T17837] ___sys_recvmsg+0x19d/0x890 [ 1368.443752][T17837] do_recvmmsg+0x682/0x1180 [ 1368.448386][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.453278][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.459666][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1368.465012][T17837] do_fast_syscall_32+0x33/0x70 [ 1368.469988][T17837] do_SYSENTER_32+0x1b/0x20 [ 1368.474754][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1368.481223][T17837] [ 1368.483686][T17837] Uninit was stored to memory at: [ 1368.488824][T17837] __get_compat_msghdr+0x514/0x750 [ 1368.494168][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1368.499135][T17837] ___sys_recvmsg+0x19d/0x890 [ 1368.504010][T17837] do_recvmmsg+0x682/0x1180 [ 1368.508626][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.513525][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.519895][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1368.525265][T17837] do_fast_syscall_32+0x33/0x70 [ 1368.530249][T17837] do_SYSENTER_32+0x1b/0x20 [ 1368.534992][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1368.541482][T17837] [ 1368.544000][T17837] Uninit was stored to memory at: [ 1368.549139][T17837] __get_compat_msghdr+0x514/0x750 [ 1368.554442][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1368.559400][T17837] ___sys_recvmsg+0x19d/0x890 [ 1368.564273][T17837] do_recvmmsg+0x682/0x1180 [ 1368.568903][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.573806][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.580189][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1368.585556][T17837] do_fast_syscall_32+0x33/0x70 [ 1368.590537][T17837] do_SYSENTER_32+0x1b/0x20 [ 1368.595274][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1368.601826][T17837] [ 1368.604212][T17837] Uninit was stored to memory at: [ 1368.609367][T17837] __get_compat_msghdr+0x514/0x750 [ 1368.614704][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1368.619664][T17837] ___sys_recvmsg+0x19d/0x890 [ 1368.624555][T17837] do_recvmmsg+0x682/0x1180 [ 1368.629167][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.634074][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.640466][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1368.645840][T17837] do_fast_syscall_32+0x33/0x70 [ 1368.650807][T17837] do_SYSENTER_32+0x1b/0x20 [ 1368.655508][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1368.662060][T17837] [ 1368.664450][T17837] Uninit was stored to memory at: [ 1368.669590][T17837] __get_compat_msghdr+0x514/0x750 [ 1368.674894][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1368.679854][T17837] ___sys_recvmsg+0x19d/0x890 [ 1368.684723][T17837] do_recvmmsg+0x682/0x1180 [ 1368.689333][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.694244][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1368.700627][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1368.705968][T17837] do_fast_syscall_32+0x33/0x70 [ 1368.710945][T17837] do_SYSENTER_32+0x1b/0x20 [ 1368.715683][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1368.722236][T17837] [ 1368.724609][T17837] Local variable msg_sys created at: [ 1368.729942][T17837] do_recvmmsg+0x5c/0x1180 [ 1368.734587][T17837] __sys_recvmmsg+0x113/0x450 [ 1368.926700][T17837] not chained 1300000 origins [ 1368.931465][T17837] CPU: 0 PID: 17837 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1368.941711][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1368.951865][T17837] Call Trace: [ 1368.955180][T17837] [ 1368.958145][T17837] dump_stack_lvl+0x1c8/0x256 [ 1368.962951][T17837] dump_stack+0x1a/0x1c [ 1368.967267][T17837] kmsan_internal_chain_origin+0x78/0x120 [ 1368.973138][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1368.979525][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1368.985444][T17837] ? ____sys_recvmsg+0x5c1/0x810 [ 1368.990456][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1368.995718][T17837] ? get_compat_msghdr+0x8c/0x1c0 [ 1369.000809][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1369.006695][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1369.011971][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1369.017862][T17837] ? should_fail+0x3f/0x810 [ 1369.022466][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1369.027723][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1369.034125][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1369.040069][T17837] __msan_chain_origin+0xbd/0x140 [ 1369.045192][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.050467][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.055434][T17837] ? ___sys_recvmsg+0xa9/0x890 [ 1369.060265][T17837] ? do_recvmmsg+0x682/0x1180 [ 1369.065012][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.069751][T17837] ? do_recvmmsg+0x6e4/0x1180 [ 1369.074506][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1369.079699][T17837] ? kmsan_internal_check_memory+0x94/0x530 [ 1369.085674][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1369.091564][T17837] do_recvmmsg+0x682/0x1180 [ 1369.096150][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1369.102478][T17837] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.108973][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.113725][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.120055][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1369.125247][T17837] ? exit_to_user_mode_prepare+0x119/0x220 [ 1369.131134][T17837] do_fast_syscall_32+0x33/0x70 [ 1369.136076][T17837] do_SYSENTER_32+0x1b/0x20 [ 1369.140689][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1369.147117][T17837] RIP: 0023:0xf7f30549 [ 1369.151287][T17837] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1369.171049][T17837] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1369.179538][T17837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1369.187570][T17837] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1369.195598][T17837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1369.203622][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.211646][T17837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1369.219707][T17837] [ 1369.227820][T17837] Uninit was stored to memory at: [ 1369.233533][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.238777][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.243832][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.248656][T17837] do_recvmmsg+0x682/0x1180 [ 1369.253353][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.258164][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.264624][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1369.269871][T17837] do_fast_syscall_32+0x33/0x70 [ 1369.274977][T17837] do_SYSENTER_32+0x1b/0x20 [ 1369.279607][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1369.286214][T17837] [ 1369.288600][T17837] Uninit was stored to memory at: [ 1369.293845][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.299080][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.304125][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.308931][T17837] do_recvmmsg+0x682/0x1180 [ 1369.313642][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.318465][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.324932][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1369.330182][T17837] do_fast_syscall_32+0x33/0x70 [ 1369.335231][T17837] do_SYSENTER_32+0x1b/0x20 [ 1369.339868][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1369.346430][T17837] [ 1369.348816][T17837] Uninit was stored to memory at: [ 1369.354065][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.359302][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.364351][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.369160][T17837] do_recvmmsg+0x682/0x1180 [ 1369.373853][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.378640][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.385125][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1369.390373][T17837] do_fast_syscall_32+0x33/0x70 [ 1369.395436][T17837] do_SYSENTER_32+0x1b/0x20 [ 1369.400065][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1369.406619][T17837] [ 1369.409007][T17837] Uninit was stored to memory at: [ 1369.414313][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.419554][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.424600][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.429403][T17837] do_recvmmsg+0x682/0x1180 [ 1369.434107][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.438913][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.445377][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1369.450630][T17837] do_fast_syscall_32+0x33/0x70 [ 1369.455687][T17837] do_SYSENTER_32+0x1b/0x20 [ 1369.460319][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1369.466840][T17837] [ 1369.469189][T17837] Uninit was stored to memory at: [ 1369.474478][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.479719][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.484815][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.489624][T17837] do_recvmmsg+0x682/0x1180 [ 1369.494377][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.499177][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.505618][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1369.510846][T17837] do_fast_syscall_32+0x33/0x70 [ 1369.515912][T17837] do_SYSENTER_32+0x1b/0x20 [ 1369.520524][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1369.527072][T17837] [ 1369.529467][T17837] Uninit was stored to memory at: [ 1369.534778][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.539998][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.545024][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.549815][T17837] do_recvmmsg+0x682/0x1180 [ 1369.554533][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.559342][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.565828][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1369.571059][T17837] do_fast_syscall_32+0x33/0x70 [ 1369.576084][T17837] do_SYSENTER_32+0x1b/0x20 [ 1369.580699][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1369.587250][T17837] [ 1369.589623][T17837] Uninit was stored to memory at: [ 1369.594911][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.600150][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.605244][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.610032][T17837] do_recvmmsg+0x682/0x1180 [ 1369.614705][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.619513][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1369.625974][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1369.631203][T17837] do_fast_syscall_32+0x33/0x70 [ 1369.636258][T17837] do_SYSENTER_32+0x1b/0x20 [ 1369.640872][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1369.647386][T17837] [ 1369.649786][T17837] Local variable msg_sys created at: [ 1369.655242][T17837] do_recvmmsg+0x5c/0x1180 [ 1369.659769][T17837] __sys_recvmmsg+0x113/0x450 [ 1369.849043][T17837] not chained 1310000 origins [ 1369.853861][T17837] CPU: 0 PID: 17837 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1369.864152][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1369.874313][T17837] Call Trace: [ 1369.877648][T17837] [ 1369.880612][T17837] dump_stack_lvl+0x1c8/0x256 [ 1369.885393][T17837] dump_stack+0x1a/0x1c [ 1369.889649][T17837] kmsan_internal_chain_origin+0x78/0x120 [ 1369.895459][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1369.901811][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1369.907748][T17837] ? ____sys_recvmsg+0x5c1/0x810 [ 1369.912776][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1369.918100][T17837] ? get_compat_msghdr+0x8c/0x1c0 [ 1369.923252][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1369.929212][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1369.934547][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1369.940490][T17837] ? should_fail+0x3f/0x810 [ 1369.945074][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1369.950267][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1369.956597][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1369.962508][T17837] __msan_chain_origin+0xbd/0x140 [ 1369.967677][T17837] __get_compat_msghdr+0x514/0x750 [ 1369.972947][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1369.977910][T17837] ? ___sys_recvmsg+0xa9/0x890 [ 1369.982757][T17837] ? do_recvmmsg+0x682/0x1180 [ 1369.987548][T17837] ___sys_recvmsg+0x19d/0x890 [ 1369.992308][T17837] ? do_recvmmsg+0x6e4/0x1180 [ 1369.997108][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1370.002317][T17837] ? kmsan_internal_check_memory+0x94/0x530 [ 1370.008374][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1370.014348][T17837] do_recvmmsg+0x682/0x1180 [ 1370.019008][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1370.025415][T17837] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.031989][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.036813][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.043216][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.048452][T17837] ? exit_to_user_mode_prepare+0x119/0x220 [ 1370.054355][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.059321][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.063908][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.070370][T17837] RIP: 0023:0xf7f30549 [ 1370.074508][T17837] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1370.094275][T17837] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1370.102823][T17837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1370.110886][T17837] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1370.118908][T17837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1370.126933][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.134971][T17837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1370.143072][T17837] [ 1370.151198][T17837] Uninit was stored to memory at: [ 1370.156826][T17837] __get_compat_msghdr+0x514/0x750 [ 1370.162135][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1370.167110][T17837] ___sys_recvmsg+0x19d/0x890 [ 1370.171990][T17837] do_recvmmsg+0x682/0x1180 [ 1370.176617][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.181428][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.187889][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.193203][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.198182][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.202882][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.209353][T17837] [ 1370.211855][T17837] Uninit was stored to memory at: [ 1370.217041][T17837] __get_compat_msghdr+0x514/0x750 [ 1370.222400][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1370.227366][T17837] ___sys_recvmsg+0x19d/0x890 [ 1370.232253][T17837] do_recvmmsg+0x682/0x1180 [ 1370.236879][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.241662][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.248164][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.253543][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.258530][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.263283][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.269744][T17837] [ 1370.272220][T17837] Uninit was stored to memory at: [ 1370.277361][T17837] __get_compat_msghdr+0x514/0x750 [ 1370.282688][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1370.287669][T17837] ___sys_recvmsg+0x19d/0x890 [ 1370.292596][T17837] do_recvmmsg+0x682/0x1180 [ 1370.297224][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.302147][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.308518][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.313847][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.318809][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.323523][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.329984][T17837] [ 1370.332473][T17837] Uninit was stored to memory at: [ 1370.337611][T17837] __get_compat_msghdr+0x514/0x750 [ 1370.342928][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1370.348148][T17837] ___sys_recvmsg+0x19d/0x890 [ 1370.353030][T17837] do_recvmmsg+0x682/0x1180 [ 1370.357660][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.362585][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.368972][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.374291][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.379279][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.384002][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.390483][T17837] [ 1370.392974][T17837] Uninit was stored to memory at: [ 1370.398115][T17837] __get_compat_msghdr+0x514/0x750 [ 1370.403438][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1370.408418][T17837] ___sys_recvmsg+0x19d/0x890 [ 1370.413309][T17837] do_recvmmsg+0x682/0x1180 [ 1370.417926][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.422812][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.429180][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.434510][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.439478][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.444158][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.450636][T17837] [ 1370.453128][T17837] Uninit was stored to memory at: [ 1370.458286][T17837] __get_compat_msghdr+0x514/0x750 [ 1370.463607][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1370.468568][T17837] ___sys_recvmsg+0x19d/0x890 [ 1370.473458][T17837] do_recvmmsg+0x682/0x1180 [ 1370.478090][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.482971][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.489357][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.494700][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.499698][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.504414][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.510876][T17837] [ 1370.513360][T17837] Uninit was stored to memory at: [ 1370.518517][T17837] __get_compat_msghdr+0x514/0x750 [ 1370.523837][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1370.528812][T17837] ___sys_recvmsg+0x19d/0x890 [ 1370.533711][T17837] do_recvmmsg+0x682/0x1180 [ 1370.538323][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.543221][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.549594][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.554887][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.559849][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.564567][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.571027][T17837] [ 1370.573520][T17837] Local variable msg_sys created at: [ 1370.578885][T17837] do_recvmmsg+0x5c/0x1180 [ 1370.583560][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.771546][T17837] not chained 1320000 origins [ 1370.776370][T17837] CPU: 0 PID: 17837 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1370.786647][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1370.796771][T17837] Call Trace: [ 1370.800086][T17837] [ 1370.803051][T17837] dump_stack_lvl+0x1c8/0x256 [ 1370.807829][T17837] dump_stack+0x1a/0x1c [ 1370.812069][T17837] kmsan_internal_chain_origin+0x78/0x120 [ 1370.817881][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1370.824234][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1370.830194][T17837] ? ____sys_recvmsg+0x5c1/0x810 [ 1370.835267][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1370.840577][T17837] ? get_compat_msghdr+0x8c/0x1c0 [ 1370.845669][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1370.851560][T17837] ? __get_compat_msghdr+0x5b/0x750 [ 1370.856844][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1370.862737][T17837] ? should_fail+0x3f/0x810 [ 1370.867318][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1370.872530][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1370.878927][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1370.884879][T17837] __msan_chain_origin+0xbd/0x140 [ 1370.889997][T17837] __get_compat_msghdr+0x514/0x750 [ 1370.895197][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1370.900115][T17837] ? ___sys_recvmsg+0xa9/0x890 [ 1370.904948][T17837] ? do_recvmmsg+0x682/0x1180 [ 1370.909694][T17837] ___sys_recvmsg+0x19d/0x890 [ 1370.914435][T17837] ? do_recvmmsg+0x6e4/0x1180 [ 1370.919208][T17837] ? __stack_depot_save+0x21/0x4b0 [ 1370.924424][T17837] ? kmsan_internal_check_memory+0x94/0x530 [ 1370.930458][T17837] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1370.936352][T17837] do_recvmmsg+0x682/0x1180 [ 1370.940960][T17837] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1370.947290][T17837] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.953785][T17837] __sys_recvmmsg+0x113/0x450 [ 1370.958538][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1370.964867][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1370.970057][T17837] ? exit_to_user_mode_prepare+0x119/0x220 [ 1370.975968][T17837] do_fast_syscall_32+0x33/0x70 [ 1370.980964][T17837] do_SYSENTER_32+0x1b/0x20 [ 1370.985598][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1370.992081][T17837] RIP: 0023:0xf7f30549 [ 1370.996249][T17837] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1371.016016][T17837] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1371.024566][T17837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1371.032635][T17837] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1371.041114][T17837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1371.049136][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.057158][T17837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1371.065193][T17837] [ 1371.073385][T17837] Uninit was stored to memory at: [ 1371.078588][T17837] __get_compat_msghdr+0x514/0x750 [ 1371.086141][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1371.091140][T17837] ___sys_recvmsg+0x19d/0x890 [ 1371.096047][T17837] do_recvmmsg+0x682/0x1180 [ 1371.100680][T17837] __sys_recvmmsg+0x113/0x450 [ 1371.105584][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1371.112073][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1371.117320][T17837] do_fast_syscall_32+0x33/0x70 [ 1371.122398][T17837] do_SYSENTER_32+0x1b/0x20 [ 1371.127031][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1371.133657][T17837] [ 1371.136040][T17837] Uninit was stored to memory at: [ 1371.141177][T17837] __get_compat_msghdr+0x514/0x750 [ 1371.146485][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1371.151447][T17837] ___sys_recvmsg+0x19d/0x890 [ 1371.156356][T17837] do_recvmmsg+0x682/0x1180 [ 1371.161005][T17837] __sys_recvmmsg+0x113/0x450 [ 1371.165881][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1371.172345][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1371.177598][T17837] do_fast_syscall_32+0x33/0x70 [ 1371.182680][T17837] do_SYSENTER_32+0x1b/0x20 [ 1371.187292][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1371.193850][T17837] [ 1371.196238][T17837] Uninit was stored to memory at: [ 1371.201372][T17837] __get_compat_msghdr+0x514/0x750 [ 1371.206682][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1371.211640][T17837] ___sys_recvmsg+0x19d/0x890 [ 1371.216553][T17837] do_recvmmsg+0x682/0x1180 [ 1371.221175][T17837] __sys_recvmmsg+0x113/0x450 [ 1371.226086][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1371.232592][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1371.237821][T17837] do_fast_syscall_32+0x33/0x70 [ 1371.242902][T17837] do_SYSENTER_32+0x1b/0x20 [ 1371.247520][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1371.254094][T17837] [ 1371.256484][T17837] Uninit was stored to memory at: [ 1371.261622][T17837] __get_compat_msghdr+0x514/0x750 [ 1371.266961][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1371.272004][T17837] ___sys_recvmsg+0x19d/0x890 [ 1371.276792][T17837] do_recvmmsg+0x682/0x1180 [ 1371.281358][T17837] __sys_recvmmsg+0x113/0x450 [ 1371.286270][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1371.292734][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1371.297984][T17837] do_fast_syscall_32+0x33/0x70 [ 1371.303114][T17837] do_SYSENTER_32+0x1b/0x20 [ 1371.307729][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1371.314261][T17837] [ 1371.316635][T17837] Uninit was stored to memory at: [ 1371.321901][T17837] __get_compat_msghdr+0x514/0x750 [ 1371.327140][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1371.332204][T17837] ___sys_recvmsg+0x19d/0x890 [ 1371.337010][T17837] do_recvmmsg+0x682/0x1180 [ 1371.341619][T17837] __sys_recvmmsg+0x113/0x450 [ 1371.346535][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1371.352982][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1371.358210][T17837] do_fast_syscall_32+0x33/0x70 [ 1371.363292][T17837] do_SYSENTER_32+0x1b/0x20 [ 1371.367922][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1371.374541][T17837] [ 1371.376912][T17837] Uninit was stored to memory at: [ 1371.382198][T17837] __get_compat_msghdr+0x514/0x750 [ 1371.387421][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1371.392502][T17837] ___sys_recvmsg+0x19d/0x890 [ 1371.397306][T17837] do_recvmmsg+0x682/0x1180 [ 1371.402046][T17837] __sys_recvmmsg+0x113/0x450 [ 1371.406836][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1371.413285][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1371.418516][T17837] do_fast_syscall_32+0x33/0x70 [ 1371.423602][T17837] do_SYSENTER_32+0x1b/0x20 [ 1371.428214][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1371.434743][T17837] [ 1371.437117][T17837] Uninit was stored to memory at: [ 1371.442399][T17837] __get_compat_msghdr+0x514/0x750 [ 1371.447639][T17837] get_compat_msghdr+0x8c/0x1c0 [ 1371.452703][T17837] ___sys_recvmsg+0x19d/0x890 [ 1371.457509][T17837] do_recvmmsg+0x682/0x1180 [ 1371.462242][T17837] __sys_recvmmsg+0x113/0x450 [ 1371.467031][T17837] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1371.473499][T17837] __do_fast_syscall_32+0xa2/0x100 [ 1371.478725][T17837] do_fast_syscall_32+0x33/0x70 [ 1371.483826][T17837] do_SYSENTER_32+0x1b/0x20 [ 1371.488466][T17837] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1371.495101][T17837] [ 1371.497479][T17837] Local variable msg_sys created at: [ 1371.502932][T17837] do_recvmmsg+0x5c/0x1180 [ 1371.507456][T17837] __sys_recvmmsg+0x113/0x450 09:39:57 executing program 1: keyctl$KEYCTL_MOVE(0x5, 0x0, 0x0, 0x0, 0x0) 09:39:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2e, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x1f0, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip6erspan0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast2, @local, [], [], 'gretap0\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 09:39:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:39:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:57 executing program 0: r0 = fsopen(&(0x7f00000000c0)='ext3\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='$()}\x00', 0x0, r1) 09:39:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0xf, r1, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x0) 09:39:57 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x181440, 0x0) 09:39:57 executing program 0: sync() sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) [ 1372.207477][T17879] loop4: detected capacity change from 0 to 6 09:39:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:39:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, 0x0, 0x3000000) 09:39:58 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="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", &(0x7f0000000100)=@buf="8624192a6a59644b6f18149d87d899a23b4e04b1b8bdc59ea013f35cec67b2d7fad277e77854923be5ac96754d1bba556f0a56768d62c462d16909b43f80553acf8bff2f449df884dd9ffb006d0c5562128c7db18369218cd4bf6a091e7f743785b284a1690e5131c306de8687f1d66dd46fcf41a48762cc564359e5f91ee67f9287885be418ebbd8ff1c7d3c0a67e5a6bcc912b7102cf704fd8016b2a8f8a92af9f96c15ee5a6318c"}, 0x72) [ 1372.437061][T17879] Dev loop4: unable to read RDB block 6 [ 1372.443107][T17879] loop4: unable to read partition table [ 1372.469124][T17879] loop4: partition table beyond EOD, truncated [ 1372.620814][T17879] FAT-fs (loop4): Directory bread(block 6) failed 09:39:58 executing program 0: sync() sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) [ 1373.209039][T17878] not chained 1330000 origins [ 1373.214333][T17878] CPU: 0 PID: 17878 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1373.224640][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1373.234794][T17878] Call Trace: [ 1373.238142][T17878] [ 1373.241145][T17878] dump_stack_lvl+0x1c8/0x256 [ 1373.246002][T17878] dump_stack+0x1a/0x1c [ 1373.250303][T17878] kmsan_internal_chain_origin+0x78/0x120 [ 1373.256177][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1373.262570][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1373.268519][T17878] ? ____sys_recvmsg+0x5c1/0x810 [ 1373.273581][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1373.278914][T17878] ? get_compat_msghdr+0x8c/0x1c0 [ 1373.284070][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1373.290022][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1373.295343][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1373.301298][T17878] ? should_fail+0x3f/0x810 [ 1373.305960][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1373.311216][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1373.317621][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1373.323582][T17878] __msan_chain_origin+0xbd/0x140 [ 1373.328749][T17878] __get_compat_msghdr+0x514/0x750 [ 1373.334007][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1373.338985][T17878] ? ___sys_recvmsg+0xa9/0x890 [ 1373.343866][T17878] ? do_recvmmsg+0x682/0x1180 [ 1373.348668][T17878] ___sys_recvmsg+0x19d/0x890 [ 1373.353462][T17878] ? do_recvmmsg+0x6e4/0x1180 [ 1373.358274][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1373.363531][T17878] ? kmsan_internal_check_memory+0x94/0x530 [ 1373.369572][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1373.375526][T17878] do_recvmmsg+0x682/0x1180 [ 1373.380167][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1373.386555][T17878] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.393113][T17878] __sys_recvmmsg+0x113/0x450 [ 1373.397928][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.404320][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1373.409560][T17878] ? exit_to_user_mode_prepare+0x119/0x220 [ 1373.415502][T17878] do_fast_syscall_32+0x33/0x70 [ 1373.420475][T17878] do_SYSENTER_32+0x1b/0x20 [ 1373.425111][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1373.431579][T17878] RIP: 0023:0xf7f30549 [ 1373.435735][T17878] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1373.455489][T17878] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1373.464029][T17878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1373.472115][T17878] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1373.480187][T17878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1373.488273][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.496340][T17878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1373.504427][T17878] [ 1373.512836][T17878] Uninit was stored to memory at: [ 1373.518052][T17878] __get_compat_msghdr+0x514/0x750 [ 1373.523810][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1373.528791][T17878] ___sys_recvmsg+0x19d/0x890 [ 1373.533681][T17878] do_recvmmsg+0x682/0x1180 [ 1373.538314][T17878] __sys_recvmmsg+0x113/0x450 [ 1373.543214][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.549629][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1373.554954][T17878] do_fast_syscall_32+0x33/0x70 [ 1373.559951][T17878] do_SYSENTER_32+0x1b/0x20 [ 1373.564667][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1373.571156][T17878] [ 1373.573627][T17878] Uninit was stored to memory at: [ 1373.578811][T17878] __get_compat_msghdr+0x514/0x750 [ 1373.584125][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1373.589119][T17878] ___sys_recvmsg+0x19d/0x890 [ 1373.594019][T17878] do_recvmmsg+0x682/0x1180 [ 1373.598655][T17878] __sys_recvmmsg+0x113/0x450 [ 1373.603543][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.609939][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1373.615279][T17878] do_fast_syscall_32+0x33/0x70 [ 1373.620275][T17878] do_SYSENTER_32+0x1b/0x20 [ 1373.624989][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1373.631458][T17878] [ 1373.633919][T17878] Uninit was stored to memory at: [ 1373.639124][T17878] __get_compat_msghdr+0x514/0x750 [ 1373.644488][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1373.649467][T17878] ___sys_recvmsg+0x19d/0x890 [ 1373.654398][T17878] do_recvmmsg+0x682/0x1180 [ 1373.659045][T17878] __sys_recvmmsg+0x113/0x450 [ 1373.663983][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.670385][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1373.675753][T17878] do_fast_syscall_32+0x33/0x70 [ 1373.680749][T17878] do_SYSENTER_32+0x1b/0x20 [ 1373.685499][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1373.692060][T17878] [ 1373.694463][T17878] Uninit was stored to memory at: [ 1373.699658][T17878] __get_compat_msghdr+0x514/0x750 [ 1373.705032][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1373.710023][T17878] ___sys_recvmsg+0x19d/0x890 [ 1373.714951][T17878] do_recvmmsg+0x682/0x1180 [ 1373.719595][T17878] __sys_recvmmsg+0x113/0x450 [ 1373.724533][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.730940][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1373.736312][T17878] do_fast_syscall_32+0x33/0x70 [ 1373.741307][T17878] do_SYSENTER_32+0x1b/0x20 [ 1373.746061][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1373.752611][T17878] [ 1373.755002][T17878] Uninit was stored to memory at: [ 1373.760183][T17878] __get_compat_msghdr+0x514/0x750 [ 1373.765546][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1373.770522][T17878] ___sys_recvmsg+0x19d/0x890 [ 1373.775445][T17878] do_recvmmsg+0x682/0x1180 [ 1373.780088][T17878] __sys_recvmmsg+0x113/0x450 [ 1373.785023][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.791427][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1373.796803][T17878] do_fast_syscall_32+0x33/0x70 [ 1373.801870][T17878] do_SYSENTER_32+0x1b/0x20 [ 1373.806524][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1373.813114][T17878] [ 1373.815503][T17878] Uninit was stored to memory at: [ 1373.820702][T17878] __get_compat_msghdr+0x514/0x750 [ 1373.826086][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1373.831074][T17878] ___sys_recvmsg+0x19d/0x890 [ 1373.836010][T17878] do_recvmmsg+0x682/0x1180 [ 1373.840643][T17878] __sys_recvmmsg+0x113/0x450 [ 1373.845574][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.852050][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1373.857292][T17878] do_fast_syscall_32+0x33/0x70 [ 1373.862406][T17878] do_SYSENTER_32+0x1b/0x20 [ 1373.867053][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1373.873652][T17878] [ 1373.876043][T17878] Uninit was stored to memory at: [ 1373.881224][T17878] __get_compat_msghdr+0x514/0x750 [ 1373.886597][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1373.891596][T17878] ___sys_recvmsg+0x19d/0x890 [ 1373.896554][T17878] do_recvmmsg+0x682/0x1180 [ 1373.901191][T17878] __sys_recvmmsg+0x113/0x450 [ 1373.906072][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1373.912542][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1373.917792][T17878] do_fast_syscall_32+0x33/0x70 [ 1373.922917][T17878] do_SYSENTER_32+0x1b/0x20 [ 1373.927560][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1373.934162][T17878] [ 1373.936567][T17878] Local variable msg_sys created at: [ 1373.942050][T17878] do_recvmmsg+0x5c/0x1180 [ 1373.946605][T17878] __sys_recvmmsg+0x113/0x450 [ 1374.403805][T17878] not chained 1340000 origins [ 1374.408546][T17878] CPU: 0 PID: 17878 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1374.418796][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1374.428962][T17878] Call Trace: [ 1374.432311][T17878] [ 1374.435316][T17878] dump_stack_lvl+0x1c8/0x256 [ 1374.440161][T17878] dump_stack+0x1a/0x1c [ 1374.444434][T17878] kmsan_internal_chain_origin+0x78/0x120 [ 1374.450316][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1374.456705][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1374.462619][T17878] ? ____sys_recvmsg+0x5c1/0x810 [ 1374.467690][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1374.472997][T17878] ? get_compat_msghdr+0x8c/0x1c0 [ 1374.478138][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1374.484054][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1374.489342][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1374.495280][T17878] ? should_fail+0x3f/0x810 [ 1374.499921][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1374.505143][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1374.511525][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1374.517426][T17878] __msan_chain_origin+0xbd/0x140 [ 1374.522555][T17878] __get_compat_msghdr+0x514/0x750 [ 1374.527806][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1374.532748][T17878] ? ___sys_recvmsg+0xa9/0x890 [ 1374.537624][T17878] ? do_recvmmsg+0x682/0x1180 [ 1374.542393][T17878] ___sys_recvmsg+0x19d/0x890 [ 1374.547183][T17878] ? do_recvmmsg+0x6e4/0x1180 [ 1374.551964][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1374.557225][T17878] ? kmsan_internal_check_memory+0x94/0x530 [ 1374.563278][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1374.569225][T17878] do_recvmmsg+0x682/0x1180 [ 1374.573839][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1374.580224][T17878] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1374.586729][T17878] __sys_recvmmsg+0x113/0x450 [ 1374.591490][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1374.597828][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1374.603036][T17878] ? exit_to_user_mode_prepare+0x119/0x220 [ 1374.608970][T17878] do_fast_syscall_32+0x33/0x70 [ 1374.613917][T17878] do_SYSENTER_32+0x1b/0x20 [ 1374.618552][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1374.625036][T17878] RIP: 0023:0xf7f30549 [ 1374.629181][T17878] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1374.649313][T17878] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1374.657800][T17878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1374.665849][T17878] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1374.673927][T17878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1374.682005][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1374.690083][T17878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1374.698159][T17878] [ 1374.706372][T17878] Uninit was stored to memory at: [ 1374.711601][T17878] __get_compat_msghdr+0x514/0x750 [ 1374.717339][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1374.722391][T17878] ___sys_recvmsg+0x19d/0x890 [ 1374.727197][T17878] do_recvmmsg+0x682/0x1180 [ 1374.731898][T17878] __sys_recvmmsg+0x113/0x450 [ 1374.736706][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1374.743166][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1374.748415][T17878] do_fast_syscall_32+0x33/0x70 [ 1374.753471][T17878] do_SYSENTER_32+0x1b/0x20 [ 1374.758089][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1374.764625][T17878] [ 1374.766998][T17878] Uninit was stored to memory at: [ 1374.772278][T17878] __get_compat_msghdr+0x514/0x750 [ 1374.777533][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1374.782591][T17878] ___sys_recvmsg+0x19d/0x890 [ 1374.787397][T17878] do_recvmmsg+0x682/0x1180 [ 1374.792120][T17878] __sys_recvmmsg+0x113/0x450 [ 1374.796930][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1374.803451][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1374.808702][T17878] do_fast_syscall_32+0x33/0x70 [ 1374.813795][T17878] do_SYSENTER_32+0x1b/0x20 [ 1374.818437][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1374.825018][T17878] [ 1374.827404][T17878] Uninit was stored to memory at: [ 1374.832703][T17878] __get_compat_msghdr+0x514/0x750 [ 1374.837927][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1374.842971][T17878] ___sys_recvmsg+0x19d/0x890 [ 1374.847783][T17878] do_recvmmsg+0x682/0x1180 [ 1374.852524][T17878] __sys_recvmmsg+0x113/0x450 [ 1374.857336][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1374.863838][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1374.869083][T17878] do_fast_syscall_32+0x33/0x70 [ 1374.874150][T17878] do_SYSENTER_32+0x1b/0x20 [ 1374.878781][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1374.885381][T17878] [ 1374.887770][T17878] Uninit was stored to memory at: [ 1374.893064][T17878] __get_compat_msghdr+0x514/0x750 [ 1374.898308][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1374.903403][T17878] ___sys_recvmsg+0x19d/0x890 [ 1374.908190][T17878] do_recvmmsg+0x682/0x1180 [ 1374.912894][T17878] __sys_recvmmsg+0x113/0x450 [ 1374.917683][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1374.924157][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1374.929387][T17878] do_fast_syscall_32+0x33/0x70 [ 1374.934450][T17878] do_SYSENTER_32+0x1b/0x20 [ 1374.939089][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1374.945671][T17878] [ 1374.948058][T17878] Uninit was stored to memory at: [ 1374.953355][T17878] __get_compat_msghdr+0x514/0x750 [ 1374.958581][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1374.963676][T17878] ___sys_recvmsg+0x19d/0x890 [ 1374.968482][T17878] do_recvmmsg+0x682/0x1180 [ 1374.973235][T17878] __sys_recvmmsg+0x113/0x450 [ 1374.978036][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1374.984489][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1374.989751][T17878] do_fast_syscall_32+0x33/0x70 [ 1374.994854][T17878] do_SYSENTER_32+0x1b/0x20 [ 1374.999474][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1375.006019][T17878] [ 1375.008408][T17878] Uninit was stored to memory at: [ 1375.013707][T17878] __get_compat_msghdr+0x514/0x750 [ 1375.018948][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1375.024051][T17878] ___sys_recvmsg+0x19d/0x890 [ 1375.028841][T17878] do_recvmmsg+0x682/0x1180 [ 1375.033544][T17878] __sys_recvmmsg+0x113/0x450 [ 1375.038358][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1375.044861][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1375.050119][T17878] do_fast_syscall_32+0x33/0x70 [ 1375.055229][T17878] do_SYSENTER_32+0x1b/0x20 [ 1375.059853][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1375.066443][T17878] [ 1375.068820][T17878] Uninit was stored to memory at: [ 1375.074122][T17878] __get_compat_msghdr+0x514/0x750 [ 1375.079344][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1375.084401][T17878] ___sys_recvmsg+0x19d/0x890 [ 1375.089212][T17878] do_recvmmsg+0x682/0x1180 [ 1375.093964][T17878] __sys_recvmmsg+0x113/0x450 [ 1375.098774][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1375.105288][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1375.110535][T17878] do_fast_syscall_32+0x33/0x70 [ 1375.115636][T17878] do_SYSENTER_32+0x1b/0x20 [ 1375.120251][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1375.126766][T17878] [ 1375.129143][T17878] Local variable msg_sys created at: [ 1375.134586][T17878] do_recvmmsg+0x5c/0x1180 [ 1375.139113][T17878] __sys_recvmmsg+0x113/0x450 [ 1375.500496][T17878] not chained 1350000 origins [ 1375.505421][T17878] CPU: 1 PID: 17878 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1375.515694][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1375.525803][T17878] Call Trace: [ 1375.529116][T17878] [ 1375.532079][T17878] dump_stack_lvl+0x1c8/0x256 [ 1375.536863][T17878] dump_stack+0x1a/0x1c [ 1375.541103][T17878] kmsan_internal_chain_origin+0x78/0x120 [ 1375.546911][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1375.553239][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1375.559140][T17878] ? ____sys_recvmsg+0x5c1/0x810 [ 1375.564184][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1375.569498][T17878] ? get_compat_msghdr+0x8c/0x1c0 [ 1375.574591][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1375.580484][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1375.585750][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1375.591643][T17878] ? should_fail+0x3f/0x810 [ 1375.596275][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1375.601537][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1375.607923][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1375.613837][T17878] __msan_chain_origin+0xbd/0x140 [ 1375.619010][T17878] __get_compat_msghdr+0x514/0x750 [ 1375.624278][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1375.629239][T17878] ? ___sys_recvmsg+0xa9/0x890 [ 1375.634089][T17878] ? do_recvmmsg+0x682/0x1180 [ 1375.638837][T17878] ___sys_recvmsg+0x19d/0x890 [ 1375.643592][T17878] ? do_recvmmsg+0x6e4/0x1180 [ 1375.648360][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1375.653562][T17878] ? kmsan_internal_check_memory+0x94/0x530 [ 1375.659542][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1375.665465][T17878] do_recvmmsg+0x682/0x1180 [ 1375.670095][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1375.676432][T17878] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1375.682929][T17878] __sys_recvmmsg+0x113/0x450 [ 1375.687682][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1375.694008][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1375.699213][T17878] ? exit_to_user_mode_prepare+0x119/0x220 [ 1375.705167][T17878] do_fast_syscall_32+0x33/0x70 [ 1375.710138][T17878] do_SYSENTER_32+0x1b/0x20 [ 1375.714730][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1375.721215][T17878] RIP: 0023:0xf7f30549 [ 1375.725333][T17878] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1375.745023][T17878] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1375.753505][T17878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1375.761550][T17878] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1375.769593][T17878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1375.777668][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.785750][T17878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1375.793788][T17878] [ 1375.802105][T17878] Uninit was stored to memory at: [ 1375.807308][T17878] __get_compat_msghdr+0x514/0x750 [ 1375.813409][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1375.818389][T17878] ___sys_recvmsg+0x19d/0x890 [ 1375.823303][T17878] do_recvmmsg+0x682/0x1180 [ 1375.827936][T17878] __sys_recvmmsg+0x113/0x450 [ 1375.832831][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1375.839210][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1375.844541][T17878] do_fast_syscall_32+0x33/0x70 [ 1375.849508][T17878] do_SYSENTER_32+0x1b/0x20 [ 1375.854238][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1375.860696][T17878] [ 1375.863192][T17878] Uninit was stored to memory at: [ 1375.868329][T17878] __get_compat_msghdr+0x514/0x750 [ 1375.873667][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1375.878625][T17878] ___sys_recvmsg+0x19d/0x890 [ 1375.883527][T17878] do_recvmmsg+0x682/0x1180 [ 1375.888155][T17878] __sys_recvmmsg+0x113/0x450 [ 1375.893061][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1375.899429][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1375.904774][T17878] do_fast_syscall_32+0x33/0x70 [ 1375.909785][T17878] do_SYSENTER_32+0x1b/0x20 [ 1375.914521][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1375.920977][T17878] [ 1375.923472][T17878] Uninit was stored to memory at: [ 1375.928606][T17878] __get_compat_msghdr+0x514/0x750 [ 1375.933947][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1375.938907][T17878] ___sys_recvmsg+0x19d/0x890 [ 1375.943775][T17878] do_recvmmsg+0x682/0x1180 [ 1375.948386][T17878] __sys_recvmmsg+0x113/0x450 [ 1375.953277][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1375.959645][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1375.964990][T17878] do_fast_syscall_32+0x33/0x70 [ 1375.969957][T17878] do_SYSENTER_32+0x1b/0x20 [ 1375.974648][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1375.981107][T17878] [ 1375.983602][T17878] Uninit was stored to memory at: [ 1375.988740][T17878] __get_compat_msghdr+0x514/0x750 [ 1375.994083][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1375.999041][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.003948][T17878] do_recvmmsg+0x682/0x1180 [ 1376.008582][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.013456][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.019842][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.025243][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.030206][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.034900][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.041366][T17878] [ 1376.043881][T17878] Uninit was stored to memory at: [ 1376.049025][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.054366][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.059323][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.064188][T17878] do_recvmmsg+0x682/0x1180 [ 1376.068804][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.073693][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.080060][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.085370][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.090331][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.095024][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.101483][T17878] [ 1376.104001][T17878] Uninit was stored to memory at: [ 1376.109187][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.114566][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.119545][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.124454][T17878] do_recvmmsg+0x682/0x1180 [ 1376.129066][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.133974][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.140351][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.145682][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.150648][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.155342][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.161908][T17878] [ 1376.164302][T17878] Uninit was stored to memory at: [ 1376.169431][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.174729][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.179711][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.184597][T17878] do_recvmmsg+0x682/0x1180 [ 1376.189210][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.194128][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.200498][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.205808][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.210792][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.215560][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.222111][T17878] [ 1376.224501][T17878] Local variable msg_sys created at: [ 1376.229843][T17878] do_recvmmsg+0x5c/0x1180 [ 1376.234511][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.437414][T17878] not chained 1360000 origins [ 1376.442321][T17878] CPU: 0 PID: 17878 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1376.452614][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1376.462774][T17878] Call Trace: [ 1376.466129][T17878] [ 1376.469135][T17878] dump_stack_lvl+0x1c8/0x256 [ 1376.474046][T17878] dump_stack+0x1a/0x1c [ 1376.478385][T17878] kmsan_internal_chain_origin+0x78/0x120 [ 1376.484282][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1376.490666][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1376.496557][T17878] ? ____sys_recvmsg+0x5c1/0x810 [ 1376.501563][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1376.506848][T17878] ? get_compat_msghdr+0x8c/0x1c0 [ 1376.511956][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1376.517921][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1376.523261][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1376.529214][T17878] ? should_fail+0x3f/0x810 [ 1376.533812][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1376.539050][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1376.545381][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1376.551275][T17878] __msan_chain_origin+0xbd/0x140 [ 1376.556395][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.561615][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.566549][T17878] ? ___sys_recvmsg+0xa9/0x890 [ 1376.571380][T17878] ? do_recvmmsg+0x682/0x1180 [ 1376.576151][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.580954][T17878] ? do_recvmmsg+0x6e4/0x1180 [ 1376.585778][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1376.591034][T17878] ? kmsan_internal_check_memory+0x94/0x530 [ 1376.597062][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1376.602980][T17878] do_recvmmsg+0x682/0x1180 [ 1376.607606][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1376.613985][T17878] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.620555][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.625380][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.631789][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.637024][T17878] ? exit_to_user_mode_prepare+0x119/0x220 [ 1376.642930][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.647897][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.652485][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.658941][T17878] RIP: 0023:0xf7f30549 [ 1376.663075][T17878] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1376.682846][T17878] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1376.691395][T17878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1376.699499][T17878] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1376.707563][T17878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1376.715591][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1376.723636][T17878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1376.731724][T17878] [ 1376.739838][T17878] Uninit was stored to memory at: [ 1376.745484][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.750737][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.755788][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.760591][T17878] do_recvmmsg+0x682/0x1180 [ 1376.765296][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.770090][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.776557][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.781871][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.786846][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.791411][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.797964][T17878] [ 1376.800352][T17878] Uninit was stored to memory at: [ 1376.805665][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.810907][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.815995][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.820784][T17878] do_recvmmsg+0x682/0x1180 [ 1376.825498][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.830303][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.836787][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.842103][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.847066][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.851631][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.858184][T17878] [ 1376.860536][T17878] Uninit was stored to memory at: [ 1376.865818][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.871043][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.876084][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.880872][T17878] do_recvmmsg+0x682/0x1180 [ 1376.885584][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.890373][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.896807][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.902126][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.907105][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.911858][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.918331][T17878] [ 1376.920704][T17878] Uninit was stored to memory at: [ 1376.925984][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.931222][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.936321][T17878] ___sys_recvmsg+0x19d/0x890 [ 1376.941116][T17878] do_recvmmsg+0x682/0x1180 [ 1376.945795][T17878] __sys_recvmmsg+0x113/0x450 [ 1376.950584][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1376.957050][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1376.962371][T17878] do_fast_syscall_32+0x33/0x70 [ 1376.967344][T17878] do_SYSENTER_32+0x1b/0x20 [ 1376.972058][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1376.978521][T17878] [ 1376.980875][T17878] Uninit was stored to memory at: [ 1376.986127][T17878] __get_compat_msghdr+0x514/0x750 [ 1376.991349][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1376.996407][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.001198][T17878] do_recvmmsg+0x682/0x1180 [ 1377.005872][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.010667][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.017128][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1377.022454][T17878] do_fast_syscall_32+0x33/0x70 [ 1377.027437][T17878] do_SYSENTER_32+0x1b/0x20 [ 1377.032175][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1377.038654][T17878] [ 1377.041022][T17878] Uninit was stored to memory at: [ 1377.046321][T17878] __get_compat_msghdr+0x514/0x750 [ 1377.051548][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1377.056601][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.061388][T17878] do_recvmmsg+0x682/0x1180 [ 1377.066097][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.070887][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.077316][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1377.082646][T17878] do_fast_syscall_32+0x33/0x70 [ 1377.087605][T17878] do_SYSENTER_32+0x1b/0x20 [ 1377.092323][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1377.098810][T17878] [ 1377.101160][T17878] Uninit was stored to memory at: [ 1377.106421][T17878] __get_compat_msghdr+0x514/0x750 [ 1377.111652][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1377.116737][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.121568][T17878] do_recvmmsg+0x682/0x1180 [ 1377.126292][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.131099][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.137620][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1377.142943][T17878] do_fast_syscall_32+0x33/0x70 [ 1377.147921][T17878] do_SYSENTER_32+0x1b/0x20 [ 1377.152668][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1377.159144][T17878] [ 1377.161495][T17878] Local variable msg_sys created at: [ 1377.166918][T17878] do_recvmmsg+0x5c/0x1180 [ 1377.171440][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.415801][T17878] not chained 1370000 origins [ 1377.420590][T17878] CPU: 0 PID: 17878 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1377.430885][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1377.441051][T17878] Call Trace: [ 1377.444410][T17878] [ 1377.447420][T17878] dump_stack_lvl+0x1c8/0x256 [ 1377.452275][T17878] dump_stack+0x1a/0x1c [ 1377.456599][T17878] kmsan_internal_chain_origin+0x78/0x120 [ 1377.462478][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1377.468890][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1377.474871][T17878] ? ____sys_recvmsg+0x5c1/0x810 [ 1377.479946][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1377.485274][T17878] ? get_compat_msghdr+0x8c/0x1c0 [ 1377.490431][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1377.496383][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1377.501674][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1377.507657][T17878] ? should_fail+0x3f/0x810 [ 1377.512294][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1377.517486][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1377.523834][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1377.529774][T17878] __msan_chain_origin+0xbd/0x140 [ 1377.534875][T17878] __get_compat_msghdr+0x514/0x750 [ 1377.540069][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1377.545007][T17878] ? ___sys_recvmsg+0xa9/0x890 [ 1377.549900][T17878] ? do_recvmmsg+0x682/0x1180 [ 1377.554689][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.559434][T17878] ? do_recvmmsg+0x6e4/0x1180 [ 1377.564232][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1377.569501][T17878] ? kmsan_internal_check_memory+0x94/0x530 [ 1377.575537][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1377.581441][T17878] do_recvmmsg+0x682/0x1180 [ 1377.586053][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1377.592466][T17878] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.599014][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.603789][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.610167][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1377.615354][T17878] ? exit_to_user_mode_prepare+0x119/0x220 [ 1377.621243][T17878] do_fast_syscall_32+0x33/0x70 [ 1377.626163][T17878] do_SYSENTER_32+0x1b/0x20 [ 1377.630731][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1377.637136][T17878] RIP: 0023:0xf7f30549 [ 1377.641251][T17878] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1377.660945][T17878] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1377.669434][T17878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1377.677480][T17878] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1377.685549][T17878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1377.693601][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.701664][T17878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1377.709735][T17878] [ 1377.718141][T17878] Uninit was stored to memory at: [ 1377.723856][T17878] __get_compat_msghdr+0x514/0x750 [ 1377.729102][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1377.734156][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.738959][T17878] do_recvmmsg+0x682/0x1180 [ 1377.743709][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.748543][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.755052][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1377.760283][T17878] do_fast_syscall_32+0x33/0x70 [ 1377.765308][T17878] do_SYSENTER_32+0x1b/0x20 [ 1377.769924][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1377.776471][T17878] [ 1377.778847][T17878] Uninit was stored to memory at: [ 1377.784125][T17878] __get_compat_msghdr+0x514/0x750 [ 1377.789361][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1377.794464][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.799257][T17878] do_recvmmsg+0x682/0x1180 [ 1377.803964][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.808770][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.815283][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1377.820514][T17878] do_fast_syscall_32+0x33/0x70 [ 1377.825544][T17878] do_SYSENTER_32+0x1b/0x20 [ 1377.830155][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1377.836701][T17878] [ 1377.839072][T17878] Uninit was stored to memory at: [ 1377.844339][T17878] __get_compat_msghdr+0x514/0x750 [ 1377.849585][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1377.854690][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.859483][T17878] do_recvmmsg+0x682/0x1180 [ 1377.864157][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.868965][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.875422][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1377.880658][T17878] do_fast_syscall_32+0x33/0x70 [ 1377.885683][T17878] do_SYSENTER_32+0x1b/0x20 [ 1377.890317][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1377.896863][T17878] [ 1377.899249][T17878] Uninit was stored to memory at: [ 1377.904506][T17878] __get_compat_msghdr+0x514/0x750 [ 1377.909723][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1377.914771][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.919579][T17878] do_recvmmsg+0x682/0x1180 [ 1377.924331][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.929120][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.935547][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1377.940773][T17878] do_fast_syscall_32+0x33/0x70 [ 1377.945835][T17878] do_SYSENTER_32+0x1b/0x20 [ 1377.950469][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1377.956991][T17878] [ 1377.959363][T17878] Uninit was stored to memory at: [ 1377.964648][T17878] __get_compat_msghdr+0x514/0x750 [ 1377.969869][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1377.974892][T17878] ___sys_recvmsg+0x19d/0x890 [ 1377.979680][T17878] do_recvmmsg+0x682/0x1180 [ 1377.984385][T17878] __sys_recvmmsg+0x113/0x450 [ 1377.989175][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1377.995605][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.000834][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.005891][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.010526][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.017090][T17878] [ 1378.019463][T17878] Uninit was stored to memory at: [ 1378.024746][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.029987][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.035084][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.039870][T17878] do_recvmmsg+0x682/0x1180 [ 1378.044551][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.049336][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.055780][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.061012][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.066039][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.070654][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.077170][T17878] [ 1378.079541][T17878] Uninit was stored to memory at: [ 1378.084786][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.090010][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.095066][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.099873][T17878] do_recvmmsg+0x682/0x1180 [ 1378.104553][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.109340][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.115804][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.121050][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.126143][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.130772][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.137321][T17878] [ 1378.139710][T17878] Local variable msg_sys created at: [ 1378.145187][T17878] do_recvmmsg+0x5c/0x1180 [ 1378.149708][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.347708][T17878] not chained 1380000 origins [ 1378.352576][T17878] CPU: 1 PID: 17878 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1378.362820][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1378.372965][T17878] Call Trace: [ 1378.376286][T17878] [ 1378.379250][T17878] dump_stack_lvl+0x1c8/0x256 [ 1378.384034][T17878] dump_stack+0x1a/0x1c [ 1378.388274][T17878] kmsan_internal_chain_origin+0x78/0x120 [ 1378.394081][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1378.400408][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1378.406311][T17878] ? ____sys_recvmsg+0x5c1/0x810 [ 1378.411332][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1378.416613][T17878] ? get_compat_msghdr+0x8c/0x1c0 [ 1378.421782][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1378.427727][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1378.433000][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1378.438893][T17878] ? should_fail+0x3f/0x810 [ 1378.443480][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1378.448670][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1378.454999][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1378.460920][T17878] __msan_chain_origin+0xbd/0x140 [ 1378.466055][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.471332][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.476301][T17878] ? ___sys_recvmsg+0xa9/0x890 [ 1378.481131][T17878] ? do_recvmmsg+0x682/0x1180 [ 1378.485876][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.490632][T17878] ? do_recvmmsg+0x6e4/0x1180 [ 1378.495394][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1378.500591][T17878] ? kmsan_internal_check_memory+0x94/0x530 [ 1378.506573][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1378.512499][T17878] do_recvmmsg+0x682/0x1180 [ 1378.517156][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1378.523536][T17878] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.530033][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.534791][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.541118][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.546303][T17878] ? exit_to_user_mode_prepare+0x119/0x220 [ 1378.552185][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.557102][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.561671][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.568144][T17878] RIP: 0023:0xf7f30549 [ 1378.572313][T17878] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1378.592062][T17878] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1378.600548][T17878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1378.608574][T17878] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1378.616617][T17878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1378.624673][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1378.632695][T17878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1378.640733][T17878] [ 1378.646110][T17878] Uninit was stored to memory at: [ 1378.651303][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.656883][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.662018][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.666825][T17878] do_recvmmsg+0x682/0x1180 [ 1378.671474][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.676373][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.682839][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.688084][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.693155][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.697782][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.704349][T17878] [ 1378.706718][T17878] Uninit was stored to memory at: [ 1378.711981][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.717218][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.722236][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.726976][T17878] do_recvmmsg+0x682/0x1180 [ 1378.731541][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.736399][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.742869][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.748093][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.753129][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.757741][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.764268][T17878] [ 1378.766641][T17878] Uninit was stored to memory at: [ 1378.771909][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.777147][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.782271][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.787057][T17878] do_recvmmsg+0x682/0x1180 [ 1378.791623][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.796546][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.803042][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.808271][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.813349][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.817967][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.824497][T17878] [ 1378.826892][T17878] Uninit was stored to memory at: [ 1378.832171][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.837392][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.842475][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.847281][T17878] do_recvmmsg+0x682/0x1180 [ 1378.852007][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.856794][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.863232][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.868465][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.873549][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.878178][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.884801][T17878] [ 1378.887172][T17878] Uninit was stored to memory at: [ 1378.892419][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.897649][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.902724][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.907511][T17878] do_recvmmsg+0x682/0x1180 [ 1378.912231][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.917036][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.923474][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.928655][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.933727][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.938341][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1378.944886][T17878] [ 1378.947257][T17878] Uninit was stored to memory at: [ 1378.952538][T17878] __get_compat_msghdr+0x514/0x750 [ 1378.957760][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1378.962856][T17878] ___sys_recvmsg+0x19d/0x890 [ 1378.967658][T17878] do_recvmmsg+0x682/0x1180 [ 1378.972389][T17878] __sys_recvmmsg+0x113/0x450 [ 1378.977203][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1378.983723][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1378.988955][T17878] do_fast_syscall_32+0x33/0x70 [ 1378.994032][T17878] do_SYSENTER_32+0x1b/0x20 [ 1378.998647][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.005176][T17878] [ 1379.007549][T17878] Uninit was stored to memory at: [ 1379.012828][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.018046][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.023122][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.027924][T17878] do_recvmmsg+0x682/0x1180 [ 1379.032686][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.037491][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.043927][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.049110][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.054182][T17878] do_SYSENTER_32+0x1b/0x20 [ 1379.058818][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.065432][T17878] [ 1379.067828][T17878] Local variable msg_sys created at: [ 1379.073278][T17878] do_recvmmsg+0x5c/0x1180 [ 1379.077837][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.277798][T17878] not chained 1390000 origins [ 1379.286875][T17878] CPU: 0 PID: 17878 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1379.297136][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1379.307300][T17878] Call Trace: [ 1379.310637][T17878] [ 1379.313620][T17878] dump_stack_lvl+0x1c8/0x256 [ 1379.318496][T17878] dump_stack+0x1a/0x1c [ 1379.322811][T17878] kmsan_internal_chain_origin+0x78/0x120 [ 1379.328716][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1379.335073][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1379.341013][T17878] ? ____sys_recvmsg+0x5c1/0x810 [ 1379.346019][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1379.351283][T17878] ? get_compat_msghdr+0x8c/0x1c0 [ 1379.356394][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1379.362354][T17878] ? __get_compat_msghdr+0x5b/0x750 [ 1379.367641][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1379.373562][T17878] ? should_fail+0x3f/0x810 [ 1379.378195][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1379.383386][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1379.389720][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1379.395634][T17878] __msan_chain_origin+0xbd/0x140 [ 1379.400805][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.406001][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.410920][T17878] ? ___sys_recvmsg+0xa9/0x890 [ 1379.415773][T17878] ? do_recvmmsg+0x682/0x1180 [ 1379.420590][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.425395][T17878] ? do_recvmmsg+0x6e4/0x1180 [ 1379.430210][T17878] ? __stack_depot_save+0x21/0x4b0 [ 1379.435441][T17878] ? kmsan_internal_check_memory+0x94/0x530 [ 1379.441473][T17878] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1379.447373][T17878] do_recvmmsg+0x682/0x1180 [ 1379.451996][T17878] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1379.458373][T17878] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.464916][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.469734][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.476064][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.481246][T17878] ? exit_to_user_mode_prepare+0x119/0x220 [ 1379.487159][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.492155][T17878] do_SYSENTER_32+0x1b/0x20 [ 1379.496772][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.503204][T17878] RIP: 0023:0xf7f30549 [ 1379.507411][T17878] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1379.527138][T17878] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1379.535691][T17878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1379.543776][T17878] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1379.551852][T17878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1379.559908][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.567932][T17878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1379.575970][T17878] [ 1379.584421][T17878] Uninit was stored to memory at: [ 1379.595076][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.600322][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.605822][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.610626][T17878] do_recvmmsg+0x682/0x1180 [ 1379.615327][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.620138][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.626653][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.631969][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.636949][T17878] do_SYSENTER_32+0x1b/0x20 [ 1379.641575][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.648177][T17878] [ 1379.650561][T17878] Uninit was stored to memory at: [ 1379.655861][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.661081][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.666216][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.671002][T17878] do_recvmmsg+0x682/0x1180 [ 1379.675698][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.680494][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.686950][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.692264][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.697230][T17878] do_SYSENTER_32+0x1b/0x20 [ 1379.701926][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.708386][T17878] [ 1379.710736][T17878] Uninit was stored to memory at: [ 1379.715989][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.721230][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.726251][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.731038][T17878] do_recvmmsg+0x682/0x1180 [ 1379.735709][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.740499][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.746960][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.752278][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.757255][T17878] do_SYSENTER_32+0x1b/0x20 [ 1379.761988][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.768468][T17878] [ 1379.770835][T17878] Uninit was stored to memory at: [ 1379.776109][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.781330][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.786350][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.791142][T17878] do_recvmmsg+0x682/0x1180 [ 1379.795831][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.800619][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.807044][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.812360][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.817323][T17878] do_SYSENTER_32+0x1b/0x20 [ 1379.822024][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.828485][T17878] [ 1379.830834][T17878] Uninit was stored to memory at: [ 1379.836107][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.841349][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.846372][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.851162][T17878] do_recvmmsg+0x682/0x1180 [ 1379.855876][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.860683][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.867190][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.872510][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.877475][T17878] do_SYSENTER_32+0x1b/0x20 [ 1379.882181][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.888638][T17878] [ 1379.890986][T17878] Uninit was stored to memory at: [ 1379.896229][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.901457][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.906518][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.911311][T17878] do_recvmmsg+0x682/0x1180 [ 1379.915982][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.920771][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.927230][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.932551][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.937512][T17878] do_SYSENTER_32+0x1b/0x20 [ 1379.942214][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1379.948671][T17878] [ 1379.951020][T17878] Uninit was stored to memory at: [ 1379.956266][T17878] __get_compat_msghdr+0x514/0x750 [ 1379.961490][T17878] get_compat_msghdr+0x8c/0x1c0 [ 1379.966552][T17878] ___sys_recvmsg+0x19d/0x890 [ 1379.971356][T17878] do_recvmmsg+0x682/0x1180 [ 1379.976109][T17878] __sys_recvmmsg+0x113/0x450 [ 1379.980901][T17878] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1379.987362][T17878] __do_fast_syscall_32+0xa2/0x100 [ 1379.992687][T17878] do_fast_syscall_32+0x33/0x70 [ 1379.997649][T17878] do_SYSENTER_32+0x1b/0x20 [ 1380.002345][T17878] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1380.008807][T17878] [ 1380.011156][T17878] Local variable msg_sys created at: [ 1380.016582][T17878] do_recvmmsg+0x5c/0x1180 [ 1380.021102][T17878] __sys_recvmmsg+0x113/0x450 09:40:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:05 executing program 1: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x50000, &(0x7f00000022c0)=ANY=[]) 09:40:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x18, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x1f0, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip6erspan0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast2, @local, [], [], 'gretap0\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 09:40:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:05 executing program 0: sync() sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) [ 1380.254862][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1380.261481][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 09:40:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8941, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}}) 09:40:06 executing program 3: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x8, 0x24, 0x7, 0x0, 0x0, 0x0, "1f"}, @processing_unit={0x7}, @mixer_unit={0x5}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x0, "02"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xfc, 0xf8, 0xa0, {0x7, 0x25, 0x1, 0x80, 0x80, 0x1000}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x6, 0x5, 0x5, 0x8, 0x8}, 0x13, &(0x7f0000000180)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x65, 0x0, 0xffff, 0x37}, @ptm_cap={0x3}]}, 0x1, [{0xcd, &(0x7f00000001c0)=@string={0xcd, 0x3, "71971d9e469857bd2d3c57b591bdaab5deea2bd418cc2a106d58d3e9fde6475a9a0a6dc57d8564838741a0636228032cdf9b423c3f3cb7d4dd686b8ca4edbfd29ba17fdb372b1b7a85a2085fee9e8606e2bd9374d160b55517e6e6f9f60f20cd7d0a9b3acf5e9f3fee372ed4ba065e7da8b88c900fc7c5c5a2382cd2064e856ad7477edb98951ae584989d6adabca3527b0f703271b587978e1922fe93ebaddf20c8e4815ceef60f7159e215dca679c23362847dad72c11b3154b5faabaa776eb3abc5aa2119359e185c4c"}}]}) 09:40:06 executing program 0: sync() sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) [ 1380.528893][T17929] loop4: detected capacity change from 0 to 6 09:40:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1380.675463][T17929] Dev loop4: unable to read RDB block 6 [ 1380.681269][T17929] loop4: unable to read partition table 09:40:06 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002b00)='ns/net\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1}) [ 1380.880447][T17929] loop4: partition table beyond EOD, truncated [ 1380.966223][T17929] FAT-fs (loop4): Directory bread(block 6) failed [ 1381.051873][ T122] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1381.413726][ T122] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1381.424966][ T122] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1381.440963][ T122] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1381.451372][ T122] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1381.657726][T17928] not chained 1400000 origins [ 1381.663012][T17928] CPU: 0 PID: 17928 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1381.673313][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1381.683478][T17928] Call Trace: [ 1381.686834][T17928] [ 1381.689844][T17928] dump_stack_lvl+0x1c8/0x256 [ 1381.694721][T17928] dump_stack+0x1a/0x1c [ 1381.699046][T17928] kmsan_internal_chain_origin+0x78/0x120 [ 1381.704935][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1381.711355][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1381.717322][T17928] ? ____sys_recvmsg+0x5c1/0x810 [ 1381.722400][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1381.727730][T17928] ? get_compat_msghdr+0x8c/0x1c0 [ 1381.732891][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1381.738862][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1381.744210][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1381.750185][T17928] ? should_fail+0x3f/0x810 [ 1381.754840][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1381.760116][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1381.766529][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1381.772498][T17928] __msan_chain_origin+0xbd/0x140 [ 1381.777672][T17928] __get_compat_msghdr+0x514/0x750 [ 1381.782945][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1381.787928][T17928] ? ___sys_recvmsg+0xa9/0x890 [ 1381.792831][T17928] ? do_recvmmsg+0x682/0x1180 [ 1381.797651][T17928] ___sys_recvmsg+0x19d/0x890 [ 1381.802463][T17928] ? do_recvmmsg+0x6e4/0x1180 [ 1381.807297][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1381.812568][T17928] ? kmsan_internal_check_memory+0x94/0x530 [ 1381.818629][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1381.824604][T17928] do_recvmmsg+0x682/0x1180 [ 1381.829266][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1381.835679][T17928] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1381.842256][T17928] __sys_recvmmsg+0x113/0x450 [ 1381.847081][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1381.853491][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1381.858755][T17928] ? exit_to_user_mode_prepare+0x119/0x220 [ 1381.864721][T17928] do_fast_syscall_32+0x33/0x70 [ 1381.869722][T17928] do_SYSENTER_32+0x1b/0x20 [ 1381.874366][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1381.880854][T17928] RIP: 0023:0xf7f30549 [ 1381.885033][T17928] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1381.904801][T17928] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1381.913362][T17928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1381.921447][T17928] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1381.929530][T17928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1381.937613][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.945693][T17928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1381.953796][T17928] [ 1381.962451][T17928] Uninit was stored to memory at: [ 1381.967655][T17928] __get_compat_msghdr+0x514/0x750 [ 1381.973370][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1381.978356][T17928] ___sys_recvmsg+0x19d/0x890 [ 1381.983251][T17928] do_recvmmsg+0x682/0x1180 [ 1381.987884][T17928] __sys_recvmmsg+0x113/0x450 [ 1381.992766][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1381.999157][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1382.004487][T17928] do_fast_syscall_32+0x33/0x70 [ 1382.009478][T17928] do_SYSENTER_32+0x1b/0x20 [ 1382.014184][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1382.020663][T17928] [ 1382.023123][T17928] Uninit was stored to memory at: [ 1382.028313][T17928] __get_compat_msghdr+0x514/0x750 [ 1382.033630][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1382.038607][T17928] ___sys_recvmsg+0x19d/0x890 [ 1382.043486][T17928] do_recvmmsg+0x682/0x1180 [ 1382.048135][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.053021][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1382.059412][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1382.064731][T17928] do_fast_syscall_32+0x33/0x70 [ 1382.069716][T17928] do_SYSENTER_32+0x1b/0x20 [ 1382.074421][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1382.080898][T17928] [ 1382.083420][T17928] Uninit was stored to memory at: [ 1382.088611][T17928] __get_compat_msghdr+0x514/0x750 [ 1382.093973][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1382.098961][T17928] ___sys_recvmsg+0x19d/0x890 [ 1382.103887][T17928] do_recvmmsg+0x682/0x1180 [ 1382.108527][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.113454][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1382.119847][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1382.125223][T17928] do_fast_syscall_32+0x33/0x70 [ 1382.130209][T17928] do_SYSENTER_32+0x1b/0x20 [ 1382.134966][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1382.141445][T17928] [ 1382.143970][T17928] Uninit was stored to memory at: [ 1382.149157][T17928] __get_compat_msghdr+0x514/0x750 [ 1382.154521][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1382.159509][T17928] ___sys_recvmsg+0x19d/0x890 [ 1382.164445][T17928] do_recvmmsg+0x682/0x1180 [ 1382.169083][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.174020][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1382.180414][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1382.185811][T17928] do_fast_syscall_32+0x33/0x70 [ 1382.190798][T17928] do_SYSENTER_32+0x1b/0x20 [ 1382.195556][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1382.202129][T17928] [ 1382.204515][T17928] Uninit was stored to memory at: [ 1382.209697][T17928] __get_compat_msghdr+0x514/0x750 [ 1382.215041][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1382.220012][T17928] ___sys_recvmsg+0x19d/0x890 [ 1382.224941][T17928] do_recvmmsg+0x682/0x1180 [ 1382.229555][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.234450][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1382.240827][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1382.246149][T17928] do_fast_syscall_32+0x33/0x70 [ 1382.251136][T17928] do_SYSENTER_32+0x1b/0x20 [ 1382.255892][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1382.262445][T17928] [ 1382.264833][T17928] Uninit was stored to memory at: [ 1382.269968][T17928] __get_compat_msghdr+0x514/0x750 [ 1382.275291][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1382.280269][T17928] ___sys_recvmsg+0x19d/0x890 [ 1382.285193][T17928] do_recvmmsg+0x682/0x1180 [ 1382.289810][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.294707][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1382.301087][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1382.306412][T17928] do_fast_syscall_32+0x33/0x70 [ 1382.311401][T17928] do_SYSENTER_32+0x1b/0x20 [ 1382.316155][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1382.322703][T17928] [ 1382.325089][T17928] Uninit was stored to memory at: [ 1382.330258][T17928] __get_compat_msghdr+0x514/0x750 [ 1382.335578][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1382.340562][T17928] ___sys_recvmsg+0x19d/0x890 [ 1382.345494][T17928] do_recvmmsg+0x682/0x1180 [ 1382.350125][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.355047][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1382.361425][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1382.366893][T17928] do_fast_syscall_32+0x33/0x70 [ 1382.371963][T17928] do_SYSENTER_32+0x1b/0x20 [ 1382.376581][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1382.383125][T17928] [ 1382.385517][T17928] Local variable msg_sys created at: [ 1382.390874][T17928] do_recvmmsg+0x5c/0x1180 [ 1382.395539][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.463065][ T122] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1382.472551][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.480747][ T122] usb 4-1: Product: syz [ 1382.485280][ T122] usb 4-1: Manufacturer: syz [ 1382.490065][ T122] usb 4-1: SerialNumber: syz [ 1382.660558][T17928] not chained 1410000 origins [ 1382.667554][T17928] CPU: 1 PID: 17928 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1382.677854][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1382.687989][T17928] Call Trace: [ 1382.691310][T17928] [ 1382.694277][T17928] dump_stack_lvl+0x1c8/0x256 [ 1382.699064][T17928] dump_stack+0x1a/0x1c [ 1382.703318][T17928] kmsan_internal_chain_origin+0x78/0x120 [ 1382.709180][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1382.715513][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1382.721405][T17928] ? ____sys_recvmsg+0x5c1/0x810 [ 1382.726434][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1382.731766][T17928] ? get_compat_msghdr+0x8c/0x1c0 [ 1382.736930][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1382.742902][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1382.748250][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1382.754233][T17928] ? should_fail+0x3f/0x810 [ 1382.758891][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1382.764167][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1382.770578][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1382.776553][T17928] __msan_chain_origin+0xbd/0x140 [ 1382.781768][T17928] __get_compat_msghdr+0x514/0x750 [ 1382.787039][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1382.792010][T17928] ? ___sys_recvmsg+0xa9/0x890 [ 1382.796851][T17928] ? do_recvmmsg+0x682/0x1180 [ 1382.801604][T17928] ___sys_recvmsg+0x19d/0x890 [ 1382.806366][T17928] ? do_recvmmsg+0x6e4/0x1180 [ 1382.811159][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1382.816405][T17928] ? kmsan_internal_check_memory+0x94/0x530 [ 1382.822411][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1382.828381][T17928] do_recvmmsg+0x682/0x1180 [ 1382.833013][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1382.839352][T17928] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1382.845857][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.850621][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1382.856961][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1382.862151][T17928] ? exit_to_user_mode_prepare+0x119/0x220 [ 1382.868063][T17928] do_fast_syscall_32+0x33/0x70 [ 1382.873054][T17928] do_SYSENTER_32+0x1b/0x20 [ 1382.877691][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1382.884154][T17928] RIP: 0023:0xf7f30549 [ 1382.888288][T17928] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1382.907990][T17928] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1382.916501][T17928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1382.924590][T17928] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1382.932671][T17928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1382.940751][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.948816][T17928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1382.956865][T17928] [ 1382.962522][T17928] Uninit was stored to memory at: [ 1382.967729][T17928] __get_compat_msghdr+0x514/0x750 [ 1382.975440][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1382.980427][T17928] ___sys_recvmsg+0x19d/0x890 [ 1382.985574][T17928] do_recvmmsg+0x682/0x1180 [ 1382.990215][T17928] __sys_recvmmsg+0x113/0x450 [ 1382.995125][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.001516][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1383.006869][T17928] do_fast_syscall_32+0x33/0x70 [ 1383.011933][T17928] do_SYSENTER_32+0x1b/0x20 [ 1383.016572][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1383.023156][T17928] [ 1383.025545][T17928] Uninit was stored to memory at: [ 1383.030741][T17928] __get_compat_msghdr+0x514/0x750 [ 1383.036098][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1383.041093][T17928] ___sys_recvmsg+0x19d/0x890 [ 1383.046006][T17928] do_recvmmsg+0x682/0x1180 [ 1383.050642][T17928] __sys_recvmmsg+0x113/0x450 [ 1383.055554][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.062037][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1383.067287][T17928] do_fast_syscall_32+0x33/0x70 [ 1383.072416][T17928] do_SYSENTER_32+0x1b/0x20 [ 1383.077043][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1383.083625][T17928] [ 1383.086010][T17928] Uninit was stored to memory at: [ 1383.087701][ T122] usb 4-1: USB disconnect, device number 16 [ 1383.091150][T17928] __get_compat_msghdr+0x514/0x750 [ 1383.091233][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1383.107475][T17928] ___sys_recvmsg+0x19d/0x890 [ 1383.112458][T17928] do_recvmmsg+0x682/0x1180 [ 1383.117091][T17928] __sys_recvmmsg+0x113/0x450 [ 1383.122044][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.128435][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1383.133790][T17928] do_fast_syscall_32+0x33/0x70 [ 1383.138776][T17928] do_SYSENTER_32+0x1b/0x20 [ 1383.143503][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1383.149987][T17928] [ 1383.152533][T17928] Uninit was stored to memory at: [ 1383.157732][T17928] __get_compat_msghdr+0x514/0x750 [ 1383.163413][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1383.168403][T17928] ___sys_recvmsg+0x19d/0x890 [ 1383.173363][T17928] do_recvmmsg+0x682/0x1180 [ 1383.177996][T17928] __sys_recvmmsg+0x113/0x450 [ 1383.182903][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.189388][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1383.194808][T17928] do_fast_syscall_32+0x33/0x70 [ 1383.199806][T17928] do_SYSENTER_32+0x1b/0x20 [ 1383.204596][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1383.211079][T17928] [ 1383.213606][T17928] Uninit was stored to memory at: [ 1383.218799][T17928] __get_compat_msghdr+0x514/0x750 [ 1383.224204][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1383.229189][T17928] ___sys_recvmsg+0x19d/0x890 [ 1383.234101][T17928] do_recvmmsg+0x682/0x1180 [ 1383.238736][T17928] __sys_recvmmsg+0x113/0x450 [ 1383.243629][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.250016][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1383.255352][T17928] do_fast_syscall_32+0x33/0x70 [ 1383.260322][T17928] do_SYSENTER_32+0x1b/0x20 [ 1383.265064][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1383.271547][T17928] [ 1383.274043][T17928] Uninit was stored to memory at: [ 1383.279232][T17928] __get_compat_msghdr+0x514/0x750 [ 1383.284594][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1383.289571][T17928] ___sys_recvmsg+0x19d/0x890 [ 1383.294479][T17928] do_recvmmsg+0x682/0x1180 [ 1383.298717][T17951] udevd[17951]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1383.299069][T17928] __sys_recvmmsg+0x113/0x450 [ 1383.319802][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.326291][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1383.331543][T17928] do_fast_syscall_32+0x33/0x70 [ 1383.336625][T17928] do_SYSENTER_32+0x1b/0x20 [ 1383.341256][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1383.347821][T17928] [ 1383.350200][T17928] Uninit was stored to memory at: [ 1383.355489][T17928] __get_compat_msghdr+0x514/0x750 [ 1383.360727][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1383.365806][T17928] ___sys_recvmsg+0x19d/0x890 [ 1383.370650][T17928] do_recvmmsg+0x682/0x1180 [ 1383.375385][T17928] __sys_recvmmsg+0x113/0x450 [ 1383.380194][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.386685][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1383.392012][T17928] do_fast_syscall_32+0x33/0x70 [ 1383.397000][T17928] do_SYSENTER_32+0x1b/0x20 [ 1383.401637][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1383.408223][T17928] [ 1383.410618][T17928] Local variable msg_sys created at: [ 1383.416087][T17928] do_recvmmsg+0x5c/0x1180 [ 1383.420630][T17928] __sys_recvmmsg+0x113/0x450 [ 1383.732269][T17928] not chained 1420000 origins [ 1383.737011][T17928] CPU: 0 PID: 17928 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1383.747256][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1383.757396][T17928] Call Trace: [ 1383.760713][T17928] [ 1383.763697][T17928] dump_stack_lvl+0x1c8/0x256 [ 1383.768558][T17928] dump_stack+0x1a/0x1c [ 1383.772852][T17928] kmsan_internal_chain_origin+0x78/0x120 [ 1383.778664][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1383.785013][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1383.790980][T17928] ? ____sys_recvmsg+0x5c1/0x810 [ 1383.796037][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1383.801307][T17928] ? get_compat_msghdr+0x8c/0x1c0 [ 1383.806416][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1383.812381][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1383.817692][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1383.823611][T17928] ? should_fail+0x3f/0x810 [ 1383.828241][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1383.833451][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1383.839829][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1383.845722][T17928] __msan_chain_origin+0xbd/0x140 [ 1383.850822][T17928] __get_compat_msghdr+0x514/0x750 [ 1383.856023][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1383.860943][T17928] ? ___sys_recvmsg+0xa9/0x890 [ 1383.865791][T17928] ? do_recvmmsg+0x682/0x1180 [ 1383.870608][T17928] ___sys_recvmsg+0x19d/0x890 [ 1383.875370][T17928] ? do_recvmmsg+0x6e4/0x1180 [ 1383.880164][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1383.885365][T17928] ? kmsan_internal_check_memory+0x94/0x530 [ 1383.891371][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1383.897343][T17928] do_recvmmsg+0x682/0x1180 [ 1383.902006][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1383.908385][T17928] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.914913][T17928] __sys_recvmmsg+0x113/0x450 [ 1383.919718][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1383.926050][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1383.931239][T17928] ? exit_to_user_mode_prepare+0x119/0x220 [ 1383.937124][T17928] do_fast_syscall_32+0x33/0x70 [ 1383.942064][T17928] do_SYSENTER_32+0x1b/0x20 [ 1383.946695][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1383.953121][T17928] RIP: 0023:0xf7f30549 [ 1383.957283][T17928] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1383.976999][T17928] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1383.985563][T17928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1383.993653][T17928] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1384.001728][T17928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1384.009783][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.017821][T17928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1384.025884][T17928] [ 1384.033995][T17928] Uninit was stored to memory at: [ 1384.039195][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.044966][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.049943][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.054818][T17928] do_recvmmsg+0x682/0x1180 [ 1384.059431][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.064312][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.070683][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1384.075976][T17928] do_fast_syscall_32+0x33/0x70 [ 1384.080938][T17928] do_SYSENTER_32+0x1b/0x20 [ 1384.085639][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1384.092190][T17928] [ 1384.094574][T17928] Uninit was stored to memory at: [ 1384.099773][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.105110][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.110070][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.114948][T17928] do_recvmmsg+0x682/0x1180 [ 1384.119559][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.124440][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.130815][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1384.136138][T17928] do_fast_syscall_32+0x33/0x70 [ 1384.141104][T17928] do_SYSENTER_32+0x1b/0x20 [ 1384.145778][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1384.152322][T17928] [ 1384.154706][T17928] Uninit was stored to memory at: [ 1384.159835][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.165116][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.170076][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.174967][T17928] do_recvmmsg+0x682/0x1180 [ 1384.179593][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.184484][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.190864][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1384.196189][T17928] do_fast_syscall_32+0x33/0x70 [ 1384.201173][T17928] do_SYSENTER_32+0x1b/0x20 [ 1384.205929][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1384.212481][T17928] [ 1384.214850][T17928] Uninit was stored to memory at: [ 1384.219961][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.225276][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.230250][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.235147][T17928] do_recvmmsg+0x682/0x1180 [ 1384.239774][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.244657][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.251027][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1384.256323][T17928] do_fast_syscall_32+0x33/0x70 [ 1384.261288][T17928] do_SYSENTER_32+0x1b/0x20 [ 1384.266006][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1384.272556][T17928] [ 1384.274925][T17928] Uninit was stored to memory at: [ 1384.280037][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.285384][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.290354][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.295231][T17928] do_recvmmsg+0x682/0x1180 [ 1384.299864][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.304804][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.311197][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1384.316569][T17928] do_fast_syscall_32+0x33/0x70 [ 1384.321538][T17928] do_SYSENTER_32+0x1b/0x20 [ 1384.326219][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1384.332773][T17928] [ 1384.335163][T17928] Uninit was stored to memory at: [ 1384.340300][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.345627][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.350592][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.355481][T17928] do_recvmmsg+0x682/0x1180 [ 1384.360095][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.365018][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.371413][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1384.376719][T17928] do_fast_syscall_32+0x33/0x70 [ 1384.381768][T17928] do_SYSENTER_32+0x1b/0x20 [ 1384.386384][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1384.392943][T17928] [ 1384.395328][T17928] Uninit was stored to memory at: [ 1384.400463][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.405785][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.410754][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.415648][T17928] do_recvmmsg+0x682/0x1180 [ 1384.420264][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.425153][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.431525][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1384.436836][T17928] do_fast_syscall_32+0x33/0x70 [ 1384.441893][T17928] do_SYSENTER_32+0x1b/0x20 [ 1384.446534][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1384.453132][T17928] [ 1384.455508][T17928] Local variable msg_sys created at: [ 1384.460819][T17928] do_recvmmsg+0x5c/0x1180 [ 1384.465440][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.670381][T17928] not chained 1430000 origins [ 1384.675254][T17928] CPU: 0 PID: 17928 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1384.685528][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1384.695637][T17928] Call Trace: [ 1384.698948][T17928] [ 1384.701914][T17928] dump_stack_lvl+0x1c8/0x256 [ 1384.706700][T17928] dump_stack+0x1a/0x1c [ 1384.710957][T17928] kmsan_internal_chain_origin+0x78/0x120 [ 1384.716813][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1384.723148][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1384.729049][T17928] ? ____sys_recvmsg+0x5c1/0x810 [ 1384.734085][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1384.739418][T17928] ? get_compat_msghdr+0x8c/0x1c0 [ 1384.744562][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1384.750458][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1384.755725][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1384.761620][T17928] ? should_fail+0x3f/0x810 [ 1384.766236][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1384.771430][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1384.777760][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1384.783675][T17928] __msan_chain_origin+0xbd/0x140 [ 1384.788855][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.794140][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.799101][T17928] ? ___sys_recvmsg+0xa9/0x890 [ 1384.803929][T17928] ? do_recvmmsg+0x682/0x1180 [ 1384.808683][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.813440][T17928] ? do_recvmmsg+0x6e4/0x1180 [ 1384.818237][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1384.823429][T17928] ? kmsan_internal_check_memory+0x94/0x530 [ 1384.829410][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1384.835325][T17928] do_recvmmsg+0x682/0x1180 [ 1384.839955][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1384.846284][T17928] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.852788][T17928] __sys_recvmmsg+0x113/0x450 [ 1384.857547][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1384.863882][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1384.869068][T17928] ? exit_to_user_mode_prepare+0x119/0x220 [ 1384.874949][T17928] do_fast_syscall_32+0x33/0x70 [ 1384.879869][T17928] do_SYSENTER_32+0x1b/0x20 [ 1384.884462][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1384.890941][T17928] RIP: 0023:0xf7f30549 [ 1384.895089][T17928] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1384.914800][T17928] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1384.923332][T17928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1384.931361][T17928] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1384.939421][T17928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1384.947503][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.955560][T17928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1384.963595][T17928] [ 1384.971613][T17928] Uninit was stored to memory at: [ 1384.977278][T17928] __get_compat_msghdr+0x514/0x750 [ 1384.982624][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1384.987602][T17928] ___sys_recvmsg+0x19d/0x890 [ 1384.992557][T17928] do_recvmmsg+0x682/0x1180 [ 1384.997184][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.002076][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.008471][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.013825][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.018829][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.023590][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.030047][T17928] [ 1385.032559][T17928] Uninit was stored to memory at: [ 1385.037713][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.043053][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.048027][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.052928][T17928] do_recvmmsg+0x682/0x1180 [ 1385.057554][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.062453][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.068823][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.074166][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.079127][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.083821][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.090274][T17928] [ 1385.092766][T17928] Uninit was stored to memory at: [ 1385.097947][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.103257][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.108212][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.113077][T17928] do_recvmmsg+0x682/0x1180 [ 1385.117684][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.122587][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.128971][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.134264][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.139180][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.143883][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.150337][T17928] [ 1385.152826][T17928] Uninit was stored to memory at: [ 1385.158005][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.163351][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.168310][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.173214][T17928] do_recvmmsg+0x682/0x1180 [ 1385.177839][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.182734][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.189117][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.194470][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.199433][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.204125][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.210578][T17928] [ 1385.213071][T17928] Uninit was stored to memory at: [ 1385.218255][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.223629][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.228591][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.233462][T17928] do_recvmmsg+0x682/0x1180 [ 1385.238072][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.242970][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.249355][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.254713][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.259675][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.264365][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.270827][T17928] [ 1385.273317][T17928] Uninit was stored to memory at: [ 1385.278515][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.283858][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.288818][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.293698][T17928] do_recvmmsg+0x682/0x1180 [ 1385.298326][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.303238][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.309612][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.314943][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.319911][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.324641][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.331105][T17928] [ 1385.333606][T17928] Uninit was stored to memory at: [ 1385.338789][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.344133][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.349090][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.353962][T17928] do_recvmmsg+0x682/0x1180 [ 1385.358572][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.363456][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.369846][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.375264][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.380229][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.384924][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.391383][T17928] [ 1385.393905][T17928] Local variable msg_sys created at: [ 1385.399250][T17928] do_recvmmsg+0x5c/0x1180 [ 1385.403853][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.603502][T17928] not chained 1440000 origins [ 1385.608284][T17928] CPU: 0 PID: 17928 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1385.618559][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1385.628687][T17928] Call Trace: [ 1385.632022][T17928] [ 1385.635011][T17928] dump_stack_lvl+0x1c8/0x256 [ 1385.639838][T17928] dump_stack+0x1a/0x1c [ 1385.644160][T17928] kmsan_internal_chain_origin+0x78/0x120 [ 1385.649970][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1385.656337][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1385.662310][T17928] ? ____sys_recvmsg+0x5c1/0x810 [ 1385.667383][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1385.672699][T17928] ? get_compat_msghdr+0x8c/0x1c0 [ 1385.677787][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1385.683675][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1385.688939][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1385.694838][T17928] ? should_fail+0x3f/0x810 [ 1385.699425][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1385.704641][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1385.711043][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1385.716994][T17928] __msan_chain_origin+0xbd/0x140 [ 1385.722102][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.727297][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.732210][T17928] ? ___sys_recvmsg+0xa9/0x890 [ 1385.737041][T17928] ? do_recvmmsg+0x682/0x1180 [ 1385.741791][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.746536][T17928] ? do_recvmmsg+0x6e4/0x1180 [ 1385.751311][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1385.756530][T17928] ? kmsan_internal_check_memory+0x94/0x530 [ 1385.762566][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1385.768461][T17928] do_recvmmsg+0x682/0x1180 [ 1385.773047][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1385.779373][T17928] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.785875][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.790627][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.796952][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.802154][T17928] ? exit_to_user_mode_prepare+0x119/0x220 [ 1385.808107][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.813090][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.817720][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.824175][T17928] RIP: 0023:0xf7f30549 [ 1385.828286][T17928] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1385.847978][T17928] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1385.856486][T17928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1385.864553][T17928] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1385.872574][T17928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1385.880593][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1385.888614][T17928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1385.896649][T17928] [ 1385.904652][T17928] Uninit was stored to memory at: [ 1385.909855][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.915647][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.920622][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.925527][T17928] do_recvmmsg+0x682/0x1180 [ 1385.930150][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.935045][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1385.941458][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1385.946813][T17928] do_fast_syscall_32+0x33/0x70 [ 1385.951865][T17928] do_SYSENTER_32+0x1b/0x20 [ 1385.956494][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1385.963071][T17928] [ 1385.965447][T17928] Uninit was stored to memory at: [ 1385.970556][T17928] __get_compat_msghdr+0x514/0x750 [ 1385.975898][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1385.980856][T17928] ___sys_recvmsg+0x19d/0x890 [ 1385.985757][T17928] do_recvmmsg+0x682/0x1180 [ 1385.990392][T17928] __sys_recvmmsg+0x113/0x450 [ 1385.995349][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.001816][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.007060][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.012109][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.016718][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.023293][T17928] [ 1386.025677][T17928] Uninit was stored to memory at: [ 1386.030812][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.036119][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.041096][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.046055][T17928] do_recvmmsg+0x682/0x1180 [ 1386.050680][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.055588][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.062064][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.067290][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.072367][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.076983][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.083553][T17928] [ 1386.085943][T17928] Uninit was stored to memory at: [ 1386.091122][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.096451][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.101410][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.106278][T17928] do_recvmmsg+0x682/0x1180 [ 1386.110885][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.115790][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.122252][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.127480][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.132561][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.137171][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.143738][T17928] [ 1386.146126][T17928] Uninit was stored to memory at: [ 1386.151261][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.156566][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.161524][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.166433][T17928] do_recvmmsg+0x682/0x1180 [ 1386.171065][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.176010][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.182431][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.187618][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.192699][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.197308][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.203877][T17928] [ 1386.206264][T17928] Uninit was stored to memory at: [ 1386.211395][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.216702][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.221659][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.226577][T17928] do_recvmmsg+0x682/0x1180 [ 1386.231187][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.236058][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.242483][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.247683][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.252813][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.257445][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.264068][T17928] [ 1386.266445][T17928] Uninit was stored to memory at: [ 1386.271557][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.276859][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.281913][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.286718][T17928] do_recvmmsg+0x682/0x1180 [ 1386.291337][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.296213][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.302639][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.307818][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.312896][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.317524][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.324156][T17928] [ 1386.326548][T17928] Local variable msg_sys created at: [ 1386.331995][T17928] do_recvmmsg+0x5c/0x1180 [ 1386.336513][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.528272][T17928] not chained 1450000 origins [ 1386.533080][T17928] CPU: 0 PID: 17928 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1386.543320][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1386.553479][T17928] Call Trace: [ 1386.556817][T17928] [ 1386.559783][T17928] dump_stack_lvl+0x1c8/0x256 [ 1386.564560][T17928] dump_stack+0x1a/0x1c [ 1386.568797][T17928] kmsan_internal_chain_origin+0x78/0x120 [ 1386.574600][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1386.580930][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1386.586815][T17928] ? ____sys_recvmsg+0x5c1/0x810 [ 1386.591840][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1386.597184][T17928] ? get_compat_msghdr+0x8c/0x1c0 [ 1386.602340][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1386.608301][T17928] ? __get_compat_msghdr+0x5b/0x750 [ 1386.613634][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1386.619597][T17928] ? should_fail+0x3f/0x810 [ 1386.624244][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1386.629500][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1386.635908][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1386.641881][T17928] __msan_chain_origin+0xbd/0x140 [ 1386.647052][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.652317][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.657300][T17928] ? ___sys_recvmsg+0xa9/0x890 [ 1386.662190][T17928] ? do_recvmmsg+0x682/0x1180 [ 1386.667008][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.671813][T17928] ? do_recvmmsg+0x6e4/0x1180 [ 1386.676637][T17928] ? __stack_depot_save+0x21/0x4b0 [ 1386.681899][T17928] ? kmsan_internal_check_memory+0x94/0x530 [ 1386.687958][T17928] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1386.693923][T17928] do_recvmmsg+0x682/0x1180 [ 1386.698586][T17928] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1386.704992][T17928] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.711562][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.716385][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.722790][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.728039][T17928] ? exit_to_user_mode_prepare+0x119/0x220 [ 1386.733993][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.738989][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.743624][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.750099][T17928] RIP: 0023:0xf7f30549 [ 1386.754266][T17928] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1386.774007][T17928] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1386.782493][T17928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1386.790518][T17928] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1386.798559][T17928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1386.806614][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.814634][T17928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1386.822681][T17928] [ 1386.835663][T17928] Uninit was stored to memory at: [ 1386.840858][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.847692][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.852751][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.857553][T17928] do_recvmmsg+0x682/0x1180 [ 1386.862282][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.867084][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.873522][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.878702][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.883789][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.888402][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.894943][T17928] [ 1386.897312][T17928] Uninit was stored to memory at: [ 1386.902597][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.907819][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.912908][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.917716][T17928] do_recvmmsg+0x682/0x1180 [ 1386.922456][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.927245][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.933714][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.938943][T17928] do_fast_syscall_32+0x33/0x70 [ 1386.944037][T17928] do_SYSENTER_32+0x1b/0x20 [ 1386.948647][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1386.955235][T17928] [ 1386.957621][T17928] Uninit was stored to memory at: [ 1386.962934][T17928] __get_compat_msghdr+0x514/0x750 [ 1386.968178][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1386.973304][T17928] ___sys_recvmsg+0x19d/0x890 [ 1386.978093][T17928] do_recvmmsg+0x682/0x1180 [ 1386.982784][T17928] __sys_recvmmsg+0x113/0x450 [ 1386.987589][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1386.994080][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1386.999307][T17928] do_fast_syscall_32+0x33/0x70 [ 1387.004389][T17928] do_SYSENTER_32+0x1b/0x20 [ 1387.009002][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1387.015528][T17928] [ 1387.017904][T17928] Uninit was stored to memory at: [ 1387.023197][T17928] __get_compat_msghdr+0x514/0x750 [ 1387.028434][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1387.033509][T17928] ___sys_recvmsg+0x19d/0x890 [ 1387.038298][T17928] do_recvmmsg+0x682/0x1180 [ 1387.043038][T17928] __sys_recvmmsg+0x113/0x450 [ 1387.047822][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1387.054304][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1387.059531][T17928] do_fast_syscall_32+0x33/0x70 [ 1387.064572][T17928] do_SYSENTER_32+0x1b/0x20 [ 1387.069183][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1387.075758][T17928] [ 1387.078145][T17928] Uninit was stored to memory at: [ 1387.083409][T17928] __get_compat_msghdr+0x514/0x750 [ 1387.088644][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1387.093722][T17928] ___sys_recvmsg+0x19d/0x890 [ 1387.098508][T17928] do_recvmmsg+0x682/0x1180 [ 1387.103239][T17928] __sys_recvmmsg+0x113/0x450 [ 1387.108028][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1387.114517][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1387.119744][T17928] do_fast_syscall_32+0x33/0x70 [ 1387.124792][T17928] do_SYSENTER_32+0x1b/0x20 [ 1387.129424][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1387.135965][T17928] [ 1387.138336][T17928] Uninit was stored to memory at: [ 1387.143626][T17928] __get_compat_msghdr+0x514/0x750 [ 1387.148864][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1387.153948][T17928] ___sys_recvmsg+0x19d/0x890 [ 1387.158753][T17928] do_recvmmsg+0x682/0x1180 [ 1387.163473][T17928] __sys_recvmmsg+0x113/0x450 [ 1387.168280][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1387.174773][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1387.180002][T17928] do_fast_syscall_32+0x33/0x70 [ 1387.185095][T17928] do_SYSENTER_32+0x1b/0x20 [ 1387.189723][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1387.196339][T17928] [ 1387.198710][T17928] Uninit was stored to memory at: [ 1387.204024][T17928] __get_compat_msghdr+0x514/0x750 [ 1387.209245][T17928] get_compat_msghdr+0x8c/0x1c0 [ 1387.214327][T17928] ___sys_recvmsg+0x19d/0x890 [ 1387.219114][T17928] do_recvmmsg+0x682/0x1180 [ 1387.223857][T17928] __sys_recvmmsg+0x113/0x450 [ 1387.228648][T17928] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1387.235103][T17928] __do_fast_syscall_32+0xa2/0x100 [ 1387.240331][T17928] do_fast_syscall_32+0x33/0x70 [ 1387.245376][T17928] do_SYSENTER_32+0x1b/0x20 [ 1387.249986][T17928] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1387.256517][T17928] [ 1387.258890][T17928] Local variable msg_sys created at: [ 1387.264372][T17928] do_recvmmsg+0x5c/0x1180 [ 1387.268892][T17928] __sys_recvmmsg+0x113/0x450 09:40:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:13 executing program 1: syz_clone(0x5124000, 0x0, 0xffffffffffffff36, 0x0, 0x0, 0x0) 09:40:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc040, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback, 0xb8c}, 0x1c) 09:40:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 09:40:13 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) 09:40:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2f, 0x0, 0x0) 09:40:13 executing program 3: r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x101000) read$FUSE(r0, 0x0, 0x0) [ 1387.912266][T17974] loop4: detected capacity change from 0 to 6 09:40:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1387.968959][T17974] Dev loop4: unable to read RDB block 6 [ 1387.975137][T17974] loop4: unable to read partition table [ 1388.033803][T17974] loop4: partition table beyond EOD, truncated 09:40:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1388.100580][T17974] FAT-fs (loop4): Directory bread(block 6) failed 09:40:14 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002b00)='ns/net\x00') ioctl$FIOCLEX(r0, 0x5451) ioctl$FIONCLEX(r0, 0x5450) 09:40:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x9, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) [ 1388.873330][T17973] not chained 1460000 origins [ 1388.878341][T17973] CPU: 1 PID: 17973 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1388.888654][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1388.898813][T17973] Call Trace: [ 1388.902170][T17973] [ 1388.905179][T17973] dump_stack_lvl+0x1c8/0x256 [ 1388.910039][T17973] dump_stack+0x1a/0x1c [ 1388.914355][T17973] kmsan_internal_chain_origin+0x78/0x120 [ 1388.920243][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1388.926654][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1388.932616][T17973] ? ____sys_recvmsg+0x5c1/0x810 [ 1388.937691][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1388.943026][T17973] ? get_compat_msghdr+0x8c/0x1c0 [ 1388.948188][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1388.954161][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1388.959514][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1388.965496][T17973] ? should_fail+0x3f/0x810 [ 1388.970158][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1388.975423][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1388.981841][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1388.987816][T17973] __msan_chain_origin+0xbd/0x140 [ 1388.992994][T17973] __get_compat_msghdr+0x514/0x750 [ 1388.998268][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1389.003264][T17973] ? ___sys_recvmsg+0xa9/0x890 [ 1389.008161][T17973] ? do_recvmmsg+0x682/0x1180 [ 1389.012979][T17973] ___sys_recvmsg+0x19d/0x890 [ 1389.017790][T17973] ? do_recvmmsg+0x6e4/0x1180 [ 1389.022624][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1389.027889][T17973] ? kmsan_internal_check_memory+0x94/0x530 [ 1389.033931][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1389.039887][T17973] do_recvmmsg+0x682/0x1180 [ 1389.044533][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1389.050921][T17973] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.057483][T17973] __sys_recvmmsg+0x113/0x450 [ 1389.062292][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.068684][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1389.073920][T17973] ? exit_to_user_mode_prepare+0x119/0x220 [ 1389.079857][T17973] do_fast_syscall_32+0x33/0x70 [ 1389.084829][T17973] do_SYSENTER_32+0x1b/0x20 [ 1389.089456][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1389.095920][T17973] RIP: 0023:0xf7f30549 [ 1389.100072][T17973] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1389.119822][T17973] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1389.128359][T17973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1389.136448][T17973] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1389.144517][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1389.152582][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1389.160643][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1389.168729][T17973] [ 1389.175169][T17973] Uninit was stored to memory at: [ 1389.180366][T17973] __get_compat_msghdr+0x514/0x750 [ 1389.186457][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1389.191462][T17973] ___sys_recvmsg+0x19d/0x890 [ 1389.196348][T17973] do_recvmmsg+0x682/0x1180 [ 1389.200983][T17973] __sys_recvmmsg+0x113/0x450 [ 1389.205862][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.212348][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1389.217618][T17973] do_fast_syscall_32+0x33/0x70 [ 1389.222677][T17973] do_SYSENTER_32+0x1b/0x20 [ 1389.227307][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1389.233883][T17973] [ 1389.236279][T17973] Uninit was stored to memory at: [ 1389.241484][T17973] __get_compat_msghdr+0x514/0x750 [ 1389.246803][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1389.251861][T17973] ___sys_recvmsg+0x19d/0x890 [ 1389.256670][T17973] do_recvmmsg+0x682/0x1180 [ 1389.261306][T17973] __sys_recvmmsg+0x113/0x450 [ 1389.266198][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.272659][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1389.277903][T17973] do_fast_syscall_32+0x33/0x70 [ 1389.282963][T17973] do_SYSENTER_32+0x1b/0x20 [ 1389.287595][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1389.294148][T17973] [ 1389.296537][T17973] Uninit was stored to memory at: [ 1389.301845][T17973] __get_compat_msghdr+0x514/0x750 [ 1389.307092][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1389.312153][T17973] ___sys_recvmsg+0x19d/0x890 [ 1389.316995][T17973] do_recvmmsg+0x682/0x1180 [ 1389.321617][T17973] __sys_recvmmsg+0x113/0x450 [ 1389.326552][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.333022][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1389.338262][T17973] do_fast_syscall_32+0x33/0x70 [ 1389.343318][T17973] do_SYSENTER_32+0x1b/0x20 [ 1389.347953][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1389.354511][T17973] [ 1389.356912][T17973] Uninit was stored to memory at: [ 1389.362173][T17973] __get_compat_msghdr+0x514/0x750 [ 1389.367412][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1389.372534][T17973] ___sys_recvmsg+0x19d/0x890 [ 1389.377333][T17973] do_recvmmsg+0x682/0x1180 [ 1389.382049][T17973] __sys_recvmmsg+0x113/0x450 [ 1389.386863][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.393326][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1389.398570][T17973] do_fast_syscall_32+0x33/0x70 [ 1389.403622][T17973] do_SYSENTER_32+0x1b/0x20 [ 1389.408249][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1389.414799][T17973] [ 1389.417184][T17973] Uninit was stored to memory at: [ 1389.422489][T17973] __get_compat_msghdr+0x514/0x750 [ 1389.427745][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1389.432845][T17973] ___sys_recvmsg+0x19d/0x890 [ 1389.437661][T17973] do_recvmmsg+0x682/0x1180 [ 1389.442407][T17973] __sys_recvmmsg+0x113/0x450 [ 1389.447216][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.453737][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1389.458983][T17973] do_fast_syscall_32+0x33/0x70 [ 1389.464085][T17973] do_SYSENTER_32+0x1b/0x20 [ 1389.468732][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1389.475306][T17973] [ 1389.477707][T17973] Uninit was stored to memory at: [ 1389.483011][T17973] __get_compat_msghdr+0x514/0x750 [ 1389.488267][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1389.493368][T17973] ___sys_recvmsg+0x19d/0x890 [ 1389.498172][T17973] do_recvmmsg+0x682/0x1180 [ 1389.502931][T17973] __sys_recvmmsg+0x113/0x450 [ 1389.507733][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.514253][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1389.519502][T17973] do_fast_syscall_32+0x33/0x70 [ 1389.524598][T17973] do_SYSENTER_32+0x1b/0x20 [ 1389.529232][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1389.535832][T17973] [ 1389.538222][T17973] Uninit was stored to memory at: [ 1389.543536][T17973] __get_compat_msghdr+0x514/0x750 [ 1389.548783][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1389.553885][T17973] ___sys_recvmsg+0x19d/0x890 [ 1389.558711][T17973] do_recvmmsg+0x682/0x1180 [ 1389.563459][T17973] __sys_recvmmsg+0x113/0x450 [ 1389.568264][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1389.574776][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1389.580038][T17973] do_fast_syscall_32+0x33/0x70 [ 1389.585149][T17973] do_SYSENTER_32+0x1b/0x20 [ 1389.589791][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1389.596392][T17973] [ 1389.598781][T17973] Local variable msg_sys created at: [ 1389.604260][T17973] do_recvmmsg+0x5c/0x1180 [ 1389.608808][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.006861][T17973] not chained 1470000 origins [ 1390.011647][T17973] CPU: 1 PID: 17973 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1390.021937][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1390.032088][T17973] Call Trace: [ 1390.035422][T17973] [ 1390.038440][T17973] dump_stack_lvl+0x1c8/0x256 [ 1390.043299][T17973] dump_stack+0x1a/0x1c [ 1390.047613][T17973] kmsan_internal_chain_origin+0x78/0x120 [ 1390.053448][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1390.059836][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1390.065730][T17973] ? ____sys_recvmsg+0x5c1/0x810 [ 1390.070737][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1390.076006][T17973] ? get_compat_msghdr+0x8c/0x1c0 [ 1390.081104][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1390.086995][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1390.092267][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1390.098179][T17973] ? should_fail+0x3f/0x810 [ 1390.102784][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1390.108048][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1390.114446][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1390.120361][T17973] __msan_chain_origin+0xbd/0x140 [ 1390.125495][T17973] __get_compat_msghdr+0x514/0x750 [ 1390.130695][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1390.135613][T17973] ? ___sys_recvmsg+0xa9/0x890 [ 1390.140461][T17973] ? do_recvmmsg+0x682/0x1180 [ 1390.145283][T17973] ___sys_recvmsg+0x19d/0x890 [ 1390.150075][T17973] ? do_recvmmsg+0x6e4/0x1180 [ 1390.154833][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1390.160031][T17973] ? kmsan_internal_check_memory+0x94/0x530 [ 1390.166038][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1390.171998][T17973] do_recvmmsg+0x682/0x1180 [ 1390.176627][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1390.183013][T17973] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.189562][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.194375][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.200748][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1390.205934][T17973] ? exit_to_user_mode_prepare+0x119/0x220 [ 1390.211843][T17973] do_fast_syscall_32+0x33/0x70 [ 1390.216830][T17973] do_SYSENTER_32+0x1b/0x20 [ 1390.221411][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1390.227822][T17973] RIP: 0023:0xf7f30549 [ 1390.231959][T17973] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1390.251699][T17973] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1390.260228][T17973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1390.268257][T17973] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1390.276282][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1390.284321][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.292378][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1390.300420][T17973] [ 1390.305892][T17973] Uninit was stored to memory at: [ 1390.311092][T17973] __get_compat_msghdr+0x514/0x750 [ 1390.316641][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1390.321619][T17973] ___sys_recvmsg+0x19d/0x890 [ 1390.326500][T17973] do_recvmmsg+0x682/0x1180 [ 1390.331125][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.336009][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.342465][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1390.347712][T17973] do_fast_syscall_32+0x33/0x70 [ 1390.352817][T17973] do_SYSENTER_32+0x1b/0x20 [ 1390.357447][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1390.364018][T17973] [ 1390.366391][T17973] Uninit was stored to memory at: [ 1390.371525][T17973] __get_compat_msghdr+0x514/0x750 [ 1390.376854][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1390.381902][T17973] ___sys_recvmsg+0x19d/0x890 [ 1390.386710][T17973] do_recvmmsg+0x682/0x1180 [ 1390.391326][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.396249][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.402710][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1390.407958][T17973] do_fast_syscall_32+0x33/0x70 [ 1390.413074][T17973] do_SYSENTER_32+0x1b/0x20 [ 1390.417712][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1390.424281][T17973] [ 1390.426669][T17973] Uninit was stored to memory at: [ 1390.431960][T17973] __get_compat_msghdr+0x514/0x750 [ 1390.437200][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1390.442289][T17973] ___sys_recvmsg+0x19d/0x890 [ 1390.447093][T17973] do_recvmmsg+0x682/0x1180 [ 1390.451837][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.456647][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.463153][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1390.468379][T17973] do_fast_syscall_32+0x33/0x70 [ 1390.473435][T17973] do_SYSENTER_32+0x1b/0x20 [ 1390.478064][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1390.484633][T17973] [ 1390.487024][T17973] Uninit was stored to memory at: [ 1390.492311][T17973] __get_compat_msghdr+0x514/0x750 [ 1390.497568][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1390.502653][T17973] ___sys_recvmsg+0x19d/0x890 [ 1390.507449][T17973] do_recvmmsg+0x682/0x1180 [ 1390.512152][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.516965][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.523443][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1390.528680][T17973] do_fast_syscall_32+0x33/0x70 [ 1390.533739][T17973] do_SYSENTER_32+0x1b/0x20 [ 1390.538373][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1390.544991][T17973] [ 1390.547377][T17973] Uninit was stored to memory at: [ 1390.552683][T17973] __get_compat_msghdr+0x514/0x750 [ 1390.557923][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1390.563007][T17973] ___sys_recvmsg+0x19d/0x890 [ 1390.567812][T17973] do_recvmmsg+0x682/0x1180 [ 1390.572571][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.577377][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.583859][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1390.589088][T17973] do_fast_syscall_32+0x33/0x70 [ 1390.594147][T17973] do_SYSENTER_32+0x1b/0x20 [ 1390.598758][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1390.605307][T17973] [ 1390.607699][T17973] Uninit was stored to memory at: [ 1390.612993][T17973] __get_compat_msghdr+0x514/0x750 [ 1390.618235][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1390.623319][T17973] ___sys_recvmsg+0x19d/0x890 [ 1390.628113][T17973] do_recvmmsg+0x682/0x1180 [ 1390.632808][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.637613][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.644091][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1390.649339][T17973] do_fast_syscall_32+0x33/0x70 [ 1390.654446][T17973] do_SYSENTER_32+0x1b/0x20 [ 1390.659083][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1390.665684][T17973] [ 1390.668068][T17973] Uninit was stored to memory at: [ 1390.673354][T17973] __get_compat_msghdr+0x514/0x750 [ 1390.678582][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1390.683652][T17973] ___sys_recvmsg+0x19d/0x890 [ 1390.688467][T17973] do_recvmmsg+0x682/0x1180 [ 1390.693209][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.698006][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1390.704471][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1390.709701][T17973] do_fast_syscall_32+0x33/0x70 [ 1390.714764][T17973] do_SYSENTER_32+0x1b/0x20 [ 1390.719392][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1390.725952][T17973] [ 1390.728344][T17973] Local variable msg_sys created at: [ 1390.733789][T17973] do_recvmmsg+0x5c/0x1180 [ 1390.738319][T17973] __sys_recvmmsg+0x113/0x450 [ 1390.941110][T17973] not chained 1480000 origins [ 1390.945980][T17973] CPU: 1 PID: 17973 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1390.956225][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1390.966384][T17973] Call Trace: [ 1390.969745][T17973] [ 1390.972751][T17973] dump_stack_lvl+0x1c8/0x256 [ 1390.977603][T17973] dump_stack+0x1a/0x1c [ 1390.981916][T17973] kmsan_internal_chain_origin+0x78/0x120 [ 1390.987790][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1390.994189][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.000128][T17973] ? ____sys_recvmsg+0x5c1/0x810 [ 1391.005133][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1391.010398][T17973] ? get_compat_msghdr+0x8c/0x1c0 [ 1391.015512][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.021453][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1391.026721][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.032637][T17973] ? should_fail+0x3f/0x810 [ 1391.037265][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1391.042482][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1391.048883][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.054841][T17973] __msan_chain_origin+0xbd/0x140 [ 1391.060009][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.065283][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.070242][T17973] ? ___sys_recvmsg+0xa9/0x890 [ 1391.075086][T17973] ? do_recvmmsg+0x682/0x1180 [ 1391.079876][T17973] ___sys_recvmsg+0x19d/0x890 [ 1391.084615][T17973] ? do_recvmmsg+0x6e4/0x1180 [ 1391.089365][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1391.094585][T17973] ? kmsan_internal_check_memory+0x94/0x530 [ 1391.100615][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.106513][T17973] do_recvmmsg+0x682/0x1180 [ 1391.111095][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1391.117424][T17973] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.123929][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.128683][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.135035][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1391.140268][T17973] ? exit_to_user_mode_prepare+0x119/0x220 [ 1391.146154][T17973] do_fast_syscall_32+0x33/0x70 [ 1391.151071][T17973] do_SYSENTER_32+0x1b/0x20 [ 1391.155660][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1391.162132][T17973] RIP: 0023:0xf7f30549 [ 1391.166298][T17973] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1391.186043][T17973] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1391.194544][T17973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1391.202630][T17973] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1391.210688][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1391.218708][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.226728][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1391.234788][T17973] [ 1391.240087][T17973] Uninit was stored to memory at: [ 1391.245538][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.250776][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.255823][T17973] ___sys_recvmsg+0x19d/0x890 [ 1391.260623][T17973] do_recvmmsg+0x682/0x1180 [ 1391.265311][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.270118][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.276580][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1391.281932][T17973] do_fast_syscall_32+0x33/0x70 [ 1391.286892][T17973] do_SYSENTER_32+0x1b/0x20 [ 1391.291463][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1391.297970][T17973] [ 1391.300343][T17973] Uninit was stored to memory at: [ 1391.305590][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.310811][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.315862][T17973] ___sys_recvmsg+0x19d/0x890 [ 1391.320648][T17973] do_recvmmsg+0x682/0x1180 [ 1391.325334][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.330131][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.336583][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1391.341901][T17973] do_fast_syscall_32+0x33/0x70 [ 1391.346860][T17973] do_SYSENTER_32+0x1b/0x20 [ 1391.351422][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1391.357962][T17973] [ 1391.360336][T17973] Uninit was stored to memory at: [ 1391.365608][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.370915][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.376015][T17973] ___sys_recvmsg+0x19d/0x890 [ 1391.380818][T17973] do_recvmmsg+0x682/0x1180 [ 1391.385482][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.390223][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.396644][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1391.401956][T17973] do_fast_syscall_32+0x33/0x70 [ 1391.406915][T17973] do_SYSENTER_32+0x1b/0x20 [ 1391.411482][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1391.417990][T17973] [ 1391.420363][T17973] Uninit was stored to memory at: [ 1391.425638][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.430859][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.435910][T17973] ___sys_recvmsg+0x19d/0x890 [ 1391.440695][T17973] do_recvmmsg+0x682/0x1180 [ 1391.445367][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.450159][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.456600][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1391.461916][T17973] do_fast_syscall_32+0x33/0x70 [ 1391.466896][T17973] do_SYSENTER_32+0x1b/0x20 [ 1391.471478][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1391.478077][T17973] [ 1391.480464][T17973] Uninit was stored to memory at: [ 1391.485768][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.491006][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.496059][T17973] ___sys_recvmsg+0x19d/0x890 [ 1391.500845][T17973] do_recvmmsg+0x682/0x1180 [ 1391.505524][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.510310][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.516738][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1391.522050][T17973] do_fast_syscall_32+0x33/0x70 [ 1391.527008][T17973] do_SYSENTER_32+0x1b/0x20 [ 1391.531571][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1391.538129][T17973] [ 1391.540519][T17973] Uninit was stored to memory at: [ 1391.545786][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.551007][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.556063][T17973] ___sys_recvmsg+0x19d/0x890 [ 1391.560849][T17973] do_recvmmsg+0x682/0x1180 [ 1391.565529][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.570337][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.576842][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1391.582160][T17973] do_fast_syscall_32+0x33/0x70 [ 1391.587121][T17973] do_SYSENTER_32+0x1b/0x20 [ 1391.591801][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1391.598273][T17973] [ 1391.600639][T17973] Uninit was stored to memory at: [ 1391.605919][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.611138][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.616176][T17973] ___sys_recvmsg+0x19d/0x890 [ 1391.620959][T17973] do_recvmmsg+0x682/0x1180 [ 1391.625669][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.630456][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1391.636885][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1391.642197][T17973] do_fast_syscall_32+0x33/0x70 [ 1391.647174][T17973] do_SYSENTER_32+0x1b/0x20 [ 1391.651906][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1391.658364][T17973] [ 1391.660713][T17973] Local variable msg_sys created at: [ 1391.666168][T17973] do_recvmmsg+0x5c/0x1180 [ 1391.670691][T17973] __sys_recvmmsg+0x113/0x450 [ 1391.857371][T17973] not chained 1490000 origins [ 1391.862188][T17973] CPU: 1 PID: 17973 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1391.872476][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1391.882609][T17973] Call Trace: [ 1391.885947][T17973] [ 1391.888909][T17973] dump_stack_lvl+0x1c8/0x256 [ 1391.893686][T17973] dump_stack+0x1a/0x1c [ 1391.897924][T17973] kmsan_internal_chain_origin+0x78/0x120 [ 1391.903725][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1391.910049][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.915958][T17973] ? ____sys_recvmsg+0x5c1/0x810 [ 1391.921006][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1391.926269][T17973] ? get_compat_msghdr+0x8c/0x1c0 [ 1391.931355][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.937243][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1391.942514][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.948405][T17973] ? should_fail+0x3f/0x810 [ 1391.952986][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1391.958170][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1391.964521][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1391.970481][T17973] __msan_chain_origin+0xbd/0x140 [ 1391.975643][T17973] __get_compat_msghdr+0x514/0x750 [ 1391.980905][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1391.985884][T17973] ? ___sys_recvmsg+0xa9/0x890 [ 1391.990778][T17973] ? do_recvmmsg+0x682/0x1180 [ 1391.995570][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.000313][T17973] ? do_recvmmsg+0x6e4/0x1180 [ 1392.005063][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1392.010252][T17973] ? kmsan_internal_check_memory+0x94/0x530 [ 1392.016253][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1392.022219][T17973] do_recvmmsg+0x682/0x1180 [ 1392.026871][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1392.033269][T17973] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.039815][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.044566][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.050891][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.056071][T17973] ? exit_to_user_mode_prepare+0x119/0x220 [ 1392.061973][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.066953][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.071563][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1392.077967][T17973] RIP: 0023:0xf7f30549 [ 1392.082106][T17973] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1392.101847][T17973] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1392.110327][T17973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1392.118374][T17973] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1392.126468][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1392.134527][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1392.142547][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1392.150583][T17973] [ 1392.155953][T17973] Uninit was stored to memory at: [ 1392.161144][T17973] __get_compat_msghdr+0x514/0x750 [ 1392.171959][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1392.176931][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.181830][T17973] do_recvmmsg+0x682/0x1180 [ 1392.186477][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.191282][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.197750][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.203075][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.208049][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.212721][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1392.219130][T17973] [ 1392.221475][T17973] Uninit was stored to memory at: [ 1392.226742][T17973] __get_compat_msghdr+0x514/0x750 [ 1392.232054][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1392.237024][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.241969][T17973] do_recvmmsg+0x682/0x1180 [ 1392.246577][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.251317][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.257753][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.263071][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.268029][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.272749][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1392.279204][T17973] [ 1392.281551][T17973] Uninit was stored to memory at: [ 1392.286813][T17973] __get_compat_msghdr+0x514/0x750 [ 1392.292121][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1392.297098][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.302045][T17973] do_recvmmsg+0x682/0x1180 [ 1392.306658][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.311400][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.317842][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.323158][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.328119][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.332843][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1392.339299][T17973] [ 1392.341645][T17973] Uninit was stored to memory at: [ 1392.346947][T17973] __get_compat_msghdr+0x514/0x750 [ 1392.352292][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1392.357253][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.362151][T17973] do_recvmmsg+0x682/0x1180 [ 1392.366762][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.371531][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.377970][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.383249][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.388164][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.392882][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1392.399356][T17973] [ 1392.401878][T17973] Uninit was stored to memory at: [ 1392.407058][T17973] __get_compat_msghdr+0x514/0x750 [ 1392.412399][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1392.417362][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.422261][T17973] do_recvmmsg+0x682/0x1180 [ 1392.426874][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.431616][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.438110][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.443455][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.448419][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.453117][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1392.459573][T17973] [ 1392.462065][T17973] Uninit was stored to memory at: [ 1392.467245][T17973] __get_compat_msghdr+0x514/0x750 [ 1392.472628][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1392.477589][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.482470][T17973] do_recvmmsg+0x682/0x1180 [ 1392.487080][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.492031][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.498416][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.503837][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.508805][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.513517][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1392.519972][T17973] [ 1392.522482][T17973] Uninit was stored to memory at: [ 1392.527615][T17973] __get_compat_msghdr+0x514/0x750 [ 1392.532955][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1392.537929][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.542799][T17973] do_recvmmsg+0x682/0x1180 [ 1392.547408][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.552324][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.558698][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.564048][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.569008][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.573688][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1392.580138][T17973] [ 1392.582649][T17973] Local variable msg_sys created at: [ 1392.588003][T17973] do_recvmmsg+0x5c/0x1180 [ 1392.592686][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.779270][T17973] not chained 1500000 origins [ 1392.784195][T17973] CPU: 0 PID: 17973 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1392.794488][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1392.804651][T17973] Call Trace: [ 1392.808010][T17973] [ 1392.811012][T17973] dump_stack_lvl+0x1c8/0x256 [ 1392.815869][T17973] dump_stack+0x1a/0x1c [ 1392.820186][T17973] kmsan_internal_chain_origin+0x78/0x120 [ 1392.826060][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1392.832460][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1392.838417][T17973] ? ____sys_recvmsg+0x5c1/0x810 [ 1392.843504][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1392.848830][T17973] ? get_compat_msghdr+0x8c/0x1c0 [ 1392.853993][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1392.859959][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1392.865296][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1392.871262][T17973] ? should_fail+0x3f/0x810 [ 1392.875909][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1392.881176][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1392.887579][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1392.893541][T17973] __msan_chain_origin+0xbd/0x140 [ 1392.898712][T17973] __get_compat_msghdr+0x514/0x750 [ 1392.903981][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1392.908950][T17973] ? ___sys_recvmsg+0xa9/0x890 [ 1392.913803][T17973] ? do_recvmmsg+0x682/0x1180 [ 1392.918592][T17973] ___sys_recvmsg+0x19d/0x890 [ 1392.923352][T17973] ? do_recvmmsg+0x6e4/0x1180 [ 1392.928145][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1392.933357][T17973] ? kmsan_internal_check_memory+0x94/0x530 [ 1392.939410][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1392.945355][T17973] do_recvmmsg+0x682/0x1180 [ 1392.949986][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1392.956337][T17973] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.962904][T17973] __sys_recvmmsg+0x113/0x450 [ 1392.967706][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1392.974058][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1392.979284][T17973] ? exit_to_user_mode_prepare+0x119/0x220 [ 1392.985169][T17973] do_fast_syscall_32+0x33/0x70 [ 1392.990090][T17973] do_SYSENTER_32+0x1b/0x20 [ 1392.994674][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.001128][T17973] RIP: 0023:0xf7f30549 [ 1393.005260][T17973] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1393.025009][T17973] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1393.033512][T17973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1393.041576][T17973] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1393.049616][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1393.057692][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1393.065770][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1393.073868][T17973] [ 1393.087243][T17973] Uninit was stored to memory at: [ 1393.094021][T17973] __get_compat_msghdr+0x514/0x750 [ 1393.099261][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1393.104313][T17973] ___sys_recvmsg+0x19d/0x890 [ 1393.109137][T17973] do_recvmmsg+0x682/0x1180 [ 1393.113838][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.118647][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.125109][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1393.130356][T17973] do_fast_syscall_32+0x33/0x70 [ 1393.135455][T17973] do_SYSENTER_32+0x1b/0x20 [ 1393.140086][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.146650][T17973] [ 1393.149022][T17973] Uninit was stored to memory at: [ 1393.154304][T17973] __get_compat_msghdr+0x514/0x750 [ 1393.159524][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1393.164582][T17973] ___sys_recvmsg+0x19d/0x890 [ 1393.169384][T17973] do_recvmmsg+0x682/0x1180 [ 1393.174128][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.178938][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.185456][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1393.190680][T17973] do_fast_syscall_32+0x33/0x70 [ 1393.195742][T17973] do_SYSENTER_32+0x1b/0x20 [ 1393.200354][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.206866][T17973] [ 1393.209252][T17973] Uninit was stored to memory at: [ 1393.214558][T17973] __get_compat_msghdr+0x514/0x750 [ 1393.219777][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1393.224800][T17973] ___sys_recvmsg+0x19d/0x890 [ 1393.229584][T17973] do_recvmmsg+0x682/0x1180 [ 1393.234292][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.239078][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.245502][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1393.250727][T17973] do_fast_syscall_32+0x33/0x70 [ 1393.255784][T17973] do_SYSENTER_32+0x1b/0x20 [ 1393.260392][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.266906][T17973] [ 1393.269282][T17973] Uninit was stored to memory at: [ 1393.274558][T17973] __get_compat_msghdr+0x514/0x750 [ 1393.279798][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1393.284895][T17973] ___sys_recvmsg+0x19d/0x890 [ 1393.289706][T17973] do_recvmmsg+0x682/0x1180 [ 1393.294459][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.299247][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.305708][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1393.310952][T17973] do_fast_syscall_32+0x33/0x70 [ 1393.316066][T17973] do_SYSENTER_32+0x1b/0x20 [ 1393.320678][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.327197][T17973] [ 1393.329568][T17973] Uninit was stored to memory at: [ 1393.334817][T17973] __get_compat_msghdr+0x514/0x750 [ 1393.340037][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1393.345095][T17973] ___sys_recvmsg+0x19d/0x890 [ 1393.349880][T17973] do_recvmmsg+0x682/0x1180 [ 1393.354559][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.359344][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.365834][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1393.371067][T17973] do_fast_syscall_32+0x33/0x70 [ 1393.376099][T17973] do_SYSENTER_32+0x1b/0x20 [ 1393.380710][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.387260][T17973] [ 1393.389647][T17973] Uninit was stored to memory at: [ 1393.394953][T17973] __get_compat_msghdr+0x514/0x750 [ 1393.400191][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1393.405292][T17973] ___sys_recvmsg+0x19d/0x890 [ 1393.410076][T17973] do_recvmmsg+0x682/0x1180 [ 1393.414780][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.419590][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.426071][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1393.431297][T17973] do_fast_syscall_32+0x33/0x70 [ 1393.436332][T17973] do_SYSENTER_32+0x1b/0x20 [ 1393.440952][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.447491][T17973] [ 1393.449867][T17973] Uninit was stored to memory at: [ 1393.455157][T17973] __get_compat_msghdr+0x514/0x750 [ 1393.460380][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1393.465406][T17973] ___sys_recvmsg+0x19d/0x890 [ 1393.470194][T17973] do_recvmmsg+0x682/0x1180 [ 1393.474906][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.479699][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.486129][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1393.491354][T17973] do_fast_syscall_32+0x33/0x70 [ 1393.496415][T17973] do_SYSENTER_32+0x1b/0x20 [ 1393.501053][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.507662][T17973] [ 1393.510056][T17973] Local variable msg_sys created at: [ 1393.515530][T17973] do_recvmmsg+0x5c/0x1180 [ 1393.520068][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.710641][T17973] not chained 1510000 origins [ 1393.715545][T17973] CPU: 1 PID: 17973 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1393.725790][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1393.735947][T17973] Call Trace: [ 1393.739261][T17973] [ 1393.742225][T17973] dump_stack_lvl+0x1c8/0x256 [ 1393.747002][T17973] dump_stack+0x1a/0x1c [ 1393.751238][T17973] kmsan_internal_chain_origin+0x78/0x120 [ 1393.757040][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1393.763366][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1393.769251][T17973] ? ____sys_recvmsg+0x5c1/0x810 [ 1393.774283][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1393.779636][T17973] ? get_compat_msghdr+0x8c/0x1c0 [ 1393.784796][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1393.790745][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1393.796013][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1393.801905][T17973] ? should_fail+0x3f/0x810 [ 1393.806486][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1393.811677][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1393.818025][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1393.823933][T17973] __msan_chain_origin+0xbd/0x140 [ 1393.829109][T17973] __get_compat_msghdr+0x514/0x750 [ 1393.834377][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1393.839339][T17973] ? ___sys_recvmsg+0xa9/0x890 [ 1393.844166][T17973] ? do_recvmmsg+0x682/0x1180 [ 1393.848909][T17973] ___sys_recvmsg+0x19d/0x890 [ 1393.853650][T17973] ? do_recvmmsg+0x6e4/0x1180 [ 1393.858401][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1393.863603][T17973] ? kmsan_internal_check_memory+0x94/0x530 [ 1393.869579][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1393.875493][T17973] do_recvmmsg+0x682/0x1180 [ 1393.880118][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1393.886448][T17973] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.892944][T17973] __sys_recvmmsg+0x113/0x450 [ 1393.897693][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1393.904018][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1393.909199][T17973] ? exit_to_user_mode_prepare+0x119/0x220 [ 1393.915079][T17973] do_fast_syscall_32+0x33/0x70 [ 1393.919993][T17973] do_SYSENTER_32+0x1b/0x20 [ 1393.924577][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1393.931054][T17973] RIP: 0023:0xf7f30549 [ 1393.935220][T17973] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1393.954966][T17973] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1393.963447][T17973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1393.971472][T17973] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1393.979496][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1393.987516][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1393.995537][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1394.003572][T17973] [ 1394.008867][T17973] Uninit was stored to memory at: [ 1394.014323][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.019563][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.024629][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.029447][T17973] do_recvmmsg+0x682/0x1180 [ 1394.034166][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.038977][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.045521][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.050767][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.055849][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.060463][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1394.066996][T17973] [ 1394.069366][T17973] Uninit was stored to memory at: [ 1394.074671][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.079888][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.084973][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.089761][T17973] do_recvmmsg+0x682/0x1180 [ 1394.094447][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.099231][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.105677][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.110900][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.115945][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.120555][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1394.127088][T17973] [ 1394.129460][T17973] Uninit was stored to memory at: [ 1394.134750][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.139990][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.145120][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.149908][T17973] do_recvmmsg+0x682/0x1180 [ 1394.154601][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.159385][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.165873][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.171124][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.176249][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.180860][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1394.187395][T17973] [ 1394.189769][T17973] Uninit was stored to memory at: [ 1394.195080][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.200300][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.205341][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.210125][T17973] do_recvmmsg+0x682/0x1180 [ 1394.214811][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.219600][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.226079][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.231305][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.236385][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.241022][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1394.247603][T17973] [ 1394.249977][T17973] Uninit was stored to memory at: [ 1394.255237][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.260457][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.265537][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.270324][T17973] do_recvmmsg+0x682/0x1180 [ 1394.275063][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.279851][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.286337][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.291563][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.296605][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.301213][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1394.307740][T17973] [ 1394.310113][T17973] Uninit was stored to memory at: [ 1394.315415][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.320634][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.325672][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.330461][T17973] do_recvmmsg+0x682/0x1180 [ 1394.335169][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.339979][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.346518][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.351879][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.356867][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.361479][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1394.368009][T17973] [ 1394.370427][T17973] Uninit was stored to memory at: [ 1394.375687][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.380906][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.385996][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.390783][T17973] do_recvmmsg+0x682/0x1180 [ 1394.395514][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.400319][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.406810][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.412130][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.417089][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.421654][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1394.428257][T17973] [ 1394.430607][T17973] Local variable msg_sys created at: [ 1394.436046][T17973] do_recvmmsg+0x5c/0x1180 [ 1394.440581][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.638361][T17973] not chained 1520000 origins [ 1394.645467][T17973] CPU: 1 PID: 17973 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1394.655741][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1394.665848][T17973] Call Trace: [ 1394.669159][T17973] [ 1394.672121][T17973] dump_stack_lvl+0x1c8/0x256 [ 1394.676900][T17973] dump_stack+0x1a/0x1c [ 1394.681136][T17973] kmsan_internal_chain_origin+0x78/0x120 [ 1394.686936][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1394.693262][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1394.699149][T17973] ? ____sys_recvmsg+0x5c1/0x810 [ 1394.704170][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1394.709502][T17973] ? get_compat_msghdr+0x8c/0x1c0 [ 1394.714637][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1394.720526][T17973] ? __get_compat_msghdr+0x5b/0x750 [ 1394.725791][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1394.731690][T17973] ? should_fail+0x3f/0x810 [ 1394.736285][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1394.741476][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1394.747823][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1394.753785][T17973] __msan_chain_origin+0xbd/0x140 [ 1394.758952][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.764218][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.769175][T17973] ? ___sys_recvmsg+0xa9/0x890 [ 1394.774004][T17973] ? do_recvmmsg+0x682/0x1180 [ 1394.778750][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.783489][T17973] ? do_recvmmsg+0x6e4/0x1180 [ 1394.788238][T17973] ? __stack_depot_save+0x21/0x4b0 [ 1394.793427][T17973] ? kmsan_internal_check_memory+0x94/0x530 [ 1394.799406][T17973] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1394.805325][T17973] do_recvmmsg+0x682/0x1180 [ 1394.809979][T17973] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1394.816354][T17973] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.822852][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.827601][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.833926][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.839109][T17973] ? exit_to_user_mode_prepare+0x119/0x220 [ 1394.844988][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.849927][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.854560][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1394.861020][T17973] RIP: 0023:0xf7f30549 [ 1394.865132][T17973] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1394.884820][T17973] RSP: 002b:00000000f7f0a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1394.893299][T17973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1394.901327][T17973] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1394.909366][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1394.917425][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.925457][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1394.933494][T17973] [ 1394.941499][T17973] Uninit was stored to memory at: [ 1394.947513][T17973] __get_compat_msghdr+0x514/0x750 [ 1394.952827][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1394.957802][T17973] ___sys_recvmsg+0x19d/0x890 [ 1394.962697][T17973] do_recvmmsg+0x682/0x1180 [ 1394.967320][T17973] __sys_recvmmsg+0x113/0x450 [ 1394.972222][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1394.978593][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1394.983925][T17973] do_fast_syscall_32+0x33/0x70 [ 1394.988922][T17973] do_SYSENTER_32+0x1b/0x20 [ 1394.993683][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1395.000139][T17973] [ 1395.002649][T17973] Uninit was stored to memory at: [ 1395.007803][T17973] __get_compat_msghdr+0x514/0x750 [ 1395.013143][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1395.018098][T17973] ___sys_recvmsg+0x19d/0x890 [ 1395.022996][T17973] do_recvmmsg+0x682/0x1180 [ 1395.027622][T17973] __sys_recvmmsg+0x113/0x450 [ 1395.032526][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1395.038891][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1395.044199][T17973] do_fast_syscall_32+0x33/0x70 [ 1395.049161][T17973] do_SYSENTER_32+0x1b/0x20 [ 1395.053879][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1395.060356][T17973] [ 1395.062864][T17973] Uninit was stored to memory at: [ 1395.067998][T17973] __get_compat_msghdr+0x514/0x750 [ 1395.073297][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1395.078256][T17973] ___sys_recvmsg+0x19d/0x890 [ 1395.083161][T17973] do_recvmmsg+0x682/0x1180 [ 1395.087772][T17973] __sys_recvmmsg+0x113/0x450 [ 1395.092672][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1395.099040][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1395.104340][T17973] do_fast_syscall_32+0x33/0x70 [ 1395.109306][T17973] do_SYSENTER_32+0x1b/0x20 [ 1395.114000][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1395.120457][T17973] [ 1395.122945][T17973] Uninit was stored to memory at: [ 1395.128080][T17973] __get_compat_msghdr+0x514/0x750 [ 1395.133408][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1395.138389][T17973] ___sys_recvmsg+0x19d/0x890 [ 1395.143347][T17973] do_recvmmsg+0x682/0x1180 [ 1395.147960][T17973] __sys_recvmmsg+0x113/0x450 [ 1395.152866][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1395.159252][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1395.164651][T17973] do_fast_syscall_32+0x33/0x70 [ 1395.169616][T17973] do_SYSENTER_32+0x1b/0x20 [ 1395.174308][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1395.180766][T17973] [ 1395.183258][T17973] Uninit was stored to memory at: [ 1395.188392][T17973] __get_compat_msghdr+0x514/0x750 [ 1395.193732][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1395.198687][T17973] ___sys_recvmsg+0x19d/0x890 [ 1395.203609][T17973] do_recvmmsg+0x682/0x1180 [ 1395.208219][T17973] __sys_recvmmsg+0x113/0x450 [ 1395.213123][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1395.219489][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1395.224794][T17973] do_fast_syscall_32+0x33/0x70 [ 1395.229753][T17973] do_SYSENTER_32+0x1b/0x20 [ 1395.234449][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1395.240902][T17973] [ 1395.243390][T17973] Uninit was stored to memory at: [ 1395.248533][T17973] __get_compat_msghdr+0x514/0x750 [ 1395.253864][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1395.258837][T17973] ___sys_recvmsg+0x19d/0x890 [ 1395.263778][T17973] do_recvmmsg+0x682/0x1180 [ 1395.268407][T17973] __sys_recvmmsg+0x113/0x450 [ 1395.273344][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1395.279717][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1395.285021][T17973] do_fast_syscall_32+0x33/0x70 [ 1395.289985][T17973] do_SYSENTER_32+0x1b/0x20 [ 1395.294732][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1395.301191][T17973] [ 1395.303688][T17973] Uninit was stored to memory at: [ 1395.308827][T17973] __get_compat_msghdr+0x514/0x750 [ 1395.314143][T17973] get_compat_msghdr+0x8c/0x1c0 [ 1395.319101][T17973] ___sys_recvmsg+0x19d/0x890 [ 1395.324004][T17973] do_recvmmsg+0x682/0x1180 [ 1395.328633][T17973] __sys_recvmmsg+0x113/0x450 [ 1395.333518][T17973] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1395.339901][T17973] __do_fast_syscall_32+0xa2/0x100 [ 1395.345208][T17973] do_fast_syscall_32+0x33/0x70 [ 1395.350168][T17973] do_SYSENTER_32+0x1b/0x20 [ 1395.354861][T17973] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1395.361344][T17973] [ 1395.363879][T17973] Local variable msg_sys created at: [ 1395.369268][T17973] do_recvmmsg+0x5c/0x1180 [ 1395.373949][T17973] __sys_recvmmsg+0x113/0x450 09:40:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @dev}, 'pim6reg0\x00'}) 09:40:21 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 09:40:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f00000000c0)) 09:40:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) 09:40:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0xe}, 0x1c) 09:40:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) 09:40:21 executing program 1: add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, 0x0) [ 1396.061660][T18020] loop4: detected capacity change from 0 to 6 09:40:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1396.122326][T18020] Dev loop4: unable to read RDB block 6 [ 1396.128133][T18020] loop4: unable to read partition table [ 1396.210735][T18020] loop4: partition table beyond EOD, truncated [ 1396.270323][T18020] FAT-fs (loop4): Directory bread(block 6) failed 09:40:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x15, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x1f0, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip6erspan0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast2, @local, [], [], 'gretap0\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 09:40:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x8001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:22 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0xffffffffffffffff) 09:40:22 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x110) 09:40:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:22 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) 09:40:22 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2, 0x0, 0x0) 09:40:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0xd, 0x0, 0x3) [ 1397.431362][T18049] loop4: detected capacity change from 0 to 6 [ 1397.471578][T18017] Dev loop4: unable to read RDB block 6 [ 1397.477649][T18017] loop4: unable to read partition table 09:40:23 executing program 0: pselect6(0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000001700)={0x0, 0x3938700}, 0x0) 09:40:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1397.523047][T18017] loop4: partition table beyond EOD, truncated [ 1397.573541][T18049] FAT-fs (loop4): Directory bread(block 6) failed [ 1397.712269][T11089] usb 4-1: new high-speed USB device number 17 using dummy_hcd 09:40:23 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72fa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}, [{{0x9, 0x5, 0x2, 0x3, 0x200}}]}}}]}}]}}, 0x0) 09:40:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1397.962075][T11089] usb 4-1: Using ep0 maxpacket: 32 09:40:23 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x183d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 1398.113615][T11089] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 09:40:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1398.283076][T11089] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1398.292519][T11089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.300741][T11089] usb 4-1: Product: syz [ 1398.305241][T11089] usb 4-1: Manufacturer: syz [ 1398.310021][T11089] usb 4-1: SerialNumber: syz [ 1398.409718][T18074] loop4: detected capacity change from 0 to 6 [ 1398.454095][T18074] Dev loop4: unable to read RDB block 6 [ 1398.460024][T18074] loop4: unable to read partition table [ 1398.520778][T18074] loop4: partition table beyond EOD, truncated [ 1398.625515][T18074] FAT-fs (loop4): Directory bread(block 6) failed 09:40:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1398.700258][ T122] usb 4-1: USB disconnect, device number 17 09:40:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 1398.773537][ T3577] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1399.019286][ T3577] usb 1-1: Using ep0 maxpacket: 32 [ 1399.243176][ T3577] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 09:40:25 executing program 3: rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000800)) 09:40:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1399.294244][T18095] loop4: detected capacity change from 0 to 6 [ 1399.314585][T18058] Dev loop4: unable to read RDB block 6 [ 1399.320385][T18058] loop4: unable to read partition table [ 1399.363811][T18058] loop4: partition table beyond EOD, truncated [ 1399.385997][T18095] FAT-fs (loop4): Directory bread(block 6) failed [ 1399.422770][ T3577] usb 1-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40 [ 1399.432132][ T3577] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.440330][ T3577] usb 1-1: Product: syz [ 1399.444797][ T3577] usb 1-1: Manufacturer: syz [ 1399.449568][ T3577] usb 1-1: SerialNumber: syz 09:40:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 1399.633926][ T3577] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1399.808250][T18107] loop4: detected capacity change from 0 to 6 [ 1399.834727][ T122] usb 1-1: USB disconnect, device number 23 [ 1399.852743][T18107] Dev loop4: unable to read RDB block 6 [ 1399.858543][T18107] loop4: unable to read partition table [ 1399.911094][T18107] loop4: partition table beyond EOD, truncated [ 1399.957777][T18107] FAT-fs (loop4): Directory bread(block 6) failed 09:40:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x450, 0xffffffff, 0x0, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg0\x00', 'wg2\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private}, @loopback, [], [], 'macsec0\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tmp_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 09:40:26 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x6, &(0x7f0000001280)={0x101, {{0x2, 0x0, @multicast1}}}, 0x90) 09:40:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:26 executing program 3: rt_sigprocmask(0x6ff, &(0x7f00000000c0), 0x0, 0x8) 09:40:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 09:40:27 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "462b2acbc0e459e1e08a6b5142723ecd12c1cf60c6c5b21198f4176b51414a130e4768a5e9cdd9362a6f4d5fe17cc33cea777522fa3ab7c916c4bdebad02d6f0"}, 0x48, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "462b2acbc0e459e1e08a6b5142723ecd12c1cf60c6c5b21198f4176b51414a130e4768a5e9cdd9362a6f4d5fe17cc33cea777522fa3ab7c916c4bdebad02d6f0"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffe, 0x0) keyctl$KEYCTL_MOVE(0x10, r0, 0x0, 0x0, 0x0) 09:40:27 executing program 1: select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x4}, &(0x7f0000000180)={0x0, 0xea60}) [ 1401.485005][T18130] loop4: detected capacity change from 0 to 6 [ 1401.554673][T18130] Dev loop4: unable to read RDB block 6 [ 1401.560718][T18130] loop4: unable to read partition table [ 1401.583454][T18130] loop4: partition table beyond EOD, truncated [ 1401.693308][T18130] FAT-fs (loop4): Directory bread(block 6) failed 09:40:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 09:40:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0x3, 0x4) 09:40:27 executing program 0: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x4, [@ext_cap={0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "dbfe77d3134a255f6424974674bdde42"}, @ext_cap={0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "85c487996a511cf7b71d5d1c15831733"}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 09:40:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x19, 0x0, 0x3000000) [ 1402.363953][T18145] loop4: detected capacity change from 0 to 6 [ 1402.409374][T18058] Dev loop4: unable to read RDB block 6 [ 1402.415848][T18058] loop4: unable to read partition table [ 1402.461603][T18058] loop4: partition table beyond EOD, truncated 09:40:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1402.516170][T18145] FAT-fs (loop4): Directory bread(block 6) failed 09:40:28 executing program 1: keyctl$KEYCTL_MOVE(0xe, 0x0, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x0) 09:40:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x17) [ 1402.781930][ T122] usb 1-1: new low-speed USB device number 24 using dummy_hcd 09:40:28 executing program 1: socketpair(0xa, 0x5, 0x6, &(0x7f0000000000)) 09:40:28 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0, 0x12, r0, 0x0) 09:40:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1403.162917][ T122] usb 1-1: No LPM exit latency info found, disabling LPM. [ 1403.216198][T18171] loop4: detected capacity change from 0 to 6 [ 1403.237757][ T2849] Dev loop4: unable to read RDB block 6 [ 1403.244500][ T2849] loop4: unable to read partition table [ 1403.255543][ T122] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1403.265803][ T122] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1403.275970][ T122] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1403.278303][ T2849] loop4: partition table beyond EOD, truncated 09:40:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) [ 1403.318568][T18171] FAT-fs (loop4): Directory bread(block 6) failed 09:40:29 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 1403.638307][ T122] usb 1-1: string descriptor 0 read error: -22 [ 1403.645398][ T122] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1403.659248][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.948699][T18189] loop4: detected capacity change from 0 to 6 [ 1403.994456][T18189] Dev loop4: unable to read RDB block 6 [ 1404.000406][T18189] loop4: unable to read partition table [ 1404.046607][T18189] loop4: partition table beyond EOD, truncated [ 1404.089394][T18189] FAT-fs (loop4): Directory bread(block 6) failed [ 1404.108544][ T122] cdc_ncm 1-1:1.0: bind() failure [ 1404.142390][ T122] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1404.149439][ T122] cdc_ncm 1-1:1.1: bind() failure [ 1404.242720][ T122] usb 1-1: USB disconnect, device number 24 09:40:30 executing program 0: ioperm(0x7ff, 0x81, 0x0) 09:40:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f0000000140)={'sit0\x00', 0x0}) 09:40:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @remote}}}, 0x88) 09:40:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 1404.775845][T18197] loop4: detected capacity change from 0 to 6 [ 1404.791432][T18063] Dev loop4: unable to read RDB block 6 [ 1404.797497][T18063] loop4: unable to read partition table [ 1404.887855][T18063] loop4: partition table beyond EOD, truncated 09:40:30 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "462b2acbc0e459e1e08a6b5142723ecd12c1cf60c6c5b21198f4176b51414a130e4768a5e9cdd9362a6f4d5fe17cc33cea777522fa3ab7c916c4bdebad02d6f0"}, 0x48, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000640)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "462b2acbc0e459e1e08a6b5142723ecd12c1cf60c6c5b21198f4176b51414a130e4768a5e9cdd9362a6f4d5fe17cc33cea777522fa3ab7c916c4bdebad02d6f0"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0xc, 0x0, r1, r0, 0x0) [ 1404.938926][T18197] FAT-fs (loop4): Directory bread(block 6) failed 09:40:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, 0x0, 0x3000000) 09:40:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3a8, 0xc0, 0x180, 0xffffffff, 0xc0, 0x248, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@ip={@remote, @rand_addr, 0x0, 0x0, 'gre0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "dc1c"}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "82c1"}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @loopback, @gre_key, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'macvlan1\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @local, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 09:40:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8949, &(0x7f0000000300)={'gre0\x00', 0x0}) 09:40:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1405.863102][T18215] loop4: detected capacity change from 0 to 6 09:40:31 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)={0x0, "462b00cbc0f459e1e08a010042723efb12c1cf60c600001198f4176b51614a130e476806000000d976c19572d565a000000000000000b7c9ff010000ad02d6f0"}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, r0) [ 1405.929843][T18215] Dev loop4: unable to read RDB block 6 [ 1405.935982][T18215] loop4: unable to read partition table 09:40:31 executing program 1: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x50000, 0x0) [ 1405.997101][T18215] loop4: partition table beyond EOD, truncated 09:40:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8915, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}}) [ 1406.060815][T18215] FAT-fs (loop4): Directory bread(block 6) failed 09:40:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x406855c9, 0x0) 09:40:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 09:40:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:32 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="fd", 0xffffff3d}], 0x1) 09:40:32 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0xd, &(0x7f00000000c0)={@dev, @empty, @dev}, 0xc) [ 1407.123674][T18250] loop4: detected capacity change from 0 to 6 [ 1407.157095][T18063] Dev loop4: unable to read RDB block 6 [ 1407.163658][T18063] loop4: unable to read partition table 09:40:33 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20}, 0x20) [ 1407.254419][T18063] loop4: partition table beyond EOD, truncated [ 1407.277591][T18250] FAT-fs (loop4): Directory bread(block 6) failed 09:40:33 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 09:40:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:33 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000010c0)={0x0, 0x0, 0x800}, 0x20) 09:40:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) 09:40:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x238, 0x238, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast2, [], [], 'wlan1\x00', 'wg2\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "fc61231b47a29f9aaac91b37ecc542acc8064a9d3a17ec134585df315c7936e4af229295a3f77bc8d5e53bbfab0153227d549320bcceadd9a558279bd7c1f76a"}}}, {{@ipv6={@private1, @mcast1, [], [], 'nr0\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x0, 0x0, 0x8b}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) [ 1408.023291][T18275] loop4: detected capacity change from 0 to 6 09:40:33 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f00000000c0)="fd", 0x1}], 0x200000c1) 09:40:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 09:40:33 executing program 0: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000000)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "462b2acbc0e432a9e08a6b5142723ecd12c1cf60c6ff010000f4176b51400000004768a50200d9362a6f4d5fe17cc33cea77f522fa3ab7c916c4bdebad02d6f0"}, 0x48, 0xfffffffffffffffd) [ 1408.088228][T18275] Dev loop4: unable to read RDB block 6 [ 1408.094962][T18275] loop4: unable to read partition table [ 1408.127848][T18275] loop4: partition table beyond EOD, truncated 09:40:33 executing program 1: add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000200)='\f', 0x1, 0xffffffffffffffff) [ 1408.212523][T18275] FAT-fs (loop4): Directory bread(block 6) failed 09:40:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 09:40:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3, 0x1c) 09:40:34 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 09:40:34 executing program 1: socket$inet(0x2, 0xa, 0x0) socket$inet(0x2, 0xa, 0x0) socket$inet(0x2, 0xa, 0x0) [ 1408.896983][T18298] loop4: detected capacity change from 0 to 6 [ 1408.935330][T18301] ===================================================== [ 1408.943015][T18301] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_user+0xbc/0x100 [ 1408.951237][T18301] _copy_to_user+0xbc/0x100 [ 1408.956023][T18301] vcs_read+0x1ef7/0x23c0 [ 1408.960569][T18301] vfs_read+0x3a9/0x11b0 [ 1408.965293][T18301] ksys_read+0x21b/0x4e0 [ 1408.969686][T18301] __ia32_sys_read+0x8d/0xd0 [ 1408.974610][T18301] __do_fast_syscall_32+0xa2/0x100 [ 1408.982090][T18301] do_fast_syscall_32+0x33/0x70 [ 1408.987431][T18301] do_SYSENTER_32+0x1b/0x20 09:40:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000580000042cbd7000fddbdf2500080001000300000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20885) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @private}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1408.992172][T18301] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1408.998671][T18301] [ 1409.001067][T18301] Uninit was stored to memory at: [ 1409.006398][T18301] vc_uniscr_copy_line+0x340/0x570 [ 1409.011655][T18301] vcs_read+0x1154/0x23c0 [ 1409.016218][T18301] vfs_read+0x3a9/0x11b0 [ 1409.020590][T18301] ksys_read+0x21b/0x4e0 [ 1409.025079][T18301] __ia32_sys_read+0x8d/0xd0 [ 1409.029819][T18301] __do_fast_syscall_32+0xa2/0x100 [ 1409.035173][T18301] do_fast_syscall_32+0x33/0x70 [ 1409.040164][T18301] do_SYSENTER_32+0x1b/0x20 [ 1409.042941][ T2849] Dev loop4: unable to read RDB block 6 [ 1409.044852][T18301] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1409.050541][ T2849] loop4: unable to read partition table [ 1409.056875][T18301] [ 1409.056890][T18301] Uninit was created at: [ 1409.057031][T18301] free_pcp_prepare+0x40/0x680 [ 1409.057139][T18301] free_unref_page_list+0x17c/0xd70 [ 1409.079815][T18301] release_pages+0x2b49/0x2b90 [ 1409.084904][T18301] free_pages_and_swap_cache+0xbd/0xd0 [ 1409.090512][T18301] tlb_flush_mmu+0x85d/0xa90 [ 1409.095362][T18301] tlb_finish_mmu+0xfc/0x250 [ 1409.100103][T18301] exit_mmap+0x1d6/0x780 [ 1409.104594][T18301] __mmput+0x147/0x510 [ 1409.108816][T18301] mmput+0x76/0x80 [ 1409.112745][T18301] exit_mm+0x1b8/0x360 [ 1409.116972][T18301] do_exit+0xcea/0x3e00 [ 1409.121250][T18301] do_group_exit+0x3aa/0x400 [ 1409.126117][T18301] get_signal+0x270e/0x2c50 [ 1409.130757][T18301] arch_do_signal_or_restart+0x56/0xae0 [ 1409.136675][T18301] exit_to_user_mode_loop+0xea/0x320 [ 1409.142180][T18301] exit_to_user_mode_prepare+0x16e/0x220 [ 1409.147973][T18301] syscall_exit_to_user_mode+0x23/0x40 [ 1409.153749][T18301] __do_fast_syscall_32+0xb1/0x100 [ 1409.159001][T18301] do_fast_syscall_32+0x33/0x70 [ 1409.164143][T18301] do_SYSENTER_32+0x1b/0x20 [ 1409.168795][T18301] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1409.175420][T18301] [ 1409.177809][T18301] Bytes 1176-1183 of 4096 are uninitialized [ 1409.183937][T18301] Memory access of size 4096 starts at ffff88811f965000 [ 1409.190965][T18301] Data copied to user address 0000000020000200 [ 1409.195579][ T2849] loop4: partition table beyond EOD, [ 1409.197254][T18301] [ 1409.197274][T18301] CPU: 1 PID: 18301 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1409.197365][T18301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1409.197415][T18301] ===================================================== [ 1409.197440][T18301] Disabling lock debugging due to kernel taint [ 1409.197468][T18301] Kernel panic - not syncing: kmsan.panic set ... [ 1409.197503][T18301] CPU: 1 PID: 18301 Comm: syz-executor.3 Tainted: G B 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 1409.197601][T18301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1409.197648][T18301] Call Trace: [ 1409.197674][T18301] [ 1409.197701][T18301] dump_stack_lvl+0x1c8/0x256 [ 1409.197838][T18301] dump_stack+0x1a/0x1c [ 1409.197951][T18301] panic+0x4d3/0xc69 [ 1409.198081][T18301] kmsan_report+0x2cc/0x2d0 [ 1409.198194][T18301] ? kmsan_internal_check_memory+0x1aa/0x530 [ 1409.198296][T18301] ? kmsan_copy_to_user+0xcf/0xe0 [ 1409.198392][T18301] ? _copy_to_user+0xbc/0x100 [ 1409.198501][T18301] ? vcs_read+0x1ef7/0x23c0 [ 1409.198616][T18301] ? vfs_read+0x3a9/0x11b0 [ 1409.198713][T18301] ? ksys_read+0x21b/0x4e0 [ 1409.198809][T18301] ? __ia32_sys_read+0x8d/0xd0 [ 1409.198909][T18301] ? __do_fast_syscall_32+0xa2/0x100 [ 1409.198998][T18301] ? do_fast_syscall_32+0x33/0x70 [ 1409.199084][T18301] ? do_SYSENTER_32+0x1b/0x20 [ 1409.199167][T18301] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1409.199270][T18301] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1409.199385][T18301] ? _prb_read_valid+0x1b61/0x1bb0 [ 1409.199544][T18301] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1409.199665][T18301] kmsan_internal_check_memory+0x1aa/0x530 [ 1409.199784][T18301] kmsan_copy_to_user+0xcf/0xe0 [ 1409.199881][T18301] ? should_fail_usercopy+0x2a/0x30 [ 1409.199992][T18301] _copy_to_user+0xbc/0x100 [ 1409.200087][T18301] vcs_read+0x1ef7/0x23c0 [ 1409.200239][T18301] ? vcs_lseek+0x6f0/0x6f0 [ 1409.200346][T18301] vfs_read+0x3a9/0x11b0 [ 1409.200453][T18301] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1409.200564][T18301] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1409.200685][T18301] ksys_read+0x21b/0x4e0 [ 1409.200798][T18301] __ia32_sys_read+0x8d/0xd0 [ 1409.200906][T18301] __do_fast_syscall_32+0xa2/0x100 [ 1409.200997][T18301] ? exit_to_user_mode_prepare+0x119/0x220 [ 1409.201095][T18301] do_fast_syscall_32+0x33/0x70 [ 1409.201184][T18301] do_SYSENTER_32+0x1b/0x20 [ 1409.201269][T18301] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1409.201370][T18301] RIP: 0023:0xf7f3a549 [ 1409.201423][T18301] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1409.201507][T18301] RSP: 002b:00000000f7f355cc EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1409.201590][T18301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 1409.201649][T18301] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.201703][T18301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1409.201753][T18301] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1409.201803][T18301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1409.201874][T18301] [ 1409.202965][T18301] Kernel Offset: disabled [ 1409.522624][T18301] Rebooting in 86400 seconds..