kname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x80002, 0x0) (async) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) (async) [ 3313.602183][ T28] usb usb5-port1: attempt power cycle 23:20:05 executing program 1: unshare(0x6c060000) (async) pipe(0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="24000001180003041dfffd946f6105000a08000a1f05fe060c10200308000f", 0x1f}], 0x1}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x1, 'team0\x00', {}, 0x1ff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="587af6dd1dadd47d35b2a3f47f8de8e91fd3f3f2d10cd71bc91212eb0a6184c67888568d17a97aa5b76e261a24a5433c836a8352b985affa4a7826c50ef8feecf2c349547342e8391da65c25", 0x4c}, {&(0x7f0000000d00)="304e8c9e332b5988fee3aa192cb52f410cdd6e911722dd56a70b6fc8be2b08b984bcf210db046e633b9e2eab071e6d8e4d6086c31151580dd5bb4630343ad17a292b1fdd9e042134c296c5c246a2f92144909ac88570fd9fcd647cf2ba4061381132be4698d48691140dc3b763f263556dd89ec092a0db1cf0fda6883ed1686d493260a38d7f8ecfa63a31b782865eedfb1bc662b174ca2539998a1a63f3ddebcb8d30ca96581dd328049ecfb126bd3d46ef59b177f4c15b25af9ce57d16e8351fba1b8ad806c03f514516acfca9fbebb21062656549d10f3481d34b430aa689afce1de571432eec8ef3cf3182b8", 0xee}, {&(0x7f0000000780)="30fa13ab4901afa6d350af3f7f9472d40729a13be9eda07e1792a6518a9e4a3167ae7718ca8e0806316bb3725d7345627251fd3d167992e4397abd9cae86ffc412f4435f9ff71ae2dd04d6d236447f25522e5025ea137800d749131686ebfe4957de994bba653de6ae9da1aa65ba3973e0c1e4bd8d34d9c9eaa19599623a87f01f95e2c80fcc820949e6fe0da857e19bdfc4a4cafdb7005ca613ba76fb835210275a36ab8108557609479b031b48885b0b9a5094f3ea9d201fefca84669ef6f17b077b0eb3d70a2851a67a4549bc6d922a", 0xd1}, {&(0x7f0000000700)}, {&(0x7f0000000980)="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", 0x153}, {&(0x7f0000000580)="3c80d8dec385cab76fcf2047f81030df47d5fb3ea6cf5cdc8830e0d83842f6218b2a77c3f409904391572b7c6932fd0ff21b015b27ff86d1673a77160d23a683fb4d0edc53ad49958c443b27ca1f093a69dfaeef812dc8155ef54e0f47b0e0d238269010de5156e4250ec72461fa5cf76872c7c0099b0b6505b6edcee046bf045cd471e0c56ab5c0c95a56497c5284efd6e6240a96526f3314c56327a33acfab0de9cb1533336fd37ee096937337fe207ad0b2d5066dd24db1631a466f4fc8619e57a683827141c325db1c85d495f347c2ee88264a1f8153d60932f1320ad8", 0xdf}], 0x6}, 0x24004800) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000600)='B', 0x20000601}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000e00)=ANY=[@ANYBLOB="19000000bf00000000000000fbffffffe2abc0ff0000000018250000e3a9be78a4486f2ba7b4717fa7a811c8401e4c64433a9c849247a907908008ff02f8242b8bc01415ef7508e41abb5fdeabf342487c7729a5447d432877285362", @ANYRES32, @ANYBLOB="00000000400000008510000002000000851000000800000018480000f8ffefff000000000000000002640900030000002a1710ad6c16ec000400000018510000030000000000000000000000950000000000000095000000000000008badf4bbea8f4bed1fee6be8d44781320df8c858e990be4cfdc6e3dbe39a28109856ff49f51230a52c9a8628f6bcb340f3c0b9add9b85cefa0269abb6b2a6ec9e85074d912759630a78fe09a17f2b99c6f36f1713c16002a58925bd79872c27dc8dccf6104c87c9c9b32f2346ae12eb8e98a693fda65e248d6f8993fbf34a189a836e9c13ca8805302903a8c357ac0843a341b3a9496ff9b333d19d6ecb2d9e0a06cf79389f97bdfdb4caf175eab94eb1698d4b876467af98382df59fa7d5344a0a2591c0fc373025ad3615f3e2c817ff4214c8e724741762e438fe33220b101a6d62fa8f8c077b249b9f2f6"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x23}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x8000, 0x80000001}, 0x10}, 0x80) socket$packet(0x11, 0x3, 0x300) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x107640, 0x0) [ 3313.786731][T30522] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3313.904093][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3313.914002][T30522] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3314.032432][ T28] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 3314.060792][T18443] usb 4-1: USB disconnect, device number 91 [ 3314.161124][T30433] not chained 16440000 origins [ 3314.166623][T30433] CPU: 1 PID: 30433 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3314.176931][T30433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3314.187095][T30433] Call Trace: [ 3314.190455][T30433] [ 3314.193485][T30433] dump_stack_lvl+0x1c8/0x256 [ 3314.198354][T30433] dump_stack+0x1a/0x1c [ 3314.202682][T30433] kmsan_internal_chain_origin+0x78/0x120 [ 3314.208567][T30433] ? filter_irq_stacks+0x5c/0x1a0 [ 3314.213777][T30433] ? kmsan_internal_check_memory+0x94/0x530 [ 3314.219859][T30433] ? do_recvmmsg+0x55a/0x1180 [ 3314.224681][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3314.230661][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3314.236631][T30433] ? should_fail+0x3f/0x810 [ 3314.241377][T30433] ? __stack_depot_save+0x21/0x4b0 [ 3314.246905][T30433] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3314.253400][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3314.259378][T30433] __msan_chain_origin+0xbd/0x140 [ 3314.264556][T30433] ___sys_recvmsg+0x522/0x890 [ 3314.269379][T30433] ? do_recvmmsg+0x5bc/0x1180 [ 3314.274217][T30433] ? kmsan_internal_check_memory+0x94/0x530 [ 3314.280277][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3314.286255][T30433] do_recvmmsg+0x55a/0x1180 [ 3314.290905][T30433] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3314.297319][T30433] ? do_syscall_64+0x3d/0xb0 [ 3314.302055][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.307251][T30433] do_syscall_64+0x3d/0xb0 [ 3314.311811][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.317896][T30433] RIP: 0033:0x7ff559e89279 [ 3314.322424][T30433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3314.323293][ T28] usb 5-1: device descriptor read/8, error -61 [ 3314.342136][T30433] RSP: 002b:00007ff558dfe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3314.342222][T30433] RAX: ffffffffffffffda RBX: 00007ff559f9bf80 RCX: 00007ff559e89279 [ 3314.342282][T30433] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3314.342342][T30433] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3314.342396][T30433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3314.342446][T30433] R13: 00007ff55a4cfb1f R14: 00007ff558dfe300 R15: 0000000000022000 [ 3314.342528][T30433] [ 3314.346822][T30433] Uninit was stored to memory at: [ 3314.409554][T30433] ___sys_recvmsg+0x522/0x890 [ 3314.414458][T30433] do_recvmmsg+0x55a/0x1180 [ 3314.419086][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.424357][T30433] do_syscall_64+0x3d/0xb0 [ 3314.428906][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.435077][T30433] [ 3314.437463][T30433] Uninit was stored to memory at: [ 3314.442761][T30433] ___sys_recvmsg+0x522/0x890 [ 3314.447586][T30433] do_recvmmsg+0x55a/0x1180 [ 3314.452317][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.457482][T30433] do_syscall_64+0x3d/0xb0 [ 3314.462127][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.468202][T30433] [ 3314.470591][T30433] Uninit was stored to memory at: [ 3314.475904][T30433] ___sys_recvmsg+0x522/0x890 [ 3314.480712][T30433] do_recvmmsg+0x55a/0x1180 [ 3314.485463][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.490628][T30433] do_syscall_64+0x3d/0xb0 [ 3314.495285][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.501368][T30433] [ 3314.503886][T30433] Uninit was stored to memory at: [ 3314.509077][T30433] ___sys_recvmsg+0x522/0x890 [ 3314.513989][T30433] do_recvmmsg+0x55a/0x1180 [ 3314.518621][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.523877][T30433] do_syscall_64+0x3d/0xb0 [ 3314.528412][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.534575][T30433] [ 3314.536962][T30433] Uninit was stored to memory at: [ 3314.542249][T30433] ___sys_recvmsg+0x522/0x890 [ 3314.547054][T30433] do_recvmmsg+0x55a/0x1180 [ 3314.551793][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.556957][T30433] do_syscall_64+0x3d/0xb0 [ 3314.561503][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.567721][T30433] [ 3314.570107][T30433] Uninit was stored to memory at: [ 3314.575412][T30433] ___sys_recvmsg+0x522/0x890 [ 3314.580216][T30433] do_recvmmsg+0x55a/0x1180 [ 3314.585001][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.590159][T30433] do_syscall_64+0x3d/0xb0 [ 3314.594806][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.600877][T30433] [ 3314.603369][T30433] Uninit was stored to memory at: [ 3314.608568][T30433] ___sys_recvmsg+0x522/0x890 [ 3314.613478][T30433] do_recvmmsg+0x55a/0x1180 [ 3314.618104][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.623374][T30433] do_syscall_64+0x3d/0xb0 [ 3314.627932][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.634168][T30433] [ 3314.636562][T30433] Local variable msg_sys created at: [ 3314.642030][T30433] do_recvmmsg+0x5c/0x1180 [ 3314.646579][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3314.673809][ T28] usb 5-1: new high-speed USB device number 117 using dummy_hcd 23:20:06 executing program 3: select(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000400)) [ 3314.808494][T30523] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 3314.892123][ T28] usb 5-1: device descriptor read/8, error -61 [ 3315.029145][ T28] usb usb5-port1: unable to enumerate USB device [ 3317.789364][T30433] not chained 16450000 origins [ 3317.795161][T30433] CPU: 1 PID: 30433 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3317.805468][T30433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3317.815641][T30433] Call Trace: [ 3317.819001][T30433] [ 3317.822008][T30433] dump_stack_lvl+0x1c8/0x256 [ 3317.826869][T30433] dump_stack+0x1a/0x1c [ 3317.831185][T30433] kmsan_internal_chain_origin+0x78/0x120 [ 3317.837075][T30433] ? filter_irq_stacks+0x5c/0x1a0 [ 3317.842287][T30433] ? kmsan_internal_check_memory+0x94/0x530 [ 3317.848434][T30433] ? do_recvmmsg+0x55a/0x1180 [ 3317.853242][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3317.859215][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3317.865189][T30433] ? should_fail+0x3f/0x810 [ 3317.869838][T30433] ? __stack_depot_save+0x21/0x4b0 [ 3317.875106][T30433] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3317.881517][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3317.887483][T30433] __msan_chain_origin+0xbd/0x140 [ 3317.892659][T30433] ___sys_recvmsg+0x522/0x890 [ 3317.897473][T30433] ? do_recvmmsg+0x5bc/0x1180 [ 3317.902322][T30433] ? kmsan_internal_check_memory+0x94/0x530 [ 3317.908391][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3317.914370][T30433] do_recvmmsg+0x55a/0x1180 [ 3317.919032][T30433] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3317.925441][T30433] ? do_syscall_64+0x3d/0xb0 [ 3317.930167][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3317.935359][T30433] do_syscall_64+0x3d/0xb0 [ 3317.939915][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3317.945993][T30433] RIP: 0033:0x7ff559e89279 [ 3317.950531][T30433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3317.970292][T30433] RSP: 002b:00007ff558dfe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3317.978839][T30433] RAX: ffffffffffffffda RBX: 00007ff559f9bf80 RCX: 00007ff559e89279 [ 3317.986934][T30433] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3317.995005][T30433] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3318.003090][T30433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3318.011159][T30433] R13: 00007ff55a4cfb1f R14: 00007ff558dfe300 R15: 0000000000022000 [ 3318.019272][T30433] [ 3318.026769][T30433] Uninit was stored to memory at: [ 3318.036036][T30433] ___sys_recvmsg+0x522/0x890 [ 3318.040848][T30433] do_recvmmsg+0x55a/0x1180 [ 3318.045886][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3318.051059][T30433] do_syscall_64+0x3d/0xb0 [ 3318.055700][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.061876][T30433] [ 3318.064263][T30433] Uninit was stored to memory at: [ 3318.069455][T30433] ___sys_recvmsg+0x522/0x890 [ 3318.074375][T30433] do_recvmmsg+0x55a/0x1180 [ 3318.079018][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3318.084290][T30433] do_syscall_64+0x3d/0xb0 [ 3318.088844][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.095021][T30433] [ 3318.097419][T30433] Uninit was stored to memory at: [ 3318.102709][T30433] ___sys_recvmsg+0x522/0x890 [ 3318.107518][T30433] do_recvmmsg+0x55a/0x1180 [ 3318.112268][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3318.117441][T30433] do_syscall_64+0x3d/0xb0 [ 3318.122089][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.127207][T30549] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3318.128111][T30433] 23:20:09 executing program 0: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x1, &(0x7f00000016c0)=@raw=[@generic], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:20:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x20}}], 0x1, 0x0) 23:20:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010008506000000ff01000000000000009956349e4e1ce976eb348ed2e3bb58a7c22cbeda472808aaedfb8fbf084b77f147a8f72cd2259c6ac120451ce314cafefc0316ec08000000000000001d1f8cfe6e553c634a315608b9959e83df5cdcf39e1f525dddf39c5513c5da06bb341e440258effee360ab1b92f4ecd8af707820200299192b3aa362b65fa7364b50a37682f22a97b2fe10b7e6a3694279514b645a11c27f66ac3d415800fca33676f4bc5bacc110a2009aaaa7", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) (async, rerun: 64) bind$rds(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 3318.128127][T30433] Uninit was stored to memory at: [ 3318.128244][T30433] ___sys_recvmsg+0x522/0x890 [ 3318.149926][T30433] do_recvmmsg+0x55a/0x1180 [ 3318.154670][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3318.159829][T30433] do_syscall_64+0x3d/0xb0 [ 3318.164484][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.170571][T30433] [ 3318.173063][T30433] Uninit was stored to memory at: [ 3318.178321][T30433] ___sys_recvmsg+0x522/0x890 [ 3318.183236][T30433] do_recvmmsg+0x55a/0x1180 [ 3318.187880][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3318.193193][T30433] do_syscall_64+0x3d/0xb0 [ 3318.197742][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.203973][T30433] [ 3318.206369][T30433] Uninit was stored to memory at: [ 3318.211665][T30433] ___sys_recvmsg+0x522/0x890 [ 3318.216491][T30433] do_recvmmsg+0x55a/0x1180 [ 3318.221121][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3318.226405][T30433] do_syscall_64+0x3d/0xb0 [ 3318.230954][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.237188][T30433] [ 3318.239573][T30433] Uninit was stored to memory at: [ 3318.244857][T30433] ___sys_recvmsg+0x522/0x890 [ 3318.249663][T30433] do_recvmmsg+0x55a/0x1180 [ 3318.254471][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3318.259637][T30433] do_syscall_64+0x3d/0xb0 [ 3318.264354][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.270427][T30433] [ 3318.273000][T30433] Local variable msg_sys created at: [ 3318.278361][T30433] do_recvmmsg+0x5c/0x1180 [ 3318.283021][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3319.749800][T30433] not chained 16460000 origins [ 3319.754798][T30433] CPU: 0 PID: 30433 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3319.765091][T30433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3319.775250][T30433] Call Trace: [ 3319.778602][T30433] [ 3319.781600][T30433] dump_stack_lvl+0x1c8/0x256 [ 3319.786463][T30433] dump_stack+0x1a/0x1c [ 3319.790768][T30433] kmsan_internal_chain_origin+0x78/0x120 [ 3319.796625][T30433] ? filter_irq_stacks+0x5c/0x1a0 [ 3319.801820][T30433] ? kmsan_internal_check_memory+0x94/0x530 [ 3319.807847][T30433] ? do_recvmmsg+0x55a/0x1180 [ 3319.812644][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3319.818599][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3319.824567][T30433] ? should_fail+0x3f/0x810 [ 3319.829212][T30433] ? __stack_depot_save+0x21/0x4b0 [ 3319.834462][T30433] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3319.840872][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3319.846838][T30433] __msan_chain_origin+0xbd/0x140 [ 3319.852000][T30433] ___sys_recvmsg+0x522/0x890 [ 3319.856799][T30433] ? do_recvmmsg+0x5bc/0x1180 [ 3319.861619][T30433] ? kmsan_internal_check_memory+0x94/0x530 [ 3319.867661][T30433] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3319.873617][T30433] do_recvmmsg+0x55a/0x1180 [ 3319.878259][T30433] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3319.884650][T30433] ? do_syscall_64+0x3d/0xb0 [ 3319.889361][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3319.894524][T30433] do_syscall_64+0x3d/0xb0 [ 3319.899052][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3319.905107][T30433] RIP: 0033:0x7ff559e89279 [ 3319.909622][T30433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3319.929370][T30433] RSP: 002b:00007ff558dfe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3319.937906][T30433] RAX: ffffffffffffffda RBX: 00007ff559f9bf80 RCX: 00007ff559e89279 [ 3319.945992][T30433] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3319.954061][T30433] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3319.962126][T30433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3319.970188][T30433] R13: 00007ff55a4cfb1f R14: 00007ff558dfe300 R15: 0000000000022000 [ 3319.978282][T30433] [ 3319.985220][T30433] Uninit was stored to memory at: [ 3319.990618][T30433] ___sys_recvmsg+0x522/0x890 [ 3319.995827][T30433] do_recvmmsg+0x55a/0x1180 [ 3320.000457][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3320.005690][T30433] do_syscall_64+0x3d/0xb0 [ 3320.010238][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.016387][T30433] [ 3320.018771][T30433] Uninit was stored to memory at: [ 3320.024039][T30433] ___sys_recvmsg+0x522/0x890 [ 3320.028844][T30433] do_recvmmsg+0x55a/0x1180 [ 3320.033540][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3320.038704][T30433] do_syscall_64+0x3d/0xb0 [ 3320.043318][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.049389][T30433] [ 3320.052018][T30433] Uninit was stored to memory at: [ 3320.057196][T30433] ___sys_recvmsg+0x522/0x890 [ 3320.062073][T30433] do_recvmmsg+0x55a/0x1180 [ 3320.066714][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3320.071950][T30433] do_syscall_64+0x3d/0xb0 [ 3320.076507][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.082647][T30433] [ 3320.085034][T30433] Uninit was stored to memory at: [ 3320.090219][T30433] ___sys_recvmsg+0x522/0x890 [ 3320.095095][T30433] do_recvmmsg+0x55a/0x1180 [ 3320.099730][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3320.104972][T30433] do_syscall_64+0x3d/0xb0 [ 3320.109523][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.115667][T30433] [ 3320.118052][T30433] Uninit was stored to memory at: [ 3320.123306][T30433] ___sys_recvmsg+0x522/0x890 [ 3320.128103][T30433] do_recvmmsg+0x55a/0x1180 [ 3320.132808][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3320.137967][T30433] do_syscall_64+0x3d/0xb0 [ 3320.142596][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.148669][T30433] [ 3320.151054][T30433] Uninit was stored to memory at: [ 3320.156331][T30433] ___sys_recvmsg+0x522/0x890 [ 3320.161222][T30433] do_recvmmsg+0x55a/0x1180 [ 3320.165929][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3320.171094][T30433] do_syscall_64+0x3d/0xb0 [ 3320.175708][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.181856][T30433] [ 3320.184241][T30433] Uninit was stored to memory at: [ 3320.189511][T30433] ___sys_recvmsg+0x522/0x890 [ 3320.194391][T30433] do_recvmmsg+0x55a/0x1180 [ 3320.199022][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3320.204252][T30433] do_syscall_64+0x3d/0xb0 [ 3320.208799][T30433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.214943][T30433] [ 3320.217331][T30433] Local variable msg_sys created at: [ 3320.222766][T30433] do_recvmmsg+0x5c/0x1180 [ 3320.227309][T30433] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.426644][T30559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3321.436799][T30440] not chained 16470000 origins [ 3321.442049][T30440] CPU: 0 PID: 30440 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3321.452346][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3321.453601][T30559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3321.462456][T30440] Call Trace: [ 3321.462484][T30440] [ 3321.462512][T30440] dump_stack_lvl+0x1c8/0x256 [ 3321.462652][T30440] dump_stack+0x1a/0x1c [ 3321.470717][T30559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3321.472846][T30440] kmsan_internal_chain_origin+0x78/0x120 [ 3321.472957][T30440] ? filter_irq_stacks+0x5c/0x1a0 [ 3321.479109][T30559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3321.480588][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3321.486995][T30559] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3321.491681][T30440] ? do_recvmmsg+0x55a/0x1180 [ 3321.491773][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3321.498610][T30559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3321.502543][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3321.502660][T30440] ? should_fail+0x3f/0x810 [ 3321.502762][T30440] ? __stack_depot_save+0x21/0x4b0 [ 3321.556029][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3321.562444][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3321.568410][T30440] __msan_chain_origin+0xbd/0x140 [ 3321.573590][T30440] ___sys_recvmsg+0x522/0x890 [ 3321.578397][T30440] ? do_recvmmsg+0x5bc/0x1180 [ 3321.583230][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3321.589462][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3321.595436][T30440] do_recvmmsg+0x55a/0x1180 [ 3321.600088][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3321.606505][T30440] ? do_syscall_64+0x3d/0xb0 [ 3321.611248][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.616443][T30440] do_syscall_64+0x3d/0xb0 [ 3321.621001][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.627077][T30440] RIP: 0033:0x7ff559e89279 [ 3321.631600][T30440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3321.651375][T30440] RSP: 002b:00007ff558ddd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3321.659940][T30440] RAX: ffffffffffffffda RBX: 00007ff559f9c050 RCX: 00007ff559e89279 [ 3321.668038][T30440] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3321.676122][T30440] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3321.684203][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3321.692283][T30440] R13: 00007ff55a4cfb1f R14: 00007ff558ddd300 R15: 0000000000022000 [ 3321.700392][T30440] [ 3321.707720][T30440] Uninit was stored to memory at: [ 3321.713376][T30440] ___sys_recvmsg+0x522/0x890 [ 3321.718198][T30440] do_recvmmsg+0x55a/0x1180 [ 3321.722906][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.728064][T30440] do_syscall_64+0x3d/0xb0 [ 3321.732680][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.738851][T30440] [ 3321.741236][T30440] Uninit was stored to memory at: [ 3321.746506][T30440] ___sys_recvmsg+0x522/0x890 [ 3321.751327][T30440] do_recvmmsg+0x55a/0x1180 [ 3321.756042][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.761207][T30440] do_syscall_64+0x3d/0xb0 [ 3321.765834][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.771985][T30440] [ 3321.774368][T30440] Uninit was stored to memory at: [ 3321.779557][T30440] ___sys_recvmsg+0x522/0x890 [ 3321.784492][T30440] do_recvmmsg+0x55a/0x1180 [ 3321.789127][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.794409][T30440] do_syscall_64+0x3d/0xb0 [ 3321.798955][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.805135][T30440] [ 3321.807533][T30440] Uninit was stored to memory at: [ 3321.812869][T30440] ___sys_recvmsg+0x522/0x890 [ 3321.817677][T30440] do_recvmmsg+0x55a/0x1180 [ 3321.822441][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.827603][T30440] do_syscall_64+0x3d/0xb0 [ 3321.832268][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.838390][T30440] [ 3321.840787][T30440] Uninit was stored to memory at: [ 3321.846110][T30440] ___sys_recvmsg+0x522/0x890 [ 3321.850930][T30440] do_recvmmsg+0x55a/0x1180 [ 3321.855797][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.860959][T30440] do_syscall_64+0x3d/0xb0 [ 3321.865639][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.871825][T30440] [ 3321.874215][T30440] Uninit was stored to memory at: [ 3321.879411][T30440] ___sys_recvmsg+0x522/0x890 [ 3321.884346][T30440] do_recvmmsg+0x55a/0x1180 [ 3321.888989][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.894235][T30440] do_syscall_64+0x3d/0xb0 [ 3321.898788][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.904992][T30440] [ 3321.907472][T30440] Uninit was stored to memory at: [ 3321.912805][T30440] ___sys_recvmsg+0x522/0x890 [ 3321.917613][T30440] do_recvmmsg+0x55a/0x1180 [ 3321.922373][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3321.927530][T30440] do_syscall_64+0x3d/0xb0 [ 3321.932200][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.938273][T30440] [ 3321.940663][T30440] Local variable msg_sys created at: [ 3321.946151][T30440] do_recvmmsg+0x5c/0x1180 [ 3321.950703][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3322.440628][T30561] chnl_net:caif_netlink_parms(): no params data found [ 3322.838716][T30561] bridge0: port 1(bridge_slave_0) entered blocking state [ 3322.851157][T30561] bridge0: port 1(bridge_slave_0) entered disabled state [ 3322.861536][T30561] device bridge_slave_0 entered promiscuous mode [ 3322.880399][T30561] bridge0: port 2(bridge_slave_1) entered blocking state [ 3322.888078][T30561] bridge0: port 2(bridge_slave_1) entered disabled state [ 3322.898419][T30561] device bridge_slave_1 entered promiscuous mode [ 3323.017368][T30561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3323.060793][T30561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3323.193117][T30561] team0: Port device team_slave_0 added [ 3323.207518][T30561] team0: Port device team_slave_1 added [ 3323.219891][T30440] not chained 16480000 origins [ 3323.225232][T30440] CPU: 1 PID: 30440 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3323.235536][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3323.245697][T30440] Call Trace: [ 3323.249050][T30440] [ 3323.252054][T30440] dump_stack_lvl+0x1c8/0x256 [ 3323.256918][T30440] dump_stack+0x1a/0x1c [ 3323.261234][T30440] kmsan_internal_chain_origin+0x78/0x120 [ 3323.267108][T30440] ? filter_irq_stacks+0x5c/0x1a0 [ 3323.272311][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3323.278354][T30440] ? do_recvmmsg+0x55a/0x1180 [ 3323.283163][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3323.289133][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3323.295106][T30440] ? should_fail+0x3f/0x810 [ 3323.299762][T30440] ? __stack_depot_save+0x21/0x4b0 [ 3323.305020][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3323.311429][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3323.317397][T30440] __msan_chain_origin+0xbd/0x140 [ 3323.322571][T30440] ___sys_recvmsg+0x522/0x890 [ 3323.327384][T30440] ? do_recvmmsg+0x5bc/0x1180 [ 3323.332217][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3323.338363][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3323.344344][T30440] do_recvmmsg+0x55a/0x1180 [ 3323.349002][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3323.355492][T30440] ? do_syscall_64+0x3d/0xb0 [ 3323.360218][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.365403][T30440] do_syscall_64+0x3d/0xb0 [ 3323.369951][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.376020][T30440] RIP: 0033:0x7ff559e89279 [ 3323.380536][T30440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3323.400394][T30440] RSP: 002b:00007ff558ddd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3323.408946][T30440] RAX: ffffffffffffffda RBX: 00007ff559f9c050 RCX: 00007ff559e89279 [ 3323.417026][T30440] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3323.425093][T30440] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3323.433164][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3323.441231][T30440] R13: 00007ff55a4cfb1f R14: 00007ff558ddd300 R15: 0000000000022000 [ 3323.449336][T30440] [ 3323.456666][T30440] Uninit was stored to memory at: [ 3323.464219][T30440] ___sys_recvmsg+0x522/0x890 [ 3323.469034][T30440] do_recvmmsg+0x55a/0x1180 [ 3323.474305][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.479481][T30440] do_syscall_64+0x3d/0xb0 [ 3323.484144][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.490236][T30440] [ 3323.492736][T30440] Uninit was stored to memory at: [ 3323.497925][T30440] ___sys_recvmsg+0x522/0x890 [ 3323.502861][T30440] do_recvmmsg+0x55a/0x1180 [ 3323.507493][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.512752][T30440] do_syscall_64+0x3d/0xb0 [ 3323.517297][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.523508][T30440] [ 3323.525893][T30440] Uninit was stored to memory at: [ 3323.531088][T30440] ___sys_recvmsg+0x522/0x890 [ 3323.536085][T30440] do_recvmmsg+0x55a/0x1180 [ 3323.540737][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.546073][T30440] do_syscall_64+0x3d/0xb0 [ 3323.550621][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.556866][T30440] [ 3323.559284][T30440] Uninit was stored to memory at: [ 3323.564622][T30440] ___sys_recvmsg+0x522/0x890 [ 3323.569434][T30440] do_recvmmsg+0x55a/0x1180 [ 3323.574220][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.579397][T30440] do_syscall_64+0x3d/0xb0 [ 3323.584098][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.590168][T30440] [ 3323.592704][T30440] Uninit was stored to memory at: [ 3323.597913][T30440] ___sys_recvmsg+0x522/0x890 [ 3323.602870][T30440] do_recvmmsg+0x55a/0x1180 [ 3323.607503][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.612813][T30440] do_syscall_64+0x3d/0xb0 [ 3323.617360][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.623576][T30440] [ 3323.625965][T30440] Uninit was stored to memory at: [ 3323.631153][T30440] ___sys_recvmsg+0x522/0x890 [ 3323.636113][T30440] do_recvmmsg+0x55a/0x1180 [ 3323.640753][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.646064][T30440] do_syscall_64+0x3d/0xb0 [ 3323.650607][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.656843][T30440] [ 3323.659231][T30440] Uninit was stored to memory at: [ 3323.664562][T30440] ___sys_recvmsg+0x522/0x890 [ 3323.669368][T30440] do_recvmmsg+0x55a/0x1180 [ 3323.674148][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.679312][T30440] do_syscall_64+0x3d/0xb0 [ 3323.684021][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.690097][T30440] [ 3323.692628][T30440] Local variable msg_sys created at: [ 3323.697981][T30440] do_recvmmsg+0x5c/0x1180 [ 3323.702649][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3323.781823][T17879] Bluetooth: hci2: command 0x0409 tx timeout [ 3323.814429][T30561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3323.821716][T30561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3323.848311][T30561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3323.956954][T30561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3323.964238][T30561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3323.994792][T30561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3324.149774][T30561] device hsr_slave_0 entered promiscuous mode [ 3324.181288][T30561] device hsr_slave_1 entered promiscuous mode [ 3324.201897][T30561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3324.209631][T30561] Cannot create hsr debugfs directory [ 3324.717271][T30440] not chained 16490000 origins [ 3324.722719][T30440] CPU: 1 PID: 30440 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3324.733034][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3324.743202][T30440] Call Trace: [ 3324.746560][T30440] [ 3324.749563][T30440] dump_stack_lvl+0x1c8/0x256 [ 3324.754434][T30440] dump_stack+0x1a/0x1c [ 3324.758735][T30440] kmsan_internal_chain_origin+0x78/0x120 [ 3324.764595][T30440] ? filter_irq_stacks+0x5c/0x1a0 [ 3324.769787][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3324.775835][T30440] ? do_recvmmsg+0x55a/0x1180 [ 3324.780629][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3324.786703][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3324.792680][T30440] ? should_fail+0x3f/0x810 [ 3324.797321][T30440] ? __stack_depot_save+0x21/0x4b0 [ 3324.802653][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3324.809062][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3324.815030][T30440] __msan_chain_origin+0xbd/0x140 [ 3324.820210][T30440] ___sys_recvmsg+0x522/0x890 [ 3324.825020][T30440] ? do_recvmmsg+0x5bc/0x1180 [ 3324.829853][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3324.835899][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3324.841859][T30440] do_recvmmsg+0x55a/0x1180 [ 3324.846504][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3324.852895][T30440] ? do_syscall_64+0x3d/0xb0 [ 3324.857607][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3324.862796][T30440] do_syscall_64+0x3d/0xb0 [ 3324.867332][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3324.873384][T30440] RIP: 0033:0x7ff559e89279 [ 3324.877942][T30440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3324.897738][T30440] RSP: 002b:00007ff558ddd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3324.906287][T30440] RAX: ffffffffffffffda RBX: 00007ff559f9c050 RCX: 00007ff559e89279 [ 3324.914363][T30440] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3324.922429][T30440] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3324.930517][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3324.938585][T30440] R13: 00007ff55a4cfb1f R14: 00007ff558ddd300 R15: 0000000000022000 [ 3324.946681][T30440] [ 3324.955203][T30440] Uninit was stored to memory at: [ 3324.960457][T30440] ___sys_recvmsg+0x522/0x890 [ 3324.966008][T30440] do_recvmmsg+0x55a/0x1180 [ 3324.970648][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3324.975916][T30440] do_syscall_64+0x3d/0xb0 [ 3324.980535][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3324.986720][T30440] [ 3324.989112][T30440] Uninit was stored to memory at: [ 3324.994464][T30440] ___sys_recvmsg+0x522/0x890 [ 3324.999269][T30440] do_recvmmsg+0x55a/0x1180 [ 3325.004062][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3325.009238][T30440] do_syscall_64+0x3d/0xb0 [ 3325.013887][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3325.019945][T30440] [ 3325.022447][T30440] Uninit was stored to memory at: [ 3325.027636][T30440] ___sys_recvmsg+0x522/0x890 [ 3325.032588][T30440] do_recvmmsg+0x55a/0x1180 [ 3325.037213][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3325.042519][T30440] do_syscall_64+0x3d/0xb0 [ 3325.047059][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3325.053272][T30440] [ 3325.055668][T30440] Uninit was stored to memory at: [ 3325.060845][T30440] ___sys_recvmsg+0x522/0x890 [ 3325.065795][T30440] do_recvmmsg+0x55a/0x1180 [ 3325.070423][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3325.075739][T30440] do_syscall_64+0x3d/0xb0 [ 3325.080291][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3325.086508][T30440] [ 3325.088896][T30440] Uninit was stored to memory at: [ 3325.094219][T30440] ___sys_recvmsg+0x522/0x890 [ 3325.099024][T30440] do_recvmmsg+0x55a/0x1180 [ 3325.103751][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3325.108911][T30440] do_syscall_64+0x3d/0xb0 [ 3325.113550][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3325.119619][T30440] [ 3325.122145][T30440] Uninit was stored to memory at: [ 3325.127339][T30440] ___sys_recvmsg+0x522/0x890 [ 3325.132280][T30440] do_recvmmsg+0x55a/0x1180 [ 3325.136916][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3325.142226][T30440] do_syscall_64+0x3d/0xb0 [ 3325.146773][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3325.152994][T30440] [ 3325.155388][T30440] Uninit was stored to memory at: [ 3325.160573][T30440] ___sys_recvmsg+0x522/0x890 [ 3325.165522][T30440] do_recvmmsg+0x55a/0x1180 [ 3325.170159][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3325.175479][T30440] do_syscall_64+0x3d/0xb0 [ 3325.180030][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3325.186253][T30440] [ 3325.188650][T30440] Local variable msg_sys created at: [ 3325.194177][T30440] do_recvmmsg+0x5c/0x1180 [ 3325.198733][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3325.386913][T30561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3325.425373][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3325.435399][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3325.456339][T30561] 8021q: adding VLAN 0 to HW filter on device team0 [ 3325.493499][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3325.509075][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3325.519329][T17879] bridge0: port 1(bridge_slave_0) entered blocking state [ 3325.526882][T17879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3325.538219][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3325.560653][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3325.571977][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3325.582179][ T3147] bridge0: port 2(bridge_slave_1) entered blocking state [ 3325.589658][ T3147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3325.703922][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3325.720374][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3325.732689][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3325.744564][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3325.755779][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3325.767627][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3325.779018][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3325.789755][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3325.800365][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3325.811192][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3325.849659][T30561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3325.860228][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3325.862969][T17879] Bluetooth: hci2: command 0x041b tx timeout [ 3325.983941][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3325.992193][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3326.025068][T30561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3326.100142][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3326.116221][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3326.231934][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3326.242729][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3326.271402][T30561] device veth0_vlan entered promiscuous mode [ 3326.290803][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3326.302196][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3326.347632][T30561] device veth1_vlan entered promiscuous mode [ 3326.496168][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3326.507336][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3326.517941][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3326.528887][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3326.555292][T30561] device veth0_macvtap entered promiscuous mode [ 3326.581309][T30561] device veth1_macvtap entered promiscuous mode [ 3326.682314][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3326.693680][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.703751][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3326.714408][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.724449][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3326.735096][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.745137][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3326.755767][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.765800][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3326.776440][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.786454][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3326.797098][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.812573][T30561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3326.827295][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3326.837922][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3326.848561][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3326.859704][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3326.898023][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3326.908833][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.918966][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3326.929708][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.944169][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3326.955276][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.965322][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3326.975977][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3326.986012][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3326.996659][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3327.006699][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3327.017350][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3327.032317][T30561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3327.041126][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3327.052286][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3327.189137][T30440] not chained 16500000 origins [ 3327.194331][T30440] CPU: 0 PID: 30440 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3327.204629][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3327.214966][T30440] Call Trace: [ 3327.218312][T30440] [ 3327.221312][T30440] dump_stack_lvl+0x1c8/0x256 [ 3327.226186][T30440] dump_stack+0x1a/0x1c [ 3327.230485][T30440] kmsan_internal_chain_origin+0x78/0x120 [ 3327.236352][T30440] ? filter_irq_stacks+0x5c/0x1a0 [ 3327.241540][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3327.247578][T30440] ? do_recvmmsg+0x55a/0x1180 [ 3327.252386][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3327.258341][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3327.264295][T30440] ? should_fail+0x3f/0x810 [ 3327.268933][T30440] ? __stack_depot_save+0x21/0x4b0 [ 3327.274181][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3327.280571][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3327.286514][T30440] __msan_chain_origin+0xbd/0x140 [ 3327.291670][T30440] ___sys_recvmsg+0x522/0x890 [ 3327.296487][T30440] ? do_recvmmsg+0x5bc/0x1180 [ 3327.301300][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3327.307334][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3327.313285][T30440] do_recvmmsg+0x55a/0x1180 [ 3327.317934][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3327.324319][T30440] ? do_syscall_64+0x3d/0xb0 [ 3327.329030][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.334197][T30440] do_syscall_64+0x3d/0xb0 [ 3327.338731][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3327.344789][T30440] RIP: 0033:0x7ff559e89279 [ 3327.349294][T30440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3327.369042][T30440] RSP: 002b:00007ff558ddd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3327.377578][T30440] RAX: ffffffffffffffda RBX: 00007ff559f9c050 RCX: 00007ff559e89279 [ 3327.385655][T30440] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3327.393721][T30440] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3327.401819][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3327.409885][T30440] R13: 00007ff55a4cfb1f R14: 00007ff558ddd300 R15: 0000000000022000 [ 3327.417984][T30440] [ 3327.425899][T30440] Uninit was stored to memory at: [ 3327.431108][T30440] ___sys_recvmsg+0x522/0x890 [ 3327.436410][T30440] do_recvmmsg+0x55a/0x1180 [ 3327.441046][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.446294][T30440] do_syscall_64+0x3d/0xb0 [ 3327.450861][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3327.457021][T30440] [ 3327.459411][T30440] Uninit was stored to memory at: [ 3327.464686][T30440] ___sys_recvmsg+0x522/0x890 [ 3327.469493][T30440] do_recvmmsg+0x55a/0x1180 [ 3327.474201][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.479389][T30440] do_syscall_64+0x3d/0xb0 [ 3327.484073][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3327.490154][T30440] [ 3327.492685][T30440] Uninit was stored to memory at: [ 3327.497881][T30440] ___sys_recvmsg+0x522/0x890 [ 3327.502818][T30440] do_recvmmsg+0x55a/0x1180 [ 3327.507448][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.512688][T30440] do_syscall_64+0x3d/0xb0 [ 3327.517231][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3327.523448][T30440] [ 3327.525836][T30440] Uninit was stored to memory at: [ 3327.531024][T30440] ___sys_recvmsg+0x522/0x890 [ 3327.535919][T30440] do_recvmmsg+0x55a/0x1180 [ 3327.540550][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.545741][T30440] do_syscall_64+0x3d/0xb0 [ 3327.550293][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3327.556448][T30440] [ 3327.558833][T30440] Uninit was stored to memory at: [ 3327.564091][T30440] ___sys_recvmsg+0x522/0x890 [ 3327.568907][T30440] do_recvmmsg+0x55a/0x1180 [ 3327.573637][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.578796][T30440] do_syscall_64+0x3d/0xb0 [ 3327.583430][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3327.589507][T30440] [ 3327.591985][T30440] Uninit was stored to memory at: [ 3327.597183][T30440] ___sys_recvmsg+0x522/0x890 [ 3327.602160][T30440] do_recvmmsg+0x55a/0x1180 [ 3327.606813][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.612061][T30440] do_syscall_64+0x3d/0xb0 [ 3327.616605][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3327.622751][T30440] [ 3327.625135][T30440] Uninit was stored to memory at: [ 3327.630413][T30440] ___sys_recvmsg+0x522/0x890 [ 3327.635341][T30440] do_recvmmsg+0x55a/0x1180 [ 3327.639991][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.645248][T30440] do_syscall_64+0x3d/0xb0 [ 3327.648177][T26293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3327.649791][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3327.661197][T26293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3327.663702][T30440] [ 3327.663719][T30440] Local variable msg_sys created at: [ 3327.663746][T30440] do_recvmmsg+0x5c/0x1180 [ 3327.663821][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3327.689688][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3327.829682][T26309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3327.837821][T26309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3327.857320][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3327.941825][T17879] Bluetooth: hci2: command 0x040f tx timeout [ 3329.038246][T30572] not chained 16510000 origins [ 3329.043356][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3329.053650][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3329.063813][T30572] Call Trace: [ 3329.067167][T30572] [ 3329.070172][T30572] dump_stack_lvl+0x1c8/0x256 [ 3329.075116][T30572] dump_stack+0x1a/0x1c [ 3329.079428][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3329.085296][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3329.090516][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3329.096574][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3329.101383][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3329.107356][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3329.113328][T30572] ? should_fail+0x3f/0x810 [ 3329.117979][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3329.123238][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3329.129643][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3329.135608][T30572] __msan_chain_origin+0xbd/0x140 [ 3329.140776][T30572] ___sys_recvmsg+0x522/0x890 [ 3329.145591][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3329.150426][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3329.156504][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3329.162475][T30572] do_recvmmsg+0x55a/0x1180 [ 3329.167136][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3329.173541][T30572] ? do_syscall_64+0x3d/0xb0 [ 3329.178266][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3329.183453][T30572] do_syscall_64+0x3d/0xb0 [ 3329.188001][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3329.194086][T30572] RIP: 0033:0x7f13f0a89279 [ 3329.198607][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3329.218389][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3329.226953][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3329.235051][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3329.243228][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3329.251311][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3329.259398][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3329.267512][T30572] [ 3329.276119][T30572] Uninit was stored to memory at: [ 3329.281336][T30572] ___sys_recvmsg+0x522/0x890 [ 3329.286707][T30572] do_recvmmsg+0x55a/0x1180 [ 3329.291355][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3329.296604][T30572] do_syscall_64+0x3d/0xb0 [ 3329.301151][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3329.307316][T30572] [ 3329.309701][T30572] Uninit was stored to memory at: [ 3329.314980][T30572] ___sys_recvmsg+0x522/0x890 [ 3329.319785][T30572] do_recvmmsg+0x55a/0x1180 [ 3329.324507][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3329.329668][T30572] do_syscall_64+0x3d/0xb0 [ 3329.334358][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3329.340431][T30572] [ 3329.342910][T30572] Uninit was stored to memory at: [ 3329.348092][T30572] ___sys_recvmsg+0x522/0x890 [ 3329.352996][T30572] do_recvmmsg+0x55a/0x1180 [ 3329.357621][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3329.362856][T30572] do_syscall_64+0x3d/0xb0 [ 3329.367413][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3329.373546][T30572] [ 3329.375932][T30572] Uninit was stored to memory at: [ 3329.381122][T30572] ___sys_recvmsg+0x522/0x890 [ 3329.386001][T30572] do_recvmmsg+0x55a/0x1180 [ 3329.390632][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3329.395864][T30572] do_syscall_64+0x3d/0xb0 [ 3329.400405][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3329.406545][T30572] [ 3329.408936][T30572] Uninit was stored to memory at: [ 3329.414203][T30572] ___sys_recvmsg+0x522/0x890 [ 3329.419008][T30572] do_recvmmsg+0x55a/0x1180 [ 3329.423712][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3329.428877][T30572] do_syscall_64+0x3d/0xb0 [ 3329.433497][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3329.439562][T30572] [ 3329.442018][T30572] Uninit was stored to memory at: [ 3329.447203][T30572] ___sys_recvmsg+0x522/0x890 [ 3329.452080][T30572] do_recvmmsg+0x55a/0x1180 [ 3329.456708][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3329.461948][T30572] do_syscall_64+0x3d/0xb0 [ 3329.466484][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3329.472641][T30572] [ 3329.475028][T30572] Uninit was stored to memory at: [ 3329.480227][T30572] ___sys_recvmsg+0x522/0x890 [ 3329.485112][T30572] do_recvmmsg+0x55a/0x1180 [ 3329.489737][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3329.494985][T30572] do_syscall_64+0x3d/0xb0 [ 3329.499528][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3329.505677][T30572] [ 3329.508066][T30572] Local variable msg_sys created at: [ 3329.513512][T30572] do_recvmmsg+0x5c/0x1180 [ 3329.518063][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.022124][T17879] Bluetooth: hci2: command 0x0419 tx timeout [ 3330.326338][T30571] not chained 16520000 origins [ 3330.331322][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3330.341619][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3330.351785][T30571] Call Trace: [ 3330.355144][T30571] [ 3330.358145][T30571] dump_stack_lvl+0x1c8/0x256 [ 3330.363009][T30571] dump_stack+0x1a/0x1c [ 3330.367325][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3330.373180][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3330.378370][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3330.384400][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3330.389197][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3330.395154][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3330.401112][T30571] ? should_fail+0x3f/0x810 [ 3330.405744][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3330.410987][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3330.417371][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3330.423324][T30571] __msan_chain_origin+0xbd/0x140 [ 3330.428481][T30571] ___sys_recvmsg+0x522/0x890 [ 3330.433282][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3330.438105][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3330.444145][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3330.450098][T30571] do_recvmmsg+0x55a/0x1180 [ 3330.454735][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3330.461119][T30571] ? do_syscall_64+0x3d/0xb0 [ 3330.465828][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.470991][T30571] do_syscall_64+0x3d/0xb0 [ 3330.475524][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.481580][T30571] RIP: 0033:0x7f13f0a89279 [ 3330.486089][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3330.505842][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3330.514377][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3330.522452][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3330.530531][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3330.538598][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3330.546671][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3330.554765][T30571] [ 3330.562641][T30571] Uninit was stored to memory at: [ 3330.567849][T30571] ___sys_recvmsg+0x522/0x890 [ 3330.573116][T30571] do_recvmmsg+0x55a/0x1180 [ 3330.577743][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.582979][T30571] do_syscall_64+0x3d/0xb0 [ 3330.587517][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.593692][T30571] [ 3330.596091][T30571] Uninit was stored to memory at: [ 3330.601288][T30571] ___sys_recvmsg+0x522/0x890 [ 3330.606170][T30571] do_recvmmsg+0x55a/0x1180 [ 3330.610798][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.616052][T30571] do_syscall_64+0x3d/0xb0 [ 3330.620589][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.626783][T30571] [ 3330.629168][T30571] Uninit was stored to memory at: [ 3330.634490][T30571] ___sys_recvmsg+0x522/0x890 [ 3330.639308][T30571] do_recvmmsg+0x55a/0x1180 [ 3330.644080][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.649242][T30571] do_syscall_64+0x3d/0xb0 [ 3330.653918][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.659983][T30571] [ 3330.662480][T30571] Uninit was stored to memory at: [ 3330.667668][T30571] ___sys_recvmsg+0x522/0x890 [ 3330.672589][T30571] do_recvmmsg+0x55a/0x1180 [ 3330.677240][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.682468][T30571] do_syscall_64+0x3d/0xb0 [ 3330.687009][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.693145][T30571] [ 3330.695552][T30571] Uninit was stored to memory at: [ 3330.700734][T30571] ___sys_recvmsg+0x522/0x890 [ 3330.705671][T30571] do_recvmmsg+0x55a/0x1180 [ 3330.710332][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.715620][T30571] do_syscall_64+0x3d/0xb0 [ 3330.720160][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.726357][T30571] [ 3330.728746][T30571] Uninit was stored to memory at: [ 3330.734018][T30571] ___sys_recvmsg+0x522/0x890 [ 3330.738865][T30571] do_recvmmsg+0x55a/0x1180 [ 3330.743621][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.748779][T30571] do_syscall_64+0x3d/0xb0 [ 3330.753462][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.759530][T30571] [ 3330.762033][T30571] Uninit was stored to memory at: [ 3330.767232][T30571] ___sys_recvmsg+0x522/0x890 [ 3330.772159][T30571] do_recvmmsg+0x55a/0x1180 [ 3330.776796][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3330.782074][T30571] do_syscall_64+0x3d/0xb0 [ 3330.786631][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.792838][T30571] [ 3330.795229][T30571] Local variable msg_sys created at: [ 3330.800589][T30571] do_recvmmsg+0x5c/0x1180 [ 3330.805223][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3331.629615][T30572] not chained 16530000 origins [ 3331.634936][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3331.645203][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3331.655359][T30572] Call Trace: [ 3331.658704][T30572] [ 3331.661700][T30572] dump_stack_lvl+0x1c8/0x256 [ 3331.666552][T30572] dump_stack+0x1a/0x1c [ 3331.670865][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3331.676722][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3331.681909][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3331.687941][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3331.692735][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3331.698686][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3331.704641][T30572] ? should_fail+0x3f/0x810 [ 3331.709294][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3331.714538][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3331.720926][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3331.726873][T30572] __msan_chain_origin+0xbd/0x140 [ 3331.732028][T30572] ___sys_recvmsg+0x522/0x890 [ 3331.736821][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3331.741637][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3331.747685][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3331.753650][T30572] do_recvmmsg+0x55a/0x1180 [ 3331.758292][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3331.764682][T30572] ? do_syscall_64+0x3d/0xb0 [ 3331.769392][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3331.774558][T30572] do_syscall_64+0x3d/0xb0 [ 3331.779090][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3331.785141][T30572] RIP: 0033:0x7f13f0a89279 [ 3331.789649][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3331.809424][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3331.817967][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3331.826043][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3331.834115][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3331.842182][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3331.850263][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3331.858371][T30572] [ 3331.866984][T30572] Uninit was stored to memory at: [ 3331.873607][T30572] ___sys_recvmsg+0x522/0x890 [ 3331.878422][T30572] do_recvmmsg+0x55a/0x1180 [ 3331.883177][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3331.888346][T30572] do_syscall_64+0x3d/0xb0 [ 3331.893001][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3331.899074][T30572] [ 3331.901459][T30572] Uninit was stored to memory at: [ 3331.906763][T30572] ___sys_recvmsg+0x522/0x890 [ 3331.911656][T30572] do_recvmmsg+0x55a/0x1180 [ 3331.916278][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3331.921524][T30572] do_syscall_64+0x3d/0xb0 [ 3331.926167][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3331.932334][T30572] [ 3331.934718][T30572] Uninit was stored to memory at: [ 3331.939897][T30572] ___sys_recvmsg+0x522/0x890 [ 3331.944805][T30572] do_recvmmsg+0x55a/0x1180 [ 3331.949428][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3331.954697][T30572] do_syscall_64+0x3d/0xb0 [ 3331.959246][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3331.965436][T30572] [ 3331.967823][T30572] Uninit was stored to memory at: [ 3331.973554][T30572] ___sys_recvmsg+0x522/0x890 [ 3331.978357][T30572] do_recvmmsg+0x55a/0x1180 [ 3331.983096][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3331.988251][T30572] do_syscall_64+0x3d/0xb0 [ 3331.992900][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3331.998971][T30572] [ 3332.001353][T30572] Uninit was stored to memory at: [ 3332.006652][T30572] ___sys_recvmsg+0x522/0x890 [ 3332.011452][T30572] do_recvmmsg+0x55a/0x1180 [ 3332.016169][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3332.021340][T30572] do_syscall_64+0x3d/0xb0 [ 3332.026046][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3332.032222][T30572] [ 3332.034605][T30572] Uninit was stored to memory at: [ 3332.039787][T30572] ___sys_recvmsg+0x522/0x890 [ 3332.044753][T30572] do_recvmmsg+0x55a/0x1180 [ 3332.049383][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3332.054701][T30572] do_syscall_64+0x3d/0xb0 [ 3332.059244][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3332.065485][T30572] [ 3332.067875][T30572] Uninit was stored to memory at: [ 3332.073215][T30572] ___sys_recvmsg+0x522/0x890 [ 3332.078011][T30572] do_recvmmsg+0x55a/0x1180 [ 3332.082745][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3332.087906][T30572] do_syscall_64+0x3d/0xb0 [ 3332.092601][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3332.098668][T30572] [ 3332.101051][T30572] Local variable msg_sys created at: [ 3332.106595][T30572] do_recvmmsg+0x5c/0x1180 [ 3332.111145][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3332.837098][T30440] not chained 16540000 origins [ 3332.842238][T30440] CPU: 0 PID: 30440 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3332.852538][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3332.862702][T30440] Call Trace: [ 3332.866064][T30440] [ 3332.869068][T30440] dump_stack_lvl+0x1c8/0x256 [ 3332.873927][T30440] dump_stack+0x1a/0x1c [ 3332.878254][T30440] kmsan_internal_chain_origin+0x78/0x120 [ 3332.884134][T30440] ? filter_irq_stacks+0x5c/0x1a0 [ 3332.889352][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3332.895403][T30440] ? do_recvmmsg+0x55a/0x1180 [ 3332.900213][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3332.906179][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3332.912147][T30440] ? should_fail+0x3f/0x810 [ 3332.916795][T30440] ? __stack_depot_save+0x21/0x4b0 [ 3332.922053][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3332.928457][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3332.934423][T30440] __msan_chain_origin+0xbd/0x140 [ 3332.939595][T30440] ___sys_recvmsg+0x522/0x890 [ 3332.944407][T30440] ? do_recvmmsg+0x5bc/0x1180 [ 3332.949242][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3332.955301][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3332.961272][T30440] do_recvmmsg+0x55a/0x1180 [ 3332.965970][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3332.972373][T30440] ? do_syscall_64+0x3d/0xb0 [ 3332.977102][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3332.982278][T30440] do_syscall_64+0x3d/0xb0 [ 3332.986828][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3332.992896][T30440] RIP: 0033:0x7ff559e89279 [ 3332.997418][T30440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3333.017186][T30440] RSP: 002b:00007ff558ddd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3333.025735][T30440] RAX: ffffffffffffffda RBX: 00007ff559f9c050 RCX: 00007ff559e89279 [ 3333.033826][T30440] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3333.041909][T30440] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3333.049986][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3333.058061][T30440] R13: 00007ff55a4cfb1f R14: 00007ff558ddd300 R15: 0000000000022000 [ 3333.066186][T30440] [ 3333.074473][T30440] Uninit was stored to memory at: [ 3333.079681][T30440] ___sys_recvmsg+0x522/0x890 [ 3333.089752][T30440] do_recvmmsg+0x55a/0x1180 [ 3333.094797][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.099955][T30440] do_syscall_64+0x3d/0xb0 [ 3333.104577][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3333.110644][T30440] [ 3333.113099][T30440] Uninit was stored to memory at: [ 3333.118285][T30440] ___sys_recvmsg+0x522/0x890 [ 3333.123166][T30440] do_recvmmsg+0x55a/0x1180 [ 3333.127794][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.133035][T30440] do_syscall_64+0x3d/0xb0 [ 3333.137579][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3333.143809][T30440] [ 3333.146193][T30440] Uninit was stored to memory at: [ 3333.151373][T30440] ___sys_recvmsg+0x522/0x890 [ 3333.156252][T30440] do_recvmmsg+0x55a/0x1180 [ 3333.160892][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.166127][T30440] do_syscall_64+0x3d/0xb0 [ 3333.170675][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3333.176815][T30440] [ 3333.179203][T30440] Uninit was stored to memory at: [ 3333.184481][T30440] ___sys_recvmsg+0x522/0x890 [ 3333.189283][T30440] do_recvmmsg+0x55a/0x1180 [ 3333.193993][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.199144][T30440] do_syscall_64+0x3d/0xb0 [ 3333.203770][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3333.209838][T30440] [ 3333.212393][T30440] Uninit was stored to memory at: [ 3333.217581][T30440] ___sys_recvmsg+0x522/0x890 [ 3333.222458][T30440] do_recvmmsg+0x55a/0x1180 [ 3333.227088][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.232320][T30440] do_syscall_64+0x3d/0xb0 [ 3333.236864][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3333.243005][T30440] [ 3333.245396][T30440] Uninit was stored to memory at: [ 3333.250598][T30440] ___sys_recvmsg+0x522/0x890 [ 3333.255485][T30440] do_recvmmsg+0x55a/0x1180 [ 3333.260113][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.265406][T30440] do_syscall_64+0x3d/0xb0 [ 3333.269951][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3333.276151][T30440] [ 3333.278532][T30440] Uninit was stored to memory at: [ 3333.283840][T30440] ___sys_recvmsg+0x522/0x890 [ 3333.288644][T30440] do_recvmmsg+0x55a/0x1180 [ 3333.293407][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.298577][T30440] do_syscall_64+0x3d/0xb0 [ 3333.303231][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3333.309306][T30440] [ 3333.311811][T30440] Local variable msg_sys created at: [ 3333.317271][T30440] do_recvmmsg+0x5c/0x1180 [ 3333.321921][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.846926][T30572] not chained 16550000 origins [ 3333.852027][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3333.862325][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3333.872476][T30572] Call Trace: [ 3333.875834][T30572] [ 3333.878844][T30572] dump_stack_lvl+0x1c8/0x256 [ 3333.883703][T30572] dump_stack+0x1a/0x1c [ 3333.888018][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3333.893884][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3333.899087][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3333.905134][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3333.909952][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3333.915922][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3333.921881][T30572] ? should_fail+0x3f/0x810 [ 3333.926517][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3333.931761][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3333.938153][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3333.944102][T30572] __msan_chain_origin+0xbd/0x140 [ 3333.949254][T30572] ___sys_recvmsg+0x522/0x890 [ 3333.954050][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3333.958865][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3333.964901][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3333.970877][T30572] do_recvmmsg+0x55a/0x1180 [ 3333.975516][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3333.981903][T30572] ? do_syscall_64+0x3d/0xb0 [ 3333.986612][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3333.991774][T30572] do_syscall_64+0x3d/0xb0 [ 3333.996310][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.002359][T30572] RIP: 0033:0x7f13f0a89279 [ 3334.006866][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3334.026614][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3334.035147][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3334.043223][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3334.051291][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3334.059356][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3334.067436][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3334.075534][T30572] [ 3334.083205][T30572] Uninit was stored to memory at: [ 3334.088415][T30572] ___sys_recvmsg+0x522/0x890 [ 3334.093745][T30572] do_recvmmsg+0x55a/0x1180 [ 3334.098379][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3334.103650][T30572] do_syscall_64+0x3d/0xb0 [ 3334.108212][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.114388][T30572] [ 3334.116799][T30572] Uninit was stored to memory at: [ 3334.122113][T30572] ___sys_recvmsg+0x522/0x890 [ 3334.126915][T30572] do_recvmmsg+0x55a/0x1180 [ 3334.131637][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3334.136791][T30572] do_syscall_64+0x3d/0xb0 [ 3334.141331][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.147503][T30572] [ 3334.149886][T30572] Uninit was stored to memory at: [ 3334.155142][T30572] ___sys_recvmsg+0x522/0x890 [ 3334.159955][T30572] do_recvmmsg+0x55a/0x1180 [ 3334.164683][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3334.169843][T30572] do_syscall_64+0x3d/0xb0 [ 3334.174482][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.180544][T30572] [ 3334.183022][T30572] Uninit was stored to memory at: [ 3334.188209][T30572] ___sys_recvmsg+0x522/0x890 [ 3334.193100][T30572] do_recvmmsg+0x55a/0x1180 [ 3334.197723][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3334.202977][T30572] do_syscall_64+0x3d/0xb0 [ 3334.207511][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.213695][T30572] [ 3334.216080][T30572] Uninit was stored to memory at: [ 3334.221260][T30572] ___sys_recvmsg+0x522/0x890 [ 3334.226181][T30572] do_recvmmsg+0x55a/0x1180 [ 3334.230816][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3334.236071][T30572] do_syscall_64+0x3d/0xb0 [ 3334.240611][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.246792][T30572] [ 3334.249190][T30572] Uninit was stored to memory at: [ 3334.254480][T30572] ___sys_recvmsg+0x522/0x890 [ 3334.259283][T30572] do_recvmmsg+0x55a/0x1180 [ 3334.264012][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3334.269165][T30572] do_syscall_64+0x3d/0xb0 [ 3334.273812][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.279890][T30572] [ 3334.282429][T30572] Uninit was stored to memory at: [ 3334.287620][T30572] ___sys_recvmsg+0x522/0x890 [ 3334.292578][T30572] do_recvmmsg+0x55a/0x1180 [ 3334.297210][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3334.302530][T30572] do_syscall_64+0x3d/0xb0 [ 3334.307071][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.313294][T30572] [ 3334.315684][T30572] Local variable msg_sys created at: [ 3334.321037][T30572] do_recvmmsg+0x5c/0x1180 [ 3334.325688][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.061361][T30440] not chained 16560000 origins [ 3335.066493][T30440] CPU: 0 PID: 30440 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3335.076788][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3335.086949][T30440] Call Trace: [ 3335.090311][T30440] [ 3335.093339][T30440] dump_stack_lvl+0x1c8/0x256 [ 3335.098207][T30440] dump_stack+0x1a/0x1c [ 3335.102519][T30440] kmsan_internal_chain_origin+0x78/0x120 [ 3335.108418][T30440] ? filter_irq_stacks+0x5c/0x1a0 [ 3335.113637][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3335.119698][T30440] ? do_recvmmsg+0x55a/0x1180 [ 3335.124504][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3335.130472][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3335.136484][T30440] ? should_fail+0x3f/0x810 [ 3335.141137][T30440] ? __stack_depot_save+0x21/0x4b0 [ 3335.146396][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3335.152800][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3335.158757][T30440] __msan_chain_origin+0xbd/0x140 [ 3335.163943][T30440] ___sys_recvmsg+0x522/0x890 [ 3335.168753][T30440] ? do_recvmmsg+0x5bc/0x1180 [ 3335.173605][T30440] ? kmsan_internal_check_memory+0x94/0x530 [ 3335.179651][T30440] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3335.185613][T30440] do_recvmmsg+0x55a/0x1180 [ 3335.190265][T30440] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3335.196672][T30440] ? do_syscall_64+0x3d/0xb0 [ 3335.201399][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.206602][T30440] do_syscall_64+0x3d/0xb0 [ 3335.211235][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.217318][T30440] RIP: 0033:0x7ff559e89279 [ 3335.221835][T30440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3335.241607][T30440] RSP: 002b:00007ff558ddd168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3335.250163][T30440] RAX: ffffffffffffffda RBX: 00007ff559f9c050 RCX: 00007ff559e89279 [ 3335.258257][T30440] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3335.266360][T30440] RBP: 00007ff559ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3335.274703][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3335.282793][T30440] R13: 00007ff55a4cfb1f R14: 00007ff558ddd300 R15: 0000000000022000 [ 3335.290901][T30440] [ 3335.298327][T30440] Uninit was stored to memory at: [ 3335.303983][T30440] ___sys_recvmsg+0x522/0x890 [ 3335.308785][T30440] do_recvmmsg+0x55a/0x1180 [ 3335.313490][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.318644][T30440] do_syscall_64+0x3d/0xb0 [ 3335.323256][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.329341][T30440] [ 3335.331816][T30440] Uninit was stored to memory at: [ 3335.337024][T30440] ___sys_recvmsg+0x522/0x890 [ 3335.341905][T30440] do_recvmmsg+0x55a/0x1180 [ 3335.346553][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.351782][T30440] do_syscall_64+0x3d/0xb0 [ 3335.356327][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.362490][T30440] [ 3335.364877][T30440] Uninit was stored to memory at: [ 3335.370089][T30440] ___sys_recvmsg+0x522/0x890 [ 3335.374974][T30440] do_recvmmsg+0x55a/0x1180 [ 3335.379602][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.384829][T30440] do_syscall_64+0x3d/0xb0 [ 3335.389383][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.395524][T30440] [ 3335.397912][T30440] Uninit was stored to memory at: [ 3335.403167][T30440] ___sys_recvmsg+0x522/0x890 [ 3335.407966][T30440] do_recvmmsg+0x55a/0x1180 [ 3335.412666][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.417823][T30440] do_syscall_64+0x3d/0xb0 [ 3335.422453][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.428541][T30440] [ 3335.430925][T30440] Uninit was stored to memory at: [ 3335.436186][T30440] ___sys_recvmsg+0x522/0x890 [ 3335.441069][T30440] do_recvmmsg+0x55a/0x1180 [ 3335.445790][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.450947][T30440] do_syscall_64+0x3d/0xb0 [ 3335.455568][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.461728][T30440] [ 3335.464116][T30440] Uninit was stored to memory at: [ 3335.469304][T30440] ___sys_recvmsg+0x522/0x890 [ 3335.474201][T30440] do_recvmmsg+0x55a/0x1180 [ 3335.478841][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.484104][T30440] do_syscall_64+0x3d/0xb0 [ 3335.488650][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.494874][T30440] [ 3335.497267][T30440] Uninit was stored to memory at: [ 3335.502612][T30440] ___sys_recvmsg+0x522/0x890 [ 3335.507425][T30440] do_recvmmsg+0x55a/0x1180 [ 3335.512187][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3335.517356][T30440] do_syscall_64+0x3d/0xb0 [ 3335.523389][T30440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.529504][T30440] [ 3335.532051][T30440] Local variable msg_sys created at: [ 3335.537411][T30440] do_recvmmsg+0x5c/0x1180 [ 3335.542108][T30440] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.089861][T30572] not chained 16570000 origins [ 3336.095214][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3336.105686][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3336.115839][T30572] Call Trace: [ 3336.119196][T30572] [ 3336.122198][T30572] dump_stack_lvl+0x1c8/0x256 [ 3336.127050][T30572] dump_stack+0x1a/0x1c [ 3336.131348][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3336.137202][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3336.142398][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3336.148427][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3336.153244][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3336.159219][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3336.165179][T30572] ? should_fail+0x3f/0x810 [ 3336.169819][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3336.175068][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3336.181452][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3336.187413][T30572] __msan_chain_origin+0xbd/0x140 [ 3336.192566][T30572] ___sys_recvmsg+0x522/0x890 [ 3336.197363][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3336.202178][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3336.208219][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3336.214175][T30572] do_recvmmsg+0x55a/0x1180 [ 3336.218816][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3336.225208][T30572] ? do_syscall_64+0x3d/0xb0 [ 3336.229930][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.235091][T30572] do_syscall_64+0x3d/0xb0 [ 3336.239628][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.245744][T30572] RIP: 0033:0x7f13f0a89279 [ 3336.250268][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3336.270028][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3336.278583][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3336.286672][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3336.294746][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3336.302839][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3336.310911][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3336.319041][T30572] [ 3336.326751][T30572] Uninit was stored to memory at: [ 3336.332434][T30572] ___sys_recvmsg+0x522/0x890 [ 3336.337241][T30572] do_recvmmsg+0x55a/0x1180 [ 3336.341957][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.347208][T30572] do_syscall_64+0x3d/0xb0 [ 3336.352015][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.358098][T30572] [ 3336.360482][T30572] Uninit was stored to memory at: [ 3336.365767][T30572] ___sys_recvmsg+0x522/0x890 [ 3336.370585][T30572] do_recvmmsg+0x55a/0x1180 [ 3336.375303][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.380475][T30572] do_syscall_64+0x3d/0xb0 [ 3336.385161][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.391235][T30572] [ 3336.393765][T30572] Uninit was stored to memory at: [ 3336.398952][T30572] ___sys_recvmsg+0x522/0x890 [ 3336.403894][T30572] do_recvmmsg+0x55a/0x1180 [ 3336.408516][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.413759][T30572] do_syscall_64+0x3d/0xb0 [ 3336.418303][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.424453][T30572] [ 3336.426838][T30572] Uninit was stored to memory at: [ 3336.432105][T30572] ___sys_recvmsg+0x522/0x890 [ 3336.436904][T30572] do_recvmmsg+0x55a/0x1180 [ 3336.441526][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.446760][T30572] do_syscall_64+0x3d/0xb0 [ 3336.451303][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.457459][T30572] [ 3336.459844][T30572] Uninit was stored to memory at: [ 3336.465098][T30572] ___sys_recvmsg+0x522/0x890 [ 3336.469900][T30572] do_recvmmsg+0x55a/0x1180 [ 3336.474616][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.479887][T30572] do_syscall_64+0x3d/0xb0 [ 3336.484559][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.490632][T30572] [ 3336.493148][T30572] Uninit was stored to memory at: [ 3336.498335][T30572] ___sys_recvmsg+0x522/0x890 [ 3336.503264][T30572] do_recvmmsg+0x55a/0x1180 [ 3336.507901][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.513142][T30572] do_syscall_64+0x3d/0xb0 [ 3336.517687][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.523853][T30572] [ 3336.526242][T30572] Uninit was stored to memory at: [ 3336.531437][T30572] ___sys_recvmsg+0x522/0x890 [ 3336.536332][T30572] do_recvmmsg+0x55a/0x1180 [ 3336.540952][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3336.546177][T30572] do_syscall_64+0x3d/0xb0 [ 3336.550729][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.556939][T30572] [ 3336.559331][T30572] Local variable msg_sys created at: [ 3336.564858][T30572] do_recvmmsg+0x5c/0x1180 [ 3336.569397][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.542134][T30571] not chained 16580000 origins [ 3337.547018][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3337.557312][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3337.567472][T30571] Call Trace: [ 3337.570833][T30571] [ 3337.573840][T30571] dump_stack_lvl+0x1c8/0x256 [ 3337.578703][T30571] dump_stack+0x1a/0x1c [ 3337.583049][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3337.589006][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3337.594207][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3337.600257][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3337.605069][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3337.611043][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3337.617024][T30571] ? should_fail+0x3f/0x810 [ 3337.621679][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3337.626945][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3337.633356][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3337.639327][T30571] __msan_chain_origin+0xbd/0x140 [ 3337.644503][T30571] ___sys_recvmsg+0x522/0x890 [ 3337.649308][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3337.654143][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3337.660195][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3337.666169][T30571] do_recvmmsg+0x55a/0x1180 [ 3337.670816][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3337.677219][T30571] ? do_syscall_64+0x3d/0xb0 [ 3337.681945][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.687130][T30571] do_syscall_64+0x3d/0xb0 [ 3337.691676][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3337.697742][T30571] RIP: 0033:0x7f13f0a89279 [ 3337.702261][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3337.722036][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3337.730590][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3337.738682][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3337.746772][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3337.754861][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3337.762945][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3337.771058][T30571] [ 3337.778623][T30571] Uninit was stored to memory at: [ 3337.784381][T30571] ___sys_recvmsg+0x522/0x890 [ 3337.789291][T30571] do_recvmmsg+0x55a/0x1180 [ 3337.794022][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.799190][T30571] do_syscall_64+0x3d/0xb0 [ 3337.803847][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3337.809925][T30571] [ 3337.812401][T30571] Uninit was stored to memory at: [ 3337.817593][T30571] ___sys_recvmsg+0x522/0x890 [ 3337.822505][T30571] do_recvmmsg+0x55a/0x1180 [ 3337.827143][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.832393][T30571] do_syscall_64+0x3d/0xb0 [ 3337.836935][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3337.843157][T30571] [ 3337.845554][T30571] Uninit was stored to memory at: [ 3337.850752][T30571] ___sys_recvmsg+0x522/0x890 [ 3337.855705][T30571] do_recvmmsg+0x55a/0x1180 [ 3337.860346][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.865653][T30571] do_syscall_64+0x3d/0xb0 [ 3337.870193][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3337.876354][T30571] [ 3337.878741][T30571] Uninit was stored to memory at: [ 3337.884073][T30571] ___sys_recvmsg+0x522/0x890 [ 3337.888874][T30571] do_recvmmsg+0x55a/0x1180 [ 3337.893603][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.898760][T30571] do_syscall_64+0x3d/0xb0 [ 3337.903533][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3337.909602][T30571] [ 3337.912112][T30571] Uninit was stored to memory at: [ 3337.917306][T30571] ___sys_recvmsg+0x522/0x890 [ 3337.922248][T30571] do_recvmmsg+0x55a/0x1180 [ 3337.926880][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.932153][T30571] do_syscall_64+0x3d/0xb0 [ 3337.936697][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3337.942906][T30571] [ 3337.945291][T30571] Uninit was stored to memory at: [ 3337.950831][T30571] ___sys_recvmsg+0x522/0x890 [ 3337.955768][T30571] do_recvmmsg+0x55a/0x1180 [ 3337.960398][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.965697][T30571] do_syscall_64+0x3d/0xb0 [ 3337.970237][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3337.976440][T30571] [ 3337.978833][T30571] Uninit was stored to memory at: [ 3337.984155][T30571] ___sys_recvmsg+0x522/0x890 [ 3337.988958][T30571] do_recvmmsg+0x55a/0x1180 [ 3337.993720][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3337.998881][T30571] do_syscall_64+0x3d/0xb0 [ 3338.003514][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3338.009578][T30571] [ 3338.012035][T30571] Local variable msg_sys created at: [ 3338.017389][T30571] do_recvmmsg+0x5c/0x1180 [ 3338.022009][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3338.872892][T30571] not chained 16590000 origins [ 3338.877776][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3338.888063][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3338.898229][T30571] Call Trace: [ 3338.901581][T30571] [ 3338.904586][T30571] dump_stack_lvl+0x1c8/0x256 [ 3338.909441][T30571] dump_stack+0x1a/0x1c [ 3338.913746][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3338.919616][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3338.924820][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3338.930871][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3338.935686][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3338.941657][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3338.947714][T30571] ? should_fail+0x3f/0x810 [ 3338.952372][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3338.957641][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3338.964049][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3338.970123][T30571] __msan_chain_origin+0xbd/0x140 [ 3338.975277][T30571] ___sys_recvmsg+0x522/0x890 [ 3338.980071][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3338.984888][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3338.990929][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3338.996886][T30571] do_recvmmsg+0x55a/0x1180 [ 3339.001533][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3339.007935][T30571] ? do_syscall_64+0x3d/0xb0 [ 3339.012665][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3339.017833][T30571] do_syscall_64+0x3d/0xb0 [ 3339.022451][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.028513][T30571] RIP: 0033:0x7f13f0a89279 [ 3339.033039][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3339.052788][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3339.061320][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3339.069404][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3339.077473][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3339.085539][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3339.093606][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3339.101732][T30571] [ 3339.112384][T30571] Uninit was stored to memory at: [ 3339.117691][T30571] ___sys_recvmsg+0x522/0x890 [ 3339.127983][T30571] do_recvmmsg+0x55a/0x1180 [ 3339.133197][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3339.138357][T30571] do_syscall_64+0x3d/0xb0 [ 3339.143016][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.149083][T30571] [ 3339.151465][T30571] Uninit was stored to memory at: [ 3339.156773][T30571] ___sys_recvmsg+0x522/0x890 [ 3339.161667][T30571] do_recvmmsg+0x55a/0x1180 [ 3339.166290][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3339.171445][T30571] do_syscall_64+0x3d/0xb0 [ 3339.176088][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.182261][T30571] [ 3339.184661][T30571] Uninit was stored to memory at: [ 3339.189847][T30571] ___sys_recvmsg+0x522/0x890 [ 3339.194763][T30571] do_recvmmsg+0x55a/0x1180 [ 3339.199390][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3339.204663][T30571] do_syscall_64+0x3d/0xb0 [ 3339.209210][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.215395][T30571] [ 3339.217781][T30571] Uninit was stored to memory at: [ 3339.223085][T30571] ___sys_recvmsg+0x522/0x890 [ 3339.227902][T30571] do_recvmmsg+0x55a/0x1180 [ 3339.232640][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3339.237804][T30571] do_syscall_64+0x3d/0xb0 [ 3339.242446][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.248516][T30571] [ 3339.250900][T30571] Uninit was stored to memory at: [ 3339.256223][T30571] ___sys_recvmsg+0x522/0x890 [ 3339.261028][T30571] do_recvmmsg+0x55a/0x1180 [ 3339.265818][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3339.270976][T30571] do_syscall_64+0x3d/0xb0 [ 3339.275675][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.281838][T30571] [ 3339.284219][T30571] Uninit was stored to memory at: [ 3339.289399][T30571] ___sys_recvmsg+0x522/0x890 [ 3339.294364][T30571] do_recvmmsg+0x55a/0x1180 [ 3339.299002][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3339.304322][T30571] do_syscall_64+0x3d/0xb0 [ 3339.308863][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.315187][T30571] [ 3339.317575][T30571] Uninit was stored to memory at: [ 3339.322893][T30571] ___sys_recvmsg+0x522/0x890 [ 3339.327700][T30571] do_recvmmsg+0x55a/0x1180 [ 3339.332478][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3339.337638][T30571] do_syscall_64+0x3d/0xb0 [ 3339.342323][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.348388][T30571] [ 3339.350777][T30571] Local variable msg_sys created at: [ 3339.356286][T30571] do_recvmmsg+0x5c/0x1180 [ 3339.360823][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.260770][T30572] not chained 16600000 origins [ 3340.265838][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3340.276136][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3340.286329][T30572] Call Trace: [ 3340.289683][T30572] [ 3340.292686][T30572] dump_stack_lvl+0x1c8/0x256 [ 3340.297543][T30572] dump_stack+0x1a/0x1c [ 3340.301836][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3340.307893][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3340.313095][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3340.319132][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3340.323931][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3340.329884][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3340.335842][T30572] ? should_fail+0x3f/0x810 [ 3340.340479][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3340.345725][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3340.352135][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3340.358091][T30572] __msan_chain_origin+0xbd/0x140 [ 3340.363247][T30572] ___sys_recvmsg+0x522/0x890 [ 3340.368044][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3340.372864][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3340.378905][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3340.384863][T30572] do_recvmmsg+0x55a/0x1180 [ 3340.389502][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3340.395893][T30572] ? do_syscall_64+0x3d/0xb0 [ 3340.400594][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.405759][T30572] do_syscall_64+0x3d/0xb0 [ 3340.410293][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.416347][T30572] RIP: 0033:0x7f13f0a89279 [ 3340.420854][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3340.440603][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3340.449140][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3340.457216][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3340.465284][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3340.473351][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3340.481416][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3340.489514][T30572] [ 3340.497077][T30572] Uninit was stored to memory at: [ 3340.502746][T30572] ___sys_recvmsg+0x522/0x890 [ 3340.507560][T30572] do_recvmmsg+0x55a/0x1180 [ 3340.512272][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.517432][T30572] do_syscall_64+0x3d/0xb0 [ 3340.522057][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.528127][T30572] [ 3340.530531][T30572] Uninit was stored to memory at: [ 3340.535810][T30572] ___sys_recvmsg+0x522/0x890 [ 3340.540608][T30572] do_recvmmsg+0x55a/0x1180 [ 3340.545308][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.550461][T30572] do_syscall_64+0x3d/0xb0 [ 3340.555117][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.561206][T30572] [ 3340.563681][T30572] Uninit was stored to memory at: [ 3340.568875][T30572] ___sys_recvmsg+0x522/0x890 [ 3340.573756][T30572] do_recvmmsg+0x55a/0x1180 [ 3340.578397][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.583639][T30572] do_syscall_64+0x3d/0xb0 [ 3340.588179][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.594331][T30572] [ 3340.596714][T30572] Uninit was stored to memory at: [ 3340.601985][T30572] ___sys_recvmsg+0x522/0x890 [ 3340.606796][T30572] do_recvmmsg+0x55a/0x1180 [ 3340.611428][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.616726][T30572] do_syscall_64+0x3d/0xb0 [ 3340.621270][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.627486][T30572] [ 3340.629874][T30572] Uninit was stored to memory at: [ 3340.635153][T30572] ___sys_recvmsg+0x522/0x890 [ 3340.639963][T30572] do_recvmmsg+0x55a/0x1180 [ 3340.644728][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.649893][T30572] do_syscall_64+0x3d/0xb0 [ 3340.654582][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.660653][T30572] [ 3340.663177][T30572] Uninit was stored to memory at: [ 3340.668359][T30572] ___sys_recvmsg+0x522/0x890 [ 3340.673295][T30572] do_recvmmsg+0x55a/0x1180 [ 3340.677925][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.683233][T30572] do_syscall_64+0x3d/0xb0 [ 3340.687772][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.693996][T30572] [ 3340.696384][T30572] Uninit was stored to memory at: [ 3340.701742][T30572] ___sys_recvmsg+0x522/0x890 [ 3340.706548][T30572] do_recvmmsg+0x55a/0x1180 [ 3340.711181][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3340.716481][T30572] do_syscall_64+0x3d/0xb0 [ 3340.721024][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.727237][T30572] [ 3340.729631][T30572] Local variable msg_sys created at: [ 3340.735117][T30572] do_recvmmsg+0x5c/0x1180 [ 3340.739658][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3341.768835][T30571] not chained 16610000 origins [ 3341.774078][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3341.784377][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3341.794545][T30571] Call Trace: [ 3341.797899][T30571] [ 3341.800911][T30571] dump_stack_lvl+0x1c8/0x256 [ 3341.805783][T30571] dump_stack+0x1a/0x1c [ 3341.810100][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3341.815974][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3341.821177][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3341.827230][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3341.832047][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3341.838027][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3341.843995][T30571] ? should_fail+0x3f/0x810 [ 3341.848642][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3341.853905][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3341.860318][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3341.866281][T30571] __msan_chain_origin+0xbd/0x140 [ 3341.871450][T30571] ___sys_recvmsg+0x522/0x890 [ 3341.876252][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3341.881071][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3341.887114][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3341.893080][T30571] do_recvmmsg+0x55a/0x1180 [ 3341.897722][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3341.904131][T30571] ? do_syscall_64+0x3d/0xb0 [ 3341.908875][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3341.914073][T30571] do_syscall_64+0x3d/0xb0 [ 3341.918618][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3341.924681][T30571] RIP: 0033:0x7f13f0a89279 [ 3341.929194][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3341.948947][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3341.957501][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3341.965592][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3341.973662][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3341.981746][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3341.989838][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3341.997948][T30571] [ 3342.006595][T30571] Uninit was stored to memory at: [ 3342.012895][T30571] ___sys_recvmsg+0x522/0x890 [ 3342.017724][T30571] do_recvmmsg+0x55a/0x1180 [ 3342.022447][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3342.027609][T30571] do_syscall_64+0x3d/0xb0 [ 3342.032230][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3342.038296][T30571] [ 3342.040685][T30571] Uninit was stored to memory at: [ 3342.046016][T30571] ___sys_recvmsg+0x522/0x890 [ 3342.050826][T30571] do_recvmmsg+0x55a/0x1180 [ 3342.055604][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3342.060760][T30571] do_syscall_64+0x3d/0xb0 [ 3342.065444][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3342.071510][T30571] [ 3342.074036][T30571] Uninit was stored to memory at: [ 3342.079227][T30571] ___sys_recvmsg+0x522/0x890 [ 3342.084166][T30571] do_recvmmsg+0x55a/0x1180 [ 3342.088794][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3342.094175][T30571] do_syscall_64+0x3d/0xb0 [ 3342.098721][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3342.104932][T30571] [ 3342.107319][T30571] Uninit was stored to memory at: [ 3342.112634][T30571] ___sys_recvmsg+0x522/0x890 [ 3342.117434][T30571] do_recvmmsg+0x55a/0x1180 [ 3342.122224][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3342.127399][T30571] do_syscall_64+0x3d/0xb0 [ 3342.132071][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3342.138151][T30571] [ 3342.140540][T30571] Uninit was stored to memory at: [ 3342.145857][T30571] ___sys_recvmsg+0x522/0x890 [ 3342.150670][T30571] do_recvmmsg+0x55a/0x1180 [ 3342.155423][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3342.160572][T30571] do_syscall_64+0x3d/0xb0 [ 3342.165248][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3342.171312][T30571] [ 3342.173856][T30571] Uninit was stored to memory at: [ 3342.179064][T30571] ___sys_recvmsg+0x522/0x890 [ 3342.183995][T30571] do_recvmmsg+0x55a/0x1180 [ 3342.188630][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3342.193927][T30571] do_syscall_64+0x3d/0xb0 [ 3342.198466][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3342.204620][T30571] [ 3342.207009][T30571] Uninit was stored to memory at: [ 3342.212324][T30571] ___sys_recvmsg+0x522/0x890 [ 3342.217136][T30571] do_recvmmsg+0x55a/0x1180 [ 3342.221887][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3342.227052][T30571] do_syscall_64+0x3d/0xb0 [ 3342.231732][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3342.237812][T30571] [ 3342.240203][T30571] Local variable msg_sys created at: [ 3342.245696][T30571] do_recvmmsg+0x5c/0x1180 [ 3342.250240][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3342.505537][T26312] device hsr_slave_0 left promiscuous mode [ 3342.519916][T26312] device hsr_slave_1 left promiscuous mode [ 3342.533526][T26312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3342.541242][T26312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3342.565716][T26312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3342.573466][T26312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3342.584876][T26312] device bridge_slave_1 left promiscuous mode [ 3342.591988][T26312] bridge0: port 2(bridge_slave_1) entered disabled state [ 3342.616366][T26312] device bridge_slave_0 left promiscuous mode [ 3342.623384][T26312] bridge0: port 1(bridge_slave_0) entered disabled state [ 3342.663244][T26312] device team_slave_0 left promiscuous mode [ 3342.669371][T26312] device team_slave_1 left promiscuous mode [ 3342.685734][T26312] device veth1_macvtap left promiscuous mode [ 3342.692041][T26312] device veth0_macvtap left promiscuous mode [ 3342.698347][T26312] device veth1_vlan left promiscuous mode [ 3342.704450][T26312] device veth0_vlan left promiscuous mode [ 3343.450850][T30572] not chained 16620000 origins [ 3343.455965][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3343.466260][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3343.476421][T30572] Call Trace: [ 3343.479777][T30572] [ 3343.482790][T30572] dump_stack_lvl+0x1c8/0x256 [ 3343.487652][T30572] dump_stack+0x1a/0x1c [ 3343.491969][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3343.497844][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3343.503046][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3343.509112][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3343.513922][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3343.519889][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3343.525860][T30572] ? should_fail+0x3f/0x810 [ 3343.530527][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3343.535786][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3343.542194][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3343.548152][T30572] __msan_chain_origin+0xbd/0x140 [ 3343.553319][T30572] ___sys_recvmsg+0x522/0x890 [ 3343.558122][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3343.562948][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3343.569037][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3343.575180][T30572] do_recvmmsg+0x55a/0x1180 [ 3343.579843][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3343.586242][T30572] ? do_syscall_64+0x3d/0xb0 [ 3343.590955][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3343.596120][T30572] do_syscall_64+0x3d/0xb0 [ 3343.600654][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.606710][T30572] RIP: 0033:0x7f13f0a89279 [ 3343.611221][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3343.630986][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3343.639547][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3343.647636][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3343.655734][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3343.663824][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3343.671891][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3343.679994][T30572] [ 3343.687698][T30572] Uninit was stored to memory at: [ 3343.693401][T30572] ___sys_recvmsg+0x522/0x890 [ 3343.698212][T30572] do_recvmmsg+0x55a/0x1180 [ 3343.702958][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3343.708113][T30572] do_syscall_64+0x3d/0xb0 [ 3343.712765][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.718857][T30572] [ 3343.721242][T30572] Uninit was stored to memory at: [ 3343.726535][T30572] ___sys_recvmsg+0x522/0x890 [ 3343.731358][T30572] do_recvmmsg+0x55a/0x1180 [ 3343.736093][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3343.741253][T30572] do_syscall_64+0x3d/0xb0 [ 3343.745955][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.752119][T30572] [ 3343.754508][T30572] Uninit was stored to memory at: [ 3343.759703][T30572] ___sys_recvmsg+0x522/0x890 [ 3343.764662][T30572] do_recvmmsg+0x55a/0x1180 [ 3343.769300][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3343.774615][T30572] do_syscall_64+0x3d/0xb0 [ 3343.779168][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.785386][T30572] [ 3343.787775][T30572] Uninit was stored to memory at: [ 3343.793119][T30572] ___sys_recvmsg+0x522/0x890 [ 3343.797915][T30572] do_recvmmsg+0x55a/0x1180 [ 3343.802645][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3343.807815][T30572] do_syscall_64+0x3d/0xb0 [ 3343.812510][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.818580][T30572] [ 3343.820964][T30572] Uninit was stored to memory at: [ 3343.826338][T30572] ___sys_recvmsg+0x522/0x890 [ 3343.831146][T30572] do_recvmmsg+0x55a/0x1180 [ 3343.835941][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3343.841107][T30572] do_syscall_64+0x3d/0xb0 [ 3343.845829][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.852001][T30572] [ 3343.854388][T30572] Uninit was stored to memory at: [ 3343.859582][T30572] ___sys_recvmsg+0x522/0x890 [ 3343.864563][T30572] do_recvmmsg+0x55a/0x1180 [ 3343.869198][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3343.874517][T30572] do_syscall_64+0x3d/0xb0 [ 3343.879064][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.885294][T30572] [ 3343.887684][T30572] Uninit was stored to memory at: [ 3343.893022][T30572] ___sys_recvmsg+0x522/0x890 [ 3343.897830][T30572] do_recvmmsg+0x55a/0x1180 [ 3343.902608][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3343.907767][T30572] do_syscall_64+0x3d/0xb0 [ 3343.912417][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.918495][T30572] [ 3343.920882][T30572] Local variable msg_sys created at: [ 3343.926392][T30572] do_recvmmsg+0x5c/0x1180 [ 3343.930934][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3344.520250][T26312] team0 (unregistering): Port device team_slave_1 removed [ 3344.567692][T26312] team0 (unregistering): Port device team_slave_0 removed [ 3344.627628][T26312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3344.694387][T26312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3344.978769][T30571] not chained 16630000 origins [ 3344.983873][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3344.994179][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3345.004347][T30571] Call Trace: [ 3345.007698][T30571] [ 3345.010701][T30571] dump_stack_lvl+0x1c8/0x256 [ 3345.015559][T30571] dump_stack+0x1a/0x1c [ 3345.019865][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3345.025733][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3345.030929][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3345.036977][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3345.041808][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3345.047772][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3345.053738][T30571] ? should_fail+0x3f/0x810 [ 3345.058387][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3345.063651][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3345.070068][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3345.076038][T30571] __msan_chain_origin+0xbd/0x140 [ 3345.081204][T30571] ___sys_recvmsg+0x522/0x890 [ 3345.086019][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3345.090852][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3345.096906][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3345.102876][T30571] do_recvmmsg+0x55a/0x1180 [ 3345.107528][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3345.113932][T30571] ? do_syscall_64+0x3d/0xb0 [ 3345.118662][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.123840][T30571] do_syscall_64+0x3d/0xb0 [ 3345.128385][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.134629][T30571] RIP: 0033:0x7f13f0a89279 [ 3345.139152][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3345.158934][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3345.167495][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3345.175603][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3345.183694][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3345.191780][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3345.199854][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3345.207968][T30571] [ 3345.214578][T30571] Uninit was stored to memory at: [ 3345.219793][T30571] ___sys_recvmsg+0x522/0x890 [ 3345.225011][T30571] do_recvmmsg+0x55a/0x1180 [ 3345.229646][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.234888][T30571] do_syscall_64+0x3d/0xb0 [ 3345.239430][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.245599][T30571] [ 3345.247985][T30571] Uninit was stored to memory at: [ 3345.253261][T30571] ___sys_recvmsg+0x522/0x890 [ 3345.258069][T30571] do_recvmmsg+0x55a/0x1180 [ 3345.262777][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.267954][T30571] do_syscall_64+0x3d/0xb0 [ 3345.272584][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.278657][T30571] [ 3345.281083][T30571] Uninit was stored to memory at: [ 3345.286367][T30571] ___sys_recvmsg+0x522/0x890 [ 3345.291167][T30571] do_recvmmsg+0x55a/0x1180 [ 3345.295873][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.301028][T30571] do_syscall_64+0x3d/0xb0 [ 3345.305648][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.311793][T30571] [ 3345.314284][T30571] Uninit was stored to memory at: [ 3345.319473][T30571] ___sys_recvmsg+0x522/0x890 [ 3345.324360][T30571] do_recvmmsg+0x55a/0x1180 [ 3345.328986][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.334217][T30571] do_syscall_64+0x3d/0xb0 [ 3345.338762][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.344898][T30571] [ 3345.347282][T30571] Uninit was stored to memory at: [ 3345.352542][T30571] ___sys_recvmsg+0x522/0x890 [ 3345.357344][T30571] do_recvmmsg+0x55a/0x1180 [ 3345.362036][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.367185][T30571] do_syscall_64+0x3d/0xb0 [ 3345.371792][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.377869][T30571] [ 3345.380255][T30571] Uninit was stored to memory at: [ 3345.385594][T30571] ___sys_recvmsg+0x522/0x890 [ 3345.390454][T30571] do_recvmmsg+0x55a/0x1180 [ 3345.395176][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.400346][T30571] do_syscall_64+0x3d/0xb0 [ 3345.404968][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.411037][T30571] [ 3345.413502][T30571] Uninit was stored to memory at: [ 3345.418712][T30571] ___sys_recvmsg+0x522/0x890 [ 3345.423590][T30571] do_recvmmsg+0x55a/0x1180 [ 3345.428224][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.433487][T30571] do_syscall_64+0x3d/0xb0 [ 3345.438032][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.444174][T30571] [ 3345.446564][T30571] Local variable msg_sys created at: [ 3345.452017][T30571] do_recvmmsg+0x5c/0x1180 [ 3345.456559][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3345.463854][T26312] bond0 (unregistering): Released all slaves [ 3346.367277][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 3346.374038][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 3346.627718][T30572] not chained 16640000 origins [ 3346.632831][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3346.643134][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3346.653318][T30572] Call Trace: [ 3346.656674][T30572] [ 3346.659679][T30572] dump_stack_lvl+0x1c8/0x256 [ 3346.664543][T30572] dump_stack+0x1a/0x1c [ 3346.668859][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3346.674735][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3346.679947][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3346.685994][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3346.690809][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3346.696779][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3346.702749][T30572] ? should_fail+0x3f/0x810 [ 3346.707399][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3346.712664][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3346.719067][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3346.725030][T30572] __msan_chain_origin+0xbd/0x140 [ 3346.730196][T30572] ___sys_recvmsg+0x522/0x890 [ 3346.735004][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3346.739837][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3346.746324][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3346.752298][T30572] do_recvmmsg+0x55a/0x1180 [ 3346.756950][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3346.763357][T30572] ? do_syscall_64+0x3d/0xb0 [ 3346.768106][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3346.773309][T30572] do_syscall_64+0x3d/0xb0 [ 3346.777876][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3346.783955][T30572] RIP: 0033:0x7f13f0a89279 [ 3346.788480][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3346.808259][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3346.816818][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3346.824909][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3346.833007][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3346.841100][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3346.849188][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3346.857300][T30572] [ 3346.865169][T30572] Uninit was stored to memory at: [ 3346.870393][T30572] ___sys_recvmsg+0x522/0x890 [ 3346.875766][T30572] do_recvmmsg+0x55a/0x1180 [ 3346.880401][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3346.885674][T30572] do_syscall_64+0x3d/0xb0 [ 3346.890217][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3346.896430][T30572] [ 3346.898831][T30572] Uninit was stored to memory at: [ 3346.904132][T30572] ___sys_recvmsg+0x522/0x890 [ 3346.908964][T30572] do_recvmmsg+0x55a/0x1180 [ 3346.913711][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3346.918870][T30572] do_syscall_64+0x3d/0xb0 [ 3346.923521][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3346.929586][T30572] [ 3346.932093][T30572] Uninit was stored to memory at: [ 3346.937289][T30572] ___sys_recvmsg+0x522/0x890 [ 3346.942201][T30572] do_recvmmsg+0x55a/0x1180 [ 3346.946830][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3346.952089][T30572] do_syscall_64+0x3d/0xb0 [ 3346.956633][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3346.962789][T30572] [ 3346.965177][T30572] Uninit was stored to memory at: [ 3346.970356][T30572] ___sys_recvmsg+0x522/0x890 [ 3346.975253][T30572] do_recvmmsg+0x55a/0x1180 [ 3346.979883][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3346.985145][T30572] do_syscall_64+0x3d/0xb0 [ 3346.989694][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3346.995869][T30572] [ 3346.998258][T30572] Uninit was stored to memory at: [ 3347.003550][T30572] ___sys_recvmsg+0x522/0x890 [ 3347.008352][T30572] do_recvmmsg+0x55a/0x1180 [ 3347.013088][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3347.018248][T30572] do_syscall_64+0x3d/0xb0 [ 3347.022885][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3347.028948][T30572] [ 3347.031332][T30572] Uninit was stored to memory at: [ 3347.036625][T30572] ___sys_recvmsg+0x522/0x890 [ 3347.041426][T30572] do_recvmmsg+0x55a/0x1180 [ 3347.046152][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3347.051306][T30572] do_syscall_64+0x3d/0xb0 [ 3347.056000][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3347.062162][T30572] [ 3347.064554][T30572] Uninit was stored to memory at: [ 3347.069732][T30572] ___sys_recvmsg+0x522/0x890 [ 3347.074689][T30572] do_recvmmsg+0x55a/0x1180 [ 3347.079319][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3347.084626][T30572] do_syscall_64+0x3d/0xb0 [ 3347.089172][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3347.095388][T30572] [ 3347.097779][T30572] Local variable msg_sys created at: [ 3347.103282][T30572] do_recvmmsg+0x5c/0x1180 [ 3347.107828][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3347.976281][T30571] not chained 16650000 origins [ 3347.981168][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3347.991462][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3348.001627][T30571] Call Trace: [ 3348.004981][T30571] [ 3348.007986][T30571] dump_stack_lvl+0x1c8/0x256 [ 3348.012845][T30571] dump_stack+0x1a/0x1c [ 3348.017156][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3348.023017][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3348.028210][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3348.034250][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3348.039060][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3348.045030][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3348.050995][T30571] ? should_fail+0x3f/0x810 [ 3348.055637][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3348.060893][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3348.067286][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3348.073241][T30571] __msan_chain_origin+0xbd/0x140 [ 3348.078403][T30571] ___sys_recvmsg+0x522/0x890 [ 3348.083201][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3348.088023][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3348.094063][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3348.100023][T30571] do_recvmmsg+0x55a/0x1180 [ 3348.104667][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3348.111054][T30571] ? do_syscall_64+0x3d/0xb0 [ 3348.115769][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3348.120944][T30571] do_syscall_64+0x3d/0xb0 [ 3348.125475][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.131526][T30571] RIP: 0033:0x7f13f0a89279 [ 3348.136040][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3348.155789][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3348.164334][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3348.172412][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3348.180586][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3348.188654][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3348.196726][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3348.204825][T30571] [ 3348.211338][T30571] Uninit was stored to memory at: [ 3348.216916][T30571] ___sys_recvmsg+0x522/0x890 [ 3348.221808][T30571] do_recvmmsg+0x55a/0x1180 [ 3348.226440][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3348.231677][T30571] do_syscall_64+0x3d/0xb0 [ 3348.236238][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.242390][T30571] [ 3348.244777][T30571] Uninit was stored to memory at: [ 3348.249969][T30571] ___sys_recvmsg+0x522/0x890 [ 3348.254844][T30571] do_recvmmsg+0x55a/0x1180 [ 3348.259477][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3348.264717][T30571] do_syscall_64+0x3d/0xb0 [ 3348.269263][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.275404][T30571] [ 3348.277796][T30571] Uninit was stored to memory at: [ 3348.283053][T30571] ___sys_recvmsg+0x522/0x890 [ 3348.287855][T30571] do_recvmmsg+0x55a/0x1180 [ 3348.292562][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3348.297716][T30571] do_syscall_64+0x3d/0xb0 [ 3348.302349][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.308403][T30571] [ 3348.310783][T30571] Uninit was stored to memory at: [ 3348.316150][T30571] ___sys_recvmsg+0x522/0x890 [ 3348.320956][T30571] do_recvmmsg+0x55a/0x1180 [ 3348.325653][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3348.330812][T30571] do_syscall_64+0x3d/0xb0 [ 3348.335430][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.341497][T30571] [ 3348.343953][T30571] Uninit was stored to memory at: [ 3348.349145][T30571] ___sys_recvmsg+0x522/0x890 [ 3348.354026][T30571] do_recvmmsg+0x55a/0x1180 [ 3348.358657][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3348.363891][T30571] do_syscall_64+0x3d/0xb0 [ 3348.368434][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.374569][T30571] [ 3348.376956][T30571] Uninit was stored to memory at: [ 3348.382208][T30571] ___sys_recvmsg+0x522/0x890 [ 3348.387014][T30571] do_recvmmsg+0x55a/0x1180 [ 3348.391702][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3348.396864][T30571] do_syscall_64+0x3d/0xb0 [ 3348.401401][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.407546][T30571] [ 3348.409936][T30571] Uninit was stored to memory at: [ 3348.415263][T30571] ___sys_recvmsg+0x522/0x890 [ 3348.420065][T30571] do_recvmmsg+0x55a/0x1180 [ 3348.424838][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3348.430003][T30571] do_syscall_64+0x3d/0xb0 [ 3348.434684][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.440753][T30571] [ 3348.443270][T30571] Local variable msg_sys created at: [ 3348.448631][T30571] do_recvmmsg+0x5c/0x1180 [ 3348.453308][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.116651][T30571] not chained 16660000 origins [ 3349.121536][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3349.131833][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3349.142007][T30571] Call Trace: [ 3349.145365][T30571] [ 3349.148368][T30571] dump_stack_lvl+0x1c8/0x256 [ 3349.153217][T30571] dump_stack+0x1a/0x1c [ 3349.157530][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3349.163398][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3349.168606][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3349.174651][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3349.179461][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3349.185430][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3349.191400][T30571] ? should_fail+0x3f/0x810 [ 3349.196048][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3349.201308][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3349.207743][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3349.213711][T30571] __msan_chain_origin+0xbd/0x140 [ 3349.218893][T30571] ___sys_recvmsg+0x522/0x890 [ 3349.223689][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3349.228526][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3349.234655][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3349.240613][T30571] do_recvmmsg+0x55a/0x1180 [ 3349.245259][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3349.251650][T30571] ? do_syscall_64+0x3d/0xb0 [ 3349.256365][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.261536][T30571] do_syscall_64+0x3d/0xb0 [ 3349.266074][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.272125][T30571] RIP: 0033:0x7f13f0a89279 [ 3349.276633][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3349.296380][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3349.304928][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3349.313009][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3349.321093][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3349.329177][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3349.337242][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3349.345337][T30571] [ 3349.351824][T30571] Uninit was stored to memory at: [ 3349.357044][T30571] ___sys_recvmsg+0x522/0x890 [ 3349.362197][T30571] do_recvmmsg+0x55a/0x1180 [ 3349.366847][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.372098][T30571] do_syscall_64+0x3d/0xb0 [ 3349.376651][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.382798][T30571] [ 3349.385191][T30571] Uninit was stored to memory at: [ 3349.390375][T30571] ___sys_recvmsg+0x522/0x890 [ 3349.395266][T30571] do_recvmmsg+0x55a/0x1180 [ 3349.399895][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.405143][T30571] do_syscall_64+0x3d/0xb0 [ 3349.409693][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.415921][T30571] [ 3349.418316][T30571] Uninit was stored to memory at: [ 3349.423640][T30571] ___sys_recvmsg+0x522/0x890 [ 3349.428445][T30571] do_recvmmsg+0x55a/0x1180 [ 3349.433202][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.438364][T30571] do_syscall_64+0x3d/0xb0 [ 3349.442982][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.449084][T30571] [ 3349.451469][T30571] Uninit was stored to memory at: [ 3349.456726][T30571] ___sys_recvmsg+0x522/0x890 [ 3349.461530][T30571] do_recvmmsg+0x55a/0x1180 [ 3349.466223][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.471377][T30571] do_syscall_64+0x3d/0xb0 [ 3349.475994][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.482127][T30571] [ 3349.484521][T30571] Uninit was stored to memory at: [ 3349.489710][T30571] ___sys_recvmsg+0x522/0x890 [ 3349.494580][T30571] do_recvmmsg+0x55a/0x1180 [ 3349.499206][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.504491][T30571] do_syscall_64+0x3d/0xb0 [ 3349.509030][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.515168][T30571] [ 3349.517553][T30571] Uninit was stored to memory at: [ 3349.522811][T30571] ___sys_recvmsg+0x522/0x890 [ 3349.527617][T30571] do_recvmmsg+0x55a/0x1180 [ 3349.532319][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.537472][T30571] do_syscall_64+0x3d/0xb0 [ 3349.542085][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.548145][T30571] [ 3349.550541][T30571] Uninit was stored to memory at: [ 3349.555807][T30571] ___sys_recvmsg+0x522/0x890 [ 3349.560614][T30571] do_recvmmsg+0x55a/0x1180 [ 3349.565310][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3349.570463][T30571] do_syscall_64+0x3d/0xb0 [ 3349.575084][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.581158][T30571] [ 3349.583641][T30571] Local variable msg_sys created at: [ 3349.589019][T30571] do_recvmmsg+0x5c/0x1180 [ 3349.593649][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.248386][T30572] not chained 16670000 origins [ 3350.253491][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3350.263787][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3350.273950][T30572] Call Trace: [ 3350.277317][T30572] [ 3350.280321][T30572] dump_stack_lvl+0x1c8/0x256 [ 3350.285186][T30572] dump_stack+0x1a/0x1c [ 3350.289507][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3350.295384][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3350.300596][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3350.306662][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3350.311479][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3350.317441][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3350.323409][T30572] ? should_fail+0x3f/0x810 [ 3350.328067][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3350.333321][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3350.339729][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3350.345694][T30572] __msan_chain_origin+0xbd/0x140 [ 3350.350867][T30572] ___sys_recvmsg+0x522/0x890 [ 3350.355677][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3350.360513][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3350.366568][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3350.372536][T30572] do_recvmmsg+0x55a/0x1180 [ 3350.377190][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3350.383593][T30572] ? do_syscall_64+0x3d/0xb0 [ 3350.388322][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.393504][T30572] do_syscall_64+0x3d/0xb0 [ 3350.398060][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.404129][T30572] RIP: 0033:0x7f13f0a89279 [ 3350.408647][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3350.428423][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3350.436981][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3350.445080][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3350.453162][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3350.461240][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3350.469314][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3350.477425][T30572] [ 3350.483635][T30572] Uninit was stored to memory at: [ 3350.492354][T30572] ___sys_recvmsg+0x522/0x890 [ 3350.497175][T30572] do_recvmmsg+0x55a/0x1180 [ 3350.502146][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.507307][T30572] do_syscall_64+0x3d/0xb0 [ 3350.511945][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.518032][T30572] [ 3350.520423][T30572] Uninit was stored to memory at: [ 3350.525754][T30572] ___sys_recvmsg+0x522/0x890 [ 3350.530572][T30572] do_recvmmsg+0x55a/0x1180 [ 3350.535298][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.540460][T30572] do_syscall_64+0x3d/0xb0 [ 3350.545102][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.551180][T30572] [ 3350.553645][T30572] Uninit was stored to memory at: [ 3350.558835][T30572] ___sys_recvmsg+0x522/0x890 [ 3350.563719][T30572] do_recvmmsg+0x55a/0x1180 [ 3350.568350][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.573584][T30572] do_syscall_64+0x3d/0xb0 [ 3350.578124][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.584270][T30572] [ 3350.586668][T30572] Uninit was stored to memory at: [ 3350.591920][T30572] ___sys_recvmsg+0x522/0x890 [ 3350.596723][T30572] do_recvmmsg+0x55a/0x1180 [ 3350.601348][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.606583][T30572] do_syscall_64+0x3d/0xb0 [ 3350.611124][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.617268][T30572] [ 3350.619662][T30572] Uninit was stored to memory at: [ 3350.624926][T30572] ___sys_recvmsg+0x522/0x890 [ 3350.629749][T30572] do_recvmmsg+0x55a/0x1180 [ 3350.634457][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.639616][T30572] do_syscall_64+0x3d/0xb0 [ 3350.644230][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.650307][T30572] [ 3350.652763][T30572] Uninit was stored to memory at: [ 3350.657963][T30572] ___sys_recvmsg+0x522/0x890 [ 3350.662836][T30572] do_recvmmsg+0x55a/0x1180 [ 3350.667459][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.672688][T30572] do_syscall_64+0x3d/0xb0 [ 3350.677228][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.683372][T30572] [ 3350.685757][T30572] Uninit was stored to memory at: [ 3350.690960][T30572] ___sys_recvmsg+0x522/0x890 [ 3350.695846][T30572] do_recvmmsg+0x55a/0x1180 [ 3350.700479][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3350.705711][T30572] do_syscall_64+0x3d/0xb0 [ 3350.710263][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.716398][T30572] [ 3350.718792][T30572] Local variable msg_sys created at: [ 3350.724228][T30572] do_recvmmsg+0x5c/0x1180 [ 3350.728764][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.337556][T30571] not chained 16680000 origins [ 3351.342648][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3351.352932][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3351.363077][T30571] Call Trace: [ 3351.366420][T30571] [ 3351.369417][T30571] dump_stack_lvl+0x1c8/0x256 [ 3351.374263][T30571] dump_stack+0x1a/0x1c [ 3351.378557][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3351.384417][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3351.389604][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3351.395633][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3351.400428][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3351.406379][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3351.412333][T30571] ? should_fail+0x3f/0x810 [ 3351.416977][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3351.422220][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3351.428610][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3351.434554][T30571] __msan_chain_origin+0xbd/0x140 [ 3351.439708][T30571] ___sys_recvmsg+0x522/0x890 [ 3351.444507][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3351.449323][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3351.455357][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3351.461308][T30571] do_recvmmsg+0x55a/0x1180 [ 3351.465948][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3351.472342][T30571] ? do_syscall_64+0x3d/0xb0 [ 3351.477053][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.482221][T30571] do_syscall_64+0x3d/0xb0 [ 3351.486752][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.492812][T30571] RIP: 0033:0x7f13f0a89279 [ 3351.497318][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3351.517069][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3351.525692][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3351.533800][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3351.541869][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3351.549937][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3351.558002][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3351.566098][T30571] [ 3351.576306][T30571] Uninit was stored to memory at: [ 3351.581521][T30571] ___sys_recvmsg+0x522/0x890 [ 3351.587349][T30571] do_recvmmsg+0x55a/0x1180 [ 3351.592092][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.597278][T30571] do_syscall_64+0x3d/0xb0 [ 3351.601940][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.608012][T30571] [ 3351.610397][T30571] Uninit was stored to memory at: [ 3351.615692][T30571] ___sys_recvmsg+0x522/0x890 [ 3351.620525][T30571] do_recvmmsg+0x55a/0x1180 [ 3351.625297][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.630462][T30571] do_syscall_64+0x3d/0xb0 [ 3351.635157][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.641233][T30571] [ 3351.643776][T30571] Uninit was stored to memory at: [ 3351.648967][T30571] ___sys_recvmsg+0x522/0x890 [ 3351.653931][T30571] do_recvmmsg+0x55a/0x1180 [ 3351.658590][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.663858][T30571] do_syscall_64+0x3d/0xb0 [ 3351.668400][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.674630][T30571] [ 3351.677018][T30571] Uninit was stored to memory at: [ 3351.682349][T30571] ___sys_recvmsg+0x522/0x890 [ 3351.687154][T30571] do_recvmmsg+0x55a/0x1180 [ 3351.691923][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.697083][T30571] do_syscall_64+0x3d/0xb0 [ 3351.701740][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.707802][T30571] [ 3351.710189][T30571] Uninit was stored to memory at: [ 3351.715544][T30571] ___sys_recvmsg+0x522/0x890 [ 3351.720345][T30571] do_recvmmsg+0x55a/0x1180 [ 3351.725134][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.730304][T30571] do_syscall_64+0x3d/0xb0 [ 3351.735014][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.741087][T30571] [ 3351.743617][T30571] Uninit was stored to memory at: [ 3351.748800][T30571] ___sys_recvmsg+0x522/0x890 [ 3351.753782][T30571] do_recvmmsg+0x55a/0x1180 [ 3351.758410][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.763715][T30571] do_syscall_64+0x3d/0xb0 [ 3351.768258][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.774506][T30571] [ 3351.776894][T30571] Uninit was stored to memory at: [ 3351.782229][T30571] ___sys_recvmsg+0x522/0x890 [ 3351.787030][T30571] do_recvmmsg+0x55a/0x1180 [ 3351.791747][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3351.796921][T30571] do_syscall_64+0x3d/0xb0 [ 3351.801458][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.807672][T30571] [ 3351.810057][T30571] Local variable msg_sys created at: [ 3351.815578][T30571] do_recvmmsg+0x5c/0x1180 [ 3351.820219][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.489026][T30572] not chained 16690000 origins [ 3352.494226][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3352.504522][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3352.514680][T30572] Call Trace: [ 3352.518033][T30572] [ 3352.521035][T30572] dump_stack_lvl+0x1c8/0x256 [ 3352.525893][T30572] dump_stack+0x1a/0x1c [ 3352.530203][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3352.536248][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3352.541465][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3352.547542][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3352.552396][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3352.558365][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3352.564359][T30572] ? should_fail+0x3f/0x810 [ 3352.569010][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3352.574270][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3352.580683][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3352.586654][T30572] __msan_chain_origin+0xbd/0x140 [ 3352.591822][T30572] ___sys_recvmsg+0x522/0x890 [ 3352.596635][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3352.601467][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3352.607509][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3352.613482][T30572] do_recvmmsg+0x55a/0x1180 [ 3352.618125][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3352.624535][T30572] ? do_syscall_64+0x3d/0xb0 [ 3352.629256][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.634450][T30572] do_syscall_64+0x3d/0xb0 [ 3352.638999][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3352.645070][T30572] RIP: 0033:0x7f13f0a89279 [ 3352.649587][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3352.669361][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3352.677909][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3352.686007][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3352.694083][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3352.702160][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3352.710239][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3352.718355][T30572] [ 3352.725829][T30572] Uninit was stored to memory at: [ 3352.731059][T30572] ___sys_recvmsg+0x522/0x890 [ 3352.736436][T30572] do_recvmmsg+0x55a/0x1180 [ 3352.741069][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.746335][T30572] do_syscall_64+0x3d/0xb0 [ 3352.750877][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3352.757101][T30572] [ 3352.759491][T30572] Uninit was stored to memory at: [ 3352.764805][T30572] ___sys_recvmsg+0x522/0x890 [ 3352.769607][T30572] do_recvmmsg+0x55a/0x1180 [ 3352.774386][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.779543][T30572] do_syscall_64+0x3d/0xb0 [ 3352.784259][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3352.790340][T30572] [ 3352.792879][T30572] Uninit was stored to memory at: [ 3352.798074][T30572] ___sys_recvmsg+0x522/0x890 [ 3352.803032][T30572] do_recvmmsg+0x55a/0x1180 [ 3352.807664][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.812964][T30572] do_syscall_64+0x3d/0xb0 [ 3352.817509][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3352.823740][T30572] [ 3352.826124][T30572] Uninit was stored to memory at: [ 3352.831306][T30572] ___sys_recvmsg+0x522/0x890 [ 3352.836207][T30572] do_recvmmsg+0x55a/0x1180 [ 3352.840859][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.846184][T30572] do_syscall_64+0x3d/0xb0 [ 3352.850732][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3352.856960][T30572] [ 3352.859357][T30572] Uninit was stored to memory at: [ 3352.864699][T30572] ___sys_recvmsg+0x522/0x890 [ 3352.869501][T30572] do_recvmmsg+0x55a/0x1180 [ 3352.874280][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.879438][T30572] do_syscall_64+0x3d/0xb0 [ 3352.884144][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3352.890209][T30572] [ 3352.892733][T30572] Uninit was stored to memory at: [ 3352.897935][T30572] ___sys_recvmsg+0x522/0x890 [ 3352.902879][T30572] do_recvmmsg+0x55a/0x1180 [ 3352.907508][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.912825][T30572] do_syscall_64+0x3d/0xb0 [ 3352.917377][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3352.923539][T30572] [ 3352.925929][T30572] Uninit was stored to memory at: [ 3352.931111][T30572] ___sys_recvmsg+0x522/0x890 [ 3352.936078][T30572] do_recvmmsg+0x55a/0x1180 [ 3352.940716][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3352.946040][T30572] do_syscall_64+0x3d/0xb0 [ 3352.950582][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3352.956764][T30572] [ 3352.959150][T30572] Local variable msg_sys created at: [ 3352.964659][T30572] do_recvmmsg+0x5c/0x1180 [ 3352.969203][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.497098][T30572] not chained 16700000 origins [ 3353.502302][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3353.512607][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3353.522764][T30572] Call Trace: [ 3353.526116][T30572] [ 3353.529119][T30572] dump_stack_lvl+0x1c8/0x256 [ 3353.533979][T30572] dump_stack+0x1a/0x1c [ 3353.538286][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3353.544158][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3353.549360][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3353.555399][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3353.560204][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3353.566180][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3353.572156][T30572] ? should_fail+0x3f/0x810 [ 3353.576806][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3353.582066][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3353.588470][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3353.594447][T30572] __msan_chain_origin+0xbd/0x140 [ 3353.599608][T30572] ___sys_recvmsg+0x522/0x890 [ 3353.604423][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3353.609249][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3353.615302][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3353.621278][T30572] do_recvmmsg+0x55a/0x1180 [ 3353.625938][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3353.632346][T30572] ? do_syscall_64+0x3d/0xb0 [ 3353.637076][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.642254][T30572] do_syscall_64+0x3d/0xb0 [ 3353.646810][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3353.652871][T30572] RIP: 0033:0x7f13f0a89279 [ 3353.657385][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3353.677155][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3353.685706][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3353.693800][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3353.701880][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3353.709958][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3353.718033][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3353.726144][T30572] [ 3353.735427][T30572] Uninit was stored to memory at: [ 3353.740636][T30572] ___sys_recvmsg+0x522/0x890 [ 3353.746522][T30572] do_recvmmsg+0x55a/0x1180 [ 3353.751155][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.756430][T30572] do_syscall_64+0x3d/0xb0 [ 3353.760975][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3353.767140][T30572] [ 3353.769527][T30572] Uninit was stored to memory at: [ 3353.774883][T30572] ___sys_recvmsg+0x522/0x890 [ 3353.779696][T30572] do_recvmmsg+0x55a/0x1180 [ 3353.784510][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.789671][T30572] do_syscall_64+0x3d/0xb0 [ 3353.794378][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3353.800443][T30572] [ 3353.802984][T30572] Uninit was stored to memory at: [ 3353.808197][T30572] ___sys_recvmsg+0x522/0x890 [ 3353.813165][T30572] do_recvmmsg+0x55a/0x1180 [ 3353.817799][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.823108][T30572] do_syscall_64+0x3d/0xb0 [ 3353.827652][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3353.833891][T30572] [ 3353.836281][T30572] Uninit was stored to memory at: [ 3353.841474][T30572] ___sys_recvmsg+0x522/0x890 [ 3353.846421][T30572] do_recvmmsg+0x55a/0x1180 [ 3353.851049][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.856410][T30572] do_syscall_64+0x3d/0xb0 [ 3353.860972][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3353.867218][T30572] [ 3353.869612][T30572] Uninit was stored to memory at: [ 3353.874932][T30572] ___sys_recvmsg+0x522/0x890 [ 3353.879739][T30572] do_recvmmsg+0x55a/0x1180 [ 3353.884529][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.889709][T30572] do_syscall_64+0x3d/0xb0 [ 3353.894433][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3353.900527][T30572] [ 3353.903061][T30572] Uninit was stored to memory at: [ 3353.908247][T30572] ___sys_recvmsg+0x522/0x890 [ 3353.913155][T30572] do_recvmmsg+0x55a/0x1180 [ 3353.917810][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.923137][T30572] do_syscall_64+0x3d/0xb0 [ 3353.927699][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3353.933949][T30572] [ 3353.936335][T30572] Uninit was stored to memory at: [ 3353.941688][T30572] ___sys_recvmsg+0x522/0x890 [ 3353.946505][T30572] do_recvmmsg+0x55a/0x1180 [ 3353.951134][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3353.956438][T30572] do_syscall_64+0x3d/0xb0 [ 3353.960986][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3353.967194][T30572] [ 3353.969573][T30572] Local variable msg_sys created at: [ 3353.975059][T30572] do_recvmmsg+0x5c/0x1180 [ 3353.979609][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3354.544122][T30572] not chained 16710000 origins [ 3354.549023][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3354.559321][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3354.569487][T30572] Call Trace: [ 3354.572847][T30572] [ 3354.575853][T30572] dump_stack_lvl+0x1c8/0x256 [ 3354.580714][T30572] dump_stack+0x1a/0x1c [ 3354.585011][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3354.590958][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3354.596171][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3354.602222][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3354.607030][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3354.612989][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3354.618942][T30572] ? should_fail+0x3f/0x810 [ 3354.623579][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3354.628820][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3354.635205][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3354.641153][T30572] __msan_chain_origin+0xbd/0x140 [ 3354.646305][T30572] ___sys_recvmsg+0x522/0x890 [ 3354.651099][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3354.655917][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3354.661950][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3354.667900][T30572] do_recvmmsg+0x55a/0x1180 [ 3354.672541][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3354.678926][T30572] ? do_syscall_64+0x3d/0xb0 [ 3354.683639][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3354.688806][T30572] do_syscall_64+0x3d/0xb0 [ 3354.693336][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3354.699397][T30572] RIP: 0033:0x7f13f0a89279 [ 3354.703905][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3354.723658][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3354.732192][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3354.740289][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3354.748358][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3354.756438][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3354.764499][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3354.772609][T30572] [ 3354.780740][T30572] Uninit was stored to memory at: [ 3354.787189][T30572] ___sys_recvmsg+0x522/0x890 [ 3354.792091][T30572] do_recvmmsg+0x55a/0x1180 [ 3354.796724][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3354.801989][T30572] do_syscall_64+0x3d/0xb0 [ 3354.806541][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3354.812726][T30572] [ 3354.815117][T30572] Uninit was stored to memory at: [ 3354.820377][T30572] ___sys_recvmsg+0x522/0x890 [ 3354.825267][T30572] do_recvmmsg+0x55a/0x1180 [ 3354.829989][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3354.835301][T30572] do_syscall_64+0x3d/0xb0 [ 3354.839856][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3354.846083][T30572] [ 3354.848475][T30572] Uninit was stored to memory at: [ 3354.853822][T30572] ___sys_recvmsg+0x522/0x890 [ 3354.858627][T30572] do_recvmmsg+0x55a/0x1180 [ 3354.863484][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3354.868644][T30572] do_syscall_64+0x3d/0xb0 [ 3354.873271][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3354.879341][T30572] [ 3354.881858][T30572] Uninit was stored to memory at: [ 3354.887047][T30572] ___sys_recvmsg+0x522/0x890 [ 3354.892003][T30572] do_recvmmsg+0x55a/0x1180 [ 3354.896632][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3354.901870][T30572] do_syscall_64+0x3d/0xb0 [ 3354.906413][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3354.912615][T30572] [ 3354.915010][T30572] Uninit was stored to memory at: [ 3354.920198][T30572] ___sys_recvmsg+0x522/0x890 [ 3354.925137][T30572] do_recvmmsg+0x55a/0x1180 [ 3354.929772][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3354.935067][T30572] do_syscall_64+0x3d/0xb0 [ 3354.939610][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3354.945811][T30572] [ 3354.948202][T30572] Uninit was stored to memory at: [ 3354.953524][T30572] ___sys_recvmsg+0x522/0x890 [ 3354.958329][T30572] do_recvmmsg+0x55a/0x1180 [ 3354.963095][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3354.968256][T30572] do_syscall_64+0x3d/0xb0 [ 3354.972937][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3354.979005][T30572] [ 3354.981399][T30572] Uninit was stored to memory at: [ 3354.986714][T30572] ___sys_recvmsg+0x522/0x890 [ 3354.991535][T30572] do_recvmmsg+0x55a/0x1180 [ 3354.996311][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3355.001471][T30572] do_syscall_64+0x3d/0xb0 [ 3355.006102][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3355.012324][T30572] [ 3355.014714][T30572] Local variable msg_sys created at: [ 3355.020107][T30572] do_recvmmsg+0x5c/0x1180 [ 3355.024779][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3355.741433][T30571] not chained 16720000 origins [ 3355.746487][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3355.756775][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3355.766937][T30571] Call Trace: [ 3355.770288][T30571] [ 3355.773299][T30571] dump_stack_lvl+0x1c8/0x256 [ 3355.778169][T30571] dump_stack+0x1a/0x1c [ 3355.782477][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3355.788362][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3355.793587][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3355.799650][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3355.804471][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3355.810451][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3355.816438][T30571] ? should_fail+0x3f/0x810 [ 3355.821192][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3355.826465][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3355.832873][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3355.838835][T30571] __msan_chain_origin+0xbd/0x140 [ 3355.844007][T30571] ___sys_recvmsg+0x522/0x890 [ 3355.848820][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3355.853687][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3355.859751][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3355.865731][T30571] do_recvmmsg+0x55a/0x1180 [ 3355.870396][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3355.876818][T30571] ? do_syscall_64+0x3d/0xb0 [ 3355.881553][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3355.886736][T30571] do_syscall_64+0x3d/0xb0 [ 3355.891287][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3355.897361][T30571] RIP: 0033:0x7f13f0a89279 [ 3355.901915][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3355.921692][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3355.930250][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3355.938370][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3355.946476][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3355.954570][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3355.962657][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3355.970795][T30571] [ 3355.978533][T30571] Uninit was stored to memory at: [ 3355.986192][T30571] ___sys_recvmsg+0x522/0x890 [ 3355.991035][T30571] do_recvmmsg+0x55a/0x1180 [ 3355.995753][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.000917][T30571] do_syscall_64+0x3d/0xb0 [ 3356.005552][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.011749][T30571] [ 3356.014142][T30571] Uninit was stored to memory at: [ 3356.019374][T30571] ___sys_recvmsg+0x522/0x890 [ 3356.024318][T30571] do_recvmmsg+0x55a/0x1180 [ 3356.028950][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.034244][T30571] do_syscall_64+0x3d/0xb0 [ 3356.038799][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.044988][T30571] [ 3356.047380][T30571] Uninit was stored to memory at: [ 3356.052680][T30571] ___sys_recvmsg+0x522/0x890 [ 3356.057485][T30571] do_recvmmsg+0x55a/0x1180 [ 3356.062228][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.067391][T30571] do_syscall_64+0x3d/0xb0 [ 3356.072054][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.078116][T30571] [ 3356.080502][T30571] Uninit was stored to memory at: [ 3356.085808][T30571] ___sys_recvmsg+0x522/0x890 [ 3356.090622][T30571] do_recvmmsg+0x55a/0x1180 [ 3356.095393][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.100552][T30571] do_syscall_64+0x3d/0xb0 [ 3356.105224][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.111296][T30571] [ 3356.113812][T30571] Uninit was stored to memory at: [ 3356.119086][T30571] ___sys_recvmsg+0x522/0x890 [ 3356.124018][T30571] do_recvmmsg+0x55a/0x1180 [ 3356.128647][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.133930][T30571] do_syscall_64+0x3d/0xb0 [ 3356.138498][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.144694][T30571] [ 3356.147084][T30571] Uninit was stored to memory at: [ 3356.152389][T30571] ___sys_recvmsg+0x522/0x890 [ 3356.157189][T30571] do_recvmmsg+0x55a/0x1180 [ 3356.161896][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.167049][T30571] do_syscall_64+0x3d/0xb0 [ 3356.171705][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.177775][T30571] [ 3356.180158][T30571] Uninit was stored to memory at: [ 3356.185466][T30571] ___sys_recvmsg+0x522/0x890 [ 3356.190280][T30571] do_recvmmsg+0x55a/0x1180 [ 3356.195046][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.200205][T30571] do_syscall_64+0x3d/0xb0 [ 3356.204882][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.210958][T30571] [ 3356.213479][T30571] Local variable msg_sys created at: [ 3356.218835][T30571] do_recvmmsg+0x5c/0x1180 [ 3356.223493][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.812728][T30571] not chained 16730000 origins [ 3356.817622][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3356.827929][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3356.838097][T30571] Call Trace: [ 3356.841455][T30571] [ 3356.844464][T30571] dump_stack_lvl+0x1c8/0x256 [ 3356.849333][T30571] dump_stack+0x1a/0x1c [ 3356.853651][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3356.859530][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3356.864738][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3356.870810][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3356.875627][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3356.881596][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3356.887562][T30571] ? should_fail+0x3f/0x810 [ 3356.892213][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3356.897476][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3356.903879][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3356.909838][T30571] __msan_chain_origin+0xbd/0x140 [ 3356.915010][T30571] ___sys_recvmsg+0x522/0x890 [ 3356.919820][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3356.924660][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3356.930713][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3356.936683][T30571] do_recvmmsg+0x55a/0x1180 [ 3356.941376][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3356.947786][T30571] ? do_syscall_64+0x3d/0xb0 [ 3356.952520][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3356.957705][T30571] do_syscall_64+0x3d/0xb0 [ 3356.962253][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.968329][T30571] RIP: 0033:0x7f13f0a89279 [ 3356.972850][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3356.992618][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3357.001179][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3357.009273][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3357.017368][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3357.025450][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3357.033528][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3357.041640][T30571] [ 3357.047880][T30571] Uninit was stored to memory at: [ 3357.053460][T30571] ___sys_recvmsg+0x522/0x890 [ 3357.058269][T30571] do_recvmmsg+0x55a/0x1180 [ 3357.063037][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3357.068196][T30571] do_syscall_64+0x3d/0xb0 [ 3357.072818][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3357.078889][T30571] [ 3357.081271][T30571] Uninit was stored to memory at: [ 3357.086600][T30571] ___sys_recvmsg+0x522/0x890 [ 3357.091404][T30571] do_recvmmsg+0x55a/0x1180 [ 3357.096176][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3357.101344][T30571] do_syscall_64+0x3d/0xb0 [ 3357.106015][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3357.112157][T30571] [ 3357.114542][T30571] Uninit was stored to memory at: [ 3357.119726][T30571] ___sys_recvmsg+0x522/0x890 [ 3357.124649][T30571] do_recvmmsg+0x55a/0x1180 [ 3357.129275][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3357.134562][T30571] do_syscall_64+0x3d/0xb0 [ 3357.139136][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3357.145335][T30571] [ 3357.147731][T30571] Uninit was stored to memory at: [ 3357.152996][T30571] ___sys_recvmsg+0x522/0x890 [ 3357.157796][T30571] do_recvmmsg+0x55a/0x1180 [ 3357.162539][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3357.167700][T30571] do_syscall_64+0x3d/0xb0 [ 3357.172370][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3357.178439][T30571] [ 3357.180823][T30571] Uninit was stored to memory at: [ 3357.186137][T30571] ___sys_recvmsg+0x522/0x890 [ 3357.190941][T30571] do_recvmmsg+0x55a/0x1180 [ 3357.195699][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3357.200852][T30571] do_syscall_64+0x3d/0xb0 [ 3357.205509][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3357.211662][T30571] [ 3357.214067][T30571] Uninit was stored to memory at: [ 3357.219254][T30571] ___sys_recvmsg+0x522/0x890 [ 3357.224203][T30571] do_recvmmsg+0x55a/0x1180 [ 3357.228861][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3357.234154][T30571] do_syscall_64+0x3d/0xb0 [ 3357.238712][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3357.244901][T30571] [ 3357.247290][T30571] Uninit was stored to memory at: [ 3357.252599][T30571] ___sys_recvmsg+0x522/0x890 [ 3357.257401][T30571] do_recvmmsg+0x55a/0x1180 [ 3357.262102][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3357.267260][T30571] do_syscall_64+0x3d/0xb0 [ 3357.272021][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3357.278096][T30571] [ 3357.280482][T30571] Local variable msg_sys created at: [ 3357.285971][T30571] do_recvmmsg+0x5c/0x1180 [ 3357.290534][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3357.937638][T30571] not chained 16740000 origins [ 3357.942782][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3357.953085][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3357.963250][T30571] Call Trace: [ 3357.966613][T30571] [ 3357.969621][T30571] dump_stack_lvl+0x1c8/0x256 [ 3357.974484][T30571] dump_stack+0x1a/0x1c [ 3357.978798][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3357.984671][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3357.989870][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3357.995918][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3358.000730][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3358.006703][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3358.012677][T30571] ? should_fail+0x3f/0x810 [ 3358.017332][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3358.022589][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3358.028994][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3358.034959][T30571] __msan_chain_origin+0xbd/0x140 [ 3358.040131][T30571] ___sys_recvmsg+0x522/0x890 [ 3358.044941][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3358.049770][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3358.055820][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3358.061784][T30571] do_recvmmsg+0x55a/0x1180 [ 3358.066440][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3358.072843][T30571] ? do_syscall_64+0x3d/0xb0 [ 3358.077572][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3358.082750][T30571] do_syscall_64+0x3d/0xb0 [ 3358.087291][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.093360][T30571] RIP: 0033:0x7f13f0a89279 [ 3358.097895][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3358.117647][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3358.126203][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3358.134286][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3358.142361][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3358.150429][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3358.158500][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3358.166597][T30571] [ 3358.174300][T30571] Uninit was stored to memory at: [ 3358.179509][T30571] ___sys_recvmsg+0x522/0x890 [ 3358.184883][T30571] do_recvmmsg+0x55a/0x1180 [ 3358.189521][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3358.194780][T30571] do_syscall_64+0x3d/0xb0 [ 3358.199326][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.205490][T30571] [ 3358.207877][T30571] Uninit was stored to memory at: [ 3358.213163][T30571] ___sys_recvmsg+0x522/0x890 [ 3358.217968][T30571] do_recvmmsg+0x55a/0x1180 [ 3358.222694][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3358.227846][T30571] do_syscall_64+0x3d/0xb0 [ 3358.232489][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.238555][T30571] [ 3358.240940][T30571] Uninit was stored to memory at: [ 3358.246230][T30571] ___sys_recvmsg+0x522/0x890 [ 3358.251384][T30571] do_recvmmsg+0x55a/0x1180 [ 3358.256134][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3358.261293][T30571] do_syscall_64+0x3d/0xb0 [ 3358.265934][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.272100][T30571] [ 3358.274487][T30571] Uninit was stored to memory at: [ 3358.279672][T30571] ___sys_recvmsg+0x522/0x890 [ 3358.284625][T30571] do_recvmmsg+0x55a/0x1180 [ 3358.289259][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3358.294570][T30571] do_syscall_64+0x3d/0xb0 [ 3358.299122][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.305338][T30571] [ 3358.307723][T30571] Uninit was stored to memory at: [ 3358.313006][T30571] ___sys_recvmsg+0x522/0x890 [ 3358.317808][T30571] do_recvmmsg+0x55a/0x1180 [ 3358.322580][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3358.327740][T30571] do_syscall_64+0x3d/0xb0 [ 3358.332433][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.338501][T30571] [ 3358.340892][T30571] Uninit was stored to memory at: [ 3358.346223][T30571] ___sys_recvmsg+0x522/0x890 [ 3358.351028][T30571] do_recvmmsg+0x55a/0x1180 [ 3358.355808][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3358.360963][T30571] do_syscall_64+0x3d/0xb0 [ 3358.365651][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.371820][T30571] [ 3358.374203][T30571] Uninit was stored to memory at: [ 3358.379389][T30571] ___sys_recvmsg+0x522/0x890 [ 3358.384345][T30571] do_recvmmsg+0x55a/0x1180 [ 3358.388976][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3358.394288][T30571] do_syscall_64+0x3d/0xb0 [ 3358.398836][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.405057][T30571] [ 3358.407460][T30571] Local variable msg_sys created at: [ 3358.412969][T30571] do_recvmmsg+0x5c/0x1180 [ 3358.417514][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.020755][T30572] not chained 16750000 origins [ 3359.025818][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3359.036113][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3359.046263][T30572] Call Trace: [ 3359.049617][T30572] [ 3359.052615][T30572] dump_stack_lvl+0x1c8/0x256 [ 3359.057460][T30572] dump_stack+0x1a/0x1c [ 3359.061757][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3359.067616][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3359.072807][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3359.078846][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3359.083648][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3359.089613][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3359.095568][T30572] ? should_fail+0x3f/0x810 [ 3359.100205][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3359.105451][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3359.111844][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3359.117886][T30572] __msan_chain_origin+0xbd/0x140 [ 3359.123049][T30572] ___sys_recvmsg+0x522/0x890 [ 3359.127842][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3359.132661][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3359.138699][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3359.144650][T30572] do_recvmmsg+0x55a/0x1180 [ 3359.149291][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3359.155681][T30572] ? do_syscall_64+0x3d/0xb0 [ 3359.160391][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.165554][T30572] do_syscall_64+0x3d/0xb0 [ 3359.170084][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3359.176133][T30572] RIP: 0033:0x7f13f0a89279 [ 3359.180640][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3359.200389][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3359.208931][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3359.217013][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3359.225086][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3359.233157][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3359.241222][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3359.249317][T30572] [ 3359.256220][T30572] Uninit was stored to memory at: [ 3359.261427][T30572] ___sys_recvmsg+0x522/0x890 [ 3359.267065][T30572] do_recvmmsg+0x55a/0x1180 [ 3359.271782][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.276947][T30572] do_syscall_64+0x3d/0xb0 [ 3359.281486][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3359.287641][T30572] [ 3359.290022][T30572] Uninit was stored to memory at: [ 3359.295310][T30572] ___sys_recvmsg+0x522/0x890 [ 3359.300110][T30572] do_recvmmsg+0x55a/0x1180 [ 3359.304820][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.309991][T30572] do_syscall_64+0x3d/0xb0 [ 3359.314612][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3359.320678][T30572] [ 3359.323154][T30572] Uninit was stored to memory at: [ 3359.328368][T30572] ___sys_recvmsg+0x522/0x890 [ 3359.333243][T30572] do_recvmmsg+0x55a/0x1180 [ 3359.337872][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.343151][T30572] do_syscall_64+0x3d/0xb0 [ 3359.347695][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3359.353835][T30572] [ 3359.356221][T30572] Uninit was stored to memory at: [ 3359.361408][T30572] ___sys_recvmsg+0x522/0x890 [ 3359.366341][T30572] do_recvmmsg+0x55a/0x1180 [ 3359.370972][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.376249][T30572] do_syscall_64+0x3d/0xb0 [ 3359.380789][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3359.386993][T30572] [ 3359.389384][T30572] Uninit was stored to memory at: [ 3359.394779][T30572] ___sys_recvmsg+0x522/0x890 [ 3359.399590][T30572] do_recvmmsg+0x55a/0x1180 [ 3359.404343][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.409502][T30572] do_syscall_64+0x3d/0xb0 [ 3359.414229][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3359.420295][T30572] [ 3359.422807][T30572] Uninit was stored to memory at: [ 3359.428007][T30572] ___sys_recvmsg+0x522/0x890 [ 3359.432935][T30572] do_recvmmsg+0x55a/0x1180 [ 3359.437561][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.442854][T30572] do_syscall_64+0x3d/0xb0 [ 3359.447406][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3359.453609][T30572] [ 3359.455999][T30572] Uninit was stored to memory at: [ 3359.461177][T30572] ___sys_recvmsg+0x522/0x890 [ 3359.466057][T30572] do_recvmmsg+0x55a/0x1180 [ 3359.470690][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3359.475979][T30572] do_syscall_64+0x3d/0xb0 [ 3359.480523][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3359.486721][T30572] [ 3359.489112][T30572] Local variable msg_sys created at: [ 3359.494595][T30572] do_recvmmsg+0x5c/0x1180 [ 3359.499133][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.191528][T30572] not chained 16760000 origins [ 3360.196612][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3360.206902][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3360.217066][T30572] Call Trace: [ 3360.220420][T30572] [ 3360.223428][T30572] dump_stack_lvl+0x1c8/0x256 [ 3360.228287][T30572] dump_stack+0x1a/0x1c [ 3360.232622][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3360.238504][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3360.243713][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3360.249827][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3360.254650][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3360.260624][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3360.266594][T30572] ? should_fail+0x3f/0x810 [ 3360.271262][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3360.276546][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3360.282957][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3360.288925][T30572] __msan_chain_origin+0xbd/0x140 [ 3360.294091][T30572] ___sys_recvmsg+0x522/0x890 [ 3360.298890][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3360.303711][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3360.309756][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3360.315714][T30572] do_recvmmsg+0x55a/0x1180 [ 3360.320377][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3360.326776][T30572] ? do_syscall_64+0x3d/0xb0 [ 3360.331495][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.336791][T30572] do_syscall_64+0x3d/0xb0 [ 3360.341512][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3360.347588][T30572] RIP: 0033:0x7f13f0a89279 [ 3360.352112][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3360.371869][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3360.380432][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3360.388512][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3360.396584][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3360.404663][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3360.412732][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3360.420848][T30572] [ 3360.427542][T30572] Uninit was stored to memory at: [ 3360.433110][T30572] ___sys_recvmsg+0x522/0x890 [ 3360.437922][T30572] do_recvmmsg+0x55a/0x1180 [ 3360.442653][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.447880][T30572] do_syscall_64+0x3d/0xb0 [ 3360.452528][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3360.458602][T30572] [ 3360.460994][T30572] Uninit was stored to memory at: [ 3360.466300][T30572] ___sys_recvmsg+0x522/0x890 [ 3360.471117][T30572] do_recvmmsg+0x55a/0x1180 [ 3360.475856][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.481019][T30572] do_syscall_64+0x3d/0xb0 [ 3360.485660][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3360.491872][T30572] [ 3360.494265][T30572] Uninit was stored to memory at: [ 3360.499452][T30572] ___sys_recvmsg+0x522/0x890 [ 3360.504403][T30572] do_recvmmsg+0x55a/0x1180 [ 3360.509039][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.514394][T30572] do_syscall_64+0x3d/0xb0 [ 3360.518940][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3360.525140][T30572] [ 3360.527536][T30572] Uninit was stored to memory at: [ 3360.532823][T30572] ___sys_recvmsg+0x522/0x890 [ 3360.537634][T30572] do_recvmmsg+0x55a/0x1180 [ 3360.542510][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.547677][T30572] do_syscall_64+0x3d/0xb0 [ 3360.552374][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3360.558446][T30572] [ 3360.560834][T30572] Uninit was stored to memory at: [ 3360.566163][T30572] ___sys_recvmsg+0x522/0x890 [ 3360.570965][T30572] do_recvmmsg+0x55a/0x1180 [ 3360.575778][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.580945][T30572] do_syscall_64+0x3d/0xb0 [ 3360.585621][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3360.591775][T30572] [ 3360.594165][T30572] Uninit was stored to memory at: [ 3360.599357][T30572] ___sys_recvmsg+0x522/0x890 [ 3360.604287][T30572] do_recvmmsg+0x55a/0x1180 [ 3360.608929][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.614225][T30572] do_syscall_64+0x3d/0xb0 [ 3360.618775][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3360.624970][T30572] [ 3360.627363][T30572] Uninit was stored to memory at: [ 3360.632664][T30572] ___sys_recvmsg+0x522/0x890 [ 3360.637470][T30572] do_recvmmsg+0x55a/0x1180 [ 3360.642231][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3360.647390][T30572] do_syscall_64+0x3d/0xb0 [ 3360.652063][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3360.658134][T30572] [ 3360.660520][T30572] Local variable msg_sys created at: [ 3360.666013][T30572] do_recvmmsg+0x5c/0x1180 [ 3360.670572][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.368595][T30571] not chained 16770000 origins [ 3361.373706][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3361.384001][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3361.394150][T30571] Call Trace: [ 3361.397496][T30571] [ 3361.400581][T30571] dump_stack_lvl+0x1c8/0x256 [ 3361.405426][T30571] dump_stack+0x1a/0x1c [ 3361.409724][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3361.415589][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3361.420775][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3361.426826][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3361.431627][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3361.437602][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3361.443576][T30571] ? should_fail+0x3f/0x810 [ 3361.448216][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3361.453470][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3361.459861][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3361.465815][T30571] __msan_chain_origin+0xbd/0x140 [ 3361.470967][T30571] ___sys_recvmsg+0x522/0x890 [ 3361.475763][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3361.480582][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3361.486619][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3361.492570][T30571] do_recvmmsg+0x55a/0x1180 [ 3361.497207][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3361.503597][T30571] ? do_syscall_64+0x3d/0xb0 [ 3361.508307][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.513471][T30571] do_syscall_64+0x3d/0xb0 [ 3361.518019][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.524071][T30571] RIP: 0033:0x7f13f0a89279 [ 3361.528579][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3361.548330][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3361.556864][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3361.564942][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3361.573015][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3361.581092][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3361.589155][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3361.597251][T30571] [ 3361.604899][T30571] Uninit was stored to memory at: [ 3361.610114][T30571] ___sys_recvmsg+0x522/0x890 [ 3361.615501][T30571] do_recvmmsg+0x55a/0x1180 [ 3361.620141][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.625430][T30571] do_syscall_64+0x3d/0xb0 [ 3361.629981][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.636180][T30571] [ 3361.638568][T30571] Uninit was stored to memory at: [ 3361.643867][T30571] ___sys_recvmsg+0x522/0x890 [ 3361.648757][T30571] do_recvmmsg+0x55a/0x1180 [ 3361.653498][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.658659][T30571] do_syscall_64+0x3d/0xb0 [ 3361.663310][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.669378][T30571] [ 3361.671867][T30571] Uninit was stored to memory at: [ 3361.677050][T30571] ___sys_recvmsg+0x522/0x890 [ 3361.681952][T30571] do_recvmmsg+0x55a/0x1180 [ 3361.686580][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.691888][T30571] do_syscall_64+0x3d/0xb0 [ 3361.696431][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.702642][T30571] [ 3361.705026][T30571] Uninit was stored to memory at: [ 3361.710208][T30571] ___sys_recvmsg+0x522/0x890 [ 3361.715155][T30571] do_recvmmsg+0x55a/0x1180 [ 3361.719789][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.725101][T30571] do_syscall_64+0x3d/0xb0 [ 3361.729642][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.735866][T30571] [ 3361.738251][T30571] Uninit was stored to memory at: [ 3361.743589][T30571] ___sys_recvmsg+0x522/0x890 [ 3361.748389][T30571] do_recvmmsg+0x55a/0x1180 [ 3361.753163][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.758311][T30571] do_syscall_64+0x3d/0xb0 [ 3361.762974][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.769042][T30571] [ 3361.771424][T30571] Uninit was stored to memory at: [ 3361.776762][T30571] ___sys_recvmsg+0x522/0x890 [ 3361.781662][T30571] do_recvmmsg+0x55a/0x1180 [ 3361.786299][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.791449][T30571] do_syscall_64+0x3d/0xb0 [ 3361.796146][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.802367][T30571] [ 3361.804761][T30571] Uninit was stored to memory at: [ 3361.809973][T30571] ___sys_recvmsg+0x522/0x890 [ 3361.814937][T30571] do_recvmmsg+0x55a/0x1180 [ 3361.819671][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3361.824998][T30571] do_syscall_64+0x3d/0xb0 [ 3361.829546][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.835769][T30571] [ 3361.838173][T30571] Local variable msg_sys created at: [ 3361.843674][T30571] do_recvmmsg+0x5c/0x1180 [ 3361.848216][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3362.544045][T30572] not chained 16780000 origins [ 3362.548924][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3362.559209][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3362.569368][T30572] Call Trace: [ 3362.572725][T30572] [ 3362.575728][T30572] dump_stack_lvl+0x1c8/0x256 [ 3362.580594][T30572] dump_stack+0x1a/0x1c [ 3362.584908][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3362.590777][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3362.595984][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3362.602027][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3362.606844][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3362.612837][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3362.618813][T30572] ? should_fail+0x3f/0x810 [ 3362.623460][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3362.628718][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3362.635125][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3362.641100][T30572] __msan_chain_origin+0xbd/0x140 [ 3362.646290][T30572] ___sys_recvmsg+0x522/0x890 [ 3362.651120][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3362.655964][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3362.662029][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3362.668002][T30572] do_recvmmsg+0x55a/0x1180 [ 3362.672660][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3362.679061][T30572] ? do_syscall_64+0x3d/0xb0 [ 3362.683787][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3362.688973][T30572] do_syscall_64+0x3d/0xb0 [ 3362.693549][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3362.699617][T30572] RIP: 0033:0x7f13f0a89279 [ 3362.704138][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3362.723929][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3362.732505][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3362.740615][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3362.748701][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3362.756791][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3362.764881][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3362.773006][T30572] [ 3362.780701][T30572] Uninit was stored to memory at: [ 3362.786434][T30572] ___sys_recvmsg+0x522/0x890 [ 3362.791240][T30572] do_recvmmsg+0x55a/0x1180 [ 3362.795989][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3362.801150][T30572] do_syscall_64+0x3d/0xb0 [ 3362.805803][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3362.811985][T30572] [ 3362.814373][T30572] Uninit was stored to memory at: [ 3362.819563][T30572] ___sys_recvmsg+0x522/0x890 [ 3362.824534][T30572] do_recvmmsg+0x55a/0x1180 [ 3362.829166][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3362.834492][T30572] do_syscall_64+0x3d/0xb0 [ 3362.839033][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3362.845256][T30572] [ 3362.847654][T30572] Uninit was stored to memory at: [ 3362.853022][T30572] ___sys_recvmsg+0x522/0x890 [ 3362.857838][T30572] do_recvmmsg+0x55a/0x1180 [ 3362.862611][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3362.867771][T30572] do_syscall_64+0x3d/0xb0 [ 3362.872463][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3362.878530][T30572] [ 3362.880937][T30572] Uninit was stored to memory at: [ 3362.886291][T30572] ___sys_recvmsg+0x522/0x890 [ 3362.891100][T30572] do_recvmmsg+0x55a/0x1180 [ 3362.895900][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3362.901072][T30572] do_syscall_64+0x3d/0xb0 [ 3362.905788][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3362.911967][T30572] [ 3362.914393][T30572] Uninit was stored to memory at: [ 3362.919577][T30572] ___sys_recvmsg+0x522/0x890 [ 3362.924530][T30572] do_recvmmsg+0x55a/0x1180 [ 3362.929161][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3362.934486][T30572] do_syscall_64+0x3d/0xb0 [ 3362.939038][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3362.945267][T30572] [ 3362.947660][T30572] Uninit was stored to memory at: [ 3362.952998][T30572] ___sys_recvmsg+0x522/0x890 [ 3362.957801][T30572] do_recvmmsg+0x55a/0x1180 [ 3362.962578][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3362.967742][T30572] do_syscall_64+0x3d/0xb0 [ 3362.972439][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3362.978504][T30572] [ 3362.980898][T30572] Uninit was stored to memory at: [ 3362.986236][T30572] ___sys_recvmsg+0x522/0x890 [ 3362.991046][T30572] do_recvmmsg+0x55a/0x1180 [ 3362.995839][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.001004][T30572] do_syscall_64+0x3d/0xb0 [ 3363.005703][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.011903][T30572] [ 3363.014290][T30572] Local variable msg_sys created at: [ 3363.019647][T30572] do_recvmmsg+0x5c/0x1180 [ 3363.024291][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.538127][T30572] not chained 16790000 origins [ 3363.543252][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3363.553541][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3363.563702][T30572] Call Trace: [ 3363.567053][T30572] [ 3363.570060][T30572] dump_stack_lvl+0x1c8/0x256 [ 3363.574921][T30572] dump_stack+0x1a/0x1c [ 3363.579233][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3363.585103][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3363.590329][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3363.596371][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3363.601201][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3363.607190][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3363.613180][T30572] ? should_fail+0x3f/0x810 [ 3363.617843][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3363.623131][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3363.629537][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3363.635499][T30572] __msan_chain_origin+0xbd/0x140 [ 3363.640669][T30572] ___sys_recvmsg+0x522/0x890 [ 3363.645486][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3363.650313][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3363.656357][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3363.662311][T30572] do_recvmmsg+0x55a/0x1180 [ 3363.666962][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3363.673356][T30572] ? do_syscall_64+0x3d/0xb0 [ 3363.678072][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.683241][T30572] do_syscall_64+0x3d/0xb0 [ 3363.687774][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.693836][T30572] RIP: 0033:0x7f13f0a89279 [ 3363.698347][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3363.718198][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3363.726738][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3363.734857][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3363.742931][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3363.751002][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3363.759069][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3363.767168][T30572] [ 3363.776952][T30572] Uninit was stored to memory at: [ 3363.783332][T30572] ___sys_recvmsg+0x522/0x890 [ 3363.788140][T30572] do_recvmmsg+0x55a/0x1180 [ 3363.792858][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.798023][T30572] do_syscall_64+0x3d/0xb0 [ 3363.802656][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.808736][T30572] [ 3363.811125][T30572] Uninit was stored to memory at: [ 3363.816395][T30572] ___sys_recvmsg+0x522/0x890 [ 3363.821307][T30572] do_recvmmsg+0x55a/0x1180 [ 3363.826022][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.831174][T30572] do_syscall_64+0x3d/0xb0 [ 3363.835795][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.841950][T30572] [ 3363.844345][T30572] Uninit was stored to memory at: [ 3363.849535][T30572] ___sys_recvmsg+0x522/0x890 [ 3363.854491][T30572] do_recvmmsg+0x55a/0x1180 [ 3363.859123][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.864408][T30572] do_syscall_64+0x3d/0xb0 [ 3363.868953][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.875166][T30572] [ 3363.877560][T30572] Uninit was stored to memory at: [ 3363.882869][T30572] ___sys_recvmsg+0x522/0x890 [ 3363.887675][T30572] do_recvmmsg+0x55a/0x1180 [ 3363.892379][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.897537][T30572] do_syscall_64+0x3d/0xb0 [ 3363.902198][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.908263][T30572] [ 3363.910648][T30572] Uninit was stored to memory at: [ 3363.915928][T30572] ___sys_recvmsg+0x522/0x890 [ 3363.920742][T30572] do_recvmmsg+0x55a/0x1180 [ 3363.925551][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.930718][T30572] do_syscall_64+0x3d/0xb0 [ 3363.935400][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.941475][T30572] [ 3363.944003][T30572] Uninit was stored to memory at: [ 3363.949208][T30572] ___sys_recvmsg+0x522/0x890 [ 3363.954491][T30572] do_recvmmsg+0x55a/0x1180 [ 3363.959125][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.964413][T30572] do_syscall_64+0x3d/0xb0 [ 3363.968960][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.975161][T30572] [ 3363.977553][T30572] Uninit was stored to memory at: [ 3363.982920][T30572] ___sys_recvmsg+0x522/0x890 [ 3363.987735][T30572] do_recvmmsg+0x55a/0x1180 [ 3363.992492][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3363.997646][T30572] do_syscall_64+0x3d/0xb0 [ 3364.002261][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3364.008327][T30572] [ 3364.010714][T30572] Local variable msg_sys created at: [ 3364.016211][T30572] do_recvmmsg+0x5c/0x1180 [ 3364.020779][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3364.656709][T30571] not chained 16800000 origins [ 3364.661719][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3364.672036][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3364.682190][T30571] Call Trace: [ 3364.685537][T30571] [ 3364.688552][T30571] dump_stack_lvl+0x1c8/0x256 [ 3364.693416][T30571] dump_stack+0x1a/0x1c [ 3364.697742][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3364.703609][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3364.708798][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3364.714837][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3364.719649][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3364.725610][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3364.731578][T30571] ? should_fail+0x3f/0x810 [ 3364.736221][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3364.741465][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3364.747855][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3364.753809][T30571] __msan_chain_origin+0xbd/0x140 [ 3364.758980][T30571] ___sys_recvmsg+0x522/0x890 [ 3364.763776][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3364.768596][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3364.774635][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3364.780591][T30571] do_recvmmsg+0x55a/0x1180 [ 3364.785242][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3364.791644][T30571] ? do_syscall_64+0x3d/0xb0 [ 3364.796363][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3364.801543][T30571] do_syscall_64+0x3d/0xb0 [ 3364.806086][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3364.812138][T30571] RIP: 0033:0x7f13f0a89279 [ 3364.816645][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3364.836393][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3364.844935][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3364.853016][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3364.861088][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3364.869156][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3364.877223][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3364.885320][T30571] [ 3364.892005][T30571] Uninit was stored to memory at: [ 3364.897217][T30571] ___sys_recvmsg+0x522/0x890 [ 3364.902391][T30571] do_recvmmsg+0x55a/0x1180 [ 3364.907030][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3364.912286][T30571] do_syscall_64+0x3d/0xb0 [ 3364.916835][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3364.923033][T30571] [ 3364.925423][T30571] Uninit was stored to memory at: [ 3364.930648][T30571] ___sys_recvmsg+0x522/0x890 [ 3364.935545][T30571] do_recvmmsg+0x55a/0x1180 [ 3364.940175][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3364.945427][T30571] do_syscall_64+0x3d/0xb0 [ 3364.949977][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3364.956192][T30571] [ 3364.958587][T30571] Uninit was stored to memory at: [ 3364.964052][T30571] ___sys_recvmsg+0x522/0x890 [ 3364.968862][T30571] do_recvmmsg+0x55a/0x1180 [ 3364.973648][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3364.978834][T30571] do_syscall_64+0x3d/0xb0 [ 3364.983512][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3364.989576][T30571] [ 3364.992044][T30571] Uninit was stored to memory at: [ 3364.997255][T30571] ___sys_recvmsg+0x522/0x890 [ 3365.002184][T30571] do_recvmmsg+0x55a/0x1180 [ 3365.006807][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3365.012042][T30571] do_syscall_64+0x3d/0xb0 [ 3365.016592][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3365.022797][T30571] [ 3365.025188][T30571] Uninit was stored to memory at: [ 3365.030372][T30571] ___sys_recvmsg+0x522/0x890 [ 3365.035300][T30571] do_recvmmsg+0x55a/0x1180 [ 3365.039935][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3365.045221][T30571] do_syscall_64+0x3d/0xb0 [ 3365.049767][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3365.055966][T30571] [ 3365.058352][T30571] Uninit was stored to memory at: [ 3365.063657][T30571] ___sys_recvmsg+0x522/0x890 [ 3365.068460][T30571] do_recvmmsg+0x55a/0x1180 [ 3365.073208][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3365.078371][T30571] do_syscall_64+0x3d/0xb0 [ 3365.083036][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3365.089099][T30571] [ 3365.091493][T30571] Uninit was stored to memory at: [ 3365.096800][T30571] ___sys_recvmsg+0x522/0x890 [ 3365.101736][T30571] do_recvmmsg+0x55a/0x1180 [ 3365.106363][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3365.111520][T30571] do_syscall_64+0x3d/0xb0 [ 3365.116181][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3365.122375][T30571] [ 3365.124759][T30571] Local variable msg_sys created at: [ 3365.130111][T30571] do_recvmmsg+0x5c/0x1180 [ 3365.134806][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3365.810144][T30572] not chained 16810000 origins [ 3365.815225][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3365.825514][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3365.835675][T30572] Call Trace: [ 3365.839021][T30572] [ 3365.842018][T30572] dump_stack_lvl+0x1c8/0x256 [ 3365.846868][T30572] dump_stack+0x1a/0x1c [ 3365.851171][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3365.857035][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3365.862225][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3365.868275][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3365.873090][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3365.879052][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3365.885009][T30572] ? should_fail+0x3f/0x810 [ 3365.889656][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3365.894914][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3365.901308][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3365.907256][T30572] __msan_chain_origin+0xbd/0x140 [ 3365.912411][T30572] ___sys_recvmsg+0x522/0x890 [ 3365.917204][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3365.922020][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3365.928054][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3365.934026][T30572] do_recvmmsg+0x55a/0x1180 [ 3365.938671][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3365.945150][T30572] ? do_syscall_64+0x3d/0xb0 [ 3365.949861][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3365.955024][T30572] do_syscall_64+0x3d/0xb0 [ 3365.959558][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3365.965622][T30572] RIP: 0033:0x7f13f0a89279 [ 3365.970129][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3365.989899][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3365.998435][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3366.006517][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3366.014584][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3366.022653][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3366.030716][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3366.038837][T30572] [ 3366.045454][T30572] Uninit was stored to memory at: [ 3366.050672][T30572] ___sys_recvmsg+0x522/0x890 [ 3366.058916][T30572] do_recvmmsg+0x55a/0x1180 [ 3366.063894][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3366.069054][T30572] do_syscall_64+0x3d/0xb0 [ 3366.073678][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3366.079761][T30572] [ 3366.082239][T30572] Uninit was stored to memory at: [ 3366.087420][T30572] ___sys_recvmsg+0x522/0x890 [ 3366.092292][T30572] do_recvmmsg+0x55a/0x1180 [ 3366.096926][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3366.102225][T30572] do_syscall_64+0x3d/0xb0 [ 3366.106774][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3366.112978][T30572] [ 3366.115365][T30572] Uninit was stored to memory at: [ 3366.120548][T30572] ___sys_recvmsg+0x522/0x890 [ 3366.125490][T30572] do_recvmmsg+0x55a/0x1180 [ 3366.130122][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3366.135410][T30572] do_syscall_64+0x3d/0xb0 [ 3366.139960][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3366.146196][T30572] [ 3366.148582][T30572] Uninit was stored to memory at: [ 3366.153911][T30572] ___sys_recvmsg+0x522/0x890 [ 3366.158724][T30572] do_recvmmsg+0x55a/0x1180 [ 3366.163431][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3366.168589][T30572] do_syscall_64+0x3d/0xb0 [ 3366.173201][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3366.179269][T30572] [ 3366.181763][T30572] Uninit was stored to memory at: [ 3366.186947][T30572] ___sys_recvmsg+0x522/0x890 [ 3366.191868][T30572] do_recvmmsg+0x55a/0x1180 [ 3366.196498][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3366.201772][T30572] do_syscall_64+0x3d/0xb0 [ 3366.206319][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3366.212509][T30572] [ 3366.214900][T30572] Uninit was stored to memory at: [ 3366.220086][T30572] ___sys_recvmsg+0x522/0x890 [ 3366.225034][T30572] do_recvmmsg+0x55a/0x1180 [ 3366.229678][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3366.234997][T30572] do_syscall_64+0x3d/0xb0 [ 3366.239565][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3366.245795][T30572] [ 3366.248189][T30572] Uninit was stored to memory at: [ 3366.254129][T30572] ___sys_recvmsg+0x522/0x890 [ 3366.258941][T30572] do_recvmmsg+0x55a/0x1180 [ 3366.263713][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3366.268888][T30572] do_syscall_64+0x3d/0xb0 [ 3366.273547][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3366.279653][T30572] [ 3366.282120][T30572] Local variable msg_sys created at: [ 3366.287482][T30572] do_recvmmsg+0x5c/0x1180 [ 3366.292144][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3366.960141][T30571] not chained 16820000 origins [ 3366.965335][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3366.975627][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3366.985803][T30571] Call Trace: [ 3366.989149][T30571] [ 3366.992146][T30571] dump_stack_lvl+0x1c8/0x256 [ 3366.996994][T30571] dump_stack+0x1a/0x1c [ 3367.001302][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3367.007161][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3367.012354][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3367.018381][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3367.023179][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3367.029133][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3367.035087][T30571] ? should_fail+0x3f/0x810 [ 3367.039717][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3367.044960][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3367.051348][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3367.057294][T30571] __msan_chain_origin+0xbd/0x140 [ 3367.062450][T30571] ___sys_recvmsg+0x522/0x890 [ 3367.067243][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3367.072063][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3367.078097][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3367.084054][T30571] do_recvmmsg+0x55a/0x1180 [ 3367.088695][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3367.095083][T30571] ? do_syscall_64+0x3d/0xb0 [ 3367.099794][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3367.104958][T30571] do_syscall_64+0x3d/0xb0 [ 3367.109488][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3367.115537][T30571] RIP: 0033:0x7f13f0a89279 [ 3367.120047][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3367.139797][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3367.148346][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3367.156421][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3367.164492][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3367.172557][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3367.180620][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3367.188722][T30571] [ 3367.196269][T30571] Uninit was stored to memory at: [ 3367.201478][T30571] ___sys_recvmsg+0x522/0x890 [ 3367.206770][T30571] do_recvmmsg+0x55a/0x1180 [ 3367.211397][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3367.216665][T30571] do_syscall_64+0x3d/0xb0 [ 3367.221203][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3367.227396][T30571] [ 3367.229779][T30571] Uninit was stored to memory at: [ 3367.235043][T30571] ___sys_recvmsg+0x522/0x890 [ 3367.239839][T30571] do_recvmmsg+0x55a/0x1180 [ 3367.244554][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3367.249703][T30571] do_syscall_64+0x3d/0xb0 [ 3367.254334][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3367.260405][T30571] [ 3367.262882][T30571] Uninit was stored to memory at: [ 3367.268071][T30571] ___sys_recvmsg+0x522/0x890 [ 3367.272969][T30571] do_recvmmsg+0x55a/0x1180 [ 3367.277592][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3367.282845][T30571] do_syscall_64+0x3d/0xb0 [ 3367.287391][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3367.293550][T30571] [ 3367.295932][T30571] Uninit was stored to memory at: [ 3367.301117][T30571] ___sys_recvmsg+0x522/0x890 [ 3367.306010][T30571] do_recvmmsg+0x55a/0x1180 [ 3367.310632][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3367.315884][T30571] do_syscall_64+0x3d/0xb0 [ 3367.320423][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3367.326573][T30571] [ 3367.328956][T30571] Uninit was stored to memory at: [ 3367.334234][T30571] ___sys_recvmsg+0x522/0x890 [ 3367.339046][T30571] do_recvmmsg+0x55a/0x1180 [ 3367.343857][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3367.349005][T30571] do_syscall_64+0x3d/0xb0 [ 3367.353650][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3367.359714][T30571] [ 3367.362197][T30571] Uninit was stored to memory at: [ 3367.367385][T30571] ___sys_recvmsg+0x522/0x890 [ 3367.372283][T30571] do_recvmmsg+0x55a/0x1180 [ 3367.376914][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3367.382161][T30571] do_syscall_64+0x3d/0xb0 [ 3367.386702][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3367.392864][T30571] [ 3367.395250][T30571] Uninit was stored to memory at: [ 3367.400443][T30571] ___sys_recvmsg+0x522/0x890 [ 3367.405342][T30571] do_recvmmsg+0x55a/0x1180 [ 3367.409963][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3367.415230][T30571] do_syscall_64+0x3d/0xb0 [ 3367.419781][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3367.425999][T30571] [ 3367.428385][T30571] Local variable msg_sys created at: [ 3367.433909][T30571] do_recvmmsg+0x5c/0x1180 [ 3367.438443][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.085205][T30571] not chained 16830000 origins [ 3368.090103][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3368.100390][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3368.110557][T30571] Call Trace: [ 3368.113903][T30571] [ 3368.116902][T30571] dump_stack_lvl+0x1c8/0x256 [ 3368.121750][T30571] dump_stack+0x1a/0x1c [ 3368.126068][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3368.131923][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3368.137108][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3368.143142][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3368.147956][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3368.153905][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3368.159857][T30571] ? should_fail+0x3f/0x810 [ 3368.164490][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3368.169735][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3368.176123][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3368.182067][T30571] __msan_chain_origin+0xbd/0x140 [ 3368.187217][T30571] ___sys_recvmsg+0x522/0x890 [ 3368.192009][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3368.196825][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3368.202862][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3368.208816][T30571] do_recvmmsg+0x55a/0x1180 [ 3368.213458][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3368.219847][T30571] ? do_syscall_64+0x3d/0xb0 [ 3368.224558][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.230029][T30571] do_syscall_64+0x3d/0xb0 [ 3368.234561][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.240615][T30571] RIP: 0033:0x7f13f0a89279 [ 3368.245123][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3368.264893][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3368.273430][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3368.281503][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3368.289574][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3368.297643][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3368.305706][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3368.313804][T30571] [ 3368.324276][T30571] Uninit was stored to memory at: [ 3368.329496][T30571] ___sys_recvmsg+0x522/0x890 [ 3368.335506][T30571] do_recvmmsg+0x55a/0x1180 [ 3368.340137][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.345410][T30571] do_syscall_64+0x3d/0xb0 [ 3368.349961][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.356162][T30571] [ 3368.358542][T30571] Uninit was stored to memory at: [ 3368.363884][T30571] ___sys_recvmsg+0x522/0x890 [ 3368.368686][T30571] do_recvmmsg+0x55a/0x1180 [ 3368.373468][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.378617][T30571] do_syscall_64+0x3d/0xb0 [ 3368.383257][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.389323][T30571] [ 3368.391804][T30571] Uninit was stored to memory at: [ 3368.396991][T30571] ___sys_recvmsg+0x522/0x890 [ 3368.401885][T30571] do_recvmmsg+0x55a/0x1180 [ 3368.406516][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.411756][T30571] do_syscall_64+0x3d/0xb0 [ 3368.416293][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.422458][T30571] [ 3368.424845][T30571] Uninit was stored to memory at: [ 3368.430043][T30571] ___sys_recvmsg+0x522/0x890 [ 3368.434940][T30571] do_recvmmsg+0x55a/0x1180 [ 3368.439573][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.444834][T30571] do_syscall_64+0x3d/0xb0 [ 3368.449376][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.455538][T30571] [ 3368.457920][T30571] Uninit was stored to memory at: [ 3368.463210][T30571] ___sys_recvmsg+0x522/0x890 [ 3368.468008][T30571] do_recvmmsg+0x55a/0x1180 [ 3368.472742][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.477901][T30571] do_syscall_64+0x3d/0xb0 [ 3368.482598][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.488670][T30571] [ 3368.491051][T30571] Uninit was stored to memory at: [ 3368.496381][T30571] ___sys_recvmsg+0x522/0x890 [ 3368.501187][T30571] do_recvmmsg+0x55a/0x1180 [ 3368.506020][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.511174][T30571] do_syscall_64+0x3d/0xb0 [ 3368.515855][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.522028][T30571] [ 3368.524417][T30571] Uninit was stored to memory at: [ 3368.529601][T30571] ___sys_recvmsg+0x522/0x890 [ 3368.534571][T30571] do_recvmmsg+0x55a/0x1180 [ 3368.539204][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3368.544523][T30571] do_syscall_64+0x3d/0xb0 [ 3368.549065][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.555293][T30571] [ 3368.557685][T30571] Local variable msg_sys created at: [ 3368.563229][T30571] do_recvmmsg+0x5c/0x1180 [ 3368.567774][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.227643][T30572] not chained 16840000 origins [ 3369.237177][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3369.247496][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3369.257663][T30572] Call Trace: [ 3369.261026][T30572] [ 3369.264026][T30572] dump_stack_lvl+0x1c8/0x256 [ 3369.268885][T30572] dump_stack+0x1a/0x1c [ 3369.273192][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3369.279064][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3369.284261][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3369.290307][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3369.295297][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3369.301264][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3369.307241][T30572] ? should_fail+0x3f/0x810 [ 3369.311892][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3369.317151][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3369.323572][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3369.329550][T30572] __msan_chain_origin+0xbd/0x140 [ 3369.334728][T30572] ___sys_recvmsg+0x522/0x890 [ 3369.339547][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3369.344431][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3369.350492][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3369.356475][T30572] do_recvmmsg+0x55a/0x1180 [ 3369.361137][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3369.367563][T30572] ? do_syscall_64+0x3d/0xb0 [ 3369.372304][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.377485][T30572] do_syscall_64+0x3d/0xb0 [ 3369.382029][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3369.388100][T30572] RIP: 0033:0x7f13f0a89279 [ 3369.392621][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3369.412393][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3369.420955][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3369.429045][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3369.437129][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3369.445209][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3369.453288][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3369.461420][T30572] [ 3369.469012][T30572] Uninit was stored to memory at: [ 3369.474725][T30572] ___sys_recvmsg+0x522/0x890 [ 3369.479533][T30572] do_recvmmsg+0x55a/0x1180 [ 3369.484275][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.489448][T30572] do_syscall_64+0x3d/0xb0 [ 3369.494123][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3369.500200][T30572] [ 3369.502807][T30572] Uninit was stored to memory at: [ 3369.507996][T30572] ___sys_recvmsg+0x522/0x890 [ 3369.512890][T30572] do_recvmmsg+0x55a/0x1180 [ 3369.517514][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.522767][T30572] do_syscall_64+0x3d/0xb0 [ 3369.527311][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3369.533464][T30572] [ 3369.535868][T30572] Uninit was stored to memory at: [ 3369.541048][T30572] ___sys_recvmsg+0x522/0x890 [ 3369.545952][T30572] do_recvmmsg+0x55a/0x1180 [ 3369.550598][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.555879][T30572] do_syscall_64+0x3d/0xb0 [ 3369.560421][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3369.566588][T30572] [ 3369.568974][T30572] Uninit was stored to memory at: [ 3369.574256][T30572] ___sys_recvmsg+0x522/0x890 [ 3369.579071][T30572] do_recvmmsg+0x55a/0x1180 [ 3369.583796][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.588983][T30572] do_syscall_64+0x3d/0xb0 [ 3369.593688][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3369.599765][T30572] [ 3369.602309][T30572] Uninit was stored to memory at: [ 3369.607503][T30572] ___sys_recvmsg+0x522/0x890 [ 3369.612469][T30572] do_recvmmsg+0x55a/0x1180 [ 3369.617108][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.622412][T30572] do_syscall_64+0x3d/0xb0 [ 3369.626955][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3369.633170][T30572] [ 3369.635553][T30572] Uninit was stored to memory at: [ 3369.640738][T30572] ___sys_recvmsg+0x522/0x890 [ 3369.645644][T30572] do_recvmmsg+0x55a/0x1180 [ 3369.650267][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.655608][T30572] do_syscall_64+0x3d/0xb0 [ 3369.660146][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3369.666372][T30572] [ 3369.668757][T30572] Uninit was stored to memory at: [ 3369.674081][T30572] ___sys_recvmsg+0x522/0x890 [ 3369.678890][T30572] do_recvmmsg+0x55a/0x1180 [ 3369.683668][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3369.688825][T30572] do_syscall_64+0x3d/0xb0 [ 3369.693466][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3369.699540][T30572] [ 3369.702073][T30572] Local variable msg_sys created at: [ 3369.707435][T30572] do_recvmmsg+0x5c/0x1180 [ 3369.712101][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.250992][T30571] not chained 16850000 origins [ 3370.260517][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3370.270831][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3370.280987][T30571] Call Trace: [ 3370.284339][T30571] [ 3370.287342][T30571] dump_stack_lvl+0x1c8/0x256 [ 3370.292290][T30571] dump_stack+0x1a/0x1c [ 3370.296595][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3370.302461][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3370.307657][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3370.313702][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3370.318517][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3370.324485][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3370.330454][T30571] ? should_fail+0x3f/0x810 [ 3370.335115][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3370.340374][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3370.346774][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3370.352734][T30571] __msan_chain_origin+0xbd/0x140 [ 3370.357930][T30571] ___sys_recvmsg+0x522/0x890 [ 3370.362742][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3370.367584][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3370.373633][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3370.379600][T30571] do_recvmmsg+0x55a/0x1180 [ 3370.384249][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3370.390643][T30571] ? do_syscall_64+0x3d/0xb0 [ 3370.395354][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.400518][T30571] do_syscall_64+0x3d/0xb0 [ 3370.405051][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.411103][T30571] RIP: 0033:0x7f13f0a89279 [ 3370.415611][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3370.435358][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3370.443895][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3370.451973][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3370.460049][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3370.468126][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3370.476191][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3370.484288][T30571] [ 3370.494698][T30571] Uninit was stored to memory at: [ 3370.499915][T30571] ___sys_recvmsg+0x522/0x890 [ 3370.506069][T30571] do_recvmmsg+0x55a/0x1180 [ 3370.510713][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.516004][T30571] do_syscall_64+0x3d/0xb0 [ 3370.520563][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.526814][T30571] [ 3370.529200][T30571] Uninit was stored to memory at: [ 3370.534570][T30571] ___sys_recvmsg+0x522/0x890 [ 3370.539379][T30571] do_recvmmsg+0x55a/0x1180 [ 3370.544169][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.549343][T30571] do_syscall_64+0x3d/0xb0 [ 3370.554084][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.560175][T30571] [ 3370.562714][T30571] Uninit was stored to memory at: [ 3370.567904][T30571] ___sys_recvmsg+0x522/0x890 [ 3370.572855][T30571] do_recvmmsg+0x55a/0x1180 [ 3370.577490][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.582832][T30571] do_syscall_64+0x3d/0xb0 [ 3370.587376][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.593601][T30571] [ 3370.595983][T30571] Uninit was stored to memory at: [ 3370.601171][T30571] ___sys_recvmsg+0x522/0x890 [ 3370.606130][T30571] do_recvmmsg+0x55a/0x1180 [ 3370.610775][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.616135][T30571] do_syscall_64+0x3d/0xb0 [ 3370.620680][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.626863][T30571] [ 3370.629247][T30571] Uninit was stored to memory at: [ 3370.634599][T30571] ___sys_recvmsg+0x522/0x890 [ 3370.639399][T30571] do_recvmmsg+0x55a/0x1180 [ 3370.644174][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.649353][T30571] do_syscall_64+0x3d/0xb0 [ 3370.654069][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.660341][T30571] [ 3370.662890][T30571] Uninit was stored to memory at: [ 3370.668083][T30571] ___sys_recvmsg+0x522/0x890 [ 3370.672990][T30571] do_recvmmsg+0x55a/0x1180 [ 3370.677624][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.682937][T30571] do_syscall_64+0x3d/0xb0 [ 3370.687481][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.693704][T30571] [ 3370.696091][T30571] Uninit was stored to memory at: [ 3370.701282][T30571] ___sys_recvmsg+0x522/0x890 [ 3370.706249][T30571] do_recvmmsg+0x55a/0x1180 [ 3370.710881][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3370.716202][T30571] do_syscall_64+0x3d/0xb0 [ 3370.720756][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.726968][T30571] [ 3370.729362][T30571] Local variable msg_sys created at: [ 3370.734859][T30571] do_recvmmsg+0x5c/0x1180 [ 3370.739395][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.344563][T30571] not chained 16860000 origins [ 3371.349453][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3371.359745][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3371.369894][T30571] Call Trace: [ 3371.373238][T30571] [ 3371.376235][T30571] dump_stack_lvl+0x1c8/0x256 [ 3371.381085][T30571] dump_stack+0x1a/0x1c [ 3371.385389][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3371.391247][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3371.396433][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3371.402468][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3371.407269][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3371.413218][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3371.419172][T30571] ? should_fail+0x3f/0x810 [ 3371.423810][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3371.429055][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3371.435441][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3371.441390][T30571] __msan_chain_origin+0xbd/0x140 [ 3371.446552][T30571] ___sys_recvmsg+0x522/0x890 [ 3371.451345][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3371.456160][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3371.462197][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3371.468145][T30571] do_recvmmsg+0x55a/0x1180 [ 3371.472785][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3371.479172][T30571] ? do_syscall_64+0x3d/0xb0 [ 3371.483880][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.489039][T30571] do_syscall_64+0x3d/0xb0 [ 3371.493572][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3371.499622][T30571] RIP: 0033:0x7f13f0a89279 [ 3371.504127][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3371.523887][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3371.532422][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3371.540507][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3371.548573][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3371.556636][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3371.564697][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3371.572789][T30571] [ 3371.580422][T30571] Uninit was stored to memory at: [ 3371.590284][T30571] ___sys_recvmsg+0x522/0x890 [ 3371.595552][T30571] do_recvmmsg+0x55a/0x1180 [ 3371.600179][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.605435][T30571] do_syscall_64+0x3d/0xb0 [ 3371.609979][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3371.616314][T30571] [ 3371.618697][T30571] Uninit was stored to memory at: [ 3371.623978][T30571] ___sys_recvmsg+0x522/0x890 [ 3371.628775][T30571] do_recvmmsg+0x55a/0x1180 [ 3371.633499][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.638651][T30571] do_syscall_64+0x3d/0xb0 [ 3371.643281][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3371.649355][T30571] [ 3371.651837][T30571] Uninit was stored to memory at: [ 3371.657021][T30571] ___sys_recvmsg+0x522/0x890 [ 3371.662012][T30571] do_recvmmsg+0x55a/0x1180 [ 3371.666646][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.671958][T30571] do_syscall_64+0x3d/0xb0 [ 3371.676503][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3371.682714][T30571] [ 3371.685093][T30571] Uninit was stored to memory at: [ 3371.690301][T30571] ___sys_recvmsg+0x522/0x890 [ 3371.695264][T30571] do_recvmmsg+0x55a/0x1180 [ 3371.699903][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.705217][T30571] do_syscall_64+0x3d/0xb0 [ 3371.709755][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3371.715973][T30571] [ 3371.718360][T30571] Uninit was stored to memory at: [ 3371.723716][T30571] ___sys_recvmsg+0x522/0x890 [ 3371.728526][T30571] do_recvmmsg+0x55a/0x1180 [ 3371.733293][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.738448][T30571] do_syscall_64+0x3d/0xb0 [ 3371.743178][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3371.749241][T30571] [ 3371.751761][T30571] Uninit was stored to memory at: [ 3371.756966][T30571] ___sys_recvmsg+0x522/0x890 [ 3371.761910][T30571] do_recvmmsg+0x55a/0x1180 [ 3371.766549][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.771837][T30571] do_syscall_64+0x3d/0xb0 [ 3371.776373][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3371.782552][T30571] [ 3371.784935][T30571] Uninit was stored to memory at: [ 3371.790124][T30571] ___sys_recvmsg+0x522/0x890 [ 3371.795074][T30571] do_recvmmsg+0x55a/0x1180 [ 3371.799703][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3371.805010][T30571] do_syscall_64+0x3d/0xb0 [ 3371.809550][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3371.815794][T30571] [ 3371.818183][T30571] Local variable msg_sys created at: [ 3371.823682][T30571] do_recvmmsg+0x5c/0x1180 [ 3371.828221][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.500234][T30572] not chained 16870000 origins [ 3372.512851][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3372.523161][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3372.533322][T30572] Call Trace: [ 3372.536672][T30572] [ 3372.539674][T30572] dump_stack_lvl+0x1c8/0x256 [ 3372.544534][T30572] dump_stack+0x1a/0x1c [ 3372.548840][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3372.554704][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3372.559951][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3372.565999][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3372.570807][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3372.576777][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3372.582762][T30572] ? should_fail+0x3f/0x810 [ 3372.587418][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3372.592678][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3372.599068][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3372.605012][T30572] __msan_chain_origin+0xbd/0x140 [ 3372.610172][T30572] ___sys_recvmsg+0x522/0x890 [ 3372.614979][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3372.619797][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3372.625857][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3372.631820][T30572] do_recvmmsg+0x55a/0x1180 [ 3372.636472][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3372.642866][T30572] ? do_syscall_64+0x3d/0xb0 [ 3372.647586][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.652755][T30572] do_syscall_64+0x3d/0xb0 [ 3372.657291][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.663356][T30572] RIP: 0033:0x7f13f0a89279 [ 3372.667865][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3372.687615][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3372.696150][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3372.704228][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3372.712300][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3372.720374][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3372.728438][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3372.736532][T30572] [ 3372.740766][T30572] Uninit was stored to memory at: [ 3372.746036][T30572] ___sys_recvmsg+0x522/0x890 [ 3372.750840][T30572] do_recvmmsg+0x55a/0x1180 [ 3372.755588][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.760743][T30572] do_syscall_64+0x3d/0xb0 [ 3372.765407][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.771475][T30572] [ 3372.773978][T30572] Uninit was stored to memory at: [ 3372.779171][T30572] ___sys_recvmsg+0x522/0x890 [ 3372.784081][T30572] do_recvmmsg+0x55a/0x1180 [ 3372.788708][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.793959][T30572] do_syscall_64+0x3d/0xb0 [ 3372.798495][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.804665][T30572] [ 3372.807048][T30572] Uninit was stored to memory at: [ 3372.812334][T30572] ___sys_recvmsg+0x522/0x890 [ 3372.817140][T30572] do_recvmmsg+0x55a/0x1180 [ 3372.821922][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.827087][T30572] do_syscall_64+0x3d/0xb0 [ 3372.831732][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.837800][T30572] [ 3372.840188][T30572] Uninit was stored to memory at: [ 3372.845494][T30572] ___sys_recvmsg+0x522/0x890 [ 3372.850296][T30572] do_recvmmsg+0x55a/0x1180 [ 3372.855037][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.860196][T30572] do_syscall_64+0x3d/0xb0 [ 3372.864845][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.870915][T30572] [ 3372.873410][T30572] Uninit was stored to memory at: [ 3372.878601][T30572] ___sys_recvmsg+0x522/0x890 [ 3372.883514][T30572] do_recvmmsg+0x55a/0x1180 [ 3372.888144][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.893497][T30572] do_syscall_64+0x3d/0xb0 [ 3372.898046][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.904276][T30572] [ 3372.906668][T30572] Uninit was stored to memory at: [ 3372.912016][T30572] ___sys_recvmsg+0x522/0x890 [ 3372.916818][T30572] do_recvmmsg+0x55a/0x1180 [ 3372.921453][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.926779][T30572] do_syscall_64+0x3d/0xb0 [ 3372.931338][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.937581][T30572] [ 3372.939995][T30572] Uninit was stored to memory at: [ 3372.945315][T30572] ___sys_recvmsg+0x522/0x890 [ 3372.950122][T30572] do_recvmmsg+0x55a/0x1180 [ 3372.954915][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3372.960079][T30572] do_syscall_64+0x3d/0xb0 [ 3372.964783][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.970857][T30572] [ 3372.973412][T30572] Local variable msg_sys created at: [ 3372.978781][T30572] do_recvmmsg+0x5c/0x1180 [ 3372.983475][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3373.624042][T30572] not chained 16880000 origins [ 3373.628928][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3373.639227][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3373.649414][T30572] Call Trace: [ 3373.652769][T30572] [ 3373.655774][T30572] dump_stack_lvl+0x1c8/0x256 [ 3373.660635][T30572] dump_stack+0x1a/0x1c [ 3373.664949][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3373.670833][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3373.676052][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3373.682111][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3373.686942][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3373.692926][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3373.698999][T30572] ? should_fail+0x3f/0x810 [ 3373.703657][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3373.708932][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3373.715342][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3373.721305][T30572] __msan_chain_origin+0xbd/0x140 [ 3373.726466][T30572] ___sys_recvmsg+0x522/0x890 [ 3373.731265][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3373.736090][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3373.742141][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3373.748163][T30572] do_recvmmsg+0x55a/0x1180 [ 3373.752823][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3373.759236][T30572] ? do_syscall_64+0x3d/0xb0 [ 3373.763981][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3373.769167][T30572] do_syscall_64+0x3d/0xb0 [ 3373.773718][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3373.779786][T30572] RIP: 0033:0x7f13f0a89279 [ 3373.784303][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3373.804056][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3373.812594][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3373.820674][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3373.828745][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3373.836811][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3373.844876][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3373.852978][T30572] [ 3373.860649][T30572] Uninit was stored to memory at: [ 3373.866360][T30572] ___sys_recvmsg+0x522/0x890 [ 3373.871196][T30572] do_recvmmsg+0x55a/0x1180 [ 3373.875963][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3373.881127][T30572] do_syscall_64+0x3d/0xb0 [ 3373.885789][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3373.891961][T30572] [ 3373.894348][T30572] Uninit was stored to memory at: [ 3373.899535][T30572] ___sys_recvmsg+0x522/0x890 [ 3373.904545][T30572] do_recvmmsg+0x55a/0x1180 [ 3373.909191][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3373.914557][T30572] do_syscall_64+0x3d/0xb0 [ 3373.919111][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3373.925346][T30572] [ 3373.927736][T30572] Uninit was stored to memory at: [ 3373.933096][T30572] ___sys_recvmsg+0x522/0x890 [ 3373.937925][T30572] do_recvmmsg+0x55a/0x1180 [ 3373.942703][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3373.947864][T30572] do_syscall_64+0x3d/0xb0 [ 3373.952567][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3373.958733][T30572] [ 3373.961121][T30572] Uninit was stored to memory at: [ 3373.966480][T30572] ___sys_recvmsg+0x522/0x890 [ 3373.971284][T30572] do_recvmmsg+0x55a/0x1180 [ 3373.976080][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3373.981252][T30572] do_syscall_64+0x3d/0xb0 [ 3373.985960][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3373.992143][T30572] [ 3373.994529][T30572] Uninit was stored to memory at: [ 3373.999731][T30572] ___sys_recvmsg+0x522/0x890 [ 3374.004698][T30572] do_recvmmsg+0x55a/0x1180 [ 3374.009349][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3374.014680][T30572] do_syscall_64+0x3d/0xb0 [ 3374.019221][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3374.025468][T30572] [ 3374.027857][T30572] Uninit was stored to memory at: [ 3374.033209][T30572] ___sys_recvmsg+0x522/0x890 [ 3374.038015][T30572] do_recvmmsg+0x55a/0x1180 [ 3374.042757][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3374.047924][T30572] do_syscall_64+0x3d/0xb0 [ 3374.052629][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3374.058703][T30572] [ 3374.061087][T30572] Uninit was stored to memory at: [ 3374.066445][T30572] ___sys_recvmsg+0x522/0x890 [ 3374.071258][T30572] do_recvmmsg+0x55a/0x1180 [ 3374.076053][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3374.081210][T30572] do_syscall_64+0x3d/0xb0 [ 3374.085915][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3374.092082][T30572] [ 3374.094470][T30572] Local variable msg_sys created at: [ 3374.099828][T30572] do_recvmmsg+0x5c/0x1180 [ 3374.104533][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3374.765121][T30572] not chained 16890000 origins [ 3374.770013][T30572] CPU: 0 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3374.780305][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3374.790458][T30572] Call Trace: [ 3374.793846][T30572] [ 3374.796864][T30572] dump_stack_lvl+0x1c8/0x256 [ 3374.801716][T30572] dump_stack+0x1a/0x1c [ 3374.806027][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3374.811884][T30572] ? filter_irq_stacks+0x5c/0x1a0 [ 3374.817077][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3374.823106][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3374.827905][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3374.833863][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3374.839821][T30572] ? should_fail+0x3f/0x810 [ 3374.844458][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3374.849705][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3374.856118][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3374.862078][T30572] __msan_chain_origin+0xbd/0x140 [ 3374.867244][T30572] ___sys_recvmsg+0x522/0x890 [ 3374.872052][T30572] ? do_recvmmsg+0x5bc/0x1180 [ 3374.876879][T30572] ? kmsan_internal_check_memory+0x94/0x530 [ 3374.882920][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3374.888876][T30572] do_recvmmsg+0x55a/0x1180 [ 3374.893521][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3374.899912][T30572] ? do_syscall_64+0x3d/0xb0 [ 3374.904627][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3374.909793][T30572] do_syscall_64+0x3d/0xb0 [ 3374.914350][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3374.920403][T30572] RIP: 0033:0x7f13f0a89279 [ 3374.924909][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3374.944657][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3374.953196][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3374.961273][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3374.969349][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3374.977416][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3374.985479][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3374.993573][T30572] [ 3375.000378][T30572] Uninit was stored to memory at: [ 3375.005937][T30572] ___sys_recvmsg+0x522/0x890 [ 3375.010756][T30572] do_recvmmsg+0x55a/0x1180 [ 3375.015475][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3375.020644][T30572] do_syscall_64+0x3d/0xb0 [ 3375.025278][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.031357][T30572] [ 3375.033823][T30572] Uninit was stored to memory at: [ 3375.039028][T30572] ___sys_recvmsg+0x522/0x890 [ 3375.043920][T30572] do_recvmmsg+0x55a/0x1180 [ 3375.048547][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3375.053785][T30572] do_syscall_64+0x3d/0xb0 [ 3375.058341][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.064509][T30572] [ 3375.066913][T30572] Uninit was stored to memory at: [ 3375.072189][T30572] ___sys_recvmsg+0x522/0x890 [ 3375.076995][T30572] do_recvmmsg+0x55a/0x1180 [ 3375.081699][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3375.086871][T30572] do_syscall_64+0x3d/0xb0 [ 3375.091413][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.097566][T30572] [ 3375.099954][T30572] Uninit was stored to memory at: [ 3375.105227][T30572] ___sys_recvmsg+0x522/0x890 [ 3375.110038][T30572] do_recvmmsg+0x55a/0x1180 [ 3375.114750][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3375.119908][T30572] do_syscall_64+0x3d/0xb0 [ 3375.124531][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.130601][T30572] [ 3375.133074][T30572] Uninit was stored to memory at: [ 3375.138259][T30572] ___sys_recvmsg+0x522/0x890 [ 3375.143143][T30572] do_recvmmsg+0x55a/0x1180 [ 3375.147773][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3375.153002][T30572] do_syscall_64+0x3d/0xb0 [ 3375.157543][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.163682][T30572] [ 3375.166064][T30572] Uninit was stored to memory at: [ 3375.171263][T30572] ___sys_recvmsg+0x522/0x890 [ 3375.176147][T30572] do_recvmmsg+0x55a/0x1180 [ 3375.180775][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3375.186068][T30572] do_syscall_64+0x3d/0xb0 [ 3375.190613][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.196809][T30572] [ 3375.199196][T30572] Uninit was stored to memory at: [ 3375.204525][T30572] ___sys_recvmsg+0x522/0x890 [ 3375.209337][T30572] do_recvmmsg+0x55a/0x1180 [ 3375.214099][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3375.219258][T30572] do_syscall_64+0x3d/0xb0 [ 3375.223951][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.230031][T30572] [ 3375.232493][T30572] Local variable msg_sys created at: [ 3375.237849][T30572] do_recvmmsg+0x5c/0x1180 [ 3375.242518][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3375.945096][T30571] not chained 16900000 origins [ 3375.949987][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3375.960274][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3375.970431][T30571] Call Trace: [ 3375.973787][T30571] [ 3375.976788][T30571] dump_stack_lvl+0x1c8/0x256 [ 3375.981659][T30571] dump_stack+0x1a/0x1c [ 3375.985970][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3375.991845][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3375.997056][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3376.003100][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3376.007911][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3376.013883][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3376.019853][T30571] ? should_fail+0x3f/0x810 [ 3376.024504][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3376.029763][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3376.036253][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3376.042221][T30571] __msan_chain_origin+0xbd/0x140 [ 3376.047386][T30571] ___sys_recvmsg+0x522/0x890 [ 3376.052196][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3376.057035][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3376.063089][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3376.069051][T30571] do_recvmmsg+0x55a/0x1180 [ 3376.073695][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3376.080084][T30571] ? do_syscall_64+0x3d/0xb0 [ 3376.084799][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3376.089974][T30571] do_syscall_64+0x3d/0xb0 [ 3376.094516][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.100573][T30571] RIP: 0033:0x7f13f0a89279 [ 3376.105084][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3376.124925][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3376.133464][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3376.141543][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3376.149621][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3376.157686][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3376.165773][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3376.173871][T30571] [ 3376.180394][T30571] Uninit was stored to memory at: [ 3376.189777][T30571] ___sys_recvmsg+0x522/0x890 [ 3376.194685][T30571] do_recvmmsg+0x55a/0x1180 [ 3376.199316][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3376.204570][T30571] do_syscall_64+0x3d/0xb0 [ 3376.209112][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.215303][T30571] [ 3376.217685][T30571] Uninit was stored to memory at: [ 3376.222952][T30571] ___sys_recvmsg+0x522/0x890 [ 3376.227755][T30571] do_recvmmsg+0x55a/0x1180 [ 3376.232466][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3376.237711][T30571] do_syscall_64+0x3d/0xb0 [ 3376.242386][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.248456][T30571] [ 3376.250850][T30571] Uninit was stored to memory at: [ 3376.256193][T30571] ___sys_recvmsg+0x522/0x890 [ 3376.260992][T30571] do_recvmmsg+0x55a/0x1180 [ 3376.265765][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3376.270938][T30571] do_syscall_64+0x3d/0xb0 [ 3376.275618][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.281758][T30571] [ 3376.284151][T30571] Uninit was stored to memory at: [ 3376.289355][T30571] ___sys_recvmsg+0x522/0x890 [ 3376.294294][T30571] do_recvmmsg+0x55a/0x1180 [ 3376.298926][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3376.304223][T30571] do_syscall_64+0x3d/0xb0 [ 3376.308769][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.314983][T30571] [ 3376.317372][T30571] Uninit was stored to memory at: [ 3376.322705][T30571] ___sys_recvmsg+0x522/0x890 [ 3376.327510][T30571] do_recvmmsg+0x55a/0x1180 [ 3376.332264][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3376.337439][T30571] do_syscall_64+0x3d/0xb0 [ 3376.342124][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.348196][T30571] [ 3376.350592][T30571] Uninit was stored to memory at: [ 3376.355926][T30571] ___sys_recvmsg+0x522/0x890 [ 3376.360739][T30571] do_recvmmsg+0x55a/0x1180 [ 3376.365508][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3376.370675][T30571] do_syscall_64+0x3d/0xb0 [ 3376.375353][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.381425][T30571] [ 3376.383945][T30571] Uninit was stored to memory at: [ 3376.389148][T30571] ___sys_recvmsg+0x522/0x890 [ 3376.394096][T30571] do_recvmmsg+0x55a/0x1180 [ 3376.398725][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3376.404046][T30571] do_syscall_64+0x3d/0xb0 [ 3376.408602][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.414813][T30571] [ 3376.417204][T30571] Local variable msg_sys created at: [ 3376.422698][T30571] do_recvmmsg+0x5c/0x1180 [ 3376.427243][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.030679][T30571] not chained 16910000 origins [ 3377.035758][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3377.046045][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3377.056210][T30571] Call Trace: [ 3377.059565][T30571] [ 3377.062593][T30571] dump_stack_lvl+0x1c8/0x256 [ 3377.067450][T30571] dump_stack+0x1a/0x1c [ 3377.071755][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3377.077617][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3377.082802][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3377.088831][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3377.093630][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3377.099584][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3377.105535][T30571] ? should_fail+0x3f/0x810 [ 3377.110171][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3377.115418][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3377.121815][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3377.127763][T30571] __msan_chain_origin+0xbd/0x140 [ 3377.132920][T30571] ___sys_recvmsg+0x522/0x890 [ 3377.137714][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3377.142531][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3377.148566][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3377.154520][T30571] do_recvmmsg+0x55a/0x1180 [ 3377.159159][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3377.165547][T30571] ? do_syscall_64+0x3d/0xb0 [ 3377.170257][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.175428][T30571] do_syscall_64+0x3d/0xb0 [ 3377.179961][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.186010][T30571] RIP: 0033:0x7f13f0a89279 [ 3377.190516][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3377.210276][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3377.218818][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3377.226897][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3377.234970][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3377.243036][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3377.251103][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3377.259197][T30571] [ 3377.267911][T30571] Uninit was stored to memory at: [ 3377.273831][T30571] ___sys_recvmsg+0x522/0x890 [ 3377.278641][T30571] do_recvmmsg+0x55a/0x1180 [ 3377.283380][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.288535][T30571] do_syscall_64+0x3d/0xb0 [ 3377.293188][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.299259][T30571] [ 3377.301750][T30571] Uninit was stored to memory at: [ 3377.306936][T30571] ___sys_recvmsg+0x522/0x890 [ 3377.311843][T30571] do_recvmmsg+0x55a/0x1180 [ 3377.316471][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.321731][T30571] do_syscall_64+0x3d/0xb0 [ 3377.326276][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.332453][T30571] [ 3377.334841][T30571] Uninit was stored to memory at: [ 3377.340028][T30571] ___sys_recvmsg+0x522/0x890 [ 3377.344941][T30571] do_recvmmsg+0x55a/0x1180 [ 3377.349563][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.354876][T30571] do_syscall_64+0x3d/0xb0 [ 3377.359421][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.365674][T30571] [ 3377.368071][T30571] Uninit was stored to memory at: [ 3377.373418][T30571] ___sys_recvmsg+0x522/0x890 [ 3377.378232][T30571] do_recvmmsg+0x55a/0x1180 [ 3377.383024][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.388182][T30571] do_syscall_64+0x3d/0xb0 [ 3377.392880][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.398948][T30571] [ 3377.401337][T30571] Uninit was stored to memory at: [ 3377.406632][T30571] ___sys_recvmsg+0x522/0x890 [ 3377.411432][T30571] do_recvmmsg+0x55a/0x1180 [ 3377.416218][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.421382][T30571] do_syscall_64+0x3d/0xb0 [ 3377.426067][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.432250][T30571] [ 3377.434636][T30571] Uninit was stored to memory at: [ 3377.439822][T30571] ___sys_recvmsg+0x522/0x890 [ 3377.444788][T30571] do_recvmmsg+0x55a/0x1180 [ 3377.449419][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.454746][T30571] do_syscall_64+0x3d/0xb0 [ 3377.459301][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.465543][T30571] [ 3377.467940][T30571] Uninit was stored to memory at: [ 3377.473284][T30571] ___sys_recvmsg+0x522/0x890 [ 3377.478091][T30571] do_recvmmsg+0x55a/0x1180 [ 3377.482816][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3377.487975][T30571] do_syscall_64+0x3d/0xb0 [ 3377.492709][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.498780][T30571] [ 3377.501179][T30571] Local variable msg_sys created at: [ 3377.506725][T30571] do_recvmmsg+0x5c/0x1180 [ 3377.511266][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.418342][T30571] not chained 16920000 origins [ 3378.423344][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3378.433638][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3378.443797][T30571] Call Trace: [ 3378.447150][T30571] [ 3378.450154][T30571] dump_stack_lvl+0x1c8/0x256 [ 3378.455012][T30571] dump_stack+0x1a/0x1c [ 3378.459316][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3378.465177][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3378.470375][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3378.476429][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3378.481229][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3378.487186][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3378.493144][T30571] ? should_fail+0x3f/0x810 [ 3378.497781][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3378.503030][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3378.509424][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3378.515382][T30571] __msan_chain_origin+0xbd/0x140 [ 3378.520536][T30571] ___sys_recvmsg+0x522/0x890 [ 3378.525417][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3378.530239][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3378.536278][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3378.542255][T30571] do_recvmmsg+0x55a/0x1180 [ 3378.546901][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3378.553299][T30571] ? do_syscall_64+0x3d/0xb0 [ 3378.558011][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.563173][T30571] do_syscall_64+0x3d/0xb0 [ 3378.567716][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3378.573766][T30571] RIP: 0033:0x7f13f0a89279 [ 3378.578276][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3378.598029][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3378.606586][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3378.614671][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3378.622746][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3378.630814][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3378.638933][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3378.647060][T30571] [ 3378.653870][T30571] Uninit was stored to memory at: [ 3378.659088][T30571] ___sys_recvmsg+0x522/0x890 [ 3378.664282][T30571] do_recvmmsg+0x55a/0x1180 [ 3378.668914][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.674152][T30571] do_syscall_64+0x3d/0xb0 [ 3378.678703][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3378.684860][T30571] [ 3378.687247][T30571] Uninit was stored to memory at: [ 3378.692515][T30571] ___sys_recvmsg+0x522/0x890 [ 3378.697321][T30571] do_recvmmsg+0x55a/0x1180 [ 3378.702022][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.707178][T30571] do_syscall_64+0x3d/0xb0 [ 3378.711799][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3378.717876][T30571] [ 3378.720262][T30571] Uninit was stored to memory at: [ 3378.725523][T30571] ___sys_recvmsg+0x522/0x890 [ 3378.730337][T30571] do_recvmmsg+0x55a/0x1180 [ 3378.735079][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.740239][T30571] do_syscall_64+0x3d/0xb0 [ 3378.744870][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3378.750934][T30571] [ 3378.753401][T30571] Uninit was stored to memory at: [ 3378.758605][T30571] ___sys_recvmsg+0x522/0x890 [ 3378.763506][T30571] do_recvmmsg+0x55a/0x1180 [ 3378.768154][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.773429][T30571] do_syscall_64+0x3d/0xb0 [ 3378.777975][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3378.784114][T30571] [ 3378.786507][T30571] Uninit was stored to memory at: [ 3378.791779][T30571] ___sys_recvmsg+0x522/0x890 [ 3378.796587][T30571] do_recvmmsg+0x55a/0x1180 [ 3378.801214][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.806452][T30571] do_syscall_64+0x3d/0xb0 [ 3378.810992][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3378.817135][T30571] [ 3378.819522][T30571] Uninit was stored to memory at: [ 3378.824791][T30571] ___sys_recvmsg+0x522/0x890 [ 3378.829591][T30571] do_recvmmsg+0x55a/0x1180 [ 3378.834293][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.839451][T30571] do_syscall_64+0x3d/0xb0 [ 3378.844063][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3378.850133][T30571] [ 3378.852595][T30571] Uninit was stored to memory at: [ 3378.857784][T30571] ___sys_recvmsg+0x522/0x890 [ 3378.862655][T30571] do_recvmmsg+0x55a/0x1180 [ 3378.867282][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3378.872524][T30571] do_syscall_64+0x3d/0xb0 [ 3378.877065][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3378.883464][T30571] [ 3378.885855][T30571] Local variable msg_sys created at: [ 3378.891210][T30571] do_recvmmsg+0x5c/0x1180 [ 3378.895852][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.534816][T30571] not chained 16930000 origins [ 3379.539710][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3379.549998][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3379.560152][T30571] Call Trace: [ 3379.563520][T30571] [ 3379.566522][T30571] dump_stack_lvl+0x1c8/0x256 [ 3379.571382][T30571] dump_stack+0x1a/0x1c [ 3379.575691][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3379.581556][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3379.586754][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3379.592824][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3379.597668][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3379.603658][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3379.609641][T30571] ? should_fail+0x3f/0x810 [ 3379.614288][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3379.619545][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3379.625947][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3379.631905][T30571] __msan_chain_origin+0xbd/0x140 [ 3379.637065][T30571] ___sys_recvmsg+0x522/0x890 [ 3379.641862][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3379.646681][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3379.652719][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3379.658671][T30571] do_recvmmsg+0x55a/0x1180 [ 3379.663311][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3379.669706][T30571] ? do_syscall_64+0x3d/0xb0 [ 3379.674418][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.679585][T30571] do_syscall_64+0x3d/0xb0 [ 3379.684119][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.690171][T30571] RIP: 0033:0x7f13f0a89279 [ 3379.694681][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3379.714451][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3379.722993][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3379.731071][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3379.739165][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3379.747241][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3379.755310][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3379.763411][T30571] [ 3379.769781][T30571] Uninit was stored to memory at: [ 3379.775369][T30571] ___sys_recvmsg+0x522/0x890 [ 3379.780268][T30571] do_recvmmsg+0x55a/0x1180 [ 3379.784993][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.790149][T30571] do_syscall_64+0x3d/0xb0 [ 3379.794788][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.800862][T30571] [ 3379.803344][T30571] Uninit was stored to memory at: [ 3379.808537][T30571] ___sys_recvmsg+0x522/0x890 [ 3379.813424][T30571] do_recvmmsg+0x55a/0x1180 [ 3379.818051][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.823285][T30571] do_syscall_64+0x3d/0xb0 [ 3379.827832][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.833980][T30571] [ 3379.836373][T30571] Uninit was stored to memory at: [ 3379.841685][T30571] ___sys_recvmsg+0x522/0x890 [ 3379.846491][T30571] do_recvmmsg+0x55a/0x1180 [ 3379.851120][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.856424][T30571] do_syscall_64+0x3d/0xb0 [ 3379.860976][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.867178][T30571] [ 3379.869565][T30571] Uninit was stored to memory at: [ 3379.874875][T30571] ___sys_recvmsg+0x522/0x890 [ 3379.879687][T30571] do_recvmmsg+0x55a/0x1180 [ 3379.884443][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.889602][T30571] do_syscall_64+0x3d/0xb0 [ 3379.894272][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.900347][T30571] [ 3379.902869][T30571] Uninit was stored to memory at: [ 3379.908071][T30571] ___sys_recvmsg+0x522/0x890 [ 3379.912961][T30571] do_recvmmsg+0x55a/0x1180 [ 3379.917601][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.922902][T30571] do_syscall_64+0x3d/0xb0 [ 3379.927452][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.933667][T30571] [ 3379.936062][T30571] Uninit was stored to memory at: [ 3379.941345][T30571] ___sys_recvmsg+0x522/0x890 [ 3379.946283][T30571] do_recvmmsg+0x55a/0x1180 [ 3379.950936][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.956236][T30571] do_syscall_64+0x3d/0xb0 [ 3379.960782][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.966998][T30571] [ 3379.969387][T30571] Uninit was stored to memory at: [ 3379.974709][T30571] ___sys_recvmsg+0x522/0x890 [ 3379.979513][T30571] do_recvmmsg+0x55a/0x1180 [ 3379.984270][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3379.989425][T30571] do_syscall_64+0x3d/0xb0 [ 3379.994092][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3380.000162][T30571] [ 3380.002669][T30571] Local variable msg_sys created at: [ 3380.008026][T30571] do_recvmmsg+0x5c/0x1180 [ 3380.012697][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3380.716949][T30571] not chained 16940000 origins [ 3380.721983][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3380.732282][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3380.742447][T30571] Call Trace: [ 3380.745802][T30571] [ 3380.748813][T30571] dump_stack_lvl+0x1c8/0x256 [ 3380.753687][T30571] dump_stack+0x1a/0x1c [ 3380.758003][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3380.763882][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3380.769090][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3380.775138][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3380.779950][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3380.786007][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3380.791979][T30571] ? should_fail+0x3f/0x810 [ 3380.796638][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3380.801986][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3380.808392][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3380.814359][T30571] __msan_chain_origin+0xbd/0x140 [ 3380.819530][T30571] ___sys_recvmsg+0x522/0x890 [ 3380.824430][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3380.829347][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3380.835402][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3380.841373][T30571] do_recvmmsg+0x55a/0x1180 [ 3380.846029][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3380.852431][T30571] ? do_syscall_64+0x3d/0xb0 [ 3380.857147][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3380.862315][T30571] do_syscall_64+0x3d/0xb0 [ 3380.866856][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3380.872906][T30571] RIP: 0033:0x7f13f0a89279 [ 3380.877413][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3380.897180][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3380.905732][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3380.913833][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3380.921915][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3380.929990][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3380.938058][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3380.946159][T30571] [ 3380.953366][T30571] Uninit was stored to memory at: [ 3380.958581][T30571] ___sys_recvmsg+0x522/0x890 [ 3380.963741][T30571] do_recvmmsg+0x55a/0x1180 [ 3380.968388][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3380.973637][T30571] do_syscall_64+0x3d/0xb0 [ 3380.978186][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3380.984341][T30571] [ 3380.986729][T30571] Uninit was stored to memory at: [ 3380.992046][T30571] ___sys_recvmsg+0x522/0x890 [ 3380.996858][T30571] do_recvmmsg+0x55a/0x1180 [ 3381.001487][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3381.006807][T30571] do_syscall_64+0x3d/0xb0 [ 3381.011377][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3381.017589][T30571] [ 3381.019973][T30571] Uninit was stored to memory at: [ 3381.025284][T30571] ___sys_recvmsg+0x522/0x890 [ 3381.030084][T30571] do_recvmmsg+0x55a/0x1180 [ 3381.034854][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3381.040031][T30571] do_syscall_64+0x3d/0xb0 [ 3381.044704][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3381.050777][T30571] [ 3381.053306][T30571] Uninit was stored to memory at: [ 3381.058491][T30571] ___sys_recvmsg+0x522/0x890 [ 3381.063369][T30571] do_recvmmsg+0x55a/0x1180 [ 3381.067999][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3381.073245][T30571] do_syscall_64+0x3d/0xb0 [ 3381.077810][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3381.084023][T30571] [ 3381.086416][T30571] Uninit was stored to memory at: [ 3381.091750][T30571] ___sys_recvmsg+0x522/0x890 [ 3381.096566][T30571] do_recvmmsg+0x55a/0x1180 [ 3381.101195][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3381.106505][T30571] do_syscall_64+0x3d/0xb0 [ 3381.111049][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3381.117219][T30571] [ 3381.119607][T30571] Uninit was stored to memory at: [ 3381.124940][T30571] ___sys_recvmsg+0x522/0x890 [ 3381.129749][T30571] do_recvmmsg+0x55a/0x1180 [ 3381.134526][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3381.139688][T30571] do_syscall_64+0x3d/0xb0 [ 3381.144371][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3381.150448][T30571] [ 3381.152975][T30571] Uninit was stored to memory at: [ 3381.158157][T30571] ___sys_recvmsg+0x522/0x890 [ 3381.163082][T30571] do_recvmmsg+0x55a/0x1180 [ 3381.167715][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3381.172991][T30571] do_syscall_64+0x3d/0xb0 [ 3381.177529][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3381.183676][T30571] [ 3381.186062][T30571] Local variable msg_sys created at: [ 3381.191427][T30571] do_recvmmsg+0x5c/0x1180 [ 3381.196097][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3381.838099][T30571] not chained 16950000 origins [ 3381.843132][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3381.853425][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3381.863582][T30571] Call Trace: [ 3381.866936][T30571] [ 3381.869932][T30571] dump_stack_lvl+0x1c8/0x256 [ 3381.874777][T30571] dump_stack+0x1a/0x1c [ 3381.879076][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3381.884934][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3381.890121][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3381.896149][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3381.900946][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3381.906898][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3381.912853][T30571] ? should_fail+0x3f/0x810 [ 3381.917485][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3381.922731][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3381.929121][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3381.935083][T30571] __msan_chain_origin+0xbd/0x140 [ 3381.940238][T30571] ___sys_recvmsg+0x522/0x890 [ 3381.945040][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3381.949857][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3381.955895][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3381.961848][T30571] do_recvmmsg+0x55a/0x1180 [ 3381.966492][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3381.972883][T30571] ? do_syscall_64+0x3d/0xb0 [ 3381.977597][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3381.982763][T30571] do_syscall_64+0x3d/0xb0 [ 3381.987300][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3381.993364][T30571] RIP: 0033:0x7f13f0a89279 [ 3381.997871][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3382.017624][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3382.026163][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3382.034240][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3382.042317][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3382.050390][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3382.058451][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3382.066547][T30571] [ 3382.073150][T30571] Uninit was stored to memory at: [ 3382.078368][T30571] ___sys_recvmsg+0x522/0x890 [ 3382.083566][T30571] do_recvmmsg+0x55a/0x1180 [ 3382.088198][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3382.093444][T30571] do_syscall_64+0x3d/0xb0 [ 3382.097990][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3382.104160][T30571] [ 3382.106543][T30571] Uninit was stored to memory at: [ 3382.111873][T30571] ___sys_recvmsg+0x522/0x890 [ 3382.116676][T30571] do_recvmmsg+0x55a/0x1180 [ 3382.121306][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3382.126599][T30571] do_syscall_64+0x3d/0xb0 [ 3382.131161][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3382.137364][T30571] [ 3382.139842][T30571] Uninit was stored to memory at: [ 3382.145162][T30571] ___sys_recvmsg+0x522/0x890 [ 3382.149964][T30571] do_recvmmsg+0x55a/0x1180 [ 3382.154725][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3382.159881][T30571] do_syscall_64+0x3d/0xb0 [ 3382.164548][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3382.170613][T30571] [ 3382.173118][T30571] Uninit was stored to memory at: [ 3382.178312][T30571] ___sys_recvmsg+0x522/0x890 [ 3382.183234][T30571] do_recvmmsg+0x55a/0x1180 [ 3382.187866][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3382.193097][T30571] do_syscall_64+0x3d/0xb0 [ 3382.197647][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3382.203833][T30571] [ 3382.206219][T30571] Uninit was stored to memory at: [ 3382.211406][T30571] ___sys_recvmsg+0x522/0x890 [ 3382.216329][T30571] do_recvmmsg+0x55a/0x1180 [ 3382.220960][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3382.226241][T30571] do_syscall_64+0x3d/0xb0 [ 3382.230791][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3382.236971][T30571] [ 3382.239363][T30571] Uninit was stored to memory at: [ 3382.244633][T30571] ___sys_recvmsg+0x522/0x890 [ 3382.249434][T30571] do_recvmmsg+0x55a/0x1180 [ 3382.254196][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3382.259360][T30571] do_syscall_64+0x3d/0xb0 [ 3382.264011][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3382.270066][T30571] [ 3382.272581][T30571] Uninit was stored to memory at: [ 3382.277764][T30571] ___sys_recvmsg+0x522/0x890 [ 3382.282639][T30571] do_recvmmsg+0x55a/0x1180 [ 3382.287277][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3382.292551][T30571] do_syscall_64+0x3d/0xb0 [ 3382.297089][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3382.303234][T30571] [ 3382.305627][T30571] Local variable msg_sys created at: [ 3382.310980][T30571] do_recvmmsg+0x5c/0x1180 [ 3382.315648][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.019079][T30571] not chained 16960000 origins [ 3383.024156][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3383.034448][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3383.044600][T30571] Call Trace: [ 3383.047945][T30571] [ 3383.050943][T30571] dump_stack_lvl+0x1c8/0x256 [ 3383.055792][T30571] dump_stack+0x1a/0x1c [ 3383.060095][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3383.065954][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3383.071142][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3383.077170][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3383.081969][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3383.087918][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3383.093882][T30571] ? should_fail+0x3f/0x810 [ 3383.098522][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3383.103775][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3383.110183][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3383.116134][T30571] __msan_chain_origin+0xbd/0x140 [ 3383.121289][T30571] ___sys_recvmsg+0x522/0x890 [ 3383.126082][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3383.130903][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3383.136944][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3383.142900][T30571] do_recvmmsg+0x55a/0x1180 [ 3383.147543][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3383.153933][T30571] ? do_syscall_64+0x3d/0xb0 [ 3383.158642][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.163808][T30571] do_syscall_64+0x3d/0xb0 [ 3383.168344][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.174396][T30571] RIP: 0033:0x7f13f0a89279 [ 3383.178905][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3383.198659][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3383.207197][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3383.215273][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3383.223349][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3383.231417][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3383.239479][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3383.247574][T30571] [ 3383.255073][T30571] Uninit was stored to memory at: [ 3383.264974][T30571] ___sys_recvmsg+0x522/0x890 [ 3383.269786][T30571] do_recvmmsg+0x55a/0x1180 [ 3383.274915][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.280076][T30571] do_syscall_64+0x3d/0xb0 [ 3383.284725][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.290787][T30571] [ 3383.293283][T30571] Uninit was stored to memory at: [ 3383.298478][T30571] ___sys_recvmsg+0x522/0x890 [ 3383.303376][T30571] do_recvmmsg+0x55a/0x1180 [ 3383.308001][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.313245][T30571] do_syscall_64+0x3d/0xb0 [ 3383.317786][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.323978][T30571] [ 3383.326370][T30571] Uninit was stored to memory at: [ 3383.331689][T30571] ___sys_recvmsg+0x522/0x890 [ 3383.336494][T30571] do_recvmmsg+0x55a/0x1180 [ 3383.341124][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.346392][T30571] do_syscall_64+0x3d/0xb0 [ 3383.350937][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.357110][T30571] [ 3383.359511][T30571] Uninit was stored to memory at: [ 3383.364775][T30571] ___sys_recvmsg+0x522/0x890 [ 3383.369582][T30571] do_recvmmsg+0x55a/0x1180 [ 3383.374318][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.379475][T30571] do_syscall_64+0x3d/0xb0 [ 3383.384115][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.390182][T30571] [ 3383.392662][T30571] Uninit was stored to memory at: [ 3383.397855][T30571] ___sys_recvmsg+0x522/0x890 [ 3383.402761][T30571] do_recvmmsg+0x55a/0x1180 [ 3383.407420][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.412678][T30571] do_syscall_64+0x3d/0xb0 [ 3383.417218][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.423380][T30571] [ 3383.425770][T30571] Uninit was stored to memory at: [ 3383.430968][T30571] ___sys_recvmsg+0x522/0x890 [ 3383.435879][T30571] do_recvmmsg+0x55a/0x1180 [ 3383.440506][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.445759][T30571] do_syscall_64+0x3d/0xb0 [ 3383.450314][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.456484][T30571] [ 3383.458879][T30571] Uninit was stored to memory at: [ 3383.464170][T30571] ___sys_recvmsg+0x522/0x890 23:21:15 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x1202) mmap(&(0x7f000006e000/0x4000)=nil, 0x4000, 0x2000002, 0x30, r0, 0xbe295000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) r2 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000001300), 0x24000, 0x88) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001400), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0x5d00}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000016c0), 0x220000, 0x0) io_submit(0x0, 0x9, &(0x7f0000001740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x7ff, r0, &(0x7f0000000040)="029140b6b80f8a941e9295b200f13e31989d8eb061e439aab4146e6e8e1c453fbac15eb5f6926bff43da98f960b0a0841bef205398589d950f033a4ca42fd3293d2ffd5188f3c869fee6015202", 0x4d, 0x9, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000100)="b0769e3db179d38f0e6b2c095b677e48932e481bc3a745e54d8a835beefc993199add9c2cb154efdc27fe117cd98ba6a0916117a4bbd904ec1d539ad6c1f0691695246c8496e60cf01f4f7093c7e0f36f40c7f7f0f33b7127acaad09f2041d4c96e0ab474e6bf0348ce0b67d8a", 0x6d, 0x8e, 0x0, 0x2, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x8001, r0, &(0x7f00000001c0)="14b0b7a1e8718170792201f20b6dede5be99ad3eafc764bdfb5d4a862d8813ddf0b63cccd9e8d2cf2fffaa55a0700789a144d6111875a19a29e61d85934dce23eecc83e60c7554e79bc298cb89c62fd2e0c7bf7082c56359d440c6768b8ca795e84760fab6796c01cf801825efb989bbf02c1b732154a3c55441f786c7b48dd45faffd51c8d29c317e22093038bafffa1c3c212b2d0ba74b0465d006694591224e6960af2910f80ed6ef708fe9df0abf4494ce5df6d6", 0xb6, 0x5ba2, 0x0, 0x7}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f00000002c0)="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", 0x1000, 0x80000000, 0x0, 0x3}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, &(0x7f0000001340)="9c08c6fee29a9af5143a91887463bc3c89a1758ae9e70b8295e1f5d077ccd155c2a2f8affc9867f5c0d6679171f73dabf0dce3048c82baa8afc70f8f53b278256f16a2d8cf", 0x45, 0x5, 0x0, 0x3}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, &(0x7f0000001440)="ca74755bde834515d47997f06b5e835d23b5fd7b567f6409939ecfe83e4cf931c13c6a6387d6698a205b1274c5200a6fc6a8ff0a52882ec3c616ea346494bbc7b22896a777f9d7ca51cc790908540624f8ad6a32ceeaa83c3808", 0x5a, 0x20, 0x0, 0x1, r0}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x8, 0x6, r5, &(0x7f0000001500)="4b9082cd1713955653063d9d117b18ec3259da3d32af75b95b1e30cb210a8fd1a6244e65cdf55522e1dcf95d02d1", 0x2e, 0x2, 0x0, 0x2, r6}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0xff81, r0, &(0x7f0000001580)="4b8803f95e85d9fa9fa05b16fe1ca30e42352fdf26dbaafe6f8860d4964c769897461dbd453e17808222380d4fe0dc398b0c9dc7e42789ff2cd55cbe8091a23561009b316ad525984931a319fb91b537c3131cb88049543bdf62c2f9bdb3ae0a5d74d5c67b80fbe59e2325aa1221a9782234a15d3fd20f4621c992e408131c8cd873a1b5347544e274cf75ecfa89c3ba736f4f8ee45d1de595cff4971dacd75875ef0128aef4fd2567d0ad5a131f1f405fec4543b94909bb2862bfb6bba4f65a", 0xc0, 0x6, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0x7ff, r8, &(0x7f0000001680)="408082458c5853a4a242959a90cb", 0xe, 0x0, 0x0, 0x3, r9}]) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x1202) (async) mmap(&(0x7f000006e000/0x4000)=nil, 0x4000, 0x2000002, 0x30, r0, 0xbe295000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) (async) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000001300), 0x24000, 0x88) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001400), 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r4, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0x5d00}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r7, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000016c0), 0x220000, 0x0) (async) io_submit(0x0, 0x9, &(0x7f0000001740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x7ff, r0, &(0x7f0000000040)="029140b6b80f8a941e9295b200f13e31989d8eb061e439aab4146e6e8e1c453fbac15eb5f6926bff43da98f960b0a0841bef205398589d950f033a4ca42fd3293d2ffd5188f3c869fee6015202", 0x4d, 0x9, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000100)="b0769e3db179d38f0e6b2c095b677e48932e481bc3a745e54d8a835beefc993199add9c2cb154efdc27fe117cd98ba6a0916117a4bbd904ec1d539ad6c1f0691695246c8496e60cf01f4f7093c7e0f36f40c7f7f0f33b7127acaad09f2041d4c96e0ab474e6bf0348ce0b67d8a", 0x6d, 0x8e, 0x0, 0x2, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x8001, r0, &(0x7f00000001c0)="14b0b7a1e8718170792201f20b6dede5be99ad3eafc764bdfb5d4a862d8813ddf0b63cccd9e8d2cf2fffaa55a0700789a144d6111875a19a29e61d85934dce23eecc83e60c7554e79bc298cb89c62fd2e0c7bf7082c56359d440c6768b8ca795e84760fab6796c01cf801825efb989bbf02c1b732154a3c55441f786c7b48dd45faffd51c8d29c317e22093038bafffa1c3c212b2d0ba74b0465d006694591224e6960af2910f80ed6ef708fe9df0abf4494ce5df6d6", 0xb6, 0x5ba2, 0x0, 0x7}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f00000002c0)="4dda6a20d4352fff781572e16ad4bb75ad5608991aaf0499f02e7ec55a0a00a58962eb6cd73348b43a5da1e5fe0c11efd13b0e6048c248a807d41a5e7f98dbfbfa9444cbaf8c9738e8cacb59bee58672ebbf95ff413fcf4f582aac2697158ad51401ca6386fbfae6244668f9e7356fd4925486971524b3a89fa87d5c40991bb36c822b8040fbdaa0ed2fabec2afa3cdfaaf6969c2dadfac027b95662942782e9839e7d2de5ea8a6e5fa0f985be00238ddc50467d7a0b59fed8fe2656a6dec52c89f135ec03ee9ff63c996b7c1d6487302ce45b279821c0e7a5e29a8604d62e4d9f00316301ee5eea1b5047033cb4b2e18f7e95b69f0cad39f425a4242e4c49a02a591d85625a57cf42fd9f255ec820837c8ce8156c1d66aeab01037d6ba0d8f765633f1c124f59d44c2d7254dcbff7e4c1c2da01e2e5110d15f8a362898c4399dca00684759ab68e9b22f4a8beeb484a33ba9dbe0aedc101b9559b704ea8c4be1f7c07bd4bc94b9795a331ed5f68f4285e51bcefb9c53ea3102ad1b3bfa8c889196cdf7de6d78342d0a974d3f6f76504e0b09f3250964b921c902aab52002cd5d611bc93852fff7a825b5870c969a1fdb715de955d0346d3824a5f695d731d86ca7fbe3f864f9c4bc6459dd669d093bf5e2924ab2554547d3d53a9e7b2eefbf10ca0f2024d3dff8e3c36bc97f671386b5b9d3c2ed466a05f411b47ffd843eb8ea6e9684f04c19e0d907f708835265e9e0e6ad441b4a471ab2806a5cdf16b0f197eb19572f0507f81833bca21a94e47124b6f9958b790ae0727d6f1dffdcdb7b50f9a60391e3f254e41f1142b00ef645b6d5577486143a8158ef548604e30f896249dda71f439ed39162c3705450a1e71142716216c4f633bc513698bf7600e7e8b4abd9423027a7800b110cfbfd1989ac528cd273f2e808a17ea08f36bd1f25f98257c4fbfe8ce335de7eae990d97317956b11fed2547e57a42f81ef86533eb6fe8279659057ea6b19eb43469ecc48b0da5016d3643af83cf444a1dd70848300418aaa64a700f442ace940d3e2efcea5e8a33d1faf48fd2748929950bf785abb09d8ca21185ed4ff003ba006fffcd1c7dfed67e25b5ec0760cb6d61666fa52e88f4456d82f549bae449383c231799b3cfddad82d94b03725641dc2cff8d79be7137cd29a46167ac9576fda2e93b0af4633a451ff45cc791974e61542774a908fb58adbdaa2b812eb132e1ba7296eb374220cb3478f5ae8983a1aaaa3a51d0183d453432870c523af693768464aef45cf40664c9f79340f9070a414995b036a753acbad42c2f6bd1bad0b92c6dfb41c261935e4873d80e98889f8583991559792949c295cc81deb14fad51ce1587a7c9d07bb71322bcefafb96eb9e03ef6756611cbacefdaae77dc8e6681797d5d58964b1e1bdfafaf29211d3d79592d40fc5a4b7a436c24faec28082a00363ba617512d1e86d27255f3257495fa4fe791d829b479d2ced32f8a987bba98d3fe7f9b9b111b3ef7c2c84d1d801ee7b36b12d6aa8dcf0dc266a933f735b20b5b8403043f78450aaa700e675bce59e6fb2727f3e55309bf455c1e4da0999e56e4b69d6e89ef98acb907e14643af1b8fb0c1238873226b77fa3970edc6cd4053b53f1ed304cf26eabfbb81fcd4b865b16651302a4546aa1a06ade9f83518185cf1589bf5ed8cab2140e866a0c4c11f56ce0f7d74a40c3f4a7d8c02bba00b5c0fe9d43afc6abbaaabe95ac2b59b0286461144166f808e7c5509435a547fbaca6ba5dd488021c8aeae20d2c2a7294b3ee5c8369c735228a2d317ce3c926eff8bdc0266b47275b0fc9a30817cd0567b0049089b7f91874944a4dfe7e0fcb4c428da643cbc1cd5cec5d7090282a349dcb5c87fdc46afafb3bbb18967c21c67ec241c25e257fd3534b1a108b6e68ba8706f57175319beb4cd04e71c306d5e675f785a46eae43461d43977e4fb3825ae6bf6ffcd445bbbf78e24f63fbe419c2a9ce757b2d86ae74850cfee51354cf33418a96d5332b8dd444c9c508f21133e925bb6089aa15c348d8f9bba0e63657b8f83797c74760194e1462a68cb6c799561f7a2c9d964fab4c6d4d763c3633a9c3f51b5f63a3bb44339bfefed32e5bd0dbc2e790aaab048636396f3364c9c94536b89fc14015603ffd3ce7372da404e9461fa045b43b3785ed4f576eb46ffdcc51afe850f6527b03d9bbf838266b2602e2003dcce5e80434961f30067d78cd790b6137e19096ab2223ea17ba5a1b78a5f31a06e3f35cd34eceabdcf8b613890f32995557d4966deb238bf881dd5f3930e93d280a592bd6a6aebc343e769723392d30d49c841e8c31df8dbb6f85b1475d0915904dafe3ceff6dd12cd2cb907fb5f2c3974aab2d5bf1575175e92450a793438f613f4f16636e845894746d09d987efcec32a12fb2954197974ed1162ca116152dea5e2311e49b8479e2e360bca2cd447d87639afcfd7dd7224cd19d3450f1597fa56b25590eb912609aaf98b4e281c611dfef6beada9dba1da109e43684d97b83d6fd6c9d5bf17c8effb46b40f103557150c26ac1382c6b143fe47759ab7cc0670e6ee390141ae9466b6ced2977fb30a649ee1274ffd3c7ee4809ab21e1474b807f23e651ead3eadd4f9c88646ea39a60863675d24087058d80e7599dcaffe2b56167e40dd944633549b8af42d3f979941b9931024ee1b4307823cf5a7ee866fbe7be04fdf598dcbeb2c00addb7cfbd472184b744ec8fba88d456947b14634b4055aa8d1ac2e44a26c867492b9621b4a85d2b580b24fbb54a6063873dfbffce6546899c13f70725c11f33cc5e425f720c1db7a28eddec19a97022a1a258dd5a2bd54a4bf5e445cea710ae06da378509f2ed08adee264305bec129c0bbf374ed8c2a7a90c81f681d45c7bf6d59b2145ce4f05b737e324d47a6f7bb20d4d652fb083b2a3765760ef14277f357a1f5dace866d489a97e35dcac9239e52aa372429b9a0e49e5ae8537acb2494a64f854cc147948089fa51bea26e5029dcc708c09daecbd9f9ee31157c7c78d7d72662e5fe67c4d68f943b7503f6c7a07b0f60f3fd56627a29844ba0e4c4984fa096eb24fbe504f118b710343a48646477853cf9602b866741ec21d73d7a14358f257e4df8a0cd9f015bcd0ba3c2449e5aec3a29f4454defe8b27600cf0921d9d5bad0cf0d183d88725f21ffe2dcb96a48422ee3a886d71be49285aafee6d6392aad017516ded6881ffb0b595d2d3955a8701e608b2df7de6ee4c67bdc4cf591b7693af051202d4a3d3609a70f6c16edec1e6fc7324743236d5809b6c72a9a5867d3921ad0827bd62724d34d314e141537a8a34f5a73e19291a95105ce6568cc53353c0d4609990ccf78f892611bc518db3b18f0c09845012dd5fbce4d9212cb6acdda6e31fe7136ab220a9c29bc60e0317293335cfcc6a876a3bf14bb6f63b4d9e30a919a373484ef1958139f3cce437181ee36a57b08fb42f39afb1189e4ecd8e628d759f651fc3982732764ce616dd35a2550f36a08a19cdaa03040ed7ae3d12ed5b3ce1fde8ee227a42a41372cf12444a337cae4c6327677f80ebe95acc4480001dc2ada0b9e60d1223023c34d6ab43f005cc56c795392d2ef5580259482813ea1c308d8594fd983e07bc64ca07cdfb358f96597b9c96e343d2f681e9fe33c3e7de1d35ffef5b23b342360374d3c0ab0a0fc46a5ccb7dc1b6aa1e441ec1aff7f3dbd42377c9f70c7fc56b48f8f398846ba1989607439c4eee105d838db32629d4f75e5c0f3b87f50233365355d43903110d5767d18a89c11310bdea1bfc892375d61b9ba4561405a0189eddefdb65f1107344b4b2bd2efc77cc2dec3d17482f6deaf8e4a0b82f594b23d5961b3b1b3d1a6c67625d04bea6aa7ffa3dda63884364013c8b8309845c85fa437089df5f34222d30a3089f8033dd898fed976cd981f79af1ccfd5dee986ac325712fa244974f971f7b1314d7a82a86fba3808dc90227cf8fd92fb8abf6fee8317c4b3ef6ecb68a60856b832024f94af74e8168637a072660193202c289024200c2188d8356b121668ba7be39837d6330a366077d90c35b7db1d2ddca2e774c7df2da7949b1defb8db3a05eb843733c8a3ba114692b3370b39b6bab16fde95f061ff26b740d26481bd38e451007906ea6e0f9db517325bf157e2434fcd7f6e6249f2c6f7713576a7d5ab4cd71a915fcfef569b40fb9b1e4d3de457fb4bd859edee93dcbcafabf79f47c35b2968e162ffcf7c3d1e8f8e4fe8c4e75c7b7df506d1ac14cde7ab27699d009f50b73bf4ed0b139acd67d90de3cd0a3eb579016b4167d5cd2cf85f76461f1a25cb28c27481bdcc3c0fc30a724c436859ad6adffdba0d3e1b95dc26b5737053063498656fa02f7092b8951e447f26b5e6d5aa69b679d5e691e93adadae83d4ad7c59694109ed2b5a8e5c0d847474cf06448dcb4ba7809f657a114b6d9590b145470c0bf823cf4ed63a038d33cd0f8913489ef6f64a2fa055426f0f9fbac9ca2e38018e5ad0dfe0f01e262f5beb437d1bc3e969c449c6711bb4b9875b82e9297149a2f5b282142a4360dc666aee2c8ef523abd9f16f8144f6e802397a5a4a7adb22e1cda3cee3226c9c63f49ff11ed603b7bca799c24d8351cbfcd5fa053b655ed8ff88caef0e5736bdd501f088913575600a1013d7ecaea01412c78e0323f08360195308e3e202ba731afef2e25c46915b8b0bd84b1eb2f7ffdb3a4b148c279489597d587ed5deae4542a0266c94c28939e8a50b513d7380e88abd7411779574fdee8d8324f68af6d6f715a4479f50d20a6bf2d3052e5f5bfdd3f45c1b94efe21b1c35f6d2a2241ff24313733d2569e1fdf30309e1554c991531ef43be2e94f59768c3f041427e22bda6e916c51be3fc30fa8a919cd1a2f97da27ce07d52cf25d9fc6de7277a6ad822314a4bb7ff9bfc4f14d06cfeff0705bcaa8d44667ce02f53dbef4d2df9bce60a522d6ceb0ee5e68638dfb602d50314d711711be70df16449c8c43707682d7c2d1c6ffab91bb98a92d4d77eb014ad84a534e9595b05ecea42d1b42610d6e1185524cb7973d601350215d6d8a6c2cb3f863d15be6cd7d87b44f21a2208471675c9e7d41e49a0da9d5b4138cdc599972a8cc0f417c03d9eb894ada7f4dc02761f56651b9cb0e21b81cb8e054299a1525dc55bef79063941ac8497933aeee1f21f582d7a192152198ab9c91b1196a584de7cb5ae6baa4355cd2a8349fd0bd85e772366153636298c024f3d032a8d9fac9cb66a53979a9ac85f569a3c947ec82c31568b26f0544d5914b2a4481568c7e0e4ea6d9fe0db6844e2095a0df43c4dd641084ade5b53ef8f28cd4ad13a7cce4fff5519f1e736b63d1de71493af96e3c5223a066d5c5f6528b54eb38d0efe7983e135b578f2e4e38d032c88875993db570d600c9fd786e9fa0f961cc324a854ccca1a8e9e26c3eeb12417cfb9a5bcc82e68a37bdd06dc42da9038eb8bdc6f8b99e1729fe1da5aaffeb39de40b28db1dcf55008db07ca9f6b2fec2a5c17fe08aa28b311ef41ebfa0657b9a1e96e8249c5cc677c44ed1d64ccb9c389070de59a1d9f1fa92798fa649e6a3e336219ae77553c9201ddc1b006ccd8fb5d08e9a3b7e584602e1db27aecb9e8af0ddc0282118958294cb0f9b37ea6cd3cb486e41c2dd2329044ae74185442f7530e89b1bb88ce6d227fde0dd05454942d60c64ee4988e7eb72f78d9c89e8e42791913a137cfaf10ca53f30b70319b26e1872a5308038dc42", 0x1000, 0x80000000, 0x0, 0x3}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, &(0x7f0000001340)="9c08c6fee29a9af5143a91887463bc3c89a1758ae9e70b8295e1f5d077ccd155c2a2f8affc9867f5c0d6679171f73dabf0dce3048c82baa8afc70f8f53b278256f16a2d8cf", 0x45, 0x5, 0x0, 0x3}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, &(0x7f0000001440)="ca74755bde834515d47997f06b5e835d23b5fd7b567f6409939ecfe83e4cf931c13c6a6387d6698a205b1274c5200a6fc6a8ff0a52882ec3c616ea346494bbc7b22896a777f9d7ca51cc790908540624f8ad6a32ceeaa83c3808", 0x5a, 0x20, 0x0, 0x1, r0}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x8, 0x6, r5, &(0x7f0000001500)="4b9082cd1713955653063d9d117b18ec3259da3d32af75b95b1e30cb210a8fd1a6244e65cdf55522e1dcf95d02d1", 0x2e, 0x2, 0x0, 0x2, r6}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0xff81, r0, &(0x7f0000001580)="4b8803f95e85d9fa9fa05b16fe1ca30e42352fdf26dbaafe6f8860d4964c769897461dbd453e17808222380d4fe0dc398b0c9dc7e42789ff2cd55cbe8091a23561009b316ad525984931a319fb91b537c3131cb88049543bdf62c2f9bdb3ae0a5d74d5c67b80fbe59e2325aa1221a9782234a15d3fd20f4621c992e408131c8cd873a1b5347544e274cf75ecfa89c3ba736f4f8ee45d1de595cff4971dacd75875ef0128aef4fd2567d0ad5a131f1f405fec4543b94909bb2862bfb6bba4f65a", 0xc0, 0x6, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0x7ff, r8, &(0x7f0000001680)="408082458c5853a4a242959a90cb", 0xe, 0x0, 0x0, 0x3, r9}]) (async) 23:21:15 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000014c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000eaa2a5b970cdc7a09167446af45cece1a7ef6128076ee29483a2c25d2d2fcdf3f8306ab53777b59e773fee5c535ad28f3bbeec7caef588aec99c2969c471cc5aebd6a77ec9c4a3a7c714c19923f8b9bfd2552a3b382b05e87bfa41c92ea0c7af618e71ec1d354663f0f32d3a6fe50f811766b8c83f83fb6bdddd812f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r0], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000014c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000eaa2a5b970cdc7a09167446af45cece1a7ef6128076ee29483a2c25d2d2fcdf3f8306ab53777b59e773fee5c535ad28f3bbeec7caef588aec99c2969c471cc5aebd6a77ec9c4a3a7c714c19923f8b9bfd2552a3b382b05e87bfa41c92ea0c7af618e71ec1d354663f0f32d3a6fe50f811766b8c83f83fb6bdddd812f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 23:21:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) 23:21:15 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x5008, 0x0) 23:21:15 executing program 5: r0 = io_uring_setup(0x2703, &(0x7f0000000080)) r1 = io_uring_setup(0x2703, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) 23:21:15 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) [ 3383.468977][T30571] do_recvmmsg+0x55a/0x1180 [ 3383.473714][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3383.478881][T30571] do_syscall_64+0x3d/0xb0 [ 3383.483523][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.489593][T30571] [ 3383.492083][T30571] Local variable msg_sys created at: [ 3383.497438][T30571] do_recvmmsg+0x5c/0x1180 [ 3383.502076][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 23:21:15 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, 0x0) 23:21:15 executing program 3: keyctl$update(0x2, 0x0, &(0x7f0000000180)="ee", 0x1) 23:21:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) [ 3383.952027][T15685] usb 5-1: new high-speed USB device number 118 using dummy_hcd 23:21:16 executing program 1: request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) 23:21:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x401c5820, 0x0) [ 3384.162337][T15685] usb 5-1: device descriptor read/64, error 18 23:21:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}}, 0x0) [ 3384.441980][T15685] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 3384.631820][T15685] usb 5-1: device descriptor read/64, error 18 [ 3384.752830][T15685] usb usb5-port1: attempt power cycle [ 3385.177019][T15685] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 3385.372563][T15685] usb 5-1: device descriptor read/8, error -61 [ 3385.642039][T15685] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 3385.812511][T15685] usb 5-1: device descriptor read/8, error -61 [ 3385.942552][T15685] usb usb5-port1: unable to enumerate USB device [ 3385.985381][T30572] not chained 16970000 origins [ 3385.990344][T30572] CPU: 1 PID: 30572 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3386.000727][T30572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3386.010886][T30572] Call Trace: [ 3386.014243][T30572] [ 3386.017247][T30572] dump_stack_lvl+0x1c8/0x256 [ 3386.022107][T30572] dump_stack+0x1a/0x1c [ 3386.026424][T30572] kmsan_internal_chain_origin+0x78/0x120 [ 3386.032303][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3386.038281][T30572] ? update_misfit_status+0x2c/0xb30 [ 3386.043729][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3386.049698][T30572] ? do_recvmmsg+0x55a/0x1180 [ 3386.054508][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3386.060474][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3386.066440][T30572] ? should_fail+0x3f/0x810 [ 3386.071166][T30572] ? __stack_depot_save+0x21/0x4b0 [ 3386.076418][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3386.082808][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3386.088843][T30572] __msan_chain_origin+0xbd/0x140 [ 3386.094000][T30572] ___sys_recvmsg+0x522/0x890 [ 3386.098827][T30572] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3386.104772][T30572] ? __cond_resched+0x1f/0x40 [ 3386.109575][T30572] ? preempt_schedule_common+0x117/0x180 [ 3386.115344][T30572] do_recvmmsg+0x55a/0x1180 [ 3386.119988][T30572] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3386.126388][T30572] ? do_syscall_64+0x3d/0xb0 [ 3386.131139][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3386.136310][T30572] do_syscall_64+0x3d/0xb0 [ 3386.140850][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3386.146904][T30572] RIP: 0033:0x7f13f0a89279 [ 3386.151418][T30572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3386.171168][T30572] RSP: 002b:00007f13f1c98168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3386.179702][T30572] RAX: ffffffffffffffda RBX: 00007f13f0b9c050 RCX: 00007f13f0a89279 [ 3386.187788][T30572] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3386.195942][T30572] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3386.204011][T30572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3386.212077][T30572] R13: 00007f13f10cfb1f R14: 00007f13f1c98300 R15: 0000000000022000 [ 3386.220179][T30572] [ 3386.229966][T30572] Uninit was stored to memory at: [ 3386.238288][T30572] ___sys_recvmsg+0x522/0x890 [ 3386.243218][T30572] do_recvmmsg+0x55a/0x1180 [ 3386.247855][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3386.253137][T30572] do_syscall_64+0x3d/0xb0 [ 3386.257688][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3386.263873][T30572] [ 3386.266263][T30572] Uninit was stored to memory at: [ 3386.271460][T30572] ___sys_recvmsg+0x522/0x890 [ 3386.276384][T30572] do_recvmmsg+0x55a/0x1180 [ 3386.281020][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3386.286351][T30572] do_syscall_64+0x3d/0xb0 [ 3386.290906][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3386.297123][T30572] [ 3386.299520][T30572] Uninit was stored to memory at: [ 3386.304850][T30572] ___sys_recvmsg+0x522/0x890 [ 3386.309661][T30572] do_recvmmsg+0x55a/0x1180 [ 3386.314465][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3386.319632][T30572] do_syscall_64+0x3d/0xb0 [ 3386.324334][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3386.330443][T30572] [ 3386.332969][T30572] Uninit was stored to memory at: [ 3386.338162][T30572] ___sys_recvmsg+0x522/0x890 [ 3386.343111][T30572] do_recvmmsg+0x55a/0x1180 [ 3386.347759][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3386.353373][T30572] do_syscall_64+0x3d/0xb0 [ 3386.357919][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3386.364135][T30572] [ 3386.366523][T30572] Uninit was stored to memory at: [ 3386.371874][T30572] ___sys_recvmsg+0x522/0x890 [ 3386.376679][T30572] do_recvmmsg+0x55a/0x1180 [ 3386.381310][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3386.386625][T30572] do_syscall_64+0x3d/0xb0 [ 3386.391167][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3386.397393][T30572] [ 3386.399783][T30572] Uninit was stored to memory at: [ 3386.405148][T30572] ___sys_recvmsg+0x522/0x890 [ 3386.409950][T30572] do_recvmmsg+0x55a/0x1180 [ 3386.414730][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3386.419897][T30572] do_syscall_64+0x3d/0xb0 [ 3386.424627][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3386.430700][T30572] [ 3386.433237][T30572] Uninit was stored to memory at: [ 3386.438432][T30572] ___sys_recvmsg+0x522/0x890 [ 3386.443414][T30572] do_recvmmsg+0x55a/0x1180 [ 3386.448049][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3386.453365][T30572] do_syscall_64+0x3d/0xb0 [ 3386.457916][T30572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3386.464152][T30572] [ 3386.466548][T30572] Local variable msg_sys created at: [ 3386.472053][T30572] do_recvmmsg+0x5c/0x1180 [ 3386.476707][T30572] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3387.646581][T30571] not chained 16980000 origins [ 3387.651482][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3387.661775][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3387.671939][T30571] Call Trace: [ 3387.675289][T30571] [ 3387.678287][T30571] dump_stack_lvl+0x1c8/0x256 [ 3387.683149][T30571] dump_stack+0x1a/0x1c [ 3387.687446][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3387.693304][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3387.698494][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3387.704523][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3387.709324][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3387.715281][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3387.721235][T30571] ? should_fail+0x3f/0x810 [ 3387.725873][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3387.731126][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3387.737512][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3387.743462][T30571] __msan_chain_origin+0xbd/0x140 [ 3387.748617][T30571] ___sys_recvmsg+0x522/0x890 [ 3387.753411][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3387.758232][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3387.764272][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3387.770231][T30571] do_recvmmsg+0x55a/0x1180 [ 3387.774877][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3387.781269][T30571] ? do_syscall_64+0x3d/0xb0 [ 3387.785984][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3387.791238][T30571] do_syscall_64+0x3d/0xb0 [ 3387.795776][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3387.802099][T30571] RIP: 0033:0x7f13f0a89279 [ 3387.806618][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3387.826374][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3387.834915][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3387.842997][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3387.851068][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3387.859158][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3387.867224][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3387.875322][T30571] [ 3387.883038][T30571] Uninit was stored to memory at: [ 3387.888251][T30571] ___sys_recvmsg+0x522/0x890 [ 3387.893574][T30571] do_recvmmsg+0x55a/0x1180 [ 3387.898213][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3387.903492][T30571] do_syscall_64+0x3d/0xb0 [ 3387.908039][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3387.914226][T30571] [ 3387.916612][T30571] Uninit was stored to memory at: [ 3387.921930][T30571] ___sys_recvmsg+0x522/0x890 [ 3387.926748][T30571] do_recvmmsg+0x55a/0x1180 [ 3387.931399][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3387.936758][T30571] do_syscall_64+0x3d/0xb0 [ 3387.941321][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3387.947550][T30571] [ 3387.949948][T30571] Uninit was stored to memory at: [ 3387.955819][T30571] ___sys_recvmsg+0x522/0x890 [ 3387.960627][T30571] do_recvmmsg+0x55a/0x1180 [ 3387.965464][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3387.970663][T30571] do_syscall_64+0x3d/0xb0 [ 3387.975401][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3387.981472][T30571] [ 3387.984028][T30571] Uninit was stored to memory at: [ 3387.989223][T30571] ___sys_recvmsg+0x522/0x890 [ 3387.994195][T30571] do_recvmmsg+0x55a/0x1180 [ 3387.998829][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3388.004155][T30571] do_syscall_64+0x3d/0xb0 [ 3388.008702][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3388.014945][T30571] [ 3388.017333][T30571] Uninit was stored to memory at: [ 3388.022675][T30571] ___sys_recvmsg+0x522/0x890 [ 3388.027485][T30571] do_recvmmsg+0x55a/0x1180 [ 3388.032259][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3388.037428][T30571] do_syscall_64+0x3d/0xb0 [ 3388.042115][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3388.048280][T30571] [ 3388.050678][T30571] Uninit was stored to memory at: [ 3388.056032][T30571] ___sys_recvmsg+0x522/0x890 [ 3388.060838][T30571] do_recvmmsg+0x55a/0x1180 [ 3388.065646][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3388.070909][T30571] do_syscall_64+0x3d/0xb0 [ 3388.075610][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3388.081791][T30571] [ 3388.084182][T30571] Uninit was stored to memory at: [ 3388.089367][T30571] ___sys_recvmsg+0x522/0x890 [ 3388.094352][T30571] do_recvmmsg+0x55a/0x1180 [ 3388.098980][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3388.104303][T30571] do_syscall_64+0x3d/0xb0 [ 3388.108853][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3388.115075][T30571] [ 3388.117457][T30571] Local variable msg_sys created at: [ 3388.122966][T30571] do_recvmmsg+0x5c/0x1180 [ 3388.127487][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3388.443051][T10038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3388.451482][T10038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3388.460820][T10038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3388.476233][T10038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3388.495397][T10038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3388.504579][T10038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3388.871281][T30620] chnl_net:caif_netlink_parms(): no params data found [ 3389.295977][T30571] not chained 16990000 origins [ 3389.305106][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3389.315411][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3389.325563][T30571] Call Trace: [ 3389.328910][T30571] [ 3389.331911][T30571] dump_stack_lvl+0x1c8/0x256 [ 3389.336758][T30571] dump_stack+0x1a/0x1c [ 3389.341055][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3389.346925][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3389.352114][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3389.358143][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3389.362942][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3389.369072][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3389.375025][T30571] ? should_fail+0x3f/0x810 [ 3389.379664][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3389.384912][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3389.391317][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3389.397270][T30571] __msan_chain_origin+0xbd/0x140 [ 3389.402437][T30571] ___sys_recvmsg+0x522/0x890 [ 3389.407243][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3389.412063][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3389.418103][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3389.424057][T30571] do_recvmmsg+0x55a/0x1180 [ 3389.428697][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3389.435088][T30571] ? do_syscall_64+0x3d/0xb0 [ 3389.439799][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.444966][T30571] do_syscall_64+0x3d/0xb0 [ 3389.449501][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3389.455556][T30571] RIP: 0033:0x7f13f0a89279 [ 3389.460070][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3389.479822][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3389.488369][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3389.496450][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3389.504522][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3389.512588][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3389.520654][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3389.528748][T30571] [ 3389.532731][T30571] Uninit was stored to memory at: [ 3389.537939][T30571] ___sys_recvmsg+0x522/0x890 [ 3389.542897][T30571] do_recvmmsg+0x55a/0x1180 [ 3389.547528][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.553217][T30571] do_syscall_64+0x3d/0xb0 [ 3389.557761][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3389.564022][T30571] [ 3389.566413][T30571] Uninit was stored to memory at: [ 3389.571707][T30571] ___sys_recvmsg+0x522/0x890 [ 3389.576511][T30571] do_recvmmsg+0x55a/0x1180 [ 3389.581142][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.586439][T30571] do_syscall_64+0x3d/0xb0 [ 3389.591011][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3389.597211][T30571] [ 3389.599604][T30571] Uninit was stored to memory at: [ 3389.604881][T30571] ___sys_recvmsg+0x522/0x890 [ 3389.609699][T30571] do_recvmmsg+0x55a/0x1180 [ 3389.614465][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.619632][T30571] do_syscall_64+0x3d/0xb0 [ 3389.624295][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3389.630379][T30571] [ 3389.632888][T30571] Uninit was stored to memory at: [ 3389.638087][T30571] ___sys_recvmsg+0x522/0x890 [ 3389.643011][T30571] do_recvmmsg+0x55a/0x1180 [ 3389.647662][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.652944][T30571] do_syscall_64+0x3d/0xb0 [ 3389.657493][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3389.663656][T30571] [ 3389.666040][T30571] Uninit was stored to memory at: [ 3389.671240][T30571] ___sys_recvmsg+0x522/0x890 [ 3389.676162][T30571] do_recvmmsg+0x55a/0x1180 [ 3389.680803][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.686066][T30571] do_syscall_64+0x3d/0xb0 [ 3389.690606][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3389.696782][T30571] [ 3389.699174][T30571] Uninit was stored to memory at: [ 3389.704475][T30571] ___sys_recvmsg+0x522/0x890 [ 3389.709276][T30571] do_recvmmsg+0x55a/0x1180 [ 3389.714101][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.719348][T30571] do_syscall_64+0x3d/0xb0 [ 3389.724003][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3389.730072][T30571] [ 3389.732575][T30571] Uninit was stored to memory at: [ 3389.737764][T30571] ___sys_recvmsg+0x522/0x890 [ 3389.742676][T30571] do_recvmmsg+0x55a/0x1180 [ 3389.747305][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.752581][T30571] do_syscall_64+0x3d/0xb0 [ 3389.757128][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3389.763352][T30571] [ 3389.765744][T30571] Local variable msg_sys created at: [ 3389.771109][T30571] do_recvmmsg+0x5c/0x1180 [ 3389.775831][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3389.866543][T30620] bridge0: port 1(bridge_slave_0) entered blocking state [ 3389.874316][T30620] bridge0: port 1(bridge_slave_0) entered disabled state [ 3389.884565][T30620] device bridge_slave_0 entered promiscuous mode [ 3389.933878][T30620] bridge0: port 2(bridge_slave_1) entered blocking state [ 3389.941415][T30620] bridge0: port 2(bridge_slave_1) entered disabled state [ 3389.951895][T30620] device bridge_slave_1 entered promiscuous mode [ 3390.080702][T30620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3390.109829][T30620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3390.254509][T30620] team0: Port device team_slave_0 added [ 3390.273738][T30620] team0: Port device team_slave_1 added [ 3390.371485][T30620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3390.378770][T30620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3390.405157][T30620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3390.434532][T30620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3390.441893][T30620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3390.468800][T30620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3390.581903][T17879] Bluetooth: hci0: command 0x0409 tx timeout [ 3390.597819][T30620] device hsr_slave_0 entered promiscuous mode [ 3390.617957][T30620] device hsr_slave_1 entered promiscuous mode [ 3390.627309][T30620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3390.640496][T30620] Cannot create hsr debugfs directory [ 3391.206054][T30571] not chained 17000000 origins [ 3391.210941][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3391.221237][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3391.231397][T30571] Call Trace: [ 3391.234751][T30571] [ 3391.237755][T30571] dump_stack_lvl+0x1c8/0x256 [ 3391.242634][T30571] dump_stack+0x1a/0x1c [ 3391.246936][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3391.252795][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3391.257984][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3391.264015][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3391.268812][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3391.274766][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3391.280725][T30571] ? should_fail+0x3f/0x810 [ 3391.285360][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3391.290614][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3391.297004][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3391.303040][T30571] __msan_chain_origin+0xbd/0x140 [ 3391.308201][T30571] ___sys_recvmsg+0x522/0x890 [ 3391.312996][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3391.317837][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3391.323874][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3391.329826][T30571] do_recvmmsg+0x55a/0x1180 [ 3391.334478][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3391.340868][T30571] ? do_syscall_64+0x3d/0xb0 [ 3391.345584][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.350748][T30571] do_syscall_64+0x3d/0xb0 [ 3391.355278][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3391.361333][T30571] RIP: 0033:0x7f13f0a89279 [ 3391.365844][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3391.385591][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3391.394125][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3391.402204][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3391.410280][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3391.418348][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3391.426422][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3391.434523][T30571] [ 3391.440983][T30571] Uninit was stored to memory at: [ 3391.446553][T30571] ___sys_recvmsg+0x522/0x890 [ 3391.451373][T30571] do_recvmmsg+0x55a/0x1180 [ 3391.456089][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.461244][T30571] do_syscall_64+0x3d/0xb0 [ 3391.465879][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3391.472040][T30571] [ 3391.474444][T30571] Uninit was stored to memory at: [ 3391.479642][T30571] ___sys_recvmsg+0x522/0x890 [ 3391.484550][T30571] do_recvmmsg+0x55a/0x1180 [ 3391.489186][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.494448][T30571] do_syscall_64+0x3d/0xb0 [ 3391.499083][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3391.505248][T30571] [ 3391.507641][T30571] Uninit was stored to memory at: [ 3391.512920][T30571] ___sys_recvmsg+0x522/0x890 [ 3391.517727][T30571] do_recvmmsg+0x55a/0x1180 [ 3391.522445][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.527618][T30571] do_syscall_64+0x3d/0xb0 [ 3391.532241][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3391.538311][T30571] [ 3391.540702][T30571] Uninit was stored to memory at: [ 3391.545982][T30571] ___sys_recvmsg+0x522/0x890 [ 3391.550789][T30571] do_recvmmsg+0x55a/0x1180 [ 3391.555501][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.560657][T30571] do_syscall_64+0x3d/0xb0 [ 3391.565282][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3391.571363][T30571] [ 3391.573877][T30571] Uninit was stored to memory at: [ 3391.579082][T30571] ___sys_recvmsg+0x522/0x890 [ 3391.583982][T30571] do_recvmmsg+0x55a/0x1180 [ 3391.588616][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.593960][T30571] do_syscall_64+0x3d/0xb0 [ 3391.598506][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3391.604665][T30571] [ 3391.607058][T30571] Uninit was stored to memory at: [ 3391.612324][T30571] ___sys_recvmsg+0x522/0x890 [ 3391.617122][T30571] do_recvmmsg+0x55a/0x1180 [ 3391.621824][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.626984][T30571] do_syscall_64+0x3d/0xb0 [ 3391.631533][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3391.637741][T30571] [ 3391.640133][T30571] Uninit was stored to memory at: [ 3391.645418][T30571] ___sys_recvmsg+0x522/0x890 [ 3391.650222][T30571] do_recvmmsg+0x55a/0x1180 [ 3391.654947][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.660105][T30571] do_syscall_64+0x3d/0xb0 [ 3391.664735][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3391.670810][T30571] [ 3391.673353][T30571] Local variable msg_sys created at: [ 3391.678715][T30571] do_recvmmsg+0x5c/0x1180 [ 3391.683352][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3391.799471][T30620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3391.869282][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3391.879955][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3391.903394][T30620] 8021q: adding VLAN 0 to HW filter on device team0 [ 3391.936298][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3391.947152][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3391.957308][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 3391.964870][ T3147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3392.048573][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3392.058799][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3392.073224][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3392.083319][ T3147] bridge0: port 2(bridge_slave_1) entered blocking state [ 3392.090840][ T3147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3392.100421][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3392.112553][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3392.124457][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3392.136087][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3392.193177][T30620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3392.204549][T30620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3392.288631][T30620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3392.303977][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3392.315024][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3392.326762][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3392.337984][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3392.348537][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3392.360104][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3392.374888][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3392.385359][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3392.393481][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3392.498387][T30620] device veth0_vlan entered promiscuous mode [ 3392.555935][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3392.566182][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3392.578552][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3392.589388][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3392.599999][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3392.621629][T30620] device veth1_vlan entered promiscuous mode [ 3392.663797][T17879] Bluetooth: hci0: command 0x041b tx timeout [ 3392.704290][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3392.714181][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3392.724335][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3392.734882][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3392.795480][T30620] device veth0_macvtap entered promiscuous mode [ 3392.828742][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3392.839720][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3392.853255][T30620] device veth1_macvtap entered promiscuous mode [ 3392.912413][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3392.923305][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3392.956779][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3392.967596][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3392.977827][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3392.993820][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.004434][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3393.015254][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.025305][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3393.036041][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.046153][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3393.056823][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.066874][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3393.077551][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.092506][T30620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3393.100771][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3393.111960][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3393.149583][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3393.160655][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.170907][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3393.181672][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.196906][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3393.208079][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.218201][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3393.228884][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.239026][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3393.249679][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.259737][T30620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3393.270417][T30620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3393.285286][T30620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3393.295623][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3393.306651][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3393.642370][T30571] not chained 17010000 origins [ 3393.647270][T30571] CPU: 0 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3393.657576][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3393.667743][T30571] Call Trace: [ 3393.671100][T30571] [ 3393.674109][T30571] dump_stack_lvl+0x1c8/0x256 [ 3393.679087][T30571] dump_stack+0x1a/0x1c [ 3393.683416][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3393.689288][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3393.694479][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3393.700513][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3393.705326][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3393.711301][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3393.717272][T30571] ? should_fail+0x3f/0x810 [ 3393.721928][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3393.727203][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3393.733613][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3393.739571][T30571] __msan_chain_origin+0xbd/0x140 [ 3393.744731][T30571] ___sys_recvmsg+0x522/0x890 [ 3393.749527][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3393.754350][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3393.760393][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3393.766352][T30571] do_recvmmsg+0x55a/0x1180 [ 3393.770992][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3393.777469][T30571] ? do_syscall_64+0x3d/0xb0 [ 3393.782187][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3393.787376][T30571] do_syscall_64+0x3d/0xb0 [ 3393.791939][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3393.797994][T30571] RIP: 0033:0x7f13f0a89279 [ 3393.802500][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3393.822269][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3393.830937][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3393.839024][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3393.847101][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3393.855178][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3393.863248][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3393.871358][T30571] [ 3393.879417][T30571] Uninit was stored to memory at: [ 3393.885438][T30571] ___sys_recvmsg+0x522/0x890 [ 3393.890249][T30571] do_recvmmsg+0x55a/0x1180 [ 3393.894972][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3393.900134][T30571] do_syscall_64+0x3d/0xb0 [ 3393.904779][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3393.910869][T30571] [ 3393.913335][T30571] Uninit was stored to memory at: [ 3393.918530][T30571] ___sys_recvmsg+0x522/0x890 [ 3393.923407][T30571] do_recvmmsg+0x55a/0x1180 [ 3393.928053][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3393.933300][T30571] do_syscall_64+0x3d/0xb0 [ 3393.937859][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3393.944046][T30571] [ 3393.946443][T30571] Uninit was stored to memory at: [ 3393.951738][T30571] ___sys_recvmsg+0x522/0x890 [ 3393.956553][T30571] do_recvmmsg+0x55a/0x1180 [ 3393.961181][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3393.966428][T26293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3393.966426][T30571] do_syscall_64+0x3d/0xb0 [ 3393.966511][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3393.974484][T26293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3393.978820][T30571] [ 3393.978836][T30571] Uninit was stored to memory at: [ 3393.978953][T30571] ___sys_recvmsg+0x522/0x890 [ 3393.985341][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3393.992166][T30571] do_recvmmsg+0x55a/0x1180 [ 3393.992250][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3394.004419][T30571] do_syscall_64+0x3d/0xb0 [ 3394.026033][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3394.032177][T30571] [ 3394.034566][T30571] Uninit was stored to memory at: [ 3394.039754][T30571] ___sys_recvmsg+0x522/0x890 [ 3394.044645][T30571] do_recvmmsg+0x55a/0x1180 [ 3394.049281][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3394.054542][T30571] do_syscall_64+0x3d/0xb0 [ 3394.059096][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3394.065265][T30571] [ 3394.067668][T30571] Uninit was stored to memory at: [ 3394.072930][T30571] ___sys_recvmsg+0x522/0x890 [ 3394.077742][T30571] do_recvmmsg+0x55a/0x1180 [ 3394.082467][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3394.087668][T30571] do_syscall_64+0x3d/0xb0 [ 3394.092337][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3394.098404][T30571] [ 3394.100800][T30571] Uninit was stored to memory at: [ 3394.106086][T30571] ___sys_recvmsg+0x522/0x890 [ 3394.110893][T30571] do_recvmmsg+0x55a/0x1180 [ 3394.115612][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3394.120771][T30571] do_syscall_64+0x3d/0xb0 [ 3394.125413][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3394.131492][T30571] [ 3394.133962][T30571] Local variable msg_sys created at: [ 3394.139336][T30571] do_recvmmsg+0x5c/0x1180 [ 3394.143969][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3394.153223][T26293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3394.161295][T26293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3394.172486][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3394.741896][T17879] Bluetooth: hci0: command 0x040f tx timeout [ 3395.271439][T30631] not chained 17020000 origins [ 3395.276824][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3395.287137][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3395.297290][T30631] Call Trace: [ 3395.300638][T30631] [ 3395.303640][T30631] dump_stack_lvl+0x1c8/0x256 [ 3395.308493][T30631] dump_stack+0x1a/0x1c [ 3395.312789][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3395.318648][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3395.323837][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3395.329868][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3395.334665][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3395.340801][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3395.346761][T30631] ? should_fail+0x3f/0x810 [ 3395.351404][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3395.356649][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3395.363036][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3395.369005][T30631] __msan_chain_origin+0xbd/0x140 [ 3395.374159][T30631] ___sys_recvmsg+0x522/0x890 [ 3395.378953][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3395.383773][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3395.389806][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3395.395762][T30631] do_recvmmsg+0x55a/0x1180 [ 3395.400411][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3395.406806][T30631] ? do_syscall_64+0x3d/0xb0 [ 3395.411517][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3395.416698][T30631] do_syscall_64+0x3d/0xb0 [ 3395.421229][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3395.427289][T30631] RIP: 0033:0x7fa4f7e89279 [ 3395.431805][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3395.451562][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3395.460101][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3395.468179][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3395.476248][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3395.484319][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3395.492386][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3395.500506][T30631] [ 3395.507409][T30631] Uninit was stored to memory at: [ 3395.512969][T30631] ___sys_recvmsg+0x522/0x890 [ 3395.517778][T30631] do_recvmmsg+0x55a/0x1180 [ 3395.522502][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3395.527667][T30631] do_syscall_64+0x3d/0xb0 [ 3395.532283][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3395.538353][T30631] [ 3395.540747][T30631] Uninit was stored to memory at: [ 3395.546007][T30631] ___sys_recvmsg+0x522/0x890 [ 3395.550813][T30631] do_recvmmsg+0x55a/0x1180 [ 3395.555525][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3395.560692][T30631] do_syscall_64+0x3d/0xb0 [ 3395.565371][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3395.571456][T30631] [ 3395.573979][T30631] Uninit was stored to memory at: [ 3395.579157][T30631] ___sys_recvmsg+0x522/0x890 [ 3395.584093][T30631] do_recvmmsg+0x55a/0x1180 [ 3395.588717][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3395.593982][T30631] do_syscall_64+0x3d/0xb0 [ 3395.598526][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3395.604724][T30631] [ 3395.607117][T30631] Uninit was stored to memory at: [ 3395.612428][T30631] ___sys_recvmsg+0x522/0x890 [ 3395.617230][T30631] do_recvmmsg+0x55a/0x1180 [ 3395.621932][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3395.627094][T30631] do_syscall_64+0x3d/0xb0 [ 3395.631763][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3395.637838][T30631] [ 3395.640222][T30631] Uninit was stored to memory at: [ 3395.645539][T30631] ___sys_recvmsg+0x522/0x890 [ 3395.650341][T30631] do_recvmmsg+0x55a/0x1180 [ 3395.655102][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3395.660262][T30631] do_syscall_64+0x3d/0xb0 [ 3395.664940][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3395.671014][T30631] [ 3395.673538][T30631] Uninit was stored to memory at: [ 3395.678726][T30631] ___sys_recvmsg+0x522/0x890 [ 3395.683657][T30631] do_recvmmsg+0x55a/0x1180 [ 3395.688286][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3395.693585][T30631] do_syscall_64+0x3d/0xb0 [ 3395.698126][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3395.704329][T30631] [ 3395.706720][T30631] Uninit was stored to memory at: [ 3395.711979][T30631] ___sys_recvmsg+0x522/0x890 [ 3395.716780][T30631] do_recvmmsg+0x55a/0x1180 [ 3395.721415][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3395.726705][T30631] do_syscall_64+0x3d/0xb0 [ 3395.731247][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3395.737403][T30631] [ 3395.739787][T30631] Local variable msg_sys created at: [ 3395.745236][T30631] do_recvmmsg+0x5c/0x1180 [ 3395.749776][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3396.619069][T30629] not chained 17030000 origins [ 3396.624224][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3396.634540][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3396.644705][T30629] Call Trace: [ 3396.648060][T30629] [ 3396.651067][T30629] dump_stack_lvl+0x1c8/0x256 [ 3396.655931][T30629] dump_stack+0x1a/0x1c [ 3396.660246][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3396.666121][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3396.671326][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3396.677375][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3396.682191][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3396.688162][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3396.694130][T30629] ? should_fail+0x3f/0x810 [ 3396.698783][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3396.704046][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3396.710438][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3396.716420][T30629] __msan_chain_origin+0xbd/0x140 [ 3396.721588][T30629] ___sys_recvmsg+0x522/0x890 [ 3396.726396][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3396.731239][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3396.737302][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3396.743302][T30629] do_recvmmsg+0x55a/0x1180 [ 3396.747971][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3396.754385][T30629] ? do_syscall_64+0x3d/0xb0 [ 3396.759123][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3396.764308][T30629] do_syscall_64+0x3d/0xb0 [ 3396.768860][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3396.774938][T30629] RIP: 0033:0x7fa4f7e89279 [ 3396.779549][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3396.799335][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3396.807904][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3396.816005][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3396.824091][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3396.832178][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3396.840262][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3396.848375][T30629] [ 3396.859059][T30629] Uninit was stored to memory at: [ 3396.865137][T30629] ___sys_recvmsg+0x522/0x890 [ 3396.869946][T30629] do_recvmmsg+0x55a/0x1180 [ 3396.874682][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3396.879879][T30629] do_syscall_64+0x3d/0xb0 [ 3396.884509][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3396.890590][T30629] [ 3396.893081][T30629] Uninit was stored to memory at: [ 3396.898271][T30629] ___sys_recvmsg+0x522/0x890 [ 3396.903173][T30629] do_recvmmsg+0x55a/0x1180 [ 3396.907807][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3396.913097][T30629] do_syscall_64+0x3d/0xb0 [ 3396.917642][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3396.923821][T30629] [ 3396.926210][T30629] Uninit was stored to memory at: [ 3396.933140][T30629] ___sys_recvmsg+0x522/0x890 [ 3396.937939][T30629] do_recvmmsg+0x55a/0x1180 [ 3396.942682][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3396.947848][T30629] do_syscall_64+0x3d/0xb0 [ 3396.952498][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3396.958568][T30629] [ 3396.960964][T30629] Uninit was stored to memory at: [ 3396.966259][T30629] ___sys_recvmsg+0x522/0x890 [ 3396.971066][T30629] do_recvmmsg+0x55a/0x1180 [ 3396.975800][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3396.980964][T30629] do_syscall_64+0x3d/0xb0 [ 3396.985609][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3396.991773][T30629] [ 3396.994165][T30629] Uninit was stored to memory at: [ 3396.999354][T30629] ___sys_recvmsg+0x522/0x890 [ 3397.004317][T30629] do_recvmmsg+0x55a/0x1180 [ 3397.008979][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3397.014291][T30629] do_syscall_64+0x3d/0xb0 [ 3397.018840][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3397.025066][T30629] [ 3397.027455][T30629] Uninit was stored to memory at: [ 3397.032784][T30629] ___sys_recvmsg+0x522/0x890 [ 3397.037601][T30629] do_recvmmsg+0x55a/0x1180 [ 3397.042381][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3397.047533][T30629] do_syscall_64+0x3d/0xb0 [ 3397.052177][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3397.058240][T30629] [ 3397.060624][T30629] Uninit was stored to memory at: [ 3397.065962][T30629] ___sys_recvmsg+0x522/0x890 [ 3397.070766][T30629] do_recvmmsg+0x55a/0x1180 [ 3397.075589][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3397.080775][T30629] do_syscall_64+0x3d/0xb0 [ 3397.085421][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3397.091484][T30629] [ 3397.094021][T30629] Local variable msg_sys created at: [ 3397.099388][T30629] do_recvmmsg+0x5c/0x1180 [ 3397.104073][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3397.130251][T17879] Bluetooth: hci0: command 0x0419 tx timeout [ 3397.813715][T30629] not chained 17040000 origins [ 3397.818715][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3397.829009][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3397.839179][T30629] Call Trace: [ 3397.842541][T30629] [ 3397.845551][T30629] dump_stack_lvl+0x1c8/0x256 [ 3397.850410][T30629] dump_stack+0x1a/0x1c [ 3397.854737][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3397.860610][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3397.865816][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3397.871867][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3397.876678][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3397.882650][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3397.888627][T30629] ? should_fail+0x3f/0x810 [ 3397.893284][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3397.898545][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3397.904948][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3397.910915][T30629] __msan_chain_origin+0xbd/0x140 [ 3397.916090][T30629] ___sys_recvmsg+0x522/0x890 [ 3397.920902][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3397.925730][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3397.931781][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3397.937750][T30629] do_recvmmsg+0x55a/0x1180 [ 3397.942413][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3397.948820][T30629] ? do_syscall_64+0x3d/0xb0 [ 3397.953550][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3397.958734][T30629] do_syscall_64+0x3d/0xb0 [ 3397.963281][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3397.969359][T30629] RIP: 0033:0x7fa4f7e89279 [ 3397.973871][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3397.993710][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3398.002269][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3398.010378][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3398.018450][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3398.026518][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3398.034582][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3398.042684][T30629] [ 3398.049878][T30629] Uninit was stored to memory at: [ 3398.055830][T30629] ___sys_recvmsg+0x522/0x890 [ 3398.060643][T30629] do_recvmmsg+0x55a/0x1180 [ 3398.065365][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3398.070526][T30629] do_syscall_64+0x3d/0xb0 [ 3398.075174][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3398.081246][T30629] [ 3398.083707][T30629] Uninit was stored to memory at: [ 3398.088891][T30629] ___sys_recvmsg+0x522/0x890 [ 3398.093781][T30629] do_recvmmsg+0x55a/0x1180 [ 3398.098412][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3398.103670][T30629] do_syscall_64+0x3d/0xb0 [ 3398.108230][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3398.114434][T30629] [ 3398.116827][T30629] Uninit was stored to memory at: [ 3398.122131][T30629] ___sys_recvmsg+0x522/0x890 [ 3398.126927][T30629] do_recvmmsg+0x55a/0x1180 [ 3398.131699][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3398.136856][T30629] do_syscall_64+0x3d/0xb0 [ 3398.141405][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3398.147684][T30629] [ 3398.150071][T30629] Uninit was stored to memory at: [ 3398.155394][T30629] ___sys_recvmsg+0x522/0x890 [ 3398.160204][T30629] do_recvmmsg+0x55a/0x1180 [ 3398.164967][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3398.170171][T30629] do_syscall_64+0x3d/0xb0 [ 3398.174847][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3398.180914][T30629] [ 3398.183428][T30629] Uninit was stored to memory at: [ 3398.188617][T30629] ___sys_recvmsg+0x522/0x890 [ 3398.193496][T30629] do_recvmmsg+0x55a/0x1180 [ 3398.198133][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3398.203423][T30629] do_syscall_64+0x3d/0xb0 [ 3398.207970][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3398.214168][T30629] [ 3398.216555][T30629] Uninit was stored to memory at: [ 3398.221828][T30629] ___sys_recvmsg+0x522/0x890 [ 3398.226636][T30629] do_recvmmsg+0x55a/0x1180 [ 3398.231263][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3398.236562][T30629] do_syscall_64+0x3d/0xb0 [ 3398.241107][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3398.247304][T30629] [ 3398.249693][T30629] Uninit was stored to memory at: [ 3398.255009][T30629] ___sys_recvmsg+0x522/0x890 [ 3398.259844][T30629] do_recvmmsg+0x55a/0x1180 [ 3398.264597][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3398.269757][T30629] do_syscall_64+0x3d/0xb0 [ 3398.274433][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3398.280501][T30629] [ 3398.283024][T30629] Local variable msg_sys created at: [ 3398.288391][T30629] do_recvmmsg+0x5c/0x1180 [ 3398.293057][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.025338][T30571] not chained 17050000 origins [ 3399.035687][T30571] CPU: 1 PID: 30571 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3399.045987][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3399.056148][T30571] Call Trace: [ 3399.059501][T30571] [ 3399.062504][T30571] dump_stack_lvl+0x1c8/0x256 [ 3399.067359][T30571] dump_stack+0x1a/0x1c [ 3399.071666][T30571] kmsan_internal_chain_origin+0x78/0x120 [ 3399.077530][T30571] ? filter_irq_stacks+0x5c/0x1a0 [ 3399.082736][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3399.088788][T30571] ? do_recvmmsg+0x55a/0x1180 [ 3399.093625][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3399.099597][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3399.105563][T30571] ? should_fail+0x3f/0x810 [ 3399.110232][T30571] ? __stack_depot_save+0x21/0x4b0 [ 3399.115486][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3399.121890][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3399.127852][T30571] __msan_chain_origin+0xbd/0x140 [ 3399.133023][T30571] ___sys_recvmsg+0x522/0x890 [ 3399.137837][T30571] ? do_recvmmsg+0x5bc/0x1180 [ 3399.142676][T30571] ? kmsan_internal_check_memory+0x94/0x530 [ 3399.148728][T30571] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3399.154698][T30571] do_recvmmsg+0x55a/0x1180 [ 3399.159352][T30571] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3399.165750][T30571] ? do_syscall_64+0x3d/0xb0 [ 3399.170475][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.175668][T30571] do_syscall_64+0x3d/0xb0 [ 3399.180206][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3399.186300][T30571] RIP: 0033:0x7f13f0a89279 [ 3399.190837][T30571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3399.210609][T30571] RSP: 002b:00007f13f1cb9168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3399.219158][T30571] RAX: ffffffffffffffda RBX: 00007f13f0b9bf80 RCX: 00007f13f0a89279 [ 3399.227248][T30571] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3399.235327][T30571] RBP: 00007f13f0ae3189 R08: 0000000000000000 R09: 0000000000000000 [ 3399.243404][T30571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3399.251503][T30571] R13: 00007f13f10cfb1f R14: 00007f13f1cb9300 R15: 0000000000022000 [ 3399.259609][T30571] [ 3399.268958][T30571] Uninit was stored to memory at: [ 3399.274742][T30571] ___sys_recvmsg+0x522/0x890 [ 3399.279553][T30571] do_recvmmsg+0x55a/0x1180 [ 3399.284290][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.289445][T30571] do_syscall_64+0x3d/0xb0 [ 3399.294097][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3399.300172][T30571] [ 3399.302656][T30571] Uninit was stored to memory at: [ 3399.307844][T30571] ___sys_recvmsg+0x522/0x890 [ 3399.312753][T30571] do_recvmmsg+0x55a/0x1180 [ 3399.317505][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.322762][T30571] do_syscall_64+0x3d/0xb0 [ 3399.327307][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3399.333580][T30571] [ 3399.335970][T30571] Uninit was stored to memory at: [ 3399.341158][T30571] ___sys_recvmsg+0x522/0x890 [ 3399.346086][T30571] do_recvmmsg+0x55a/0x1180 [ 3399.350750][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.356032][T30571] do_syscall_64+0x3d/0xb0 [ 3399.360572][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3399.366851][T30571] [ 3399.369247][T30571] Uninit was stored to memory at: [ 3399.374541][T30571] ___sys_recvmsg+0x522/0x890 [ 3399.379345][T30571] do_recvmmsg+0x55a/0x1180 [ 3399.384080][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.389245][T30571] do_syscall_64+0x3d/0xb0 [ 3399.393959][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3399.400028][T30571] [ 3399.402572][T30571] Uninit was stored to memory at: [ 3399.407758][T30571] ___sys_recvmsg+0x522/0x890 [ 3399.412723][T30571] do_recvmmsg+0x55a/0x1180 [ 3399.417443][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.422786][T30571] do_syscall_64+0x3d/0xb0 [ 3399.427337][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3399.433647][T30571] [ 3399.436057][T30571] Uninit was stored to memory at: [ 3399.441331][T30571] ___sys_recvmsg+0x522/0x890 [ 3399.446274][T30571] do_recvmmsg+0x55a/0x1180 [ 3399.450904][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.456215][T30571] do_syscall_64+0x3d/0xb0 [ 3399.460759][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3399.466996][T30571] [ 3399.469394][T30571] Uninit was stored to memory at: [ 3399.474721][T30571] ___sys_recvmsg+0x522/0x890 [ 3399.479530][T30571] do_recvmmsg+0x55a/0x1180 [ 3399.484310][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3399.489474][T30571] do_syscall_64+0x3d/0xb0 [ 3399.494165][T30571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3399.500234][T30571] [ 3399.502800][T30571] Local variable msg_sys created at: [ 3399.508193][T30571] do_recvmmsg+0x5c/0x1180 [ 3399.512882][T30571] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.089505][T30631] not chained 17060000 origins [ 3400.094693][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3400.104990][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3400.115157][T30631] Call Trace: [ 3400.118514][T30631] [ 3400.121518][T30631] dump_stack_lvl+0x1c8/0x256 [ 3400.126378][T30631] dump_stack+0x1a/0x1c [ 3400.130685][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3400.136544][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3400.141736][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3400.147766][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3400.152565][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3400.158523][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3400.164486][T30631] ? should_fail+0x3f/0x810 [ 3400.169125][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3400.174368][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3400.180754][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3400.186704][T30631] __msan_chain_origin+0xbd/0x140 [ 3400.191861][T30631] ___sys_recvmsg+0x522/0x890 [ 3400.196655][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3400.201472][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3400.207509][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3400.213478][T30631] do_recvmmsg+0x55a/0x1180 [ 3400.218120][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3400.224510][T30631] ? do_syscall_64+0x3d/0xb0 [ 3400.229222][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.234388][T30631] do_syscall_64+0x3d/0xb0 [ 3400.238919][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3400.244975][T30631] RIP: 0033:0x7fa4f7e89279 [ 3400.249489][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3400.269236][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3400.277771][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3400.285850][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3400.293922][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3400.302009][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3400.310083][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3400.318193][T30631] [ 3400.327054][T30631] Uninit was stored to memory at: [ 3400.332900][T30631] ___sys_recvmsg+0x522/0x890 [ 3400.337718][T30631] do_recvmmsg+0x55a/0x1180 [ 3400.342467][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.347670][T30631] do_syscall_64+0x3d/0xb0 [ 3400.352409][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3400.358494][T30631] [ 3400.360876][T30631] Uninit was stored to memory at: [ 3400.366220][T30631] ___sys_recvmsg+0x522/0x890 [ 3400.371025][T30631] do_recvmmsg+0x55a/0x1180 [ 3400.375813][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.380972][T30631] do_syscall_64+0x3d/0xb0 [ 3400.385670][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3400.391839][T30631] [ 3400.394225][T30631] Uninit was stored to memory at: [ 3400.399423][T30631] ___sys_recvmsg+0x522/0x890 [ 3400.404371][T30631] do_recvmmsg+0x55a/0x1180 [ 3400.409000][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.414319][T30631] do_syscall_64+0x3d/0xb0 [ 3400.418862][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3400.425105][T30631] [ 3400.427493][T30631] Uninit was stored to memory at: [ 3400.432831][T30631] ___sys_recvmsg+0x522/0x890 [ 3400.437640][T30631] do_recvmmsg+0x55a/0x1180 [ 3400.442425][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.447585][T30631] do_syscall_64+0x3d/0xb0 [ 3400.452288][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3400.458356][T30631] [ 3400.460743][T30631] Uninit was stored to memory at: [ 3400.466100][T30631] ___sys_recvmsg+0x522/0x890 [ 3400.470907][T30631] do_recvmmsg+0x55a/0x1180 [ 3400.475773][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.480937][T30631] do_syscall_64+0x3d/0xb0 [ 3400.485683][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3400.491867][T30631] [ 3400.494249][T30631] Uninit was stored to memory at: [ 3400.499435][T30631] ___sys_recvmsg+0x522/0x890 [ 3400.504421][T30631] do_recvmmsg+0x55a/0x1180 [ 3400.509061][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.514391][T30631] do_syscall_64+0x3d/0xb0 [ 3400.518936][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3400.525181][T30631] [ 3400.527570][T30631] Uninit was stored to memory at: [ 3400.532915][T30631] ___sys_recvmsg+0x522/0x890 [ 3400.537725][T30631] do_recvmmsg+0x55a/0x1180 [ 3400.542494][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3400.547850][T30631] do_syscall_64+0x3d/0xb0 [ 3400.552627][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3400.558695][T30631] [ 3400.561089][T30631] Local variable msg_sys created at: [ 3400.566605][T30631] do_recvmmsg+0x5c/0x1180 [ 3400.571144][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.259010][T30631] not chained 17070000 origins [ 3401.264209][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3401.274506][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3401.284663][T30631] Call Trace: [ 3401.288015][T30631] [ 3401.291025][T30631] dump_stack_lvl+0x1c8/0x256 [ 3401.295883][T30631] dump_stack+0x1a/0x1c [ 3401.300204][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3401.306075][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3401.311277][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3401.317316][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3401.322127][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3401.328096][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3401.334062][T30631] ? should_fail+0x3f/0x810 [ 3401.338708][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3401.343962][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3401.350372][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3401.356329][T30631] __msan_chain_origin+0xbd/0x140 [ 3401.361498][T30631] ___sys_recvmsg+0x522/0x890 [ 3401.366308][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3401.371141][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3401.377203][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3401.383179][T30631] do_recvmmsg+0x55a/0x1180 [ 3401.387837][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3401.394249][T30631] ? do_syscall_64+0x3d/0xb0 [ 3401.398985][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.404171][T30631] do_syscall_64+0x3d/0xb0 [ 3401.408720][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3401.414789][T30631] RIP: 0033:0x7fa4f7e89279 [ 3401.419310][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3401.439085][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3401.447637][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3401.455732][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3401.463818][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3401.471901][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3401.479982][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3401.488102][T30631] [ 3401.496568][T30631] Uninit was stored to memory at: [ 3401.502446][T30631] ___sys_recvmsg+0x522/0x890 [ 3401.507287][T30631] do_recvmmsg+0x55a/0x1180 [ 3401.512039][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.517203][T30631] do_syscall_64+0x3d/0xb0 [ 3401.521854][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3401.527924][T30631] [ 3401.530312][T30631] Uninit was stored to memory at: [ 3401.535678][T30631] ___sys_recvmsg+0x522/0x890 [ 3401.540481][T30631] do_recvmmsg+0x55a/0x1180 [ 3401.545278][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.550439][T30631] do_syscall_64+0x3d/0xb0 [ 3401.555193][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3401.561271][T30631] [ 3401.563828][T30631] Uninit was stored to memory at: [ 3401.569032][T30631] ___sys_recvmsg+0x522/0x890 [ 3401.574007][T30631] do_recvmmsg+0x55a/0x1180 [ 3401.578643][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.583964][T30631] do_syscall_64+0x3d/0xb0 [ 3401.588523][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3401.594756][T30631] [ 3401.597147][T30631] Uninit was stored to memory at: [ 3401.602492][T30631] ___sys_recvmsg+0x522/0x890 [ 3401.607300][T30631] do_recvmmsg+0x55a/0x1180 [ 3401.612116][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.617281][T30631] do_syscall_64+0x3d/0xb0 [ 3401.621997][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3401.628072][T30631] [ 3401.630471][T30631] Uninit was stored to memory at: [ 3401.635831][T30631] ___sys_recvmsg+0x522/0x890 [ 3401.640634][T30631] do_recvmmsg+0x55a/0x1180 [ 3401.645888][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.651066][T30631] do_syscall_64+0x3d/0xb0 [ 3401.655773][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3401.661935][T30631] [ 3401.664325][T30631] Uninit was stored to memory at: [ 3401.669521][T30631] ___sys_recvmsg+0x522/0x890 [ 3401.674474][T30631] do_recvmmsg+0x55a/0x1180 [ 3401.679111][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.684370][T30631] do_syscall_64+0x3d/0xb0 [ 3401.688927][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3401.695115][T30631] [ 3401.697507][T30631] Uninit was stored to memory at: [ 3401.702813][T30631] ___sys_recvmsg+0x522/0x890 [ 3401.707622][T30631] do_recvmmsg+0x55a/0x1180 [ 3401.712371][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3401.717545][T30631] do_syscall_64+0x3d/0xb0 [ 3401.722345][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3401.728423][T30631] [ 3401.730809][T30631] Local variable msg_sys created at: [ 3401.736332][T30631] do_recvmmsg+0x5c/0x1180 [ 3401.740882][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3402.721869][T30631] not chained 17080000 origins [ 3402.726762][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3402.737057][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3402.747209][T30631] Call Trace: [ 3402.750565][T30631] [ 3402.753581][T30631] dump_stack_lvl+0x1c8/0x256 [ 3402.758431][T30631] dump_stack+0x1a/0x1c [ 3402.762730][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3402.768603][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3402.773822][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3402.779884][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3402.784691][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3402.790653][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3402.796613][T30631] ? should_fail+0x3f/0x810 [ 3402.801249][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3402.806504][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3402.812891][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3402.818844][T30631] __msan_chain_origin+0xbd/0x140 [ 3402.824005][T30631] ___sys_recvmsg+0x522/0x890 [ 3402.828810][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3402.833635][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3402.839671][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3402.845629][T30631] do_recvmmsg+0x55a/0x1180 [ 3402.850288][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3402.856680][T30631] ? do_syscall_64+0x3d/0xb0 [ 3402.861393][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3402.866564][T30631] do_syscall_64+0x3d/0xb0 [ 3402.871119][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3402.877176][T30631] RIP: 0033:0x7fa4f7e89279 [ 3402.881684][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3402.901438][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3402.909977][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3402.918054][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3402.926164][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3402.934233][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3402.942297][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3402.950397][T30631] [ 3402.959194][T30631] Uninit was stored to memory at: [ 3402.965007][T30631] ___sys_recvmsg+0x522/0x890 [ 3402.969821][T30631] do_recvmmsg+0x55a/0x1180 [ 3402.974556][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3402.979718][T30631] do_syscall_64+0x3d/0xb0 [ 3402.984369][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3402.990432][T30631] [ 3402.992931][T30631] Uninit was stored to memory at: [ 3402.998123][T30631] ___sys_recvmsg+0x522/0x890 [ 3403.003028][T30631] do_recvmmsg+0x55a/0x1180 [ 3403.007657][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3403.012922][T30631] do_syscall_64+0x3d/0xb0 [ 3403.017463][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3403.023640][T30631] [ 3403.026029][T30631] Uninit was stored to memory at: [ 3403.031216][T30631] ___sys_recvmsg+0x522/0x890 [ 3403.036123][T30631] do_recvmmsg+0x55a/0x1180 [ 3403.040751][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3403.046016][T30631] do_syscall_64+0x3d/0xb0 [ 3403.050575][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3403.056795][T30631] [ 3403.059195][T30631] Uninit was stored to memory at: [ 3403.064537][T30631] ___sys_recvmsg+0x522/0x890 [ 3403.069343][T30631] do_recvmmsg+0x55a/0x1180 [ 3403.074140][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3403.079303][T30631] do_syscall_64+0x3d/0xb0 [ 3403.084010][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3403.090077][T30631] [ 3403.092548][T30631] Uninit was stored to memory at: [ 3403.097730][T30631] ___sys_recvmsg+0x522/0x890 [ 3403.102688][T30631] do_recvmmsg+0x55a/0x1180 [ 3403.107326][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3403.112666][T30631] do_syscall_64+0x3d/0xb0 [ 3403.117217][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3403.123425][T30631] [ 3403.125820][T30631] Uninit was stored to memory at: [ 3403.131029][T30631] ___sys_recvmsg+0x522/0x890 [ 3403.135988][T30631] do_recvmmsg+0x55a/0x1180 [ 3403.140619][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3403.145931][T30631] do_syscall_64+0x3d/0xb0 [ 3403.150471][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3403.156685][T30631] [ 3403.159074][T30631] Uninit was stored to memory at: [ 3403.164410][T30631] ___sys_recvmsg+0x522/0x890 [ 3403.169214][T30631] do_recvmmsg+0x55a/0x1180 [ 3403.174007][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3403.179166][T30631] do_syscall_64+0x3d/0xb0 [ 3403.183865][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3403.189941][T30631] [ 3403.192475][T30631] Local variable msg_sys created at: [ 3403.197838][T30631] do_recvmmsg+0x5c/0x1180 [ 3403.202519][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.343889][T30631] not chained 17090000 origins [ 3404.348791][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3404.359099][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3404.369266][T30631] Call Trace: [ 3404.372636][T30631] [ 3404.375646][T30631] dump_stack_lvl+0x1c8/0x256 [ 3404.380505][T30631] dump_stack+0x1a/0x1c [ 3404.384818][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3404.390691][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3404.395894][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3404.401953][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3404.406761][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3404.412732][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3404.418703][T30631] ? should_fail+0x3f/0x810 [ 3404.423348][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3404.428604][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3404.435010][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3404.440979][T30631] __msan_chain_origin+0xbd/0x140 [ 3404.446144][T30631] ___sys_recvmsg+0x522/0x890 [ 3404.450962][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3404.455793][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3404.461855][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3404.467829][T30631] do_recvmmsg+0x55a/0x1180 [ 3404.472494][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3404.478894][T30631] ? do_syscall_64+0x3d/0xb0 [ 3404.483624][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.488807][T30631] do_syscall_64+0x3d/0xb0 [ 3404.493359][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3404.499429][T30631] RIP: 0033:0x7fa4f7e89279 [ 3404.503954][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3404.523727][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3404.532280][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3404.540368][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3404.548454][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3404.556539][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3404.564620][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3404.572735][T30631] [ 3404.579042][T30631] Uninit was stored to memory at: [ 3404.586323][T30631] ___sys_recvmsg+0x522/0x890 [ 3404.591137][T30631] do_recvmmsg+0x55a/0x1180 [ 3404.595846][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.601006][T30631] do_syscall_64+0x3d/0xb0 [ 3404.605622][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3404.611758][T30631] [ 3404.614146][T30631] Uninit was stored to memory at: [ 3404.619325][T30631] ___sys_recvmsg+0x522/0x890 [ 3404.624205][T30631] do_recvmmsg+0x55a/0x1180 [ 3404.628840][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.634085][T30631] do_syscall_64+0x3d/0xb0 [ 3404.638628][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3404.644766][T30631] [ 3404.647165][T30631] Uninit was stored to memory at: [ 3404.652421][T30631] ___sys_recvmsg+0x522/0x890 [ 3404.657219][T30631] do_recvmmsg+0x55a/0x1180 [ 3404.661920][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.667106][T30631] do_syscall_64+0x3d/0xb0 [ 3404.671734][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3404.677805][T30631] [ 3404.680199][T30631] Uninit was stored to memory at: [ 3404.685468][T30631] ___sys_recvmsg+0x522/0x890 [ 3404.690271][T30631] do_recvmmsg+0x55a/0x1180 [ 3404.694980][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.700142][T30631] do_syscall_64+0x3d/0xb0 [ 3404.704754][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3404.710824][T30631] [ 3404.713286][T30631] Uninit was stored to memory at: [ 3404.718484][T30631] ___sys_recvmsg+0x522/0x890 [ 3404.723358][T30631] do_recvmmsg+0x55a/0x1180 [ 3404.727986][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.733243][T30631] do_syscall_64+0x3d/0xb0 [ 3404.737787][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3404.743937][T30631] [ 3404.746324][T30631] Uninit was stored to memory at: [ 3404.751636][T30631] ___sys_recvmsg+0x522/0x890 [ 3404.756468][T30631] do_recvmmsg+0x55a/0x1180 [ 3404.761105][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.766354][T30631] do_syscall_64+0x3d/0xb0 [ 3404.770906][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3404.777062][T30631] [ 3404.779452][T30631] Uninit was stored to memory at: [ 3404.784722][T30631] ___sys_recvmsg+0x522/0x890 [ 3404.789531][T30631] do_recvmmsg+0x55a/0x1180 [ 3404.794232][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3404.799380][T30631] do_syscall_64+0x3d/0xb0 [ 3404.804001][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3404.810074][T30631] [ 3404.812548][T30631] Local variable msg_sys created at: [ 3404.818022][T30631] do_recvmmsg+0x5c/0x1180 [ 3404.822637][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3405.654121][T26321] device hsr_slave_0 left promiscuous mode [ 3405.672162][T26321] device hsr_slave_1 left promiscuous mode [ 3405.689716][T26321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3405.697556][T26321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3405.728718][T26321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3405.736454][T26321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3405.740624][T30629] not chained 17100000 origins [ 3405.748821][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3405.759114][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3405.769356][T30629] Call Trace: [ 3405.772729][T30629] [ 3405.775748][T30629] dump_stack_lvl+0x1c8/0x256 [ 3405.780643][T30629] dump_stack+0x1a/0x1c [ 3405.784967][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3405.790843][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3405.796048][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3405.802093][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3405.806917][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3405.812890][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3405.818864][T30629] ? should_fail+0x3f/0x810 [ 3405.823539][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3405.828799][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3405.835234][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3405.841193][T30629] __msan_chain_origin+0xbd/0x140 [ 3405.846355][T30629] ___sys_recvmsg+0x522/0x890 [ 3405.851176][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3405.855996][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3405.862034][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3405.868007][T30629] do_recvmmsg+0x55a/0x1180 [ 3405.872665][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3405.879061][T30629] ? do_syscall_64+0x3d/0xb0 [ 3405.883775][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3405.888950][T30629] do_syscall_64+0x3d/0xb0 [ 3405.893515][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3405.899573][T30629] RIP: 0033:0x7fa4f7e89279 [ 3405.904086][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3405.923850][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3405.932383][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3405.940462][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3405.948532][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3405.956605][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3405.964671][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3405.972771][T30629] [ 3405.983657][T30629] Uninit was stored to memory at: [ 3405.987754][T26321] device bridge_slave_1 left promiscuous mode [ 3405.988825][T30629] ___sys_recvmsg+0x522/0x890 [ 3405.998261][T26321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3406.013068][T30629] do_recvmmsg+0x55a/0x1180 [ 3406.017719][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3406.023045][T30629] do_syscall_64+0x3d/0xb0 [ 3406.027585][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3406.033767][T30629] [ 3406.036162][T30629] Uninit was stored to memory at: [ 3406.041346][T30629] ___sys_recvmsg+0x522/0x890 [ 3406.046255][T30629] do_recvmmsg+0x55a/0x1180 [ 3406.050887][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3406.056156][T30629] do_syscall_64+0x3d/0xb0 [ 3406.060701][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3406.066885][T30629] [ 3406.069268][T30629] Uninit was stored to memory at: [ 3406.074574][T30629] ___sys_recvmsg+0x522/0x890 [ 3406.079372][T30629] do_recvmmsg+0x55a/0x1180 [ 3406.084098][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3406.089259][T30629] do_syscall_64+0x3d/0xb0 [ 3406.093906][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3406.099977][T30629] [ 3406.102461][T30629] Uninit was stored to memory at: [ 3406.107652][T30629] ___sys_recvmsg+0x522/0x890 [ 3406.112515][T30629] do_recvmmsg+0x55a/0x1180 [ 3406.117131][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3406.122396][T30629] do_syscall_64+0x3d/0xb0 [ 3406.126946][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3406.133170][T30629] [ 3406.135557][T30629] Uninit was stored to memory at: [ 3406.140741][T30629] ___sys_recvmsg+0x522/0x890 [ 3406.145711][T30629] do_recvmmsg+0x55a/0x1180 [ 3406.150350][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3406.155681][T30629] do_syscall_64+0x3d/0xb0 [ 3406.160229][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3406.166455][T30629] [ 3406.168845][T30629] Uninit was stored to memory at: [ 3406.174209][T30629] ___sys_recvmsg+0x522/0x890 [ 3406.179012][T30629] do_recvmmsg+0x55a/0x1180 [ 3406.183797][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3406.188962][T30629] do_syscall_64+0x3d/0xb0 [ 3406.193668][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3406.199745][T30629] [ 3406.202291][T30629] Uninit was stored to memory at: [ 3406.207484][T30629] ___sys_recvmsg+0x522/0x890 [ 3406.212449][T30629] do_recvmmsg+0x55a/0x1180 [ 3406.217075][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3406.222363][T30629] do_syscall_64+0x3d/0xb0 [ 3406.226906][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3406.233130][T30629] [ 3406.235525][T30629] Local variable msg_sys created at: [ 3406.240885][T30629] do_recvmmsg+0x5c/0x1180 [ 3406.245582][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3406.263115][T26321] device bridge_slave_0 left promiscuous mode [ 3406.270059][T26321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3406.331242][T26321] device veth1_macvtap left promiscuous mode [ 3406.337652][T26321] device veth0_macvtap left promiscuous mode [ 3406.345293][T26321] device veth1_vlan left promiscuous mode [ 3406.351298][T26321] device veth0_vlan left promiscuous mode [ 3407.246876][T30629] not chained 17110000 origins [ 3407.251955][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3407.262258][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3407.272427][T30629] Call Trace: [ 3407.275867][T30629] [ 3407.278865][T30629] dump_stack_lvl+0x1c8/0x256 [ 3407.283731][T30629] dump_stack+0x1a/0x1c [ 3407.288031][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3407.293888][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3407.299082][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3407.305113][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3407.309912][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3407.315953][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3407.321917][T30629] ? should_fail+0x3f/0x810 [ 3407.326569][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3407.331822][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3407.338213][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3407.344159][T30629] __msan_chain_origin+0xbd/0x140 [ 3407.349314][T30629] ___sys_recvmsg+0x522/0x890 [ 3407.354107][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3407.358922][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3407.364962][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3407.370915][T30629] do_recvmmsg+0x55a/0x1180 [ 3407.375583][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3407.381974][T30629] ? do_syscall_64+0x3d/0xb0 [ 3407.386699][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.391876][T30629] do_syscall_64+0x3d/0xb0 [ 3407.396412][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3407.402471][T30629] RIP: 0033:0x7fa4f7e89279 [ 3407.407003][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3407.426755][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3407.435296][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3407.443464][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3407.451544][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3407.459621][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3407.467687][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3407.475784][T30629] [ 3407.486101][T30629] Uninit was stored to memory at: [ 3407.491342][T30629] ___sys_recvmsg+0x522/0x890 [ 3407.497502][T30629] do_recvmmsg+0x55a/0x1180 [ 3407.502226][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.507399][T30629] do_syscall_64+0x3d/0xb0 [ 3407.512033][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3407.518112][T30629] [ 3407.520501][T30629] Uninit was stored to memory at: [ 3407.525832][T30629] ___sys_recvmsg+0x522/0x890 [ 3407.530636][T30629] do_recvmmsg+0x55a/0x1180 [ 3407.535336][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.540497][T30629] do_syscall_64+0x3d/0xb0 [ 3407.545115][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3407.551184][T30629] [ 3407.553635][T30629] Uninit was stored to memory at: [ 3407.558819][T30629] ___sys_recvmsg+0x522/0x890 [ 3407.563705][T30629] do_recvmmsg+0x55a/0x1180 [ 3407.568359][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.573614][T30629] do_syscall_64+0x3d/0xb0 [ 3407.578177][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3407.584357][T30629] [ 3407.586747][T30629] Uninit was stored to memory at: [ 3407.592019][T30629] ___sys_recvmsg+0x522/0x890 [ 3407.596830][T30629] do_recvmmsg+0x55a/0x1180 [ 3407.601475][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.606797][T30629] do_syscall_64+0x3d/0xb0 [ 3407.611341][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3407.617495][T30629] [ 3407.619883][T30629] Uninit was stored to memory at: [ 3407.625136][T30629] ___sys_recvmsg+0x522/0x890 [ 3407.629939][T30629] do_recvmmsg+0x55a/0x1180 [ 3407.634663][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.639830][T30629] do_syscall_64+0x3d/0xb0 [ 3407.644477][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3407.650560][T30629] [ 3407.653057][T30629] Uninit was stored to memory at: [ 3407.658250][T30629] ___sys_recvmsg+0x522/0x890 [ 3407.663135][T30629] do_recvmmsg+0x55a/0x1180 [ 3407.667778][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.673001][T30629] do_syscall_64+0x3d/0xb0 [ 3407.677547][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3407.683705][T30629] [ 3407.686094][T30629] Uninit was stored to memory at: [ 3407.691287][T30629] ___sys_recvmsg+0x522/0x890 [ 3407.696172][T30629] do_recvmmsg+0x55a/0x1180 [ 3407.700804][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.706054][T30629] do_syscall_64+0x3d/0xb0 [ 3407.710605][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3407.716752][T30629] [ 3407.719143][T30629] Local variable msg_sys created at: [ 3407.724576][T30629] do_recvmmsg+0x5c/0x1180 [ 3407.729122][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3407.806230][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 3407.813062][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 3408.250308][T26321] team0 (unregistering): Port device team_slave_1 removed [ 3408.313771][T26321] team0 (unregistering): Port device team_slave_0 removed [ 3408.372022][T26321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3408.436072][T26321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3408.785496][T26321] bond0 (unregistering): Released all slaves [ 3409.144827][T30629] not chained 17120000 origins [ 3409.149713][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3409.160009][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3409.170162][T30629] Call Trace: [ 3409.173508][T30629] [ 3409.176508][T30629] dump_stack_lvl+0x1c8/0x256 [ 3409.181354][T30629] dump_stack+0x1a/0x1c [ 3409.185661][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3409.191518][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3409.196712][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3409.202760][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3409.207562][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3409.213523][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3409.219482][T30629] ? should_fail+0x3f/0x810 [ 3409.224141][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3409.229390][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3409.235777][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3409.241740][T30629] __msan_chain_origin+0xbd/0x140 [ 3409.246895][T30629] ___sys_recvmsg+0x522/0x890 [ 3409.251691][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3409.256511][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3409.262546][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3409.268507][T30629] do_recvmmsg+0x55a/0x1180 [ 3409.273157][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3409.279549][T30629] ? do_syscall_64+0x3d/0xb0 [ 3409.284269][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3409.289443][T30629] do_syscall_64+0x3d/0xb0 [ 3409.293984][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.300048][T30629] RIP: 0033:0x7fa4f7e89279 [ 3409.304556][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3409.324322][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3409.332864][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3409.340943][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3409.349011][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3409.357080][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3409.365151][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3409.373265][T30629] [ 3409.381431][T30629] Uninit was stored to memory at: [ 3409.387213][T30629] ___sys_recvmsg+0x522/0x890 [ 3409.392128][T30629] do_recvmmsg+0x55a/0x1180 [ 3409.396770][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3409.402056][T30629] do_syscall_64+0x3d/0xb0 [ 3409.406607][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.412800][T30629] [ 3409.415191][T30629] Uninit was stored to memory at: [ 3409.420383][T30629] ___sys_recvmsg+0x522/0x890 [ 3409.425393][T30629] do_recvmmsg+0x55a/0x1180 [ 3409.430029][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3409.435366][T30629] do_syscall_64+0x3d/0xb0 [ 3409.439917][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.446148][T30629] [ 3409.448540][T30629] Uninit was stored to memory at: [ 3409.453879][T30629] ___sys_recvmsg+0x522/0x890 [ 3409.458770][T30629] do_recvmmsg+0x55a/0x1180 [ 3409.463560][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3409.468726][T30629] do_syscall_64+0x3d/0xb0 [ 3409.473445][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.479515][T30629] [ 3409.482048][T30629] Uninit was stored to memory at: [ 3409.487262][T30629] ___sys_recvmsg+0x522/0x890 [ 3409.492234][T30629] do_recvmmsg+0x55a/0x1180 [ 3409.496875][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3409.502212][T30629] do_syscall_64+0x3d/0xb0 [ 3409.506839][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.513069][T30629] [ 3409.515466][T30629] Uninit was stored to memory at: [ 3409.520650][T30629] ___sys_recvmsg+0x522/0x890 [ 3409.525607][T30629] do_recvmmsg+0x55a/0x1180 [ 3409.530238][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3409.535570][T30629] do_syscall_64+0x3d/0xb0 [ 3409.540112][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.546342][T30629] [ 3409.548739][T30629] Uninit was stored to memory at: [ 3409.554092][T30629] ___sys_recvmsg+0x522/0x890 [ 3409.558900][T30629] do_recvmmsg+0x55a/0x1180 [ 3409.563697][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3409.568860][T30629] do_syscall_64+0x3d/0xb0 [ 3409.573566][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.579637][T30629] [ 3409.582177][T30629] Uninit was stored to memory at: [ 3409.587365][T30629] ___sys_recvmsg+0x522/0x890 [ 3409.592417][T30629] do_recvmmsg+0x55a/0x1180 [ 3409.597044][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3409.602348][T30629] do_syscall_64+0x3d/0xb0 [ 3409.606897][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.613114][T30629] [ 3409.615518][T30629] Local variable msg_sys created at: [ 3409.620896][T30629] do_recvmmsg+0x5c/0x1180 [ 3409.625623][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3410.864064][T30629] not chained 17130000 origins [ 3410.868964][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3410.879270][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3410.889448][T30629] Call Trace: [ 3410.892810][T30629] [ 3410.895817][T30629] dump_stack_lvl+0x1c8/0x256 [ 3410.900668][T30629] dump_stack+0x1a/0x1c [ 3410.904968][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3410.910835][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3410.916034][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3410.922070][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3410.926866][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3410.932824][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3410.938783][T30629] ? should_fail+0x3f/0x810 [ 3410.943422][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3410.948673][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3410.955061][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3410.961010][T30629] __msan_chain_origin+0xbd/0x140 [ 3410.966166][T30629] ___sys_recvmsg+0x522/0x890 [ 3410.970959][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3410.975779][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3410.981815][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3410.987770][T30629] do_recvmmsg+0x55a/0x1180 [ 3410.992415][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3410.998806][T30629] ? do_syscall_64+0x3d/0xb0 [ 3411.003514][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3411.008687][T30629] do_syscall_64+0x3d/0xb0 [ 3411.013224][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3411.019285][T30629] RIP: 0033:0x7fa4f7e89279 [ 3411.023799][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3411.043549][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3411.052088][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3411.060171][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3411.068240][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3411.076399][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3411.084463][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3411.092561][T30629] [ 3411.099030][T30629] Uninit was stored to memory at: [ 3411.104593][T30629] ___sys_recvmsg+0x522/0x890 [ 3411.109408][T30629] do_recvmmsg+0x55a/0x1180 [ 3411.114128][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3411.119288][T30629] do_syscall_64+0x3d/0xb0 [ 3411.123930][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3411.130004][T30629] [ 3411.132484][T30629] Uninit was stored to memory at: [ 3411.137670][T30629] ___sys_recvmsg+0x522/0x890 [ 3411.142560][T30629] do_recvmmsg+0x55a/0x1180 [ 3411.147186][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3411.152428][T30629] do_syscall_64+0x3d/0xb0 [ 3411.156967][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3411.163106][T30629] [ 3411.165490][T30629] Uninit was stored to memory at: [ 3411.170688][T30629] ___sys_recvmsg+0x522/0x890 [ 3411.175568][T30629] do_recvmmsg+0x55a/0x1180 [ 3411.180192][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3411.185428][T30629] do_syscall_64+0x3d/0xb0 [ 3411.189994][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3411.196134][T30629] [ 3411.198517][T30629] Uninit was stored to memory at: [ 3411.203775][T30629] ___sys_recvmsg+0x522/0x890 [ 3411.208582][T30629] do_recvmmsg+0x55a/0x1180 [ 3411.213299][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3411.218466][T30629] do_syscall_64+0x3d/0xb0 [ 3411.223089][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3411.229157][T30629] [ 3411.231623][T30629] Uninit was stored to memory at: [ 3411.236812][T30629] ___sys_recvmsg+0x522/0x890 [ 3411.241703][T30629] do_recvmmsg+0x55a/0x1180 [ 3411.246333][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3411.251491][T30629] do_syscall_64+0x3d/0xb0 [ 3411.256110][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3411.262258][T30629] [ 3411.264645][T30629] Uninit was stored to memory at: [ 3411.269829][T30629] ___sys_recvmsg+0x522/0x890 [ 3411.274711][T30629] do_recvmmsg+0x55a/0x1180 [ 3411.279343][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3411.284631][T30629] do_syscall_64+0x3d/0xb0 [ 3411.289174][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3411.295383][T30629] [ 3411.297772][T30629] Uninit was stored to memory at: [ 3411.303098][T30629] ___sys_recvmsg+0x522/0x890 [ 3411.307893][T30629] do_recvmmsg+0x55a/0x1180 [ 3411.312601][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3411.317863][T30629] do_syscall_64+0x3d/0xb0 [ 3411.322524][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3411.328583][T30629] [ 3411.330972][T30629] Local variable msg_sys created at: [ 3411.336467][T30629] do_recvmmsg+0x5c/0x1180 [ 3411.341041][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.070760][T30629] not chained 17140000 origins [ 3412.075733][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3412.086021][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3412.096173][T30629] Call Trace: [ 3412.099521][T30629] [ 3412.102521][T30629] dump_stack_lvl+0x1c8/0x256 [ 3412.107386][T30629] dump_stack+0x1a/0x1c [ 3412.111690][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3412.117548][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3412.122736][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3412.128767][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3412.133564][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3412.139527][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3412.145496][T30629] ? should_fail+0x3f/0x810 [ 3412.150161][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3412.155409][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3412.161797][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3412.167745][T30629] __msan_chain_origin+0xbd/0x140 [ 3412.172901][T30629] ___sys_recvmsg+0x522/0x890 [ 3412.177702][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3412.182525][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3412.188563][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3412.194519][T30629] do_recvmmsg+0x55a/0x1180 [ 3412.199166][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3412.205559][T30629] ? do_syscall_64+0x3d/0xb0 [ 3412.210270][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.215441][T30629] do_syscall_64+0x3d/0xb0 [ 3412.219972][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3412.226024][T30629] RIP: 0033:0x7fa4f7e89279 [ 3412.230530][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3412.250295][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3412.258838][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3412.266917][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3412.274990][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3412.283070][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3412.291134][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3412.299233][T30629] [ 3412.305318][T30629] Uninit was stored to memory at: [ 3412.310560][T30629] ___sys_recvmsg+0x522/0x890 [ 3412.315761][T30629] do_recvmmsg+0x55a/0x1180 [ 3412.320395][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.325654][T30629] do_syscall_64+0x3d/0xb0 [ 3412.330198][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3412.336369][T30629] [ 3412.338772][T30629] Uninit was stored to memory at: [ 3412.344043][T30629] ___sys_recvmsg+0x522/0x890 [ 3412.348851][T30629] do_recvmmsg+0x55a/0x1180 [ 3412.353566][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.358722][T30629] do_syscall_64+0x3d/0xb0 [ 3412.363351][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3412.369422][T30629] [ 3412.371935][T30629] Uninit was stored to memory at: [ 3412.377125][T30629] ___sys_recvmsg+0x522/0x890 [ 3412.382057][T30629] do_recvmmsg+0x55a/0x1180 [ 3412.386684][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.391963][T30629] do_syscall_64+0x3d/0xb0 [ 3412.396520][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3412.402721][T30629] [ 3412.405107][T30629] Uninit was stored to memory at: [ 3412.410289][T30629] ___sys_recvmsg+0x522/0x890 [ 3412.415223][T30629] do_recvmmsg+0x55a/0x1180 [ 3412.419854][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.425135][T30629] do_syscall_64+0x3d/0xb0 [ 3412.429684][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3412.435886][T30629] [ 3412.438274][T30629] Uninit was stored to memory at: [ 3412.443601][T30629] ___sys_recvmsg+0x522/0x890 [ 3412.448407][T30629] do_recvmmsg+0x55a/0x1180 [ 3412.453169][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.458328][T30629] do_syscall_64+0x3d/0xb0 [ 3412.463000][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3412.469098][T30629] [ 3412.471482][T30629] Uninit was stored to memory at: [ 3412.476795][T30629] ___sys_recvmsg+0x522/0x890 [ 3412.481686][T30629] do_recvmmsg+0x55a/0x1180 [ 3412.486314][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.491473][T30629] do_syscall_64+0x3d/0xb0 [ 3412.496153][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3412.502356][T30629] [ 3412.504748][T30629] Uninit was stored to memory at: [ 3412.509933][T30629] ___sys_recvmsg+0x522/0x890 [ 3412.514878][T30629] do_recvmmsg+0x55a/0x1180 [ 3412.519520][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3412.524815][T30629] do_syscall_64+0x3d/0xb0 [ 3412.529367][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3412.535568][T30629] [ 3412.537960][T30629] Local variable msg_sys created at: [ 3412.543449][T30629] do_recvmmsg+0x5c/0x1180 [ 3412.548033][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.238561][T30631] not chained 17150000 origins [ 3413.243722][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3413.254050][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3413.264229][T30631] Call Trace: [ 3413.267593][T30631] [ 3413.270625][T30631] dump_stack_lvl+0x1c8/0x256 [ 3413.275529][T30631] dump_stack+0x1a/0x1c [ 3413.279977][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3413.285890][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3413.291104][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3413.297170][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3413.301991][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3413.307985][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3413.313959][T30631] ? should_fail+0x3f/0x810 [ 3413.318614][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3413.323882][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3413.330293][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3413.336263][T30631] __msan_chain_origin+0xbd/0x140 [ 3413.341440][T30631] ___sys_recvmsg+0x522/0x890 [ 3413.346252][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3413.351090][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3413.357151][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3413.363125][T30631] do_recvmmsg+0x55a/0x1180 [ 3413.367785][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3413.374198][T30631] ? do_syscall_64+0x3d/0xb0 [ 3413.378927][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.384109][T30631] do_syscall_64+0x3d/0xb0 [ 3413.388656][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3413.394727][T30631] RIP: 0033:0x7fa4f7e89279 [ 3413.399244][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3413.419025][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3413.427587][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3413.435682][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3413.443765][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3413.451847][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3413.459928][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3413.468043][T30631] [ 3413.473825][T30631] Uninit was stored to memory at: [ 3413.479118][T30631] ___sys_recvmsg+0x522/0x890 [ 3413.484285][T30631] do_recvmmsg+0x55a/0x1180 [ 3413.488931][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.494194][T30631] do_syscall_64+0x3d/0xb0 [ 3413.498748][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3413.504952][T30631] [ 3413.507351][T30631] Uninit was stored to memory at: [ 3413.512661][T30631] ___sys_recvmsg+0x522/0x890 [ 3413.517467][T30631] do_recvmmsg+0x55a/0x1180 [ 3413.522224][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.527392][T30631] do_syscall_64+0x3d/0xb0 [ 3413.532058][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3413.538122][T30631] [ 3413.540503][T30631] Uninit was stored to memory at: [ 3413.545815][T30631] ___sys_recvmsg+0x522/0x890 [ 3413.550623][T30631] do_recvmmsg+0x55a/0x1180 [ 3413.555379][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.560537][T30631] do_syscall_64+0x3d/0xb0 [ 3413.565227][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3413.571322][T30631] [ 3413.573842][T30631] Uninit was stored to memory at: [ 3413.579026][T30631] ___sys_recvmsg+0x522/0x890 [ 3413.583907][T30631] do_recvmmsg+0x55a/0x1180 [ 3413.588542][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.593833][T30631] do_syscall_64+0x3d/0xb0 [ 3413.598384][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3413.604615][T30631] [ 3413.607006][T30631] Uninit was stored to memory at: [ 3413.612338][T30631] ___sys_recvmsg+0x522/0x890 [ 3413.617144][T30631] do_recvmmsg+0x55a/0x1180 [ 3413.621894][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.627051][T30631] do_syscall_64+0x3d/0xb0 [ 3413.631675][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3413.637739][T30631] [ 3413.640128][T30631] Uninit was stored to memory at: [ 3413.645454][T30631] ___sys_recvmsg+0x522/0x890 [ 3413.650265][T30631] do_recvmmsg+0x55a/0x1180 [ 3413.655051][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.660215][T30631] do_syscall_64+0x3d/0xb0 [ 3413.664973][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3413.671065][T30631] [ 3413.673593][T30631] Uninit was stored to memory at: [ 3413.678785][T30631] ___sys_recvmsg+0x522/0x890 [ 3413.683733][T30631] do_recvmmsg+0x55a/0x1180 [ 3413.688372][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3413.693666][T30631] do_syscall_64+0x3d/0xb0 [ 3413.698229][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3413.704430][T30631] [ 3413.706828][T30631] Local variable msg_sys created at: [ 3413.712316][T30631] do_recvmmsg+0x5c/0x1180 [ 3413.716859][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.318358][T30629] not chained 17160000 origins [ 3414.323485][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3414.333775][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3414.343927][T30629] Call Trace: [ 3414.347274][T30629] [ 3414.350274][T30629] dump_stack_lvl+0x1c8/0x256 [ 3414.355122][T30629] dump_stack+0x1a/0x1c [ 3414.359423][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3414.365285][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3414.370471][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3414.376517][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3414.381314][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3414.387269][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3414.393234][T30629] ? should_fail+0x3f/0x810 [ 3414.397879][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3414.403126][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3414.409517][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3414.415464][T30629] __msan_chain_origin+0xbd/0x140 [ 3414.420630][T30629] ___sys_recvmsg+0x522/0x890 [ 3414.425428][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3414.430248][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3414.436284][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3414.442259][T30629] do_recvmmsg+0x55a/0x1180 [ 3414.446906][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3414.453296][T30629] ? do_syscall_64+0x3d/0xb0 [ 3414.458005][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.463171][T30629] do_syscall_64+0x3d/0xb0 [ 3414.467702][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3414.473763][T30629] RIP: 0033:0x7fa4f7e89279 [ 3414.478474][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3414.498245][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3414.506801][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3414.514901][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3414.522974][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3414.531041][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3414.539108][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3414.547205][T30629] [ 3414.557041][T30629] Uninit was stored to memory at: [ 3414.563237][T30629] ___sys_recvmsg+0x522/0x890 [ 3414.568045][T30629] do_recvmmsg+0x55a/0x1180 [ 3414.572788][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.577952][T30629] do_syscall_64+0x3d/0xb0 [ 3414.582596][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3414.588665][T30629] [ 3414.591059][T30629] Uninit was stored to memory at: [ 3414.596361][T30629] ___sys_recvmsg+0x522/0x890 [ 3414.601169][T30629] do_recvmmsg+0x55a/0x1180 [ 3414.605929][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.611112][T30629] do_syscall_64+0x3d/0xb0 [ 3414.615844][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3414.622080][T30629] [ 3414.624468][T30629] Uninit was stored to memory at: [ 3414.629658][T30629] ___sys_recvmsg+0x522/0x890 [ 3414.634638][T30629] do_recvmmsg+0x55a/0x1180 [ 3414.639280][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.644558][T30629] do_syscall_64+0x3d/0xb0 [ 3414.649113][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3414.655310][T30629] [ 3414.657701][T30629] Uninit was stored to memory at: [ 3414.663000][T30629] ___sys_recvmsg+0x522/0x890 [ 3414.667815][T30629] do_recvmmsg+0x55a/0x1180 [ 3414.672611][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.677864][T30629] do_syscall_64+0x3d/0xb0 [ 3414.682506][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3414.688575][T30629] [ 3414.690978][T30629] Uninit was stored to memory at: [ 3414.696311][T30629] ___sys_recvmsg+0x522/0x890 [ 3414.701121][T30629] do_recvmmsg+0x55a/0x1180 [ 3414.705923][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.711095][T30629] do_syscall_64+0x3d/0xb0 [ 3414.715805][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3414.721991][T30629] [ 3414.724378][T30629] Uninit was stored to memory at: [ 3414.729573][T30629] ___sys_recvmsg+0x522/0x890 [ 3414.734568][T30629] do_recvmmsg+0x55a/0x1180 [ 3414.739210][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.744542][T30629] do_syscall_64+0x3d/0xb0 [ 3414.749097][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3414.755351][T30629] [ 3414.757749][T30629] Uninit was stored to memory at: [ 3414.763105][T30629] ___sys_recvmsg+0x522/0x890 [ 3414.767948][T30629] do_recvmmsg+0x55a/0x1180 [ 3414.772745][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3414.777936][T30629] do_syscall_64+0x3d/0xb0 [ 3414.782587][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3414.788650][T30629] [ 3414.791050][T30629] Local variable msg_sys created at: [ 3414.796563][T30629] do_recvmmsg+0x5c/0x1180 [ 3414.801115][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.480078][T30629] not chained 17170000 origins [ 3415.485179][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3415.495478][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3415.505660][T30629] Call Trace: [ 3415.509014][T30629] [ 3415.512025][T30629] dump_stack_lvl+0x1c8/0x256 [ 3415.516878][T30629] dump_stack+0x1a/0x1c [ 3415.521184][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3415.527044][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3415.532234][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3415.538274][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3415.543074][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3415.549026][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3415.554976][T30629] ? should_fail+0x3f/0x810 [ 3415.559614][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3415.564859][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3415.571250][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3415.577203][T30629] __msan_chain_origin+0xbd/0x140 [ 3415.582365][T30629] ___sys_recvmsg+0x522/0x890 [ 3415.587156][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3415.591976][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3415.598014][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3415.603969][T30629] do_recvmmsg+0x55a/0x1180 [ 3415.608609][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3415.614997][T30629] ? do_syscall_64+0x3d/0xb0 [ 3415.619706][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.624873][T30629] do_syscall_64+0x3d/0xb0 [ 3415.629404][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3415.635459][T30629] RIP: 0033:0x7fa4f7e89279 [ 3415.639967][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3415.659715][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3415.668251][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3415.676343][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3415.684416][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3415.692484][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3415.700556][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3415.708657][T30629] [ 3415.714574][T30629] Uninit was stored to memory at: [ 3415.722460][T30629] ___sys_recvmsg+0x522/0x890 [ 3415.727275][T30629] do_recvmmsg+0x55a/0x1180 [ 3415.732166][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.737320][T30629] do_syscall_64+0x3d/0xb0 [ 3415.741949][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3415.748024][T30629] [ 3415.750407][T30629] Uninit was stored to memory at: [ 3415.755669][T30629] ___sys_recvmsg+0x522/0x890 [ 3415.760472][T30629] do_recvmmsg+0x55a/0x1180 [ 3415.765172][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.770329][T30629] do_syscall_64+0x3d/0xb0 [ 3415.774938][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3415.781005][T30629] [ 3415.783465][T30629] Uninit was stored to memory at: [ 3415.788649][T30629] ___sys_recvmsg+0x522/0x890 [ 3415.793542][T30629] do_recvmmsg+0x55a/0x1180 [ 3415.798177][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.803410][T30629] do_syscall_64+0x3d/0xb0 [ 3415.807949][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3415.814105][T30629] [ 3415.816490][T30629] Uninit was stored to memory at: [ 3415.821755][T30629] ___sys_recvmsg+0x522/0x890 [ 3415.826570][T30629] do_recvmmsg+0x55a/0x1180 [ 3415.831210][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.836463][T30629] do_syscall_64+0x3d/0xb0 [ 3415.841017][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3415.847271][T30629] [ 3415.849662][T30629] Uninit was stored to memory at: [ 3415.854923][T30629] ___sys_recvmsg+0x522/0x890 [ 3415.859726][T30629] do_recvmmsg+0x55a/0x1180 [ 3415.864441][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.869602][T30629] do_syscall_64+0x3d/0xb0 [ 3415.874222][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3415.880301][T30629] [ 3415.882774][T30629] Uninit was stored to memory at: [ 3415.887973][T30629] ___sys_recvmsg+0x522/0x890 [ 3415.892876][T30629] do_recvmmsg+0x55a/0x1180 [ 3415.897506][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.902761][T30629] do_syscall_64+0x3d/0xb0 [ 3415.907308][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3415.913475][T30629] [ 3415.915862][T30629] Uninit was stored to memory at: [ 3415.921047][T30629] ___sys_recvmsg+0x522/0x890 [ 3415.925993][T30629] do_recvmmsg+0x55a/0x1180 [ 3415.930634][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3415.935954][T30629] do_syscall_64+0x3d/0xb0 [ 3415.940510][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3415.946745][T30629] [ 3415.949146][T30629] Local variable msg_sys created at: [ 3415.954648][T30629] do_recvmmsg+0x5c/0x1180 [ 3415.959211][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3416.617378][T30629] not chained 17180000 origins [ 3416.622506][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3416.632799][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3416.642956][T30629] Call Trace: [ 3416.646301][T30629] [ 3416.649304][T30629] dump_stack_lvl+0x1c8/0x256 [ 3416.654156][T30629] dump_stack+0x1a/0x1c [ 3416.658464][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3416.664348][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3416.669542][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3416.675571][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3416.680373][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3416.686349][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3416.692312][T30629] ? should_fail+0x3f/0x810 [ 3416.696957][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3416.702203][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3416.708596][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3416.714543][T30629] __msan_chain_origin+0xbd/0x140 [ 3416.719703][T30629] ___sys_recvmsg+0x522/0x890 [ 3416.724499][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3416.729403][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3416.735439][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3416.741392][T30629] do_recvmmsg+0x55a/0x1180 [ 3416.746037][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3416.752427][T30629] ? do_syscall_64+0x3d/0xb0 [ 3416.757161][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3416.762334][T30629] do_syscall_64+0x3d/0xb0 [ 3416.766866][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3416.772916][T30629] RIP: 0033:0x7fa4f7e89279 [ 3416.777422][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3416.797216][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3416.805783][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3416.813867][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3416.821944][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3416.830104][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3416.838174][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3416.846275][T30629] [ 3416.854332][T30629] Uninit was stored to memory at: [ 3416.859552][T30629] ___sys_recvmsg+0x522/0x890 [ 3416.864933][T30629] do_recvmmsg+0x55a/0x1180 [ 3416.869660][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3416.874924][T30629] do_syscall_64+0x3d/0xb0 [ 3416.879468][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3416.885641][T30629] [ 3416.888024][T30629] Uninit was stored to memory at: [ 3416.893311][T30629] ___sys_recvmsg+0x522/0x890 [ 3416.898115][T30629] do_recvmmsg+0x55a/0x1180 [ 3416.902837][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3416.907996][T30629] do_syscall_64+0x3d/0xb0 [ 3416.912656][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3416.918738][T30629] [ 3416.921127][T30629] Uninit was stored to memory at: [ 3416.926429][T30629] ___sys_recvmsg+0x522/0x890 [ 3416.931248][T30629] do_recvmmsg+0x55a/0x1180 [ 3416.935988][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3416.941152][T30629] do_syscall_64+0x3d/0xb0 [ 3416.945798][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3416.952013][T30629] [ 3416.954404][T30629] Uninit was stored to memory at: [ 3416.959588][T30629] ___sys_recvmsg+0x522/0x890 [ 3416.964498][T30629] do_recvmmsg+0x55a/0x1180 [ 3416.969138][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3416.974391][T30629] do_syscall_64+0x3d/0xb0 [ 3416.978933][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3416.985107][T30629] [ 3416.987495][T30629] Uninit was stored to memory at: [ 3416.992775][T30629] ___sys_recvmsg+0x522/0x890 [ 3416.997593][T30629] do_recvmmsg+0x55a/0x1180 [ 3417.002374][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3417.007530][T30629] do_syscall_64+0x3d/0xb0 [ 3417.012300][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3417.018380][T30629] [ 3417.020774][T30629] Uninit was stored to memory at: [ 3417.026141][T30629] ___sys_recvmsg+0x522/0x890 [ 3417.030944][T30629] do_recvmmsg+0x55a/0x1180 [ 3417.035731][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3417.040900][T30629] do_syscall_64+0x3d/0xb0 [ 3417.045612][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3417.051792][T30629] [ 3417.054182][T30629] Uninit was stored to memory at: [ 3417.059371][T30629] ___sys_recvmsg+0x522/0x890 [ 3417.064289][T30629] do_recvmmsg+0x55a/0x1180 [ 3417.068926][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3417.074194][T30629] do_syscall_64+0x3d/0xb0 [ 3417.078738][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3417.084918][T30629] [ 3417.087309][T30629] Local variable msg_sys created at: [ 3417.092760][T30629] do_recvmmsg+0x5c/0x1180 [ 3417.097297][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3417.753785][T30629] not chained 17190000 origins [ 3417.758673][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3417.768960][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3417.779115][T30629] Call Trace: [ 3417.782461][T30629] [ 3417.785456][T30629] dump_stack_lvl+0x1c8/0x256 [ 3417.790301][T30629] dump_stack+0x1a/0x1c [ 3417.794602][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3417.800460][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3417.805647][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3417.811696][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3417.816509][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3417.822470][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3417.828425][T30629] ? should_fail+0x3f/0x810 [ 3417.833073][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3417.838319][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3417.844714][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3417.850666][T30629] __msan_chain_origin+0xbd/0x140 [ 3417.855826][T30629] ___sys_recvmsg+0x522/0x890 [ 3417.860628][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3417.865447][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3417.871500][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3417.877465][T30629] do_recvmmsg+0x55a/0x1180 [ 3417.882109][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3417.888506][T30629] ? do_syscall_64+0x3d/0xb0 [ 3417.893227][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3417.898396][T30629] do_syscall_64+0x3d/0xb0 [ 3417.902931][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3417.908982][T30629] RIP: 0033:0x7fa4f7e89279 [ 3417.913495][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3417.933248][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3417.941797][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3417.949878][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3417.957948][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3417.966018][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3417.974081][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3417.982180][T30629] [ 3417.990543][T30629] Uninit was stored to memory at: [ 3417.996317][T30629] ___sys_recvmsg+0x522/0x890 [ 3418.001134][T30629] do_recvmmsg+0x55a/0x1180 [ 3418.005877][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3418.011042][T30629] do_syscall_64+0x3d/0xb0 [ 3418.015708][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3418.021888][T30629] [ 3418.024275][T30629] Uninit was stored to memory at: [ 3418.029464][T30629] ___sys_recvmsg+0x522/0x890 [ 3418.034424][T30629] do_recvmmsg+0x55a/0x1180 [ 3418.039064][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3418.044389][T30629] do_syscall_64+0x3d/0xb0 [ 3418.048938][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3418.055197][T30629] [ 3418.057586][T30629] Uninit was stored to memory at: [ 3418.062927][T30629] ___sys_recvmsg+0x522/0x890 [ 3418.067732][T30629] do_recvmmsg+0x55a/0x1180 [ 3418.072514][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3418.077691][T30629] do_syscall_64+0x3d/0xb0 [ 3418.082331][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3418.088407][T30629] [ 3418.090796][T30629] Uninit was stored to memory at: [ 3418.096147][T30629] ___sys_recvmsg+0x522/0x890 [ 3418.100949][T30629] do_recvmmsg+0x55a/0x1180 [ 3418.105728][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3418.110897][T30629] do_syscall_64+0x3d/0xb0 [ 3418.115591][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3418.121745][T30629] [ 3418.124133][T30629] Uninit was stored to memory at: [ 3418.129315][T30629] ___sys_recvmsg+0x522/0x890 [ 3418.134275][T30629] do_recvmmsg+0x55a/0x1180 [ 3418.138935][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3418.144251][T30629] do_syscall_64+0x3d/0xb0 [ 3418.148791][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3418.155037][T30629] [ 3418.157427][T30629] Uninit was stored to memory at: [ 3418.162800][T30629] ___sys_recvmsg+0x522/0x890 [ 3418.167607][T30629] do_recvmmsg+0x55a/0x1180 [ 3418.172401][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3418.177562][T30629] do_syscall_64+0x3d/0xb0 [ 3418.182211][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3418.188278][T30629] [ 3418.190659][T30629] Uninit was stored to memory at: [ 3418.196020][T30629] ___sys_recvmsg+0x522/0x890 [ 3418.200815][T30629] do_recvmmsg+0x55a/0x1180 [ 3418.205599][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3418.210763][T30629] do_syscall_64+0x3d/0xb0 [ 3418.215472][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3418.221679][T30629] [ 3418.224080][T30629] Local variable msg_sys created at: [ 3418.229442][T30629] do_recvmmsg+0x5c/0x1180 [ 3418.234135][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3418.916119][T30631] not chained 17200000 origins [ 3418.921011][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3418.931329][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3418.941494][T30631] Call Trace: [ 3418.944854][T30631] [ 3418.947864][T30631] dump_stack_lvl+0x1c8/0x256 [ 3418.952728][T30631] dump_stack+0x1a/0x1c [ 3418.957051][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3418.962930][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3418.968133][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3418.974189][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3418.979007][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3418.984977][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3418.990945][T30631] ? should_fail+0x3f/0x810 [ 3418.995594][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3419.000854][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3419.007258][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3419.013232][T30631] __msan_chain_origin+0xbd/0x140 [ 3419.018405][T30631] ___sys_recvmsg+0x522/0x890 [ 3419.023215][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3419.028052][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3419.034104][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3419.040074][T30631] do_recvmmsg+0x55a/0x1180 [ 3419.044733][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3419.051133][T30631] ? do_syscall_64+0x3d/0xb0 [ 3419.055867][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.061048][T30631] do_syscall_64+0x3d/0xb0 [ 3419.065592][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3419.071660][T30631] RIP: 0033:0x7fa4f7e89279 [ 3419.076178][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3419.095981][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3419.104543][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3419.112648][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3419.120729][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3419.128813][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3419.136897][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3419.145015][T30631] [ 3419.151036][T30631] Uninit was stored to memory at: [ 3419.156565][T30631] ___sys_recvmsg+0x522/0x890 [ 3419.161376][T30631] do_recvmmsg+0x55a/0x1180 [ 3419.166077][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.171234][T30631] do_syscall_64+0x3d/0xb0 [ 3419.175955][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3419.182099][T30631] [ 3419.184489][T30631] Uninit was stored to memory at: [ 3419.189676][T30631] ___sys_recvmsg+0x522/0x890 [ 3419.194555][T30631] do_recvmmsg+0x55a/0x1180 [ 3419.199209][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.204446][T30631] do_syscall_64+0x3d/0xb0 [ 3419.208993][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3419.215149][T30631] [ 3419.217535][T30631] Uninit was stored to memory at: [ 3419.222796][T30631] ___sys_recvmsg+0x522/0x890 [ 3419.227599][T30631] do_recvmmsg+0x55a/0x1180 [ 3419.233175][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.238344][T30631] do_syscall_64+0x3d/0xb0 [ 3419.242969][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3419.249040][T30631] [ 3419.251423][T30631] Uninit was stored to memory at: [ 3419.256759][T30631] ___sys_recvmsg+0x522/0x890 [ 3419.261675][T30631] do_recvmmsg+0x55a/0x1180 [ 3419.266302][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.271469][T30631] do_syscall_64+0x3d/0xb0 [ 3419.276179][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3419.282391][T30631] [ 3419.284783][T30631] Uninit was stored to memory at: [ 3419.289972][T30631] ___sys_recvmsg+0x522/0x890 [ 3419.294922][T30631] do_recvmmsg+0x55a/0x1180 [ 3419.299560][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.304841][T30631] do_syscall_64+0x3d/0xb0 [ 3419.309391][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3419.315542][T30631] [ 3419.317932][T30631] Uninit was stored to memory at: [ 3419.323247][T30631] ___sys_recvmsg+0x522/0x890 [ 3419.328055][T30631] do_recvmmsg+0x55a/0x1180 [ 3419.332807][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.337964][T30631] do_syscall_64+0x3d/0xb0 [ 3419.342622][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3419.348684][T30631] [ 3419.351073][T30631] Uninit was stored to memory at: [ 3419.356409][T30631] ___sys_recvmsg+0x522/0x890 [ 3419.361213][T30631] do_recvmmsg+0x55a/0x1180 [ 3419.365984][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.371143][T30631] do_syscall_64+0x3d/0xb0 [ 3419.375815][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3419.381962][T30631] [ 3419.384358][T30631] Local variable msg_sys created at: [ 3419.389719][T30631] do_recvmmsg+0x5c/0x1180 [ 3419.394401][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3419.998641][T30631] not chained 17210000 origins [ 3420.003783][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3420.014084][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3420.024256][T30631] Call Trace: [ 3420.027611][T30631] [ 3420.030632][T30631] dump_stack_lvl+0x1c8/0x256 [ 3420.035501][T30631] dump_stack+0x1a/0x1c [ 3420.039819][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3420.045704][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3420.050918][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3420.056964][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3420.061772][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3420.067747][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3420.073731][T30631] ? should_fail+0x3f/0x810 [ 3420.078387][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3420.083644][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3420.090046][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3420.096011][T30631] __msan_chain_origin+0xbd/0x140 [ 3420.101184][T30631] ___sys_recvmsg+0x522/0x890 [ 3420.105988][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3420.110813][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3420.116874][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3420.122866][T30631] do_recvmmsg+0x55a/0x1180 [ 3420.127527][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3420.133941][T30631] ? do_syscall_64+0x3d/0xb0 [ 3420.138667][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3420.143855][T30631] do_syscall_64+0x3d/0xb0 [ 3420.148417][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3420.154513][T30631] RIP: 0033:0x7fa4f7e89279 [ 3420.159033][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3420.178805][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3420.187365][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3420.195455][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3420.203534][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3420.211613][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3420.219687][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3420.227802][T30631] [ 3420.235846][T30631] Uninit was stored to memory at: [ 3420.241065][T30631] ___sys_recvmsg+0x522/0x890 [ 3420.246560][T30631] do_recvmmsg+0x55a/0x1180 [ 3420.251196][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3420.256454][T30631] do_syscall_64+0x3d/0xb0 [ 3420.261005][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3420.267186][T30631] [ 3420.269575][T30631] Uninit was stored to memory at: [ 3420.274839][T30631] ___sys_recvmsg+0x522/0x890 [ 3420.279658][T30631] do_recvmmsg+0x55a/0x1180 [ 3420.284382][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3420.289535][T30631] do_syscall_64+0x3d/0xb0 [ 3420.294181][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3420.300245][T30631] [ 3420.302733][T30631] Uninit was stored to memory at: [ 3420.307925][T30631] ___sys_recvmsg+0x522/0x890 [ 3420.312825][T30631] do_recvmmsg+0x55a/0x1180 [ 3420.317457][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3420.322728][T30631] do_syscall_64+0x3d/0xb0 [ 3420.327281][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3420.333452][T30631] [ 3420.335846][T30631] Uninit was stored to memory at: [ 3420.341035][T30631] ___sys_recvmsg+0x522/0x890 [ 3420.345961][T30631] do_recvmmsg+0x55a/0x1180 [ 3420.350605][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3420.355861][T30631] do_syscall_64+0x3d/0xb0 [ 3420.360412][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3420.366574][T30631] [ 3420.368954][T30631] Uninit was stored to memory at: [ 3420.374240][T30631] ___sys_recvmsg+0x522/0x890 [ 3420.379068][T30631] do_recvmmsg+0x55a/0x1180 [ 3420.383805][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3420.388972][T30631] do_syscall_64+0x3d/0xb0 [ 3420.393616][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3420.399682][T30631] [ 3420.402171][T30631] Uninit was stored to memory at: [ 3420.407357][T30631] ___sys_recvmsg+0x522/0x890 [ 3420.412258][T30631] do_recvmmsg+0x55a/0x1180 [ 3420.416892][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3420.422145][T30631] do_syscall_64+0x3d/0xb0 [ 3420.426687][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3420.432907][T30631] [ 3420.435298][T30631] Uninit was stored to memory at: [ 3420.440491][T30631] ___sys_recvmsg+0x522/0x890 [ 3420.445458][T30631] do_recvmmsg+0x55a/0x1180 [ 3420.450091][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3420.455417][T30631] do_syscall_64+0x3d/0xb0 [ 3420.459964][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3420.466199][T30631] [ 3420.468589][T30631] Local variable msg_sys created at: [ 3420.474110][T30631] do_recvmmsg+0x5c/0x1180 [ 3420.478653][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.022703][T30631] not chained 17220000 origins [ 3421.027588][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3421.037882][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3421.048048][T30631] Call Trace: [ 3421.051409][T30631] [ 3421.054416][T30631] dump_stack_lvl+0x1c8/0x256 [ 3421.059270][T30631] dump_stack+0x1a/0x1c [ 3421.063617][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3421.069494][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3421.074706][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3421.080755][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3421.085568][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3421.091543][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3421.097523][T30631] ? should_fail+0x3f/0x810 [ 3421.102193][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3421.107469][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3421.113872][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3421.119831][T30631] __msan_chain_origin+0xbd/0x140 [ 3421.124994][T30631] ___sys_recvmsg+0x522/0x890 [ 3421.129796][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3421.134638][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3421.140702][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3421.146671][T30631] do_recvmmsg+0x55a/0x1180 [ 3421.151341][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3421.157752][T30631] ? do_syscall_64+0x3d/0xb0 [ 3421.162476][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.167659][T30631] do_syscall_64+0x3d/0xb0 [ 3421.172204][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3421.178270][T30631] RIP: 0033:0x7fa4f7e89279 [ 3421.182792][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3421.202562][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3421.211112][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3421.219201][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3421.227278][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3421.235373][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3421.243457][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3421.251569][T30631] [ 3421.260119][T30631] Uninit was stored to memory at: [ 3421.265887][T30631] ___sys_recvmsg+0x522/0x890 [ 3421.270700][T30631] do_recvmmsg+0x55a/0x1180 [ 3421.275455][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.280614][T30631] do_syscall_64+0x3d/0xb0 [ 3421.285263][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3421.291340][T30631] [ 3421.293824][T30631] Uninit was stored to memory at: [ 3421.299012][T30631] ___sys_recvmsg+0x522/0x890 [ 3421.303911][T30631] do_recvmmsg+0x55a/0x1180 [ 3421.308544][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.313802][T30631] do_syscall_64+0x3d/0xb0 [ 3421.318348][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3421.324507][T30631] [ 3421.326891][T30631] Uninit was stored to memory at: [ 3421.332183][T30631] ___sys_recvmsg+0x522/0x890 [ 3421.336986][T30631] do_recvmmsg+0x55a/0x1180 [ 3421.341723][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.346883][T30631] do_syscall_64+0x3d/0xb0 [ 3421.351442][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3421.357607][T30631] [ 3421.359998][T30631] Uninit was stored to memory at: [ 3421.365293][T30631] ___sys_recvmsg+0x522/0x890 [ 3421.370110][T30631] do_recvmmsg+0x55a/0x1180 [ 3421.374913][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.380077][T30631] do_syscall_64+0x3d/0xb0 [ 3421.384795][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3421.390876][T30631] [ 3421.393436][T30631] Uninit was stored to memory at: [ 3421.398627][T30631] ___sys_recvmsg+0x522/0x890 [ 3421.403584][T30631] do_recvmmsg+0x55a/0x1180 [ 3421.408219][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.413547][T30631] do_syscall_64+0x3d/0xb0 [ 3421.418095][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3421.424320][T30631] [ 3421.426718][T30631] Uninit was stored to memory at: [ 3421.432052][T30631] ___sys_recvmsg+0x522/0x890 [ 3421.436855][T30631] do_recvmmsg+0x55a/0x1180 [ 3421.441486][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.446796][T30631] do_syscall_64+0x3d/0xb0 [ 3421.451342][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3421.457566][T30631] [ 3421.459959][T30631] Uninit was stored to memory at: [ 3421.465281][T30631] ___sys_recvmsg+0x522/0x890 [ 3421.470090][T30631] do_recvmmsg+0x55a/0x1180 [ 3421.474897][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3421.480064][T30631] do_syscall_64+0x3d/0xb0 [ 3421.484772][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3421.490843][T30631] [ 3421.493390][T30631] Local variable msg_sys created at: [ 3421.498748][T30631] do_recvmmsg+0x5c/0x1180 [ 3421.503475][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.028102][T30631] not chained 17230000 origins [ 3422.033169][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3422.043463][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3422.053629][T30631] Call Trace: [ 3422.056979][T30631] [ 3422.059988][T30631] dump_stack_lvl+0x1c8/0x256 [ 3422.064848][T30631] dump_stack+0x1a/0x1c [ 3422.069158][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3422.075033][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3422.080234][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3422.086278][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3422.091086][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3422.097059][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3422.103032][T30631] ? should_fail+0x3f/0x810 [ 3422.107688][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3422.112950][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3422.119349][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3422.125307][T30631] __msan_chain_origin+0xbd/0x140 [ 3422.130480][T30631] ___sys_recvmsg+0x522/0x890 [ 3422.135301][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3422.140133][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3422.146183][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3422.152152][T30631] do_recvmmsg+0x55a/0x1180 [ 3422.156810][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3422.163222][T30631] ? do_syscall_64+0x3d/0xb0 [ 3422.167947][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.173129][T30631] do_syscall_64+0x3d/0xb0 [ 3422.177677][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3422.183746][T30631] RIP: 0033:0x7fa4f7e89279 [ 3422.188269][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3422.208295][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3422.216851][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3422.224942][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3422.233196][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3422.241271][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3422.249346][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3422.257543][T30631] [ 3422.265420][T30631] Uninit was stored to memory at: [ 3422.270644][T30631] ___sys_recvmsg+0x522/0x890 [ 3422.280880][T30631] do_recvmmsg+0x55a/0x1180 [ 3422.286113][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.291272][T30631] do_syscall_64+0x3d/0xb0 [ 3422.295921][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3422.302074][T30631] [ 3422.304464][T30631] Uninit was stored to memory at: [ 3422.309646][T30631] ___sys_recvmsg+0x522/0x890 [ 3422.314604][T30631] do_recvmmsg+0x55a/0x1180 [ 3422.319238][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.324555][T30631] do_syscall_64+0x3d/0xb0 [ 3422.329095][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3422.335314][T30631] [ 3422.337706][T30631] Uninit was stored to memory at: [ 3422.343059][T30631] ___sys_recvmsg+0x522/0x890 [ 3422.347864][T30631] do_recvmmsg+0x55a/0x1180 [ 3422.352639][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.357797][T30631] do_syscall_64+0x3d/0xb0 [ 3422.362484][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3422.368550][T30631] [ 3422.370933][T30631] Uninit was stored to memory at: [ 3422.376210][T30631] ___sys_recvmsg+0x522/0x890 [ 3422.381010][T30631] do_recvmmsg+0x55a/0x1180 [ 3422.385748][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.390916][T30631] do_syscall_64+0x3d/0xb0 [ 3422.395637][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3422.401815][T30631] [ 3422.404213][T30631] Uninit was stored to memory at: [ 3422.409396][T30631] ___sys_recvmsg+0x522/0x890 [ 3422.414358][T30631] do_recvmmsg+0x55a/0x1180 [ 3422.418989][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.424306][T30631] do_syscall_64+0x3d/0xb0 [ 3422.428852][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3422.435071][T30631] [ 3422.437459][T30631] Uninit was stored to memory at: [ 3422.442784][T30631] ___sys_recvmsg+0x522/0x890 [ 3422.447588][T30631] do_recvmmsg+0x55a/0x1180 [ 3422.452365][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.457518][T30631] do_syscall_64+0x3d/0xb0 [ 3422.462163][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3422.468229][T30631] [ 3422.470632][T30631] Uninit was stored to memory at: [ 3422.475977][T30631] ___sys_recvmsg+0x522/0x890 [ 3422.480779][T30631] do_recvmmsg+0x55a/0x1180 [ 3422.485517][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3422.490678][T30631] do_syscall_64+0x3d/0xb0 [ 3422.495321][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3422.501395][T30631] [ 3422.504010][T30631] Local variable msg_sys created at: [ 3422.509370][T30631] do_recvmmsg+0x5c/0x1180 [ 3422.514062][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.051349][T30631] not chained 17240000 origins [ 3423.056412][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3423.066966][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3423.077125][T30631] Call Trace: [ 3423.080477][T30631] [ 3423.083488][T30631] dump_stack_lvl+0x1c8/0x256 [ 3423.088349][T30631] dump_stack+0x1a/0x1c [ 3423.092656][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3423.098534][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3423.103742][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3423.109793][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3423.114604][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3423.120565][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3423.126529][T30631] ? should_fail+0x3f/0x810 [ 3423.131177][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3423.136430][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3423.142847][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3423.148808][T30631] __msan_chain_origin+0xbd/0x140 [ 3423.153979][T30631] ___sys_recvmsg+0x522/0x890 [ 3423.158789][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3423.163622][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3423.169670][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3423.175640][T30631] do_recvmmsg+0x55a/0x1180 [ 3423.180293][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3423.186689][T30631] ? do_syscall_64+0x3d/0xb0 [ 3423.191398][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.196577][T30631] do_syscall_64+0x3d/0xb0 [ 3423.201126][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3423.207193][T30631] RIP: 0033:0x7fa4f7e89279 [ 3423.211706][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3423.231465][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3423.240007][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3423.248087][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3423.256159][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3423.264225][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3423.272287][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3423.280390][T30631] [ 3423.286705][T30631] Uninit was stored to memory at: [ 3423.292603][T30631] ___sys_recvmsg+0x522/0x890 [ 3423.297433][T30631] do_recvmmsg+0x55a/0x1180 [ 3423.302133][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.307290][T30631] do_syscall_64+0x3d/0xb0 [ 3423.311909][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3423.317980][T30631] [ 3423.320432][T30631] Uninit was stored to memory at: [ 3423.325719][T30631] ___sys_recvmsg+0x522/0x890 [ 3423.330522][T30631] do_recvmmsg+0x55a/0x1180 [ 3423.335236][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.340404][T30631] do_syscall_64+0x3d/0xb0 [ 3423.345025][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3423.351089][T30631] [ 3423.353548][T30631] Uninit was stored to memory at: [ 3423.358736][T30631] ___sys_recvmsg+0x522/0x890 [ 3423.363642][T30631] do_recvmmsg+0x55a/0x1180 [ 3423.368268][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.373550][T30631] do_syscall_64+0x3d/0xb0 [ 3423.378091][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3423.384305][T30631] [ 3423.386699][T30631] Uninit was stored to memory at: [ 3423.391985][T30631] ___sys_recvmsg+0x522/0x890 [ 3423.396788][T30631] do_recvmmsg+0x55a/0x1180 [ 3423.401417][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.406693][T30631] do_syscall_64+0x3d/0xb0 [ 3423.411239][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3423.417441][T30631] [ 3423.419830][T30631] Uninit was stored to memory at: [ 3423.425128][T30631] ___sys_recvmsg+0x522/0x890 [ 3423.429942][T30631] do_recvmmsg+0x55a/0x1180 [ 3423.434698][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.439856][T30631] do_syscall_64+0x3d/0xb0 [ 3423.444521][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3423.450606][T30631] [ 3423.453115][T30631] Uninit was stored to memory at: [ 3423.458297][T30631] ___sys_recvmsg+0x522/0x890 [ 3423.463233][T30631] do_recvmmsg+0x55a/0x1180 [ 3423.467884][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.473156][T30631] do_syscall_64+0x3d/0xb0 [ 3423.477697][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3423.483859][T30631] [ 3423.486250][T30631] Uninit was stored to memory at: [ 3423.491444][T30631] ___sys_recvmsg+0x522/0x890 [ 3423.496395][T30631] do_recvmmsg+0x55a/0x1180 [ 3423.501026][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3423.506310][T30631] do_syscall_64+0x3d/0xb0 [ 3423.510871][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3423.517153][T30631] [ 3423.519558][T30631] Local variable msg_sys created at: [ 3423.525063][T30631] do_recvmmsg+0x5c/0x1180 [ 3423.529603][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.139641][T30629] not chained 17250000 origins [ 3424.144732][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3424.155029][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3424.165184][T30629] Call Trace: [ 3424.168542][T30629] [ 3424.171544][T30629] dump_stack_lvl+0x1c8/0x256 [ 3424.176401][T30629] dump_stack+0x1a/0x1c [ 3424.180708][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3424.186581][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3424.191779][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3424.197832][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3424.202639][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3424.208623][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3424.214597][T30629] ? should_fail+0x3f/0x810 [ 3424.219251][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3424.224513][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3424.230918][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3424.236879][T30629] __msan_chain_origin+0xbd/0x140 [ 3424.242044][T30629] ___sys_recvmsg+0x522/0x890 [ 3424.246852][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3424.251675][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3424.257809][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3424.263786][T30629] do_recvmmsg+0x55a/0x1180 [ 3424.268444][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3424.274849][T30629] ? do_syscall_64+0x3d/0xb0 [ 3424.279574][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.284750][T30629] do_syscall_64+0x3d/0xb0 [ 3424.289320][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3424.295378][T30629] RIP: 0033:0x7fa4f7e89279 [ 3424.299891][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3424.319653][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3424.328205][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3424.336293][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3424.344367][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3424.352453][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3424.360531][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3424.369074][T30629] [ 3424.377199][T30629] Uninit was stored to memory at: [ 3424.383004][T30629] ___sys_recvmsg+0x522/0x890 [ 3424.387814][T30629] do_recvmmsg+0x55a/0x1180 [ 3424.392565][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.397724][T30629] do_syscall_64+0x3d/0xb0 [ 3424.402385][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3424.408458][T30629] [ 3424.410854][T30629] Uninit was stored to memory at: [ 3424.416231][T30629] ___sys_recvmsg+0x522/0x890 [ 3424.421035][T30629] do_recvmmsg+0x55a/0x1180 [ 3424.425831][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.430992][T30629] do_syscall_64+0x3d/0xb0 [ 3424.435699][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3424.441882][T30629] [ 3424.444268][T30629] Uninit was stored to memory at: [ 3424.449457][T30629] ___sys_recvmsg+0x522/0x890 [ 3424.454429][T30629] do_recvmmsg+0x55a/0x1180 [ 3424.459064][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.464397][T30629] do_syscall_64+0x3d/0xb0 [ 3424.468938][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3424.475171][T30629] [ 3424.477583][T30629] Uninit was stored to memory at: [ 3424.482920][T30629] ___sys_recvmsg+0x522/0x890 [ 3424.487720][T30629] do_recvmmsg+0x55a/0x1180 [ 3424.492512][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.497667][T30629] do_syscall_64+0x3d/0xb0 [ 3424.502399][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3424.508542][T30629] [ 3424.510929][T30629] Uninit was stored to memory at: [ 3424.516266][T30629] ___sys_recvmsg+0x522/0x890 [ 3424.521065][T30629] do_recvmmsg+0x55a/0x1180 [ 3424.525857][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.531013][T30629] do_syscall_64+0x3d/0xb0 [ 3424.535708][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3424.541873][T30629] [ 3424.544258][T30629] Uninit was stored to memory at: [ 3424.549443][T30629] ___sys_recvmsg+0x522/0x890 [ 3424.554395][T30629] do_recvmmsg+0x55a/0x1180 [ 3424.559027][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.564332][T30629] do_syscall_64+0x3d/0xb0 [ 3424.568895][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3424.575118][T30629] [ 3424.577502][T30629] Uninit was stored to memory at: [ 3424.582840][T30629] ___sys_recvmsg+0x522/0x890 [ 3424.587641][T30629] do_recvmmsg+0x55a/0x1180 [ 3424.592368][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3424.597556][T30629] do_syscall_64+0x3d/0xb0 [ 3424.602235][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3424.608306][T30629] [ 3424.610956][T30629] Local variable msg_sys created at: [ 3424.616458][T30629] do_recvmmsg+0x5c/0x1180 [ 3424.620999][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.130499][T30631] not chained 17260000 origins [ 3425.135520][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3425.145815][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3425.155973][T30631] Call Trace: [ 3425.159326][T30631] [ 3425.162336][T30631] dump_stack_lvl+0x1c8/0x256 [ 3425.167209][T30631] dump_stack+0x1a/0x1c [ 3425.171553][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3425.177439][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3425.182649][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3425.188699][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3425.193511][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3425.199497][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3425.205470][T30631] ? should_fail+0x3f/0x810 [ 3425.210121][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3425.215384][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3425.221822][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3425.227792][T30631] __msan_chain_origin+0xbd/0x140 [ 3425.232965][T30631] ___sys_recvmsg+0x522/0x890 [ 3425.237773][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3425.242607][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3425.248661][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3425.254642][T30631] do_recvmmsg+0x55a/0x1180 [ 3425.259308][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3425.265725][T30631] ? do_syscall_64+0x3d/0xb0 [ 3425.270456][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.275653][T30631] do_syscall_64+0x3d/0xb0 [ 3425.280198][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3425.286346][T30631] RIP: 0033:0x7fa4f7e89279 [ 3425.290864][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3425.310655][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3425.319212][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3425.327303][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3425.335379][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3425.343466][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3425.351542][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3425.359654][T30631] [ 3425.367557][T30631] Uninit was stored to memory at: [ 3425.373336][T30631] ___sys_recvmsg+0x522/0x890 [ 3425.378143][T30631] do_recvmmsg+0x55a/0x1180 [ 3425.382932][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.388089][T30631] do_syscall_64+0x3d/0xb0 [ 3425.392741][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3425.398802][T30631] [ 3425.401186][T30631] Uninit was stored to memory at: [ 3425.406540][T30631] ___sys_recvmsg+0x522/0x890 [ 3425.411339][T30631] do_recvmmsg+0x55a/0x1180 [ 3425.416142][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.421311][T30631] do_syscall_64+0x3d/0xb0 [ 3425.426028][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3425.432210][T30631] [ 3425.434599][T30631] Uninit was stored to memory at: [ 3425.439786][T30631] ___sys_recvmsg+0x522/0x890 [ 3425.444742][T30631] do_recvmmsg+0x55a/0x1180 [ 3425.449388][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.454659][T30631] do_syscall_64+0x3d/0xb0 [ 3425.459208][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3425.465430][T30631] [ 3425.467819][T30631] Uninit was stored to memory at: [ 3425.473163][T30631] ___sys_recvmsg+0x522/0x890 [ 3425.477964][T30631] do_recvmmsg+0x55a/0x1180 [ 3425.482760][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.487923][T30631] do_syscall_64+0x3d/0xb0 [ 3425.492625][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3425.498688][T30631] [ 3425.501089][T30631] Uninit was stored to memory at: [ 3425.506460][T30631] ___sys_recvmsg+0x522/0x890 [ 3425.511270][T30631] do_recvmmsg+0x55a/0x1180 [ 3425.516068][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.521225][T30631] do_syscall_64+0x3d/0xb0 [ 3425.525927][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3425.532099][T30631] [ 3425.534482][T30631] Uninit was stored to memory at: [ 3425.539670][T30631] ___sys_recvmsg+0x522/0x890 [ 3425.544622][T30631] do_recvmmsg+0x55a/0x1180 [ 3425.549253][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.554583][T30631] do_syscall_64+0x3d/0xb0 [ 3425.559143][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3425.565398][T30631] [ 3425.567788][T30631] Uninit was stored to memory at: [ 3425.573138][T30631] ___sys_recvmsg+0x522/0x890 [ 3425.577939][T30631] do_recvmmsg+0x55a/0x1180 [ 3425.582720][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3425.587882][T30631] do_syscall_64+0x3d/0xb0 [ 3425.592532][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3425.598599][T30631] [ 3425.600996][T30631] Local variable msg_sys created at: [ 3425.606503][T30631] do_recvmmsg+0x5c/0x1180 [ 3425.611048][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.199175][T30629] not chained 17270000 origins [ 3426.204197][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3426.214490][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3426.224647][T30629] Call Trace: [ 3426.227995][T30629] [ 3426.231002][T30629] dump_stack_lvl+0x1c8/0x256 [ 3426.235861][T30629] dump_stack+0x1a/0x1c [ 3426.240170][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3426.246155][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3426.251365][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3426.257408][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3426.262219][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3426.268195][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3426.274172][T30629] ? should_fail+0x3f/0x810 [ 3426.278824][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3426.284076][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3426.290479][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3426.296455][T30629] __msan_chain_origin+0xbd/0x140 [ 3426.301628][T30629] ___sys_recvmsg+0x522/0x890 [ 3426.306432][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3426.311262][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3426.317314][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3426.323284][T30629] do_recvmmsg+0x55a/0x1180 [ 3426.327948][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3426.334353][T30629] ? do_syscall_64+0x3d/0xb0 [ 3426.339071][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.344245][T30629] do_syscall_64+0x3d/0xb0 [ 3426.348791][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3426.354849][T30629] RIP: 0033:0x7fa4f7e89279 [ 3426.359367][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3426.379129][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3426.387754][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3426.395832][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3426.403901][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3426.411968][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3426.420034][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3426.428128][T30629] [ 3426.436304][T30629] Uninit was stored to memory at: [ 3426.441520][T30629] ___sys_recvmsg+0x522/0x890 [ 3426.446957][T30629] do_recvmmsg+0x55a/0x1180 [ 3426.451698][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.456853][T30629] do_syscall_64+0x3d/0xb0 [ 3426.461389][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3426.467563][T30629] [ 3426.469967][T30629] Uninit was stored to memory at: [ 3426.475249][T30629] ___sys_recvmsg+0x522/0x890 [ 3426.480055][T30629] do_recvmmsg+0x55a/0x1180 [ 3426.484772][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.489925][T30629] do_syscall_64+0x3d/0xb0 [ 3426.494563][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3426.500657][T30629] [ 3426.503135][T30629] Uninit was stored to memory at: [ 3426.508396][T30629] ___sys_recvmsg+0x522/0x890 [ 3426.513290][T30629] do_recvmmsg+0x55a/0x1180 [ 3426.517918][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.523177][T30629] do_syscall_64+0x3d/0xb0 [ 3426.527718][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3426.533871][T30629] [ 3426.536255][T30629] Uninit was stored to memory at: [ 3426.541438][T30629] ___sys_recvmsg+0x522/0x890 [ 3426.546326][T30629] do_recvmmsg+0x55a/0x1180 [ 3426.550962][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.556212][T30629] do_syscall_64+0x3d/0xb0 [ 3426.560757][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3426.566910][T30629] [ 3426.569299][T30629] Uninit was stored to memory at: [ 3426.574583][T30629] ___sys_recvmsg+0x522/0x890 [ 3426.579384][T30629] do_recvmmsg+0x55a/0x1180 [ 3426.584113][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.589267][T30629] do_syscall_64+0x3d/0xb0 [ 3426.593903][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3426.599966][T30629] [ 3426.602459][T30629] Uninit was stored to memory at: [ 3426.607635][T30629] ___sys_recvmsg+0x522/0x890 [ 3426.612527][T30629] do_recvmmsg+0x55a/0x1180 [ 3426.617154][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.622423][T30629] do_syscall_64+0x3d/0xb0 [ 3426.626970][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3426.633135][T30629] [ 3426.635516][T30629] Uninit was stored to memory at: [ 3426.640705][T30629] ___sys_recvmsg+0x522/0x890 [ 3426.645672][T30629] do_recvmmsg+0x55a/0x1180 [ 3426.650323][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3426.655633][T30629] do_syscall_64+0x3d/0xb0 [ 3426.660186][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3426.666416][T30629] [ 3426.668811][T30629] Local variable msg_sys created at: [ 3426.674342][T30629] do_recvmmsg+0x5c/0x1180 [ 3426.678887][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.260541][T30629] not chained 17280000 origins [ 3427.265669][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3427.275965][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3427.286118][T30629] Call Trace: [ 3427.289469][T30629] [ 3427.292469][T30629] dump_stack_lvl+0x1c8/0x256 [ 3427.297313][T30629] dump_stack+0x1a/0x1c [ 3427.301613][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3427.307469][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3427.312654][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3427.318685][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3427.323478][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3427.329430][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3427.335380][T30629] ? should_fail+0x3f/0x810 [ 3427.340016][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3427.345256][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3427.351655][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3427.357599][T30629] __msan_chain_origin+0xbd/0x140 [ 3427.362749][T30629] ___sys_recvmsg+0x522/0x890 [ 3427.367545][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3427.372362][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3427.378396][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3427.384344][T30629] do_recvmmsg+0x55a/0x1180 [ 3427.388984][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3427.395368][T30629] ? do_syscall_64+0x3d/0xb0 [ 3427.400078][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.405242][T30629] do_syscall_64+0x3d/0xb0 [ 3427.409771][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3427.415829][T30629] RIP: 0033:0x7fa4f7e89279 [ 3427.420338][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3427.440085][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3427.448619][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3427.456696][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3427.464765][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3427.472836][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3427.480907][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3427.489001][T30629] [ 3427.497186][T30629] Uninit was stored to memory at: [ 3427.503590][T30629] ___sys_recvmsg+0x522/0x890 [ 3427.508398][T30629] do_recvmmsg+0x55a/0x1180 [ 3427.513239][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.518405][T30629] do_syscall_64+0x3d/0xb0 [ 3427.523116][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3427.529181][T30629] [ 3427.531668][T30629] Uninit was stored to memory at: [ 3427.536861][T30629] ___sys_recvmsg+0x522/0x890 [ 3427.541832][T30629] do_recvmmsg+0x55a/0x1180 [ 3427.546479][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.551796][T30629] do_syscall_64+0x3d/0xb0 [ 3427.556341][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3427.562492][T30629] [ 3427.564890][T30629] Uninit was stored to memory at: [ 3427.570067][T30629] ___sys_recvmsg+0x522/0x890 [ 3427.574975][T30629] do_recvmmsg+0x55a/0x1180 [ 3427.579604][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.584846][T30629] do_syscall_64+0x3d/0xb0 [ 3427.589388][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3427.595550][T30629] [ 3427.597951][T30629] Uninit was stored to memory at: [ 3427.603228][T30629] ___sys_recvmsg+0x522/0x890 [ 3427.608027][T30629] do_recvmmsg+0x55a/0x1180 [ 3427.612757][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.617922][T30629] do_syscall_64+0x3d/0xb0 [ 3427.622646][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3427.628720][T30629] [ 3427.631105][T30629] Uninit was stored to memory at: [ 3427.636444][T30629] ___sys_recvmsg+0x522/0x890 [ 3427.641506][T30629] do_recvmmsg+0x55a/0x1180 [ 3427.646274][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.651429][T30629] do_syscall_64+0x3d/0xb0 [ 3427.656128][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3427.662346][T30629] [ 3427.664731][T30629] Uninit was stored to memory at: [ 3427.669918][T30629] ___sys_recvmsg+0x522/0x890 [ 3427.674879][T30629] do_recvmmsg+0x55a/0x1180 [ 3427.679505][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.684819][T30629] do_syscall_64+0x3d/0xb0 [ 3427.689367][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3427.695588][T30629] [ 3427.697980][T30629] Uninit was stored to memory at: [ 3427.703312][T30629] ___sys_recvmsg+0x522/0x890 [ 3427.708112][T30629] do_recvmmsg+0x55a/0x1180 [ 3427.712843][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3427.718010][T30629] do_syscall_64+0x3d/0xb0 [ 3427.722687][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3427.728764][T30629] [ 3427.731154][T30629] Local variable msg_sys created at: [ 3427.736756][T30629] do_recvmmsg+0x5c/0x1180 [ 3427.741298][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.406515][T30629] not chained 17290000 origins [ 3428.411406][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3428.421699][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3428.431847][T30629] Call Trace: [ 3428.435191][T30629] [ 3428.438186][T30629] dump_stack_lvl+0x1c8/0x256 [ 3428.443034][T30629] dump_stack+0x1a/0x1c [ 3428.447341][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3428.453196][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3428.458388][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3428.464418][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3428.469221][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3428.475179][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3428.481135][T30629] ? should_fail+0x3f/0x810 [ 3428.485771][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3428.491023][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3428.497406][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3428.503353][T30629] __msan_chain_origin+0xbd/0x140 [ 3428.508505][T30629] ___sys_recvmsg+0x522/0x890 [ 3428.513298][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3428.518121][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3428.524156][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3428.530107][T30629] do_recvmmsg+0x55a/0x1180 [ 3428.534750][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3428.541137][T30629] ? do_syscall_64+0x3d/0xb0 [ 3428.545845][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.551028][T30629] do_syscall_64+0x3d/0xb0 [ 3428.555567][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3428.561628][T30629] RIP: 0033:0x7fa4f7e89279 [ 3428.566150][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3428.585925][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3428.594465][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3428.602559][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3428.610656][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3428.618739][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3428.626835][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3428.634958][T30629] [ 3428.643135][T30629] Uninit was stored to memory at: [ 3428.648358][T30629] ___sys_recvmsg+0x522/0x890 [ 3428.653762][T30629] do_recvmmsg+0x55a/0x1180 [ 3428.658405][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.663694][T30629] do_syscall_64+0x3d/0xb0 [ 3428.668241][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3428.674422][T30629] [ 3428.676810][T30629] Uninit was stored to memory at: [ 3428.682164][T30629] ___sys_recvmsg+0x522/0x890 [ 3428.686961][T30629] do_recvmmsg+0x55a/0x1180 [ 3428.691723][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.696884][T30629] do_syscall_64+0x3d/0xb0 [ 3428.701434][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3428.707661][T30629] [ 3428.710059][T30629] Uninit was stored to memory at: [ 3428.715400][T30629] ___sys_recvmsg+0x522/0x890 [ 3428.720205][T30629] do_recvmmsg+0x55a/0x1180 [ 3428.724991][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.730160][T30629] do_syscall_64+0x3d/0xb0 [ 3428.734863][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3428.740942][T30629] [ 3428.743480][T30629] Uninit was stored to memory at: [ 3428.748670][T30629] ___sys_recvmsg+0x522/0x890 [ 3428.753713][T30629] do_recvmmsg+0x55a/0x1180 [ 3428.758339][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.763602][T30629] do_syscall_64+0x3d/0xb0 [ 3428.768148][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3428.774365][T30629] [ 3428.776753][T30629] Uninit was stored to memory at: [ 3428.782096][T30629] ___sys_recvmsg+0x522/0x890 [ 3428.786891][T30629] do_recvmmsg+0x55a/0x1180 [ 3428.791516][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.796807][T30629] do_syscall_64+0x3d/0xb0 [ 3428.801353][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3428.807574][T30629] [ 3428.809960][T30629] Uninit was stored to memory at: [ 3428.815276][T30629] ___sys_recvmsg+0x522/0x890 [ 3428.820081][T30629] do_recvmmsg+0x55a/0x1180 [ 3428.824869][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.830026][T30629] do_syscall_64+0x3d/0xb0 [ 3428.834727][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3428.840795][T30629] [ 3428.843327][T30629] Uninit was stored to memory at: [ 3428.848511][T30629] ___sys_recvmsg+0x522/0x890 [ 3428.853457][T30629] do_recvmmsg+0x55a/0x1180 [ 3428.858096][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3428.863406][T30629] do_syscall_64+0x3d/0xb0 [ 3428.867951][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3428.874182][T30629] [ 3428.876571][T30629] Local variable msg_sys created at: [ 3428.882068][T30629] do_recvmmsg+0x5c/0x1180 [ 3428.886697][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.540503][T30631] not chained 17300000 origins [ 3429.548279][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3429.558580][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3429.568740][T30631] Call Trace: [ 3429.572091][T30631] [ 3429.575182][T30631] dump_stack_lvl+0x1c8/0x256 [ 3429.580037][T30631] dump_stack+0x1a/0x1c [ 3429.584400][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3429.590289][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3429.595504][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3429.601565][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3429.606378][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3429.612348][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3429.618315][T30631] ? should_fail+0x3f/0x810 [ 3429.622968][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3429.628222][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3429.634628][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3429.640590][T30631] __msan_chain_origin+0xbd/0x140 [ 3429.645758][T30631] ___sys_recvmsg+0x522/0x890 [ 3429.650592][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3429.655426][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3429.661483][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3429.667444][T30631] do_recvmmsg+0x55a/0x1180 [ 3429.672100][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3429.678516][T30631] ? do_syscall_64+0x3d/0xb0 [ 3429.683243][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.688420][T30631] do_syscall_64+0x3d/0xb0 [ 3429.692967][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3429.699045][T30631] RIP: 0033:0x7fa4f7e89279 [ 3429.703559][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3429.723329][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3429.731885][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3429.740069][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3429.748149][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3429.756227][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3429.764312][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3429.772418][T30631] [ 3429.775978][T30631] Uninit was stored to memory at: [ 3429.781181][T30631] ___sys_recvmsg+0x522/0x890 [ 3429.786110][T30631] do_recvmmsg+0x55a/0x1180 [ 3429.790748][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.796023][T30631] do_syscall_64+0x3d/0xb0 [ 3429.800565][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3429.806715][T30631] [ 3429.809103][T30631] Uninit was stored to memory at: [ 3429.814374][T30631] ___sys_recvmsg+0x522/0x890 [ 3429.819279][T30631] do_recvmmsg+0x55a/0x1180 [ 3429.823993][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.829147][T30631] do_syscall_64+0x3d/0xb0 [ 3429.833767][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3429.839839][T30631] [ 3429.842343][T30631] Uninit was stored to memory at: [ 3429.847525][T30631] ___sys_recvmsg+0x522/0x890 [ 3429.852394][T30631] do_recvmmsg+0x55a/0x1180 [ 3429.857024][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.862305][T30631] do_syscall_64+0x3d/0xb0 [ 3429.866848][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3429.873043][T30631] [ 3429.875433][T30631] Uninit was stored to memory at: [ 3429.880623][T30631] ___sys_recvmsg+0x522/0x890 [ 3429.885549][T30631] do_recvmmsg+0x55a/0x1180 [ 3429.890175][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.895460][T30631] do_syscall_64+0x3d/0xb0 [ 3429.899987][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3429.906184][T30631] [ 3429.908664][T30631] Uninit was stored to memory at: [ 3429.914002][T30631] ___sys_recvmsg+0x522/0x890 [ 3429.918807][T30631] do_recvmmsg+0x55a/0x1180 [ 3429.923575][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.928733][T30631] do_syscall_64+0x3d/0xb0 [ 3429.933401][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3429.939477][T30631] [ 3429.941987][T30631] Uninit was stored to memory at: [ 3429.947181][T30631] ___sys_recvmsg+0x522/0x890 [ 3429.952105][T30631] do_recvmmsg+0x55a/0x1180 [ 3429.956732][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.961967][T30631] do_syscall_64+0x3d/0xb0 [ 3429.966518][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3429.972704][T30631] [ 3429.975093][T30631] Uninit was stored to memory at: [ 3429.980280][T30631] ___sys_recvmsg+0x522/0x890 [ 3429.985229][T30631] do_recvmmsg+0x55a/0x1180 [ 3429.989867][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3429.995159][T30631] do_syscall_64+0x3d/0xb0 [ 3429.999722][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3430.005931][T30631] [ 3430.008326][T30631] Local variable msg_sys created at: [ 3430.013809][T30631] do_recvmmsg+0x5c/0x1180 [ 3430.018357][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3430.626302][T30629] not chained 17310000 origins [ 3430.631199][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3430.641507][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3430.651756][T30629] Call Trace: [ 3430.655107][T30629] [ 3430.658113][T30629] dump_stack_lvl+0x1c8/0x256 [ 3430.662972][T30629] dump_stack+0x1a/0x1c [ 3430.667283][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3430.673164][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3430.678387][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3430.684439][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3430.689249][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3430.695252][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3430.701226][T30629] ? should_fail+0x3f/0x810 [ 3430.705883][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3430.711145][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3430.717553][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3430.723512][T30629] __msan_chain_origin+0xbd/0x140 [ 3430.728679][T30629] ___sys_recvmsg+0x522/0x890 [ 3430.733495][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3430.738326][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3430.744386][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3430.750366][T30629] do_recvmmsg+0x55a/0x1180 [ 3430.755037][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3430.761426][T30629] ? do_syscall_64+0x3d/0xb0 [ 3430.766139][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3430.771310][T30629] do_syscall_64+0x3d/0xb0 [ 3430.775855][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3430.781915][T30629] RIP: 0033:0x7fa4f7e89279 [ 3430.786424][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3430.806261][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3430.814801][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3430.822880][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3430.830948][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3430.839018][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3430.847088][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3430.855189][T30629] [ 3430.863465][T30629] Uninit was stored to memory at: [ 3430.868685][T30629] ___sys_recvmsg+0x522/0x890 [ 3430.878939][T30629] do_recvmmsg+0x55a/0x1180 [ 3430.884177][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3430.889349][T30629] do_syscall_64+0x3d/0xb0 [ 3430.894013][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3430.900089][T30629] [ 3430.902631][T30629] Uninit was stored to memory at: [ 3430.907824][T30629] ___sys_recvmsg+0x522/0x890 [ 3430.912815][T30629] do_recvmmsg+0x55a/0x1180 [ 3430.917456][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3430.922769][T30629] do_syscall_64+0x3d/0xb0 [ 3430.927320][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3430.933504][T30629] [ 3430.935890][T30629] Uninit was stored to memory at: [ 3430.941082][T30629] ___sys_recvmsg+0x522/0x890 [ 3430.945990][T30629] do_recvmmsg+0x55a/0x1180 [ 3430.950646][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3430.955920][T30629] do_syscall_64+0x3d/0xb0 [ 3430.960471][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3430.966641][T30629] [ 3430.969027][T30629] Uninit was stored to memory at: [ 3430.974319][T30629] ___sys_recvmsg+0x522/0x890 [ 3430.979143][T30629] do_recvmmsg+0x55a/0x1180 [ 3430.983878][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3430.989036][T30629] do_syscall_64+0x3d/0xb0 [ 3430.993679][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3430.999737][T30629] [ 3431.002234][T30629] Uninit was stored to memory at: [ 3431.007441][T30629] ___sys_recvmsg+0x522/0x890 [ 3431.012399][T30629] do_recvmmsg+0x55a/0x1180 [ 3431.017030][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3431.022356][T30629] do_syscall_64+0x3d/0xb0 [ 3431.026913][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3431.033192][T30629] [ 3431.035596][T30629] Uninit was stored to memory at: [ 3431.040817][T30629] ___sys_recvmsg+0x522/0x890 [ 3431.045855][T30629] do_recvmmsg+0x55a/0x1180 [ 3431.050513][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3431.055974][T30629] do_syscall_64+0x3d/0xb0 [ 3431.060540][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3431.066785][T30629] [ 3431.069188][T30629] Uninit was stored to memory at: [ 3431.074545][T30629] ___sys_recvmsg+0x522/0x890 [ 3431.079365][T30629] do_recvmmsg+0x55a/0x1180 [ 3431.084185][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3431.089350][T30629] do_syscall_64+0x3d/0xb0 [ 3431.094069][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3431.100151][T30629] [ 3431.102701][T30629] Local variable msg_sys created at: [ 3431.108074][T30629] do_recvmmsg+0x5c/0x1180 [ 3431.112777][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3431.720417][T30631] not chained 17320000 origins [ 3431.725538][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3431.735851][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3431.746021][T30631] Call Trace: [ 3431.749380][T30631] [ 3431.752389][T30631] dump_stack_lvl+0x1c8/0x256 [ 3431.757241][T30631] dump_stack+0x1a/0x1c [ 3431.761547][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3431.767576][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3431.772771][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3431.778808][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3431.783633][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3431.789586][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3431.795544][T30631] ? should_fail+0x3f/0x810 [ 3431.800191][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3431.805439][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3431.811837][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3431.817960][T30631] __msan_chain_origin+0xbd/0x140 [ 3431.823131][T30631] ___sys_recvmsg+0x522/0x890 [ 3431.827952][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3431.832796][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3431.838856][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3431.844819][T30631] do_recvmmsg+0x55a/0x1180 [ 3431.849471][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3431.855864][T30631] ? do_syscall_64+0x3d/0xb0 [ 3431.860583][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3431.865761][T30631] do_syscall_64+0x3d/0xb0 [ 3431.870296][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3431.876345][T30631] RIP: 0033:0x7fa4f7e89279 [ 3431.880853][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3431.900627][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3431.909172][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3431.917253][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3431.925324][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3431.933400][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3431.941467][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3431.949572][T30631] [ 3431.955469][T30631] Uninit was stored to memory at: [ 3431.960685][T30631] ___sys_recvmsg+0x522/0x890 [ 3431.965816][T30631] do_recvmmsg+0x55a/0x1180 [ 3431.970456][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3431.975715][T30631] do_syscall_64+0x3d/0xb0 [ 3431.980264][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3431.986424][T30631] [ 3431.988811][T30631] Uninit was stored to memory at: [ 3431.994094][T30631] ___sys_recvmsg+0x522/0x890 [ 3431.998897][T30631] do_recvmmsg+0x55a/0x1180 [ 3432.003596][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3432.008755][T30631] do_syscall_64+0x3d/0xb0 [ 3432.013381][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3432.019454][T30631] [ 3432.021922][T30631] Uninit was stored to memory at: [ 3432.027107][T30631] ___sys_recvmsg+0x522/0x890 [ 3432.031981][T30631] do_recvmmsg+0x55a/0x1180 [ 3432.036646][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3432.041891][T30631] do_syscall_64+0x3d/0xb0 [ 3432.046517][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3432.052672][T30631] [ 3432.055062][T30631] Uninit was stored to memory at: [ 3432.060244][T30631] ___sys_recvmsg+0x522/0x890 [ 3432.065123][T30631] do_recvmmsg+0x55a/0x1180 [ 3432.069752][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3432.074997][T30631] do_syscall_64+0x3d/0xb0 [ 3432.079538][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3432.085689][T30631] [ 3432.088081][T30631] Uninit was stored to memory at: [ 3432.093350][T30631] ___sys_recvmsg+0x522/0x890 [ 3432.098162][T30631] do_recvmmsg+0x55a/0x1180 [ 3432.102876][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3432.108034][T30631] do_syscall_64+0x3d/0xb0 [ 3432.112664][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3432.118736][T30631] [ 3432.121119][T30631] Uninit was stored to memory at: [ 3432.126394][T30631] ___sys_recvmsg+0x522/0x890 [ 3432.131198][T30631] do_recvmmsg+0x55a/0x1180 [ 3432.135915][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3432.141078][T30631] do_syscall_64+0x3d/0xb0 [ 3432.145773][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3432.151934][T30631] [ 3432.154319][T30631] Uninit was stored to memory at: [ 3432.159505][T30631] ___sys_recvmsg+0x522/0x890 [ 3432.164387][T30631] do_recvmmsg+0x55a/0x1180 [ 3432.169016][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3432.174242][T30631] do_syscall_64+0x3d/0xb0 [ 3432.178783][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3432.184934][T30631] [ 3432.187322][T30631] Local variable msg_sys created at: [ 3432.192752][T30631] do_recvmmsg+0x5c/0x1180 [ 3432.197302][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3432.875994][T30631] not chained 17330000 origins [ 3432.880874][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3432.891164][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3432.901318][T30631] Call Trace: [ 3432.904669][T30631] [ 3432.907667][T30631] dump_stack_lvl+0x1c8/0x256 [ 3432.912511][T30631] dump_stack+0x1a/0x1c [ 3432.916811][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3432.922676][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3432.927878][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3432.933915][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3432.938716][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3432.944670][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3432.950633][T30631] ? should_fail+0x3f/0x810 [ 3432.955274][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3432.960527][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3432.966913][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3432.972861][T30631] __msan_chain_origin+0xbd/0x140 [ 3432.978018][T30631] ___sys_recvmsg+0x522/0x890 [ 3432.982809][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3432.987626][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3432.993661][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3432.999614][T30631] do_recvmmsg+0x55a/0x1180 [ 3433.004255][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3433.010651][T30631] ? do_syscall_64+0x3d/0xb0 [ 3433.015369][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3433.020534][T30631] do_syscall_64+0x3d/0xb0 [ 3433.025068][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3433.031129][T30631] RIP: 0033:0x7fa4f7e89279 [ 3433.035641][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3433.055480][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3433.064017][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3433.072093][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3433.080161][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3433.088229][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3433.096486][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3433.104582][T30631] [ 3433.112723][T30631] Uninit was stored to memory at: [ 3433.117942][T30631] ___sys_recvmsg+0x522/0x890 [ 3433.123325][T30631] do_recvmmsg+0x55a/0x1180 [ 3433.127977][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3433.133254][T30631] do_syscall_64+0x3d/0xb0 [ 3433.137811][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3433.143993][T30631] [ 3433.146395][T30631] Uninit was stored to memory at: [ 3433.151688][T30631] ___sys_recvmsg+0x522/0x890 [ 3433.156485][T30631] do_recvmmsg+0x55a/0x1180 [ 3433.161121][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3433.166388][T30631] do_syscall_64+0x3d/0xb0 [ 3433.170949][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3433.177181][T30631] [ 3433.179569][T30631] Uninit was stored to memory at: [ 3433.184825][T30631] ___sys_recvmsg+0x522/0x890 [ 3433.189619][T30631] do_recvmmsg+0x55a/0x1180 [ 3433.194360][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3433.199517][T30631] do_syscall_64+0x3d/0xb0 [ 3433.204195][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3433.210266][T30631] [ 3433.212777][T30631] Uninit was stored to memory at: [ 3433.217960][T30631] ___sys_recvmsg+0x522/0x890 [ 3433.222854][T30631] do_recvmmsg+0x55a/0x1180 [ 3433.227486][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3433.232761][T30631] do_syscall_64+0x3d/0xb0 [ 3433.237302][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3433.243478][T30631] [ 3433.245866][T30631] Uninit was stored to memory at: [ 3433.251057][T30631] ___sys_recvmsg+0x522/0x890 [ 3433.255964][T30631] do_recvmmsg+0x55a/0x1180 [ 3433.260602][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3433.265919][T30631] do_syscall_64+0x3d/0xb0 [ 3433.270466][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3433.276707][T30631] [ 3433.279103][T30631] Uninit was stored to memory at: [ 3433.284460][T30631] ___sys_recvmsg+0x522/0x890 [ 3433.289268][T30631] do_recvmmsg+0x55a/0x1180 [ 3433.294842][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3433.300001][T30631] do_syscall_64+0x3d/0xb0 [ 3433.304703][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3433.310768][T30631] [ 3433.313303][T30631] Uninit was stored to memory at: [ 3433.318504][T30631] ___sys_recvmsg+0x522/0x890 [ 3433.323453][T30631] do_recvmmsg+0x55a/0x1180 [ 3433.328092][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3433.333417][T30631] do_syscall_64+0x3d/0xb0 [ 3433.337956][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3433.344120][T30631] [ 3433.346505][T30631] Local variable msg_sys created at: [ 3433.352014][T30631] do_recvmmsg+0x5c/0x1180 [ 3433.356547][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.014119][T30629] not chained 17340000 origins [ 3434.019002][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3434.029317][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3434.039479][T30629] Call Trace: [ 3434.042842][T30629] [ 3434.045849][T30629] dump_stack_lvl+0x1c8/0x256 [ 3434.050712][T30629] dump_stack+0x1a/0x1c [ 3434.055029][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3434.060901][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3434.066104][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3434.072148][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3434.076954][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3434.082922][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3434.088888][T30629] ? should_fail+0x3f/0x810 [ 3434.093531][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3434.098786][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3434.105190][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3434.111147][T30629] __msan_chain_origin+0xbd/0x140 [ 3434.116515][T30629] ___sys_recvmsg+0x522/0x890 [ 3434.121319][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3434.126149][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3434.132191][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3434.138145][T30629] do_recvmmsg+0x55a/0x1180 [ 3434.142786][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3434.149183][T30629] ? do_syscall_64+0x3d/0xb0 [ 3434.153901][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.159074][T30629] do_syscall_64+0x3d/0xb0 [ 3434.163613][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3434.169678][T30629] RIP: 0033:0x7fa4f7e89279 [ 3434.174186][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3434.193945][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3434.202477][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3434.210553][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3434.218636][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3434.226701][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3434.234767][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3434.242867][T30629] [ 3434.248821][T30629] Uninit was stored to memory at: [ 3434.256814][T30629] ___sys_recvmsg+0x522/0x890 [ 3434.262073][T30629] do_recvmmsg+0x55a/0x1180 [ 3434.266705][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.271950][T30629] do_syscall_64+0x3d/0xb0 [ 3434.276488][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3434.282629][T30629] [ 3434.285017][T30629] Uninit was stored to memory at: [ 3434.290201][T30629] ___sys_recvmsg+0x522/0x890 [ 3434.295079][T30629] do_recvmmsg+0x55a/0x1180 [ 3434.299706][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.304936][T30629] do_syscall_64+0x3d/0xb0 [ 3434.309481][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3434.315617][T30629] [ 3434.318003][T30629] Uninit was stored to memory at: [ 3434.323261][T30629] ___sys_recvmsg+0x522/0x890 [ 3434.328057][T30629] do_recvmmsg+0x55a/0x1180 [ 3434.332753][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.337917][T30629] do_syscall_64+0x3d/0xb0 [ 3434.342524][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3434.348584][T30629] [ 3434.350966][T30629] Uninit was stored to memory at: [ 3434.356226][T30629] ___sys_recvmsg+0x522/0x890 [ 3434.361027][T30629] do_recvmmsg+0x55a/0x1180 [ 3434.365727][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.370882][T30629] do_syscall_64+0x3d/0xb0 [ 3434.375490][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3434.381621][T30629] [ 3434.384005][T30629] Uninit was stored to memory at: [ 3434.389177][T30629] ___sys_recvmsg+0x522/0x890 [ 3434.394055][T30629] do_recvmmsg+0x55a/0x1180 [ 3434.398684][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.403921][T30629] do_syscall_64+0x3d/0xb0 [ 3434.408478][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3434.414625][T30629] [ 3434.417009][T30629] Uninit was stored to memory at: [ 3434.422261][T30629] ___sys_recvmsg+0x522/0x890 [ 3434.427061][T30629] do_recvmmsg+0x55a/0x1180 [ 3434.431767][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.436938][T30629] do_syscall_64+0x3d/0xb0 [ 3434.441485][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3434.447669][T30629] [ 3434.450057][T30629] Uninit was stored to memory at: [ 3434.455383][T30629] ___sys_recvmsg+0x522/0x890 [ 3434.460181][T30629] do_recvmmsg+0x55a/0x1180 [ 3434.464945][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3434.470103][T30629] do_syscall_64+0x3d/0xb0 [ 3434.474722][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3434.480795][T30629] [ 3434.483309][T30629] Local variable msg_sys created at: [ 3434.488673][T30629] do_recvmmsg+0x5c/0x1180 [ 3434.493343][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.109397][T30631] not chained 17350000 origins [ 3435.114461][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3435.124750][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3435.134909][T30631] Call Trace: [ 3435.138257][T30631] [ 3435.141259][T30631] dump_stack_lvl+0x1c8/0x256 [ 3435.146137][T30631] dump_stack+0x1a/0x1c [ 3435.150535][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3435.156424][T30631] ? up_read+0x36/0x1c0 [ 3435.160726][T30631] ? do_user_addr_fault+0xfef/0x1710 [ 3435.166182][T30631] ? exc_page_fault+0x6d/0x140 [ 3435.171079][T30631] ? asm_exc_page_fault+0x27/0x30 [ 3435.176261][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3435.182666][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3435.188618][T30631] __msan_chain_origin+0xbd/0x140 [ 3435.193784][T30631] ___sys_recvmsg+0x522/0x890 [ 3435.198583][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3435.203399][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3435.209445][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3435.215415][T30631] do_recvmmsg+0x55a/0x1180 [ 3435.220079][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3435.226477][T30631] ? do_syscall_64+0x3d/0xb0 [ 3435.231199][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.236374][T30631] do_syscall_64+0x3d/0xb0 [ 3435.240913][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3435.246974][T30631] RIP: 0033:0x7fa4f7e89279 [ 3435.251489][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3435.271234][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3435.279784][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3435.287858][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3435.295924][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3435.303987][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3435.312057][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3435.320151][T30631] [ 3435.326126][T30631] Uninit was stored to memory at: [ 3435.331327][T30631] ___sys_recvmsg+0x522/0x890 [ 3435.336468][T30631] do_recvmmsg+0x55a/0x1180 [ 3435.341105][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.346339][T30631] do_syscall_64+0x3d/0xb0 [ 3435.350878][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3435.357034][T30631] [ 3435.359495][T30631] Uninit was stored to memory at: [ 3435.364765][T30631] ___sys_recvmsg+0x522/0x890 [ 3435.369562][T30631] do_recvmmsg+0x55a/0x1180 [ 3435.374322][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.379498][T30631] do_syscall_64+0x3d/0xb0 [ 3435.384164][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3435.390225][T30631] [ 3435.392729][T30631] Uninit was stored to memory at: [ 3435.397920][T30631] ___sys_recvmsg+0x522/0x890 [ 3435.402845][T30631] do_recvmmsg+0x55a/0x1180 [ 3435.407474][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.412778][T30631] do_syscall_64+0x3d/0xb0 [ 3435.417326][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3435.423509][T30631] [ 3435.425890][T30631] Uninit was stored to memory at: [ 3435.431088][T30631] ___sys_recvmsg+0x522/0x890 [ 3435.436011][T30631] do_recvmmsg+0x55a/0x1180 [ 3435.440647][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.445924][T30631] do_syscall_64+0x3d/0xb0 [ 3435.450474][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3435.456679][T30631] [ 3435.459067][T30631] Uninit was stored to memory at: [ 3435.464327][T30631] ___sys_recvmsg+0x522/0x890 [ 3435.469150][T30631] do_recvmmsg+0x55a/0x1180 [ 3435.473909][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.479071][T30631] do_syscall_64+0x3d/0xb0 [ 3435.483724][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3435.489791][T30631] [ 3435.492298][T30631] Uninit was stored to memory at: [ 3435.497481][T30631] ___sys_recvmsg+0x522/0x890 [ 3435.502395][T30631] do_recvmmsg+0x55a/0x1180 [ 3435.507032][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.512316][T30631] do_syscall_64+0x3d/0xb0 [ 3435.516853][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3435.523000][T30631] [ 3435.525392][T30631] Uninit was stored to memory at: [ 3435.530593][T30631] ___sys_recvmsg+0x522/0x890 [ 3435.535588][T30631] do_recvmmsg+0x55a/0x1180 [ 3435.540230][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3435.545592][T30631] do_syscall_64+0x3d/0xb0 [ 3435.550136][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3435.556357][T30631] [ 3435.558770][T30631] Local variable msg_sys created at: [ 3435.564278][T30631] do_recvmmsg+0x5c/0x1180 [ 3435.568839][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.240462][T30631] not chained 17360000 origins [ 3436.245706][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3436.255999][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3436.266148][T30631] Call Trace: [ 3436.269498][T30631] [ 3436.272492][T30631] dump_stack_lvl+0x1c8/0x256 [ 3436.277335][T30631] dump_stack+0x1a/0x1c [ 3436.281664][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3436.287608][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3436.292794][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3436.298835][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3436.303637][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3436.309593][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3436.315552][T30631] ? should_fail+0x3f/0x810 [ 3436.320190][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3436.325436][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3436.331832][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3436.337795][T30631] __msan_chain_origin+0xbd/0x140 [ 3436.342961][T30631] ___sys_recvmsg+0x522/0x890 [ 3436.347754][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3436.352573][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3436.358606][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3436.364565][T30631] do_recvmmsg+0x55a/0x1180 [ 3436.369207][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3436.375599][T30631] ? do_syscall_64+0x3d/0xb0 [ 3436.380310][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.385476][T30631] do_syscall_64+0x3d/0xb0 [ 3436.390011][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3436.396059][T30631] RIP: 0033:0x7fa4f7e89279 [ 3436.400568][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3436.420315][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3436.428858][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3436.436938][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3436.445010][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3436.453080][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3436.461149][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3436.469244][T30631] [ 3436.477243][T30631] Uninit was stored to memory at: [ 3436.482973][T30631] ___sys_recvmsg+0x522/0x890 [ 3436.487792][T30631] do_recvmmsg+0x55a/0x1180 [ 3436.492537][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.497694][T30631] do_syscall_64+0x3d/0xb0 [ 3436.502341][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3436.508501][T30631] [ 3436.510893][T30631] Uninit was stored to memory at: [ 3436.516189][T30631] ___sys_recvmsg+0x522/0x890 [ 3436.520995][T30631] do_recvmmsg+0x55a/0x1180 [ 3436.525731][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.530899][T30631] do_syscall_64+0x3d/0xb0 [ 3436.535550][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3436.541711][T30631] [ 3436.544102][T30631] Uninit was stored to memory at: [ 3436.549283][T30631] ___sys_recvmsg+0x522/0x890 [ 3436.554244][T30631] do_recvmmsg+0x55a/0x1180 [ 3436.558878][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.564185][T30631] do_syscall_64+0x3d/0xb0 [ 3436.568726][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3436.574971][T30631] [ 3436.577384][T30631] Uninit was stored to memory at: [ 3436.582719][T30631] ___sys_recvmsg+0x522/0x890 [ 3436.587538][T30631] do_recvmmsg+0x55a/0x1180 [ 3436.592316][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.597468][T30631] do_syscall_64+0x3d/0xb0 [ 3436.602115][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3436.608184][T30631] [ 3436.610585][T30631] Uninit was stored to memory at: [ 3436.615937][T30631] ___sys_recvmsg+0x522/0x890 [ 3436.620741][T30631] do_recvmmsg+0x55a/0x1180 [ 3436.625565][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.630903][T30631] do_syscall_64+0x3d/0xb0 [ 3436.635617][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3436.641792][T30631] [ 3436.644187][T30631] Uninit was stored to memory at: [ 3436.649386][T30631] ___sys_recvmsg+0x522/0x890 [ 3436.654346][T30631] do_recvmmsg+0x55a/0x1180 [ 3436.658974][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.664282][T30631] do_syscall_64+0x3d/0xb0 [ 3436.668828][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3436.675044][T30631] [ 3436.677433][T30631] Uninit was stored to memory at: [ 3436.682861][T30631] ___sys_recvmsg+0x522/0x890 [ 3436.687664][T30631] do_recvmmsg+0x55a/0x1180 [ 3436.692409][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3436.697570][T30631] do_syscall_64+0x3d/0xb0 [ 3436.702292][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3436.708375][T30631] [ 3436.710768][T30631] Local variable msg_sys created at: [ 3436.716278][T30631] do_recvmmsg+0x5c/0x1180 [ 3436.720828][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.376186][T30629] not chained 17370000 origins [ 3437.381078][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3437.391403][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3437.401563][T30629] Call Trace: [ 3437.404917][T30629] [ 3437.407921][T30629] dump_stack_lvl+0x1c8/0x256 [ 3437.412784][T30629] dump_stack+0x1a/0x1c [ 3437.417104][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3437.422973][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3437.428192][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3437.434250][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3437.439101][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3437.445085][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3437.451060][T30629] ? should_fail+0x3f/0x810 [ 3437.455708][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3437.460967][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3437.467370][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3437.473330][T30629] __msan_chain_origin+0xbd/0x140 [ 3437.478501][T30629] ___sys_recvmsg+0x522/0x890 [ 3437.483308][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3437.488144][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3437.494196][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3437.500168][T30629] do_recvmmsg+0x55a/0x1180 [ 3437.504826][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3437.511230][T30629] ? do_syscall_64+0x3d/0xb0 [ 3437.515957][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.521134][T30629] do_syscall_64+0x3d/0xb0 [ 3437.525677][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3437.531743][T30629] RIP: 0033:0x7fa4f7e89279 [ 3437.536265][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3437.556044][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3437.564598][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3437.572685][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3437.580762][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3437.588849][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3437.596934][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3437.605045][T30629] [ 3437.614945][T30629] Uninit was stored to memory at: [ 3437.620167][T30629] ___sys_recvmsg+0x522/0x890 [ 3437.626023][T30629] do_recvmmsg+0x55a/0x1180 [ 3437.630659][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.635930][T30629] do_syscall_64+0x3d/0xb0 [ 3437.640474][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3437.646647][T30629] [ 3437.649036][T30629] Uninit was stored to memory at: [ 3437.654358][T30629] ___sys_recvmsg+0x522/0x890 [ 3437.659160][T30629] do_recvmmsg+0x55a/0x1180 [ 3437.663880][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.669059][T30629] do_syscall_64+0x3d/0xb0 [ 3437.673701][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3437.679767][T30629] [ 3437.682243][T30629] Uninit was stored to memory at: [ 3437.687428][T30629] ___sys_recvmsg+0x522/0x890 [ 3437.692331][T30629] do_recvmmsg+0x55a/0x1180 [ 3437.696967][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.702219][T30629] do_syscall_64+0x3d/0xb0 [ 3437.706765][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3437.712953][T30629] [ 3437.715355][T30629] Uninit was stored to memory at: [ 3437.720554][T30629] ___sys_recvmsg+0x522/0x890 [ 3437.725484][T30629] do_recvmmsg+0x55a/0x1180 [ 3437.730117][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.735397][T30629] do_syscall_64+0x3d/0xb0 [ 3437.739941][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3437.746112][T30629] [ 3437.748506][T30629] Uninit was stored to memory at: [ 3437.753792][T30629] ___sys_recvmsg+0x522/0x890 [ 3437.758596][T30629] do_recvmmsg+0x55a/0x1180 [ 3437.763354][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.768509][T30629] do_syscall_64+0x3d/0xb0 [ 3437.773156][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3437.779238][T30629] [ 3437.781798][T30629] Uninit was stored to memory at: [ 3437.787000][T30629] ___sys_recvmsg+0x522/0x890 [ 3437.791977][T30629] do_recvmmsg+0x55a/0x1180 [ 3437.796610][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.801918][T30629] do_syscall_64+0x3d/0xb0 [ 3437.806463][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3437.812677][T30629] [ 3437.815067][T30629] Uninit was stored to memory at: [ 3437.820362][T30629] ___sys_recvmsg+0x522/0x890 [ 3437.825314][T30629] do_recvmmsg+0x55a/0x1180 [ 3437.829948][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3437.835288][T30629] do_syscall_64+0x3d/0xb0 [ 3437.839833][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3437.846074][T30629] [ 3437.848476][T30629] Local variable msg_sys created at: [ 3437.853995][T30629] do_recvmmsg+0x5c/0x1180 [ 3437.858539][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.381152][T30629] not chained 17380000 origins [ 3438.386297][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3438.396586][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3438.406747][T30629] Call Trace: [ 3438.410636][T30629] [ 3438.413700][T30629] dump_stack_lvl+0x1c8/0x256 [ 3438.418564][T30629] dump_stack+0x1a/0x1c [ 3438.422873][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3438.428748][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3438.433959][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3438.440006][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3438.444818][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3438.450788][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3438.456760][T30629] ? should_fail+0x3f/0x810 [ 3438.461416][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3438.466676][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3438.473075][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3438.479037][T30629] __msan_chain_origin+0xbd/0x140 [ 3438.484202][T30629] ___sys_recvmsg+0x522/0x890 [ 3438.489010][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3438.493839][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3438.499896][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3438.505866][T30629] do_recvmmsg+0x55a/0x1180 [ 3438.510533][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3438.516953][T30629] ? do_syscall_64+0x3d/0xb0 [ 3438.521675][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.526854][T30629] do_syscall_64+0x3d/0xb0 [ 3438.531402][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3438.537461][T30629] RIP: 0033:0x7fa4f7e89279 [ 3438.541978][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3438.561748][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3438.570301][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3438.578386][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3438.586466][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3438.594538][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3438.602605][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3438.610738][T30629] [ 3438.619050][T30629] Uninit was stored to memory at: [ 3438.624890][T30629] ___sys_recvmsg+0x522/0x890 [ 3438.629712][T30629] do_recvmmsg+0x55a/0x1180 [ 3438.634457][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.639625][T30629] do_syscall_64+0x3d/0xb0 [ 3438.644292][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3438.650373][T30629] [ 3438.652913][T30629] Uninit was stored to memory at: [ 3438.658226][T30629] ___sys_recvmsg+0x522/0x890 [ 3438.663279][T30629] do_recvmmsg+0x55a/0x1180 [ 3438.667926][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.673232][T30629] do_syscall_64+0x3d/0xb0 [ 3438.677794][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3438.684022][T30629] [ 3438.686409][T30629] Uninit was stored to memory at: [ 3438.691746][T30629] ___sys_recvmsg+0x522/0x890 [ 3438.696557][T30629] do_recvmmsg+0x55a/0x1180 [ 3438.701190][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.706502][T30629] do_syscall_64+0x3d/0xb0 [ 3438.711065][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3438.717288][T30629] [ 3438.719691][T30629] Uninit was stored to memory at: [ 3438.725098][T30629] ___sys_recvmsg+0x522/0x890 [ 3438.729903][T30629] do_recvmmsg+0x55a/0x1180 [ 3438.734687][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.739852][T30629] do_syscall_64+0x3d/0xb0 [ 3438.744557][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3438.750634][T30629] [ 3438.753174][T30629] Uninit was stored to memory at: [ 3438.758369][T30629] ___sys_recvmsg+0x522/0x890 [ 3438.763323][T30629] do_recvmmsg+0x55a/0x1180 [ 3438.768038][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.773299][T30629] do_syscall_64+0x3d/0xb0 [ 3438.777877][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3438.784151][T30629] [ 3438.786543][T30629] Uninit was stored to memory at: [ 3438.791878][T30629] ___sys_recvmsg+0x522/0x890 [ 3438.796685][T30629] do_recvmmsg+0x55a/0x1180 [ 3438.801325][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.806661][T30629] do_syscall_64+0x3d/0xb0 [ 3438.811218][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3438.817456][T30629] [ 3438.819849][T30629] Uninit was stored to memory at: [ 3438.825184][T30629] ___sys_recvmsg+0x522/0x890 [ 3438.829989][T30629] do_recvmmsg+0x55a/0x1180 [ 3438.834763][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3438.839921][T30629] do_syscall_64+0x3d/0xb0 [ 3438.844654][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3438.850725][T30629] [ 3438.853270][T30629] Local variable msg_sys created at: [ 3438.858634][T30629] do_recvmmsg+0x5c/0x1180 [ 3438.863354][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3439.600967][T30631] not chained 17390000 origins [ 3439.606008][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3439.616300][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3439.626465][T30631] Call Trace: [ 3439.629821][T30631] [ 3439.632842][T30631] dump_stack_lvl+0x1c8/0x256 [ 3439.637714][T30631] dump_stack+0x1a/0x1c [ 3439.642038][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3439.647916][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3439.653142][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3439.659191][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3439.664012][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3439.669992][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3439.675970][T30631] ? should_fail+0x3f/0x810 [ 3439.680629][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3439.685918][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3439.692416][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3439.698376][T30631] __msan_chain_origin+0xbd/0x140 [ 3439.703539][T30631] ___sys_recvmsg+0x522/0x890 [ 3439.708351][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3439.713173][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3439.719210][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3439.725162][T30631] do_recvmmsg+0x55a/0x1180 [ 3439.729803][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3439.736211][T30631] ? do_syscall_64+0x3d/0xb0 [ 3439.740925][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3439.746095][T30631] do_syscall_64+0x3d/0xb0 [ 3439.750630][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3439.756682][T30631] RIP: 0033:0x7fa4f7e89279 [ 3439.761204][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3439.780996][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3439.789541][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3439.797628][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3439.805702][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3439.813771][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3439.821839][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3439.830058][T30631] [ 3439.840072][T30631] Uninit was stored to memory at: [ 3439.846265][T30631] ___sys_recvmsg+0x522/0x890 [ 3439.851084][T30631] do_recvmmsg+0x55a/0x1180 [ 3439.855842][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3439.861001][T30631] do_syscall_64+0x3d/0xb0 [ 3439.865660][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3439.871837][T30631] [ 3439.874228][T30631] Uninit was stored to memory at: [ 3439.879420][T30631] ___sys_recvmsg+0x522/0x890 [ 3439.884420][T30631] do_recvmmsg+0x55a/0x1180 [ 3439.889052][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3439.894381][T30631] do_syscall_64+0x3d/0xb0 [ 3439.898945][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3439.905179][T30631] [ 3439.907567][T30631] Uninit was stored to memory at: [ 3439.912911][T30631] ___sys_recvmsg+0x522/0x890 [ 3439.917725][T30631] do_recvmmsg+0x55a/0x1180 [ 3439.922527][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3439.927692][T30631] do_syscall_64+0x3d/0xb0 [ 3439.932386][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3439.938465][T30631] [ 3439.940890][T30631] Uninit was stored to memory at: [ 3439.946245][T30631] ___sys_recvmsg+0x522/0x890 [ 3439.951087][T30631] do_recvmmsg+0x55a/0x1180 [ 3439.955901][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3439.961241][T30631] do_syscall_64+0x3d/0xb0 [ 3439.965961][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3439.972138][T30631] [ 3439.974529][T30631] Uninit was stored to memory at: [ 3439.979718][T30631] ___sys_recvmsg+0x522/0x890 [ 3439.984683][T30631] do_recvmmsg+0x55a/0x1180 [ 3439.989318][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3439.994653][T30631] do_syscall_64+0x3d/0xb0 [ 3439.999199][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3440.005440][T30631] [ 3440.007829][T30631] Uninit was stored to memory at: [ 3440.013178][T30631] ___sys_recvmsg+0x522/0x890 [ 3440.017968][T30631] do_recvmmsg+0x55a/0x1180 [ 3440.022684][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3440.027854][T30631] do_syscall_64+0x3d/0xb0 [ 3440.032569][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3440.038638][T30631] [ 3440.041024][T30631] Uninit was stored to memory at: [ 3440.046377][T30631] ___sys_recvmsg+0x522/0x890 [ 3440.051190][T30631] do_recvmmsg+0x55a/0x1180 [ 3440.055985][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3440.061146][T30631] do_syscall_64+0x3d/0xb0 [ 3440.065850][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3440.072032][T30631] [ 3440.074429][T30631] Local variable msg_sys created at: [ 3440.079784][T30631] do_recvmmsg+0x5c/0x1180 [ 3440.084495][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3440.688736][T30631] not chained 17400000 origins [ 3440.693788][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3440.704077][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3440.714234][T30631] Call Trace: [ 3440.717582][T30631] [ 3440.720582][T30631] dump_stack_lvl+0x1c8/0x256 [ 3440.725432][T30631] dump_stack+0x1a/0x1c [ 3440.729733][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3440.735590][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3440.740785][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3440.746820][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3440.751618][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3440.757573][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3440.763529][T30631] ? should_fail+0x3f/0x810 [ 3440.768172][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3440.773420][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3440.779808][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3440.785755][T30631] __msan_chain_origin+0xbd/0x140 [ 3440.790916][T30631] ___sys_recvmsg+0x522/0x890 [ 3440.795709][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3440.800528][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3440.806564][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3440.812517][T30631] do_recvmmsg+0x55a/0x1180 [ 3440.817158][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3440.823547][T30631] ? do_syscall_64+0x3d/0xb0 [ 3440.828257][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3440.833427][T30631] do_syscall_64+0x3d/0xb0 [ 3440.837961][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3440.844013][T30631] RIP: 0033:0x7fa4f7e89279 [ 3440.848524][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3440.868293][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3440.876840][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3440.884919][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3440.892992][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3440.901062][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3440.909126][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3440.917222][T30631] [ 3440.925383][T30631] Uninit was stored to memory at: [ 3440.930621][T30631] ___sys_recvmsg+0x522/0x890 [ 3440.936069][T30631] do_recvmmsg+0x55a/0x1180 [ 3440.940706][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3440.945985][T30631] do_syscall_64+0x3d/0xb0 [ 3440.950541][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3440.956748][T30631] [ 3440.959149][T30631] Uninit was stored to memory at: [ 3440.964503][T30631] ___sys_recvmsg+0x522/0x890 [ 3440.969314][T30631] do_recvmmsg+0x55a/0x1180 [ 3440.974133][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3440.979294][T30631] do_syscall_64+0x3d/0xb0 [ 3440.984007][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3440.990081][T30631] [ 3440.992625][T30631] Uninit was stored to memory at: [ 3440.997813][T30631] ___sys_recvmsg+0x522/0x890 [ 3441.002725][T30631] do_recvmmsg+0x55a/0x1180 [ 3441.007362][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3441.012668][T30631] do_syscall_64+0x3d/0xb0 [ 3441.017207][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3441.023438][T30631] [ 3441.025823][T30631] Uninit was stored to memory at: [ 3441.031007][T30631] ___sys_recvmsg+0x522/0x890 [ 3441.035988][T30631] do_recvmmsg+0x55a/0x1180 [ 3441.040619][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3441.045936][T30631] do_syscall_64+0x3d/0xb0 [ 3441.050477][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3441.056709][T30631] [ 3441.059098][T30631] Uninit was stored to memory at: [ 3441.064394][T30631] ___sys_recvmsg+0x522/0x890 [ 3441.069209][T30631] do_recvmmsg+0x55a/0x1180 [ 3441.073947][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3441.079104][T30631] do_syscall_64+0x3d/0xb0 [ 3441.083760][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3441.089830][T30631] [ 3441.092310][T30631] Uninit was stored to memory at: [ 3441.097496][T30631] ___sys_recvmsg+0x522/0x890 [ 3441.102401][T30631] do_recvmmsg+0x55a/0x1180 [ 3441.107039][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3441.112303][T30631] do_syscall_64+0x3d/0xb0 [ 3441.116857][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3441.123028][T30631] [ 3441.125418][T30631] Uninit was stored to memory at: [ 3441.130626][T30631] ___sys_recvmsg+0x522/0x890 [ 3441.135530][T30631] do_recvmmsg+0x55a/0x1180 [ 3441.140163][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3441.145421][T30631] do_syscall_64+0x3d/0xb0 [ 3441.149963][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3441.156141][T30631] [ 3441.158531][T30631] Local variable msg_sys created at: [ 3441.164044][T30631] do_recvmmsg+0x5c/0x1180 [ 3441.168587][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3441.873945][T30629] not chained 17410000 origins [ 3441.878824][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3441.889123][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3441.899281][T30629] Call Trace: [ 3441.902636][T30629] [ 3441.905642][T30629] dump_stack_lvl+0x1c8/0x256 [ 3441.910497][T30629] dump_stack+0x1a/0x1c [ 3441.914819][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3441.920696][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3441.925908][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3441.932035][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3441.936852][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3441.942825][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3441.948796][T30629] ? should_fail+0x3f/0x810 [ 3441.953456][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3441.958713][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3441.965120][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3441.971079][T30629] __msan_chain_origin+0xbd/0x140 [ 3441.976245][T30629] ___sys_recvmsg+0x522/0x890 [ 3441.981049][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3441.985886][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3441.991938][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3441.997993][T30629] do_recvmmsg+0x55a/0x1180 [ 3442.002654][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3442.009052][T30629] ? do_syscall_64+0x3d/0xb0 [ 3442.013883][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.019076][T30629] do_syscall_64+0x3d/0xb0 [ 3442.023626][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3442.029696][T30629] RIP: 0033:0x7fa4f7e89279 [ 3442.034212][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3442.053981][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3442.062534][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3442.070629][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3442.078706][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3442.086780][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3442.094856][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3442.102954][T30629] [ 3442.109217][T30629] Uninit was stored to memory at: [ 3442.114759][T30629] ___sys_recvmsg+0x522/0x890 [ 3442.119572][T30629] do_recvmmsg+0x55a/0x1180 [ 3442.124291][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.129450][T30629] do_syscall_64+0x3d/0xb0 [ 3442.134085][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3442.140168][T30629] [ 3442.142638][T30629] Uninit was stored to memory at: [ 3442.147833][T30629] ___sys_recvmsg+0x522/0x890 [ 3442.152743][T30629] do_recvmmsg+0x55a/0x1180 [ 3442.157376][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.162624][T30629] do_syscall_64+0x3d/0xb0 [ 3442.167226][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3442.173377][T30629] [ 3442.175767][T30629] Uninit was stored to memory at: [ 3442.180962][T30629] ___sys_recvmsg+0x522/0x890 [ 3442.185853][T30629] do_recvmmsg+0x55a/0x1180 [ 3442.190482][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.195752][T30629] do_syscall_64+0x3d/0xb0 [ 3442.200308][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3442.206452][T30629] [ 3442.208842][T30629] Uninit was stored to memory at: [ 3442.214100][T30629] ___sys_recvmsg+0x522/0x890 [ 3442.218900][T30629] do_recvmmsg+0x55a/0x1180 [ 3442.223603][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.228757][T30629] do_syscall_64+0x3d/0xb0 [ 3442.233373][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3442.239438][T30629] [ 3442.241897][T30629] Uninit was stored to memory at: [ 3442.247085][T30629] ___sys_recvmsg+0x522/0x890 [ 3442.252045][T30629] do_recvmmsg+0x55a/0x1180 [ 3442.256765][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.262004][T30629] do_syscall_64+0x3d/0xb0 [ 3442.266548][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3442.272687][T30629] [ 3442.275073][T30629] Uninit was stored to memory at: [ 3442.280261][T30629] ___sys_recvmsg+0x522/0x890 [ 3442.285145][T30629] do_recvmmsg+0x55a/0x1180 [ 3442.289775][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.295013][T30629] do_syscall_64+0x3d/0xb0 [ 3442.299561][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3442.305760][T30629] [ 3442.308154][T30629] Uninit was stored to memory at: [ 3442.313465][T30629] ___sys_recvmsg+0x522/0x890 [ 3442.318279][T30629] do_recvmmsg+0x55a/0x1180 [ 3442.323030][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.328183][T30629] do_syscall_64+0x3d/0xb0 [ 3442.332801][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3442.338889][T30629] [ 3442.341275][T30629] Local variable msg_sys created at: [ 3442.347103][T30629] do_recvmmsg+0x5c/0x1180 [ 3442.351711][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3442.940966][T30631] not chained 17420000 origins [ 3442.946015][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3442.956308][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3442.966559][T30631] Call Trace: [ 3442.969919][T30631] [ 3442.972930][T30631] dump_stack_lvl+0x1c8/0x256 [ 3442.977786][T30631] dump_stack+0x1a/0x1c [ 3442.982111][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3442.987978][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3442.993179][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3442.999223][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3443.004031][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3443.010001][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3443.015977][T30631] ? should_fail+0x3f/0x810 [ 3443.020629][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3443.025896][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3443.032302][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3443.038257][T30631] __msan_chain_origin+0xbd/0x140 [ 3443.043423][T30631] ___sys_recvmsg+0x522/0x890 [ 3443.048228][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3443.053045][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3443.059082][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3443.065043][T30631] do_recvmmsg+0x55a/0x1180 [ 3443.069690][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3443.076080][T30631] ? do_syscall_64+0x3d/0xb0 [ 3443.080793][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3443.085965][T30631] do_syscall_64+0x3d/0xb0 [ 3443.090517][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3443.096591][T30631] RIP: 0033:0x7fa4f7e89279 [ 3443.101098][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3443.120844][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3443.129386][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3443.137463][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3443.145533][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3443.153598][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3443.161661][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3443.169760][T30631] [ 3443.177697][T30631] Uninit was stored to memory at: [ 3443.183462][T30631] ___sys_recvmsg+0x522/0x890 [ 3443.188266][T30631] do_recvmmsg+0x55a/0x1180 [ 3443.193001][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3443.198159][T30631] do_syscall_64+0x3d/0xb0 [ 3443.202799][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3443.208867][T30631] [ 3443.211259][T30631] Uninit was stored to memory at: [ 3443.216553][T30631] ___sys_recvmsg+0x522/0x890 [ 3443.221356][T30631] do_recvmmsg+0x55a/0x1180 [ 3443.226084][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3443.231240][T30631] do_syscall_64+0x3d/0xb0 [ 3443.236002][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3443.242157][T30631] [ 3443.244546][T30631] Uninit was stored to memory at: [ 3443.249733][T30631] ___sys_recvmsg+0x522/0x890 [ 3443.254628][T30631] do_recvmmsg+0x55a/0x1180 [ 3443.259256][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3443.264519][T30631] do_syscall_64+0x3d/0xb0 [ 3443.269065][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3443.275229][T30631] [ 3443.277616][T30631] Uninit was stored to memory at: [ 3443.282905][T30631] ___sys_recvmsg+0x522/0x890 [ 3443.287709][T30631] do_recvmmsg+0x55a/0x1180 [ 3443.292431][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3443.297586][T30631] do_syscall_64+0x3d/0xb0 [ 3443.302226][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3443.308289][T30631] [ 3443.310672][T30631] Uninit was stored to memory at: [ 3443.316018][T30631] ___sys_recvmsg+0x522/0x890 [ 3443.320827][T30631] do_recvmmsg+0x55a/0x1180 [ 3443.325609][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3443.330768][T30631] do_syscall_64+0x3d/0xb0 [ 3443.335466][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3443.341660][T30631] [ 3443.344049][T30631] Uninit was stored to memory at: [ 3443.349232][T30631] ___sys_recvmsg+0x522/0x890 [ 3443.354188][T30631] do_recvmmsg+0x55a/0x1180 [ 3443.358819][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3443.364176][T30631] do_syscall_64+0x3d/0xb0 [ 3443.368726][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3443.374952][T30631] [ 3443.377342][T30631] Uninit was stored to memory at: [ 3443.382673][T30631] ___sys_recvmsg+0x522/0x890 [ 3443.387475][T30631] do_recvmmsg+0x55a/0x1180 [ 3443.392250][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3443.397409][T30631] do_syscall_64+0x3d/0xb0 [ 3443.402099][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3443.408164][T30631] [ 3443.410560][T30631] Local variable msg_sys created at: [ 3443.416092][T30631] do_recvmmsg+0x5c/0x1180 [ 3443.420641][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.035352][T30629] not chained 17430000 origins [ 3444.040239][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3444.050530][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3444.060699][T30629] Call Trace: [ 3444.064056][T30629] [ 3444.067066][T30629] dump_stack_lvl+0x1c8/0x256 [ 3444.071931][T30629] dump_stack+0x1a/0x1c [ 3444.076241][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3444.082111][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3444.087318][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3444.093364][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3444.098168][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3444.104122][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3444.110073][T30629] ? should_fail+0x3f/0x810 [ 3444.114707][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3444.119950][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3444.126337][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3444.132288][T30629] __msan_chain_origin+0xbd/0x140 [ 3444.137447][T30629] ___sys_recvmsg+0x522/0x890 [ 3444.142243][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3444.147151][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3444.153186][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3444.159139][T30629] do_recvmmsg+0x55a/0x1180 [ 3444.163782][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3444.170182][T30629] ? do_syscall_64+0x3d/0xb0 [ 3444.174903][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.180072][T30629] do_syscall_64+0x3d/0xb0 [ 3444.184604][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3444.190661][T30629] RIP: 0033:0x7fa4f7e89279 [ 3444.195174][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3444.215029][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3444.223565][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3444.231652][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3444.239727][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3444.247794][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3444.255885][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3444.263983][T30629] [ 3444.269960][T30629] Uninit was stored to memory at: [ 3444.275506][T30629] ___sys_recvmsg+0x522/0x890 [ 3444.280310][T30629] do_recvmmsg+0x55a/0x1180 [ 3444.285018][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.290201][T30629] do_syscall_64+0x3d/0xb0 [ 3444.294832][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3444.300913][T30629] [ 3444.303375][T30629] Uninit was stored to memory at: [ 3444.308564][T30629] ___sys_recvmsg+0x522/0x890 [ 3444.313448][T30629] do_recvmmsg+0x55a/0x1180 [ 3444.318147][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.323381][T30629] do_syscall_64+0x3d/0xb0 [ 3444.327935][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3444.334077][T30629] [ 3444.336466][T30629] Uninit was stored to memory at: [ 3444.341815][T30629] ___sys_recvmsg+0x522/0x890 [ 3444.346623][T30629] do_recvmmsg+0x55a/0x1180 [ 3444.351247][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.356491][T30629] do_syscall_64+0x3d/0xb0 [ 3444.361034][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3444.367184][T30629] [ 3444.369583][T30629] Uninit was stored to memory at: [ 3444.374866][T30629] ___sys_recvmsg+0x522/0x890 [ 3444.379688][T30629] do_recvmmsg+0x55a/0x1180 [ 3444.384415][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.389587][T30629] do_syscall_64+0x3d/0xb0 [ 3444.394229][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3444.400275][T30629] [ 3444.402732][T30629] Uninit was stored to memory at: [ 3444.407922][T30629] ___sys_recvmsg+0x522/0x890 [ 3444.412827][T30629] do_recvmmsg+0x55a/0x1180 [ 3444.417463][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.422713][T30629] do_syscall_64+0x3d/0xb0 [ 3444.427258][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3444.433421][T30629] [ 3444.435807][T30629] Uninit was stored to memory at: [ 3444.440999][T30629] ___sys_recvmsg+0x522/0x890 [ 3444.445880][T30629] do_recvmmsg+0x55a/0x1180 [ 3444.450506][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.455756][T30629] do_syscall_64+0x3d/0xb0 [ 3444.460296][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3444.466456][T30629] [ 3444.468853][T30629] Uninit was stored to memory at: [ 3444.474208][T30629] ___sys_recvmsg+0x522/0x890 [ 3444.479010][T30629] do_recvmmsg+0x55a/0x1180 [ 3444.483778][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3444.488938][T30629] do_syscall_64+0x3d/0xb0 [ 3444.493550][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3444.499617][T30629] [ 3444.502079][T30629] Local variable msg_sys created at: [ 3444.507434][T30629] do_recvmmsg+0x5c/0x1180 [ 3444.512051][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.185408][T30631] not chained 17440000 origins [ 3445.190298][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3445.200592][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3445.210750][T30631] Call Trace: [ 3445.214113][T30631] [ 3445.217121][T30631] dump_stack_lvl+0x1c8/0x256 [ 3445.221979][T30631] dump_stack+0x1a/0x1c [ 3445.226288][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3445.232156][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3445.237347][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3445.243384][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3445.248184][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3445.254159][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3445.260111][T30631] ? should_fail+0x3f/0x810 [ 3445.264747][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3445.269991][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3445.276378][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3445.282324][T30631] __msan_chain_origin+0xbd/0x140 [ 3445.287482][T30631] ___sys_recvmsg+0x522/0x890 [ 3445.292281][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3445.297105][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3445.303139][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3445.309089][T30631] do_recvmmsg+0x55a/0x1180 [ 3445.313734][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3445.320132][T30631] ? do_syscall_64+0x3d/0xb0 [ 3445.324843][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.330010][T30631] do_syscall_64+0x3d/0xb0 [ 3445.334542][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3445.340590][T30631] RIP: 0033:0x7fa4f7e89279 [ 3445.345116][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3445.364863][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3445.373400][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3445.381478][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3445.389550][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3445.397618][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3445.405684][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3445.413776][T30631] [ 3445.421863][T30631] Uninit was stored to memory at: [ 3445.427072][T30631] ___sys_recvmsg+0x522/0x890 [ 3445.432444][T30631] do_recvmmsg+0x55a/0x1180 [ 3445.437074][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.442349][T30631] do_syscall_64+0x3d/0xb0 [ 3445.446888][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3445.453068][T30631] [ 3445.455454][T30631] Uninit was stored to memory at: [ 3445.460664][T30631] ___sys_recvmsg+0x522/0x890 [ 3445.465577][T30631] do_recvmmsg+0x55a/0x1180 [ 3445.470205][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.475475][T30631] do_syscall_64+0x3d/0xb0 [ 3445.480025][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3445.486435][T30631] [ 3445.488819][T30631] Uninit was stored to memory at: [ 3445.494125][T30631] ___sys_recvmsg+0x522/0x890 [ 3445.498923][T30631] do_recvmmsg+0x55a/0x1180 [ 3445.503639][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.508839][T30631] do_syscall_64+0x3d/0xb0 [ 3445.513482][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3445.519562][T30631] [ 3445.522047][T30631] Uninit was stored to memory at: [ 3445.527237][T30631] ___sys_recvmsg+0x522/0x890 [ 3445.532137][T30631] do_recvmmsg+0x55a/0x1180 [ 3445.536764][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.542017][T30631] do_syscall_64+0x3d/0xb0 [ 3445.546644][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3445.552838][T30631] [ 3445.555222][T30631] Uninit was stored to memory at: [ 3445.560411][T30631] ___sys_recvmsg+0x522/0x890 [ 3445.565378][T30631] do_recvmmsg+0x55a/0x1180 [ 3445.570021][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.575348][T30631] do_syscall_64+0x3d/0xb0 [ 3445.579892][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3445.586109][T30631] [ 3445.588501][T30631] Uninit was stored to memory at: [ 3445.593834][T30631] ___sys_recvmsg+0x522/0x890 [ 3445.598648][T30631] do_recvmmsg+0x55a/0x1180 [ 3445.603436][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.608589][T30631] do_syscall_64+0x3d/0xb0 [ 3445.613283][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3445.619363][T30631] [ 3445.621889][T30631] Uninit was stored to memory at: [ 3445.627080][T30631] ___sys_recvmsg+0x522/0x890 [ 3445.631989][T30631] do_recvmmsg+0x55a/0x1180 [ 3445.636613][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3445.641919][T30631] do_syscall_64+0x3d/0xb0 [ 3445.646464][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3445.652695][T30631] [ 3445.655088][T30631] Local variable msg_sys created at: [ 3445.660444][T30631] do_recvmmsg+0x5c/0x1180 [ 3445.665141][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.304403][T30631] not chained 17450000 origins [ 3446.309304][T30631] CPU: 0 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3446.319604][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3446.329765][T30631] Call Trace: [ 3446.333153][T30631] [ 3446.336162][T30631] dump_stack_lvl+0x1c8/0x256 [ 3446.341045][T30631] dump_stack+0x1a/0x1c [ 3446.345363][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3446.351245][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3446.356482][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3446.362529][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3446.367337][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3446.373312][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3446.379321][T30631] ? should_fail+0x3f/0x810 [ 3446.383975][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3446.389229][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3446.395632][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3446.401595][T30631] __msan_chain_origin+0xbd/0x140 [ 3446.406754][T30631] ___sys_recvmsg+0x522/0x890 [ 3446.411557][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3446.416376][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3446.422441][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3446.428393][T30631] do_recvmmsg+0x55a/0x1180 [ 3446.433039][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3446.439441][T30631] ? do_syscall_64+0x3d/0xb0 [ 3446.444252][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.449428][T30631] do_syscall_64+0x3d/0xb0 [ 3446.453965][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3446.460023][T30631] RIP: 0033:0x7fa4f7e89279 [ 3446.464529][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3446.484978][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3446.493517][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3446.501595][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3446.509665][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3446.517733][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3446.525795][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3446.533923][T30631] [ 3446.539753][T30631] Uninit was stored to memory at: [ 3446.547692][T30631] ___sys_recvmsg+0x522/0x890 [ 3446.552759][T30631] do_recvmmsg+0x55a/0x1180 [ 3446.557384][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.562632][T30631] do_syscall_64+0x3d/0xb0 [ 3446.567174][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3446.573322][T30631] [ 3446.575706][T30631] Uninit was stored to memory at: [ 3446.580893][T30631] ___sys_recvmsg+0x522/0x890 [ 3446.585777][T30631] do_recvmmsg+0x55a/0x1180 [ 3446.590435][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.595744][T30631] do_syscall_64+0x3d/0xb0 [ 3446.600286][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3446.606459][T30631] [ 3446.608857][T30631] Uninit was stored to memory at: [ 3446.614144][T30631] ___sys_recvmsg+0x522/0x890 [ 3446.618951][T30631] do_recvmmsg+0x55a/0x1180 [ 3446.623703][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.628865][T30631] do_syscall_64+0x3d/0xb0 [ 3446.633552][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3446.639624][T30631] [ 3446.642135][T30631] Uninit was stored to memory at: [ 3446.647337][T30631] ___sys_recvmsg+0x522/0x890 [ 3446.652228][T30631] do_recvmmsg+0x55a/0x1180 [ 3446.656889][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.662161][T30631] do_syscall_64+0x3d/0xb0 [ 3446.666715][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3446.672921][T30631] [ 3446.675310][T30631] Uninit was stored to memory at: [ 3446.680508][T30631] ___sys_recvmsg+0x522/0x890 [ 3446.685468][T30631] do_recvmmsg+0x55a/0x1180 [ 3446.690118][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.695419][T30631] do_syscall_64+0x3d/0xb0 [ 3446.699982][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3446.706185][T30631] [ 3446.708577][T30631] Uninit was stored to memory at: [ 3446.713906][T30631] ___sys_recvmsg+0x522/0x890 [ 3446.718707][T30631] do_recvmmsg+0x55a/0x1180 [ 3446.723461][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.728626][T30631] do_syscall_64+0x3d/0xb0 [ 3446.733297][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3446.739375][T30631] [ 3446.741882][T30631] Uninit was stored to memory at: [ 3446.747077][T30631] ___sys_recvmsg+0x522/0x890 [ 3446.752004][T30631] do_recvmmsg+0x55a/0x1180 [ 3446.756636][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3446.761917][T30631] do_syscall_64+0x3d/0xb0 [ 3446.766462][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3446.772612][T30631] [ 3446.775004][T30631] Local variable msg_sys created at: [ 3446.780369][T30631] do_recvmmsg+0x5c/0x1180 [ 3446.785038][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.465868][T30629] not chained 17460000 origins [ 3447.470771][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3447.481070][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3447.491232][T30629] Call Trace: [ 3447.494585][T30629] [ 3447.497609][T30629] dump_stack_lvl+0x1c8/0x256 [ 3447.502461][T30629] dump_stack+0x1a/0x1c [ 3447.506759][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3447.512614][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3447.517801][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3447.523828][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3447.528624][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3447.534580][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3447.540535][T30629] ? should_fail+0x3f/0x810 [ 3447.545173][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3447.550419][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3447.556820][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3447.562767][T30629] __msan_chain_origin+0xbd/0x140 [ 3447.567926][T30629] ___sys_recvmsg+0x522/0x890 [ 3447.572728][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3447.577552][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3447.583588][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3447.589539][T30629] do_recvmmsg+0x55a/0x1180 [ 3447.594182][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3447.600576][T30629] ? do_syscall_64+0x3d/0xb0 [ 3447.605289][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.610465][T30629] do_syscall_64+0x3d/0xb0 [ 3447.615006][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3447.621082][T30629] RIP: 0033:0x7fa4f7e89279 [ 3447.625593][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3447.645339][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3447.653878][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3447.661955][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3447.670107][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3447.678174][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3447.686236][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3447.694594][T30629] [ 3447.700401][T30629] Uninit was stored to memory at: [ 3447.705962][T30629] ___sys_recvmsg+0x522/0x890 [ 3447.710765][T30629] do_recvmmsg+0x55a/0x1180 [ 3447.715727][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.720878][T30629] do_syscall_64+0x3d/0xb0 [ 3447.725765][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3447.731921][T30629] [ 3447.734305][T30629] Uninit was stored to memory at: [ 3447.739497][T30629] ___sys_recvmsg+0x522/0x890 [ 3447.744384][T30629] do_recvmmsg+0x55a/0x1180 [ 3447.749017][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.754260][T30629] do_syscall_64+0x3d/0xb0 [ 3447.758809][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3447.764989][T30629] [ 3447.767385][T30629] Uninit was stored to memory at: [ 3447.772660][T30629] ___sys_recvmsg+0x522/0x890 [ 3447.777648][T30629] do_recvmmsg+0x55a/0x1180 [ 3447.782359][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.787529][T30629] do_syscall_64+0x3d/0xb0 [ 3447.792774][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3447.798860][T30629] [ 3447.801249][T30629] Uninit was stored to memory at: [ 3447.806572][T30629] ___sys_recvmsg+0x522/0x890 [ 3447.811389][T30629] do_recvmmsg+0x55a/0x1180 [ 3447.816164][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.821446][T30629] do_syscall_64+0x3d/0xb0 [ 3447.826110][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3447.832329][T30629] [ 3447.834730][T30629] Uninit was stored to memory at: [ 3447.839922][T30629] ___sys_recvmsg+0x522/0x890 [ 3447.844814][T30629] do_recvmmsg+0x55a/0x1180 [ 3447.849442][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.854677][T30629] do_syscall_64+0x3d/0xb0 [ 3447.859230][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3447.865452][T30629] [ 3447.867849][T30629] Uninit was stored to memory at: [ 3447.873182][T30629] ___sys_recvmsg+0x522/0x890 [ 3447.877986][T30629] do_recvmmsg+0x55a/0x1180 [ 3447.882746][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.887923][T30629] do_syscall_64+0x3d/0xb0 [ 3447.892611][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3447.898681][T30629] [ 3447.901065][T30629] Uninit was stored to memory at: [ 3447.906393][T30629] ___sys_recvmsg+0x522/0x890 [ 3447.911195][T30629] do_recvmmsg+0x55a/0x1180 [ 3447.915969][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3447.921127][T30629] do_syscall_64+0x3d/0xb0 [ 3447.925800][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3447.931947][T30629] [ 3447.934337][T30629] Local variable msg_sys created at: [ 3447.939692][T30629] do_recvmmsg+0x5c/0x1180 [ 3447.944397][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3448.626037][T30629] not chained 17470000 origins [ 3448.630935][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3448.641225][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3448.651470][T30629] Call Trace: [ 3448.654829][T30629] [ 3448.657901][T30629] dump_stack_lvl+0x1c8/0x256 [ 3448.662770][T30629] dump_stack+0x1a/0x1c [ 3448.667085][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3448.672953][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3448.678152][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3448.684196][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3448.689013][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3448.694986][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3448.700955][T30629] ? should_fail+0x3f/0x810 [ 3448.705621][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3448.710877][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3448.717282][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3448.723242][T30629] __msan_chain_origin+0xbd/0x140 [ 3448.728416][T30629] ___sys_recvmsg+0x522/0x890 [ 3448.733220][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3448.738050][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3448.744099][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3448.750064][T30629] do_recvmmsg+0x55a/0x1180 [ 3448.754722][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3448.761121][T30629] ? do_syscall_64+0x3d/0xb0 [ 3448.765847][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3448.771030][T30629] do_syscall_64+0x3d/0xb0 [ 3448.775560][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3448.781609][T30629] RIP: 0033:0x7fa4f7e89279 [ 3448.786133][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3448.806078][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3448.814620][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3448.822697][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3448.830769][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3448.838866][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3448.846950][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3448.855406][T30629] [ 3448.864788][T30629] Uninit was stored to memory at: [ 3448.870015][T30629] ___sys_recvmsg+0x522/0x890 [ 3448.875688][T30629] do_recvmmsg+0x55a/0x1180 [ 3448.880332][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3448.885696][T30629] do_syscall_64+0x3d/0xb0 [ 3448.890242][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3448.896484][T30629] [ 3448.898873][T30629] Uninit was stored to memory at: [ 3448.904216][T30629] ___sys_recvmsg+0x522/0x890 [ 3448.909019][T30629] do_recvmmsg+0x55a/0x1180 [ 3448.913792][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3448.918957][T30629] do_syscall_64+0x3d/0xb0 [ 3448.923678][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3448.929746][T30629] [ 3448.932275][T30629] Uninit was stored to memory at: [ 3448.937474][T30629] ___sys_recvmsg+0x522/0x890 [ 3448.942415][T30629] do_recvmmsg+0x55a/0x1180 [ 3448.947036][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3448.952304][T30629] do_syscall_64+0x3d/0xb0 [ 3448.956861][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3448.963074][T30629] [ 3448.965468][T30629] Uninit was stored to memory at: [ 3448.970668][T30629] ___sys_recvmsg+0x522/0x890 [ 3448.975715][T30629] do_recvmmsg+0x55a/0x1180 [ 3448.980618][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3448.985933][T30629] do_syscall_64+0x3d/0xb0 [ 3448.990475][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3448.996708][T30629] [ 3448.999092][T30629] Uninit was stored to memory at: [ 3449.004377][T30629] ___sys_recvmsg+0x522/0x890 [ 3449.009182][T30629] do_recvmmsg+0x55a/0x1180 [ 3449.013958][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3449.019116][T30629] do_syscall_64+0x3d/0xb0 [ 3449.023806][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3449.029894][T30629] [ 3449.032439][T30629] Uninit was stored to memory at: [ 3449.037642][T30629] ___sys_recvmsg+0x522/0x890 [ 3449.042593][T30629] do_recvmmsg+0x55a/0x1180 [ 3449.047224][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3449.052476][T30629] do_syscall_64+0x3d/0xb0 [ 3449.057026][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3449.063227][T30629] [ 3449.065615][T30629] Uninit was stored to memory at: [ 3449.070806][T30629] ___sys_recvmsg+0x522/0x890 [ 3449.075778][T30629] do_recvmmsg+0x55a/0x1180 [ 3449.080411][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3449.085714][T30629] do_syscall_64+0x3d/0xb0 [ 3449.090265][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3449.096487][T30629] [ 3449.098884][T30629] Local variable msg_sys created at: [ 3449.104379][T30629] do_recvmmsg+0x5c/0x1180 [ 3449.108925][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 23:22:21 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f000000ca00), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x9205, 0x0) 23:22:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0xf0, 0x0, 0xffffffff, 0x210, 0xf0, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @icmp_id, @gre_key}}}, {{@ipv6={@local, @empty, [], [], 'pim6reg1\x00', 'pimreg1\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local, @gre_key}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@hl={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 23:22:21 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) 23:22:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000001cc0), 0x4) 23:22:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8912, 0x0) 23:22:21 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000014c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000eaa2a5b970cdc7a09167446af45cece1a7ef6128076ee29483a2c25d2d2fcdf3f8306ab53777b59e773fee5c535ad28f3bbeec7caef588aec99c2969c471cc5aebd6a77ec9c4a3a7c714c19923f8b9bfd2552a3b382b05e87bfa41c92ea0c7af618e71ec1d354663f0f32d3a6fe50f811766b8c83f83fb6bdddd812f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r0], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000014c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000eaa2a5b970cdc7a09167446af45cece1a7ef6128076ee29483a2c25d2d2fcdf3f8306ab53777b59e773fee5c535ad28f3bbeec7caef588aec99c2969c471cc5aebd6a77ec9c4a3a7c714c19923f8b9bfd2552a3b382b05e87bfa41c92ea0c7af618e71ec1d354663f0f32d3a6fe50f811766b8c83f83fb6bdddd812f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 3449.670923][T30675] x_tables: duplicate underflow at hook 1 23:22:21 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x64380, 0x0) 23:22:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) 23:22:21 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x5}) [ 3449.831923][T18883] usb 5-1: new high-speed USB device number 122 using dummy_hcd 23:22:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6300}, [@alu={0x4, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3450.027361][T18883] usb 5-1: device descriptor read/64, error 18 23:22:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), 0x4) 23:22:22 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x1, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3450.663448][T18883] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 3450.852249][T18883] usb 5-1: device descriptor read/64, error 18 [ 3450.916446][T30629] not chained 17480000 origins [ 3450.921332][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3450.931666][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3450.941839][T30629] Call Trace: [ 3450.945209][T30629] [ 3450.948219][T30629] dump_stack_lvl+0x1c8/0x256 [ 3450.953085][T30629] dump_stack+0x1a/0x1c [ 3450.957418][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3450.963303][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3450.968519][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3450.974560][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3450.975930][T18883] usb usb5-port1: attempt power cycle [ 3450.979332][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3450.979460][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3450.996574][T30629] ? should_fail+0x3f/0x810 [ 3451.001226][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3451.006487][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3451.012900][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3451.018870][T30629] __msan_chain_origin+0xbd/0x140 [ 3451.024048][T30629] ___sys_recvmsg+0x522/0x890 [ 3451.028863][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3451.033690][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3451.039741][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3451.045718][T30629] do_recvmmsg+0x55a/0x1180 [ 3451.050390][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3451.056795][T30629] ? do_syscall_64+0x3d/0xb0 [ 3451.061503][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.066678][T30629] do_syscall_64+0x3d/0xb0 [ 3451.071214][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3451.077280][T30629] RIP: 0033:0x7fa4f7e89279 [ 3451.081808][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3451.101575][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3451.110129][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3451.118224][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3451.126294][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3451.134387][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3451.142478][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3451.150613][T30629] [ 3451.156840][T30629] Uninit was stored to memory at: [ 3451.162860][T30629] ___sys_recvmsg+0x522/0x890 [ 3451.167671][T30629] do_recvmmsg+0x55a/0x1180 [ 3451.172394][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.177551][T30629] do_syscall_64+0x3d/0xb0 [ 3451.182163][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3451.188245][T30629] [ 3451.190638][T30629] Uninit was stored to memory at: [ 3451.195934][T30629] ___sys_recvmsg+0x522/0x890 [ 3451.200724][T30629] do_recvmmsg+0x55a/0x1180 [ 3451.205476][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.210640][T30629] do_syscall_64+0x3d/0xb0 [ 3451.215261][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3451.221329][T30629] [ 3451.223811][T30629] Uninit was stored to memory at: [ 3451.229001][T30629] ___sys_recvmsg+0x522/0x890 [ 3451.233893][T30629] do_recvmmsg+0x55a/0x1180 [ 3451.238525][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.243784][T30629] do_syscall_64+0x3d/0xb0 [ 3451.248335][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3451.254507][T30629] [ 3451.256897][T30629] Uninit was stored to memory at: [ 3451.262156][T30629] ___sys_recvmsg+0x522/0x890 [ 3451.266961][T30629] do_recvmmsg+0x55a/0x1180 [ 3451.271694][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.276864][T30629] do_syscall_64+0x3d/0xb0 [ 3451.281408][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3451.287569][T30629] [ 3451.289965][T30629] Uninit was stored to memory at: [ 3451.295238][T30629] ___sys_recvmsg+0x522/0x890 [ 3451.300045][T30629] do_recvmmsg+0x55a/0x1180 [ 3451.304755][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.309918][T30629] do_syscall_64+0x3d/0xb0 [ 3451.314536][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3451.320598][T30629] [ 3451.323092][T30629] Uninit was stored to memory at: [ 3451.328275][T30629] ___sys_recvmsg+0x522/0x890 [ 3451.333155][T30629] do_recvmmsg+0x55a/0x1180 [ 3451.337785][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.343026][T30629] do_syscall_64+0x3d/0xb0 [ 3451.347575][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3451.353725][T30629] [ 3451.356111][T30629] Uninit was stored to memory at: [ 3451.361298][T30629] ___sys_recvmsg+0x522/0x890 [ 3451.366174][T30629] do_recvmmsg+0x55a/0x1180 [ 3451.370792][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.376023][T30629] do_syscall_64+0x3d/0xb0 [ 3451.380567][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3451.386718][T30629] [ 3451.389108][T30629] Local variable msg_sys created at: [ 3451.394584][T30629] do_recvmmsg+0x5c/0x1180 [ 3451.399140][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3451.411755][T18883] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 3451.592121][T18883] usb 5-1: device descriptor read/8, error -61 [ 3451.862044][T18883] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 3452.045533][T18883] usb 5-1: device descriptor read/8, error -61 [ 3452.180298][T18883] usb usb5-port1: unable to enumerate USB device [ 3452.476242][T30631] not chained 17490000 origins [ 3452.485965][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3452.496305][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3452.506472][T30631] Call Trace: [ 3452.509849][T30631] [ 3452.512880][T30631] dump_stack_lvl+0x1c8/0x256 [ 3452.517752][T30631] dump_stack+0x1a/0x1c [ 3452.522070][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3452.527958][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3452.533176][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3452.539230][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3452.544053][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3452.550031][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3452.556348][T30631] ? should_fail+0x3f/0x810 [ 3452.561016][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3452.566285][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3452.572702][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3452.578669][T30631] __msan_chain_origin+0xbd/0x140 [ 3452.583851][T30631] ___sys_recvmsg+0x522/0x890 [ 3452.588669][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3452.593511][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3452.599567][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3452.605539][T30631] do_recvmmsg+0x55a/0x1180 [ 3452.610203][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3452.616668][T30631] ? do_syscall_64+0x3d/0xb0 [ 3452.621402][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3452.626619][T30631] do_syscall_64+0x3d/0xb0 [ 3452.631177][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3452.637242][T30631] RIP: 0033:0x7fa4f7e89279 [ 3452.641751][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3452.661509][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3452.670052][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3452.678131][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3452.686208][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3452.694376][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3452.702446][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3452.710545][T30631] [ 3452.717290][T30631] Uninit was stored to memory at: [ 3452.722609][T30631] ___sys_recvmsg+0x522/0x890 [ 3452.727419][T30631] do_recvmmsg+0x55a/0x1180 [ 3452.732151][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3452.737306][T30631] do_syscall_64+0x3d/0xb0 [ 3452.741954][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3452.748018][T30631] [ 3452.750411][T30631] Uninit was stored to memory at: [ 3452.755702][T30631] ___sys_recvmsg+0x522/0x890 [ 3452.760504][T30631] do_recvmmsg+0x55a/0x1180 [ 3452.765234][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3452.770406][T30631] do_syscall_64+0x3d/0xb0 [ 3452.775060][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3452.781214][T30631] [ 3452.783709][T30631] Uninit was stored to memory at: [ 3452.788899][T30631] ___sys_recvmsg+0x522/0x890 [ 3452.793808][T30631] do_recvmmsg+0x55a/0x1180 [ 3452.798447][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3452.803718][T30631] do_syscall_64+0x3d/0xb0 [ 3452.808263][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3452.814544][T30631] [ 3452.816948][T30631] Uninit was stored to memory at: [ 3452.822244][T30631] ___sys_recvmsg+0x522/0x890 [ 3452.827054][T30631] do_recvmmsg+0x55a/0x1180 [ 3452.831782][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3452.836944][T30631] do_syscall_64+0x3d/0xb0 [ 3452.841490][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3452.847671][T30631] [ 3452.850059][T30631] Uninit was stored to memory at: [ 3452.855796][T30631] ___sys_recvmsg+0x522/0x890 [ 3452.860604][T30631] do_recvmmsg+0x55a/0x1180 [ 3452.865354][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3452.870520][T30631] do_syscall_64+0x3d/0xb0 [ 3452.875245][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3452.881328][T30631] [ 3452.883885][T30631] Uninit was stored to memory at: [ 3452.889082][T30631] ___sys_recvmsg+0x522/0x890 [ 3452.894044][T30631] do_recvmmsg+0x55a/0x1180 [ 3452.898673][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3452.903927][T30631] do_syscall_64+0x3d/0xb0 [ 3452.908469][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3452.914624][T30631] [ 3452.917010][T30631] Uninit was stored to memory at: [ 3452.922281][T30631] ___sys_recvmsg+0x522/0x890 [ 3452.927093][T30631] do_recvmmsg+0x55a/0x1180 [ 3452.931840][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3452.936999][T30631] do_syscall_64+0x3d/0xb0 [ 3452.941635][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3452.947707][T30631] [ 3452.950109][T30631] Local variable msg_sys created at: [ 3452.955571][T30631] do_recvmmsg+0x5c/0x1180 [ 3452.960112][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3453.993893][T30629] not chained 17500000 origins [ 3453.998780][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3454.009071][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3454.019229][T30629] Call Trace: [ 3454.022590][T30629] [ 3454.025595][T30629] dump_stack_lvl+0x1c8/0x256 [ 3454.030443][T30629] dump_stack+0x1a/0x1c [ 3454.034760][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3454.040621][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3454.045812][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3454.051841][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3454.056638][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3454.062591][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3454.068547][T30629] ? should_fail+0x3f/0x810 [ 3454.073184][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3454.078428][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3454.084819][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3454.090767][T30629] __msan_chain_origin+0xbd/0x140 [ 3454.095922][T30629] ___sys_recvmsg+0x522/0x890 [ 3454.100714][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3454.105539][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3454.111578][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3454.117536][T30629] do_recvmmsg+0x55a/0x1180 [ 3454.122179][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3454.128569][T30629] ? do_syscall_64+0x3d/0xb0 [ 3454.133281][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.138444][T30629] do_syscall_64+0x3d/0xb0 [ 3454.142984][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3454.149037][T30629] RIP: 0033:0x7fa4f7e89279 [ 3454.153891][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3454.173644][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3454.182183][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3454.190287][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3454.198355][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3454.206422][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3454.214497][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3454.222595][T30629] [ 3454.228628][T30629] Uninit was stored to memory at: [ 3454.234153][T30629] ___sys_recvmsg+0x522/0x890 [ 3454.238958][T30629] do_recvmmsg+0x55a/0x1180 [ 3454.243677][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.248835][T30629] do_syscall_64+0x3d/0xb0 [ 3454.253505][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3454.259575][T30629] [ 3454.262038][T30629] Uninit was stored to memory at: [ 3454.267219][T30629] ___sys_recvmsg+0x522/0x890 [ 3454.272096][T30629] do_recvmmsg+0x55a/0x1180 [ 3454.276728][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.281971][T30629] do_syscall_64+0x3d/0xb0 [ 3454.286526][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3454.292688][T30629] [ 3454.295077][T30629] Uninit was stored to memory at: [ 3454.300262][T30629] ___sys_recvmsg+0x522/0x890 [ 3454.305203][T30629] do_recvmmsg+0x55a/0x1180 [ 3454.309865][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.315160][T30629] do_syscall_64+0x3d/0xb0 [ 3454.319714][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3454.325914][T30629] [ 3454.328305][T30629] Uninit was stored to memory at: [ 3454.333630][T30629] ___sys_recvmsg+0x522/0x890 [ 3454.338438][T30629] do_recvmmsg+0x55a/0x1180 [ 3454.343283][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.348462][T30629] do_syscall_64+0x3d/0xb0 [ 3454.353152][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3454.359230][T30629] [ 3454.361757][T30629] Uninit was stored to memory at: [ 3454.366962][T30629] ___sys_recvmsg+0x522/0x890 [ 3454.371894][T30629] do_recvmmsg+0x55a/0x1180 [ 3454.376528][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.381818][T30629] do_syscall_64+0x3d/0xb0 [ 3454.386368][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3454.392598][T30629] [ 3454.394990][T30629] Uninit was stored to memory at: [ 3454.400191][T30629] ___sys_recvmsg+0x522/0x890 [ 3454.405139][T30629] do_recvmmsg+0x55a/0x1180 [ 3454.409769][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.415070][T30629] do_syscall_64+0x3d/0xb0 [ 3454.419615][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3454.425814][T30629] [ 3454.428202][T30629] Uninit was stored to memory at: [ 3454.433480][T30629] ___sys_recvmsg+0x522/0x890 [ 3454.438284][T30629] do_recvmmsg+0x55a/0x1180 [ 3454.443050][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.448206][T30629] do_syscall_64+0x3d/0xb0 [ 3454.452879][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3454.458950][T30629] [ 3454.461340][T30629] Local variable msg_sys created at: [ 3454.466848][T30629] do_recvmmsg+0x5c/0x1180 [ 3454.471396][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3454.992613][T10038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3455.001414][T10038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3455.014964][T10038] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3455.051198][T10038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3455.071457][T10038] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3455.079990][T10038] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3455.380432][T30631] not chained 17510000 origins [ 3455.385488][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3455.395784][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3455.405953][T30631] Call Trace: [ 3455.409308][T30631] [ 3455.412314][T30631] dump_stack_lvl+0x1c8/0x256 [ 3455.417173][T30631] dump_stack+0x1a/0x1c [ 3455.421483][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3455.427346][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3455.432546][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3455.438585][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3455.443393][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3455.449363][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3455.455682][T30631] ? should_fail+0x3f/0x810 [ 3455.460334][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3455.465590][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3455.471985][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3455.477953][T30631] __msan_chain_origin+0xbd/0x140 [ 3455.483121][T30631] ___sys_recvmsg+0x522/0x890 [ 3455.487935][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3455.492761][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3455.498814][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3455.504789][T30631] do_recvmmsg+0x55a/0x1180 [ 3455.509449][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3455.515856][T30631] ? do_syscall_64+0x3d/0xb0 [ 3455.520588][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3455.525767][T30631] do_syscall_64+0x3d/0xb0 [ 3455.530318][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3455.536385][T30631] RIP: 0033:0x7fa4f7e89279 [ 3455.540905][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3455.561021][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3455.569574][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3455.577663][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3455.585745][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3455.593843][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3455.601934][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3455.610044][T30631] [ 3455.618116][T30631] Uninit was stored to memory at: [ 3455.623850][T30631] ___sys_recvmsg+0x522/0x890 [ 3455.628670][T30631] do_recvmmsg+0x55a/0x1180 [ 3455.633436][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3455.638605][T30631] do_syscall_64+0x3d/0xb0 [ 3455.643023][T30694] chnl_net:caif_netlink_parms(): no params data found [ 3455.643219][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3455.656276][T30631] [ 3455.658669][T30631] Uninit was stored to memory at: [ 3455.663959][T30631] ___sys_recvmsg+0x522/0x890 [ 3455.668760][T30631] do_recvmmsg+0x55a/0x1180 [ 3455.673518][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3455.678683][T30631] do_syscall_64+0x3d/0xb0 [ 3455.683335][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3455.689417][T30631] [ 3455.691910][T30631] Uninit was stored to memory at: [ 3455.697108][T30631] ___sys_recvmsg+0x522/0x890 [ 3455.702015][T30631] do_recvmmsg+0x55a/0x1180 [ 3455.706649][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3455.711938][T30631] do_syscall_64+0x3d/0xb0 [ 3455.716483][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3455.722656][T30631] [ 3455.725042][T30631] Uninit was stored to memory at: [ 3455.730262][T30631] ___sys_recvmsg+0x522/0x890 [ 3455.735188][T30631] do_recvmmsg+0x55a/0x1180 [ 3455.739820][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3455.745085][T30631] do_syscall_64+0x3d/0xb0 [ 3455.749627][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3455.755799][T30631] [ 3455.758185][T30631] Uninit was stored to memory at: [ 3455.763477][T30631] ___sys_recvmsg+0x522/0x890 [ 3455.768278][T30631] do_recvmmsg+0x55a/0x1180 [ 3455.773018][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3455.778178][T30631] do_syscall_64+0x3d/0xb0 [ 3455.782824][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3455.788888][T30631] [ 3455.791274][T30631] Uninit was stored to memory at: [ 3455.796617][T30631] ___sys_recvmsg+0x522/0x890 [ 3455.801420][T30631] do_recvmmsg+0x55a/0x1180 [ 3455.806212][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3455.811374][T30631] do_syscall_64+0x3d/0xb0 [ 3455.816064][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3455.822309][T30631] [ 3455.824798][T30631] Uninit was stored to memory at: [ 3455.829994][T30631] ___sys_recvmsg+0x522/0x890 [ 3455.834970][T30631] do_recvmmsg+0x55a/0x1180 [ 3455.839609][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3455.844926][T30631] do_syscall_64+0x3d/0xb0 [ 3455.849473][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3455.855706][T30631] [ 3455.858094][T30631] Local variable msg_sys created at: [ 3455.863598][T30631] do_recvmmsg+0x5c/0x1180 [ 3455.868141][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3456.340390][T30694] bridge0: port 1(bridge_slave_0) entered blocking state [ 3456.348234][T30694] bridge0: port 1(bridge_slave_0) entered disabled state [ 3456.358778][T30694] device bridge_slave_0 entered promiscuous mode [ 3456.400268][T30694] bridge0: port 2(bridge_slave_1) entered blocking state [ 3456.408072][T30694] bridge0: port 2(bridge_slave_1) entered disabled state [ 3456.418599][T30694] device bridge_slave_1 entered promiscuous mode [ 3456.546688][T30694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3456.596053][T30694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3456.713014][T30694] team0: Port device team_slave_0 added [ 3456.738675][T30694] team0: Port device team_slave_1 added [ 3456.849574][T30694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3456.856889][T30694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3456.885826][T30694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3456.929238][T30631] not chained 17520000 origins [ 3456.932389][T30694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3456.934243][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3456.941038][T30694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3456.951183][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3456.951230][T30631] Call Trace: [ 3456.951256][T30631] [ 3456.951282][T30631] dump_stack_lvl+0x1c8/0x256 [ 3456.977252][T30694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3456.987270][T30631] dump_stack+0x1a/0x1c [ 3456.987386][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3456.987493][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3456.987624][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3456.987730][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3456.987814][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3456.987930][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3456.988047][T30631] ? should_fail+0x3f/0x810 [ 3456.988150][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3456.988252][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3456.988371][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3456.988479][T30631] __msan_chain_origin+0xbd/0x140 [ 3456.988578][T30631] ___sys_recvmsg+0x522/0x890 [ 3456.988662][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3456.988772][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3456.988882][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3456.988997][T30631] do_recvmmsg+0x55a/0x1180 [ 3456.989104][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3456.989221][T30631] ? do_syscall_64+0x3d/0xb0 [ 3456.989308][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3456.989424][T30631] do_syscall_64+0x3d/0xb0 [ 3456.989507][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3456.989638][T30631] RIP: 0033:0x7fa4f7e89279 [ 3456.989698][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3456.989781][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3456.989861][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3456.989927][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3456.989982][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3457.184525][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3457.192599][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3457.200699][T30631] [ 3457.210934][T30631] Uninit was stored to memory at: [ 3457.217597][T30631] ___sys_recvmsg+0x522/0x890 [ 3457.222569][T30631] do_recvmmsg+0x55a/0x1180 [ 3457.227206][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3457.232488][T30631] do_syscall_64+0x3d/0xb0 [ 3457.237040][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.243222][T30631] [ 3457.245608][T30631] Uninit was stored to memory at: [ 3457.250802][T30631] ___sys_recvmsg+0x522/0x890 [ 3457.255770][T30631] do_recvmmsg+0x55a/0x1180 [ 3457.260407][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3457.265922][T30631] do_syscall_64+0x3d/0xb0 [ 3457.270467][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.276701][T30631] [ 3457.279093][T30631] Uninit was stored to memory at: [ 3457.284436][T30631] ___sys_recvmsg+0x522/0x890 [ 3457.289235][T30631] do_recvmmsg+0x55a/0x1180 [ 3457.294022][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3457.299183][T30631] do_syscall_64+0x3d/0xb0 [ 3457.303876][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.309951][T30631] [ 3457.312499][T30631] Uninit was stored to memory at: [ 3457.317688][T30631] ___sys_recvmsg+0x522/0x890 [ 3457.322640][T30631] do_recvmmsg+0x55a/0x1180 [ 3457.327288][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3457.332598][T30631] do_syscall_64+0x3d/0xb0 [ 3457.337143][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.343368][T30631] [ 3457.345763][T30631] Uninit was stored to memory at: [ 3457.350948][T30631] ___sys_recvmsg+0x522/0x890 [ 3457.355911][T30631] do_recvmmsg+0x55a/0x1180 [ 3457.360542][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3457.365860][T30631] do_syscall_64+0x3d/0xb0 [ 3457.370408][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.376640][T30631] [ 3457.379038][T30631] Uninit was stored to memory at: [ 3457.384385][T30631] ___sys_recvmsg+0x522/0x890 [ 3457.389186][T30631] do_recvmmsg+0x55a/0x1180 [ 3457.393970][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3457.399124][T30631] do_syscall_64+0x3d/0xb0 [ 3457.403786][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.409839][T30631] [ 3457.412383][T30631] Uninit was stored to memory at: [ 3457.417567][T30631] ___sys_recvmsg+0x522/0x890 [ 3457.422476][T30631] do_recvmmsg+0x55a/0x1180 [ 3457.427106][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3457.432413][T30631] do_syscall_64+0x3d/0xb0 [ 3457.436953][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.443166][T30631] [ 3457.445555][T30631] Local variable msg_sys created at: [ 3457.451095][T30631] do_recvmmsg+0x5c/0x1180 [ 3457.455790][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3457.478541][T18883] Bluetooth: hci2: command 0x0409 tx timeout [ 3457.514861][T30694] device hsr_slave_0 entered promiscuous mode [ 3457.563700][T30694] device hsr_slave_1 entered promiscuous mode [ 3457.579889][T30694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3457.587815][T30694] Cannot create hsr debugfs directory [ 3458.469981][T30694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3458.529652][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3458.539737][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3458.564487][T30694] 8021q: adding VLAN 0 to HW filter on device team0 [ 3458.605542][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3458.608615][T30631] not chained 17530000 origins [ 3458.616472][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3458.618714][T30631] CPU: 1 PID: 30631 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3458.631618][T30515] bridge0: port 1(bridge_slave_0) entered blocking state [ 3458.636856][T30631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3458.636909][T30631] Call Trace: [ 3458.644288][T30515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3458.653981][T30631] [ 3458.654011][T30631] dump_stack_lvl+0x1c8/0x256 [ 3458.672604][T30631] dump_stack+0x1a/0x1c [ 3458.676923][T30631] kmsan_internal_chain_origin+0x78/0x120 [ 3458.682802][T30631] ? filter_irq_stacks+0x5c/0x1a0 [ 3458.687997][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3458.694030][T30631] ? do_recvmmsg+0x55a/0x1180 [ 3458.698826][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3458.704788][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3458.710748][T30631] ? should_fail+0x3f/0x810 [ 3458.715386][T30631] ? __stack_depot_save+0x21/0x4b0 [ 3458.720629][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3458.727025][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3458.733066][T30631] __msan_chain_origin+0xbd/0x140 [ 3458.738228][T30631] ___sys_recvmsg+0x522/0x890 [ 3458.743023][T30631] ? do_recvmmsg+0x5bc/0x1180 [ 3458.747843][T30631] ? kmsan_internal_check_memory+0x94/0x530 [ 3458.753887][T30631] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3458.759842][T30631] do_recvmmsg+0x55a/0x1180 [ 3458.764486][T30631] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3458.770895][T30631] ? do_syscall_64+0x3d/0xb0 [ 3458.775621][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3458.780794][T30631] do_syscall_64+0x3d/0xb0 [ 3458.785331][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3458.791389][T30631] RIP: 0033:0x7fa4f7e89279 [ 3458.795917][T30631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3458.815690][T30631] RSP: 002b:00007fa4f8f8d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3458.824241][T30631] RAX: ffffffffffffffda RBX: 00007fa4f7f9c050 RCX: 00007fa4f7e89279 [ 3458.832325][T30631] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000008 [ 3458.840404][T30631] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3458.848484][T30631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3458.856562][T30631] R13: 00007fa4f84cfb1f R14: 00007fa4f8f8d300 R15: 0000000000022000 [ 3458.864662][T30631] [ 3458.872690][T30631] Uninit was stored to memory at: [ 3458.872717][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3458.877861][T30631] ___sys_recvmsg+0x522/0x890 [ 3458.890591][T30631] do_recvmmsg+0x55a/0x1180 [ 3458.895344][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3458.900509][T30631] do_syscall_64+0x3d/0xb0 [ 3458.905172][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3458.911249][T30631] [ 3458.913754][T30631] Uninit was stored to memory at: [ 3458.918945][T30631] ___sys_recvmsg+0x522/0x890 [ 3458.923858][T30631] do_recvmmsg+0x55a/0x1180 [ 3458.928486][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3458.933746][T30631] do_syscall_64+0x3d/0xb0 [ 3458.938296][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3458.944471][T30631] [ 3458.946862][T30631] Uninit was stored to memory at: [ 3458.952157][T30631] ___sys_recvmsg+0x522/0x890 [ 3458.956961][T30631] do_recvmmsg+0x55a/0x1180 [ 3458.961684][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3458.966834][T30631] do_syscall_64+0x3d/0xb0 [ 3458.971380][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3458.977616][T30631] [ 3458.980013][T30631] Uninit was stored to memory at: [ 3458.985308][T30631] ___sys_recvmsg+0x522/0x890 [ 3458.990117][T30631] do_recvmmsg+0x55a/0x1180 [ 3458.994859][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3459.000022][T30631] do_syscall_64+0x3d/0xb0 [ 3459.004662][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3459.010738][T30631] [ 3459.013227][T30631] Uninit was stored to memory at: [ 3459.018422][T30631] ___sys_recvmsg+0x522/0x890 [ 3459.023328][T30631] do_recvmmsg+0x55a/0x1180 [ 3459.027960][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3459.033229][T30631] do_syscall_64+0x3d/0xb0 [ 3459.037769][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3459.043957][T30631] [ 3459.046347][T30631] Uninit was stored to memory at: [ 3459.051537][T30631] ___sys_recvmsg+0x522/0x890 [ 3459.056435][T30631] do_recvmmsg+0x55a/0x1180 [ 3459.061066][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3459.066327][T30631] do_syscall_64+0x3d/0xb0 [ 3459.070860][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3459.077029][T30631] [ 3459.079418][T30631] Uninit was stored to memory at: [ 3459.084687][T30631] ___sys_recvmsg+0x522/0x890 [ 3459.089500][T30631] do_recvmmsg+0x55a/0x1180 [ 3459.094274][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3459.099430][T30631] do_syscall_64+0x3d/0xb0 [ 3459.104133][T30631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3459.110204][T30631] [ 3459.112723][T30631] Local variable msg_sys created at: [ 3459.118086][T30631] do_recvmmsg+0x5c/0x1180 [ 3459.122810][T30631] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3459.165466][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3459.176502][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3459.186719][T30515] bridge0: port 2(bridge_slave_1) entered blocking state [ 3459.194269][T30515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3459.277329][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3459.290387][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3459.302673][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3459.314674][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3459.326023][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3459.337744][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3459.349007][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3459.359661][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3459.395768][T30694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3459.410512][T30694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3459.423507][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3459.434589][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3459.448457][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3459.542078][T18883] Bluetooth: hci2: command 0x041b tx timeout [ 3459.562461][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3459.570488][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3459.604460][T30694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3459.691076][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3459.702585][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3459.804566][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3459.815974][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3459.860790][T30694] device veth0_vlan entered promiscuous mode [ 3459.870774][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3459.881628][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3459.927146][T30694] device veth1_vlan entered promiscuous mode [ 3460.044252][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3460.056169][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3460.091437][T30694] device veth0_macvtap entered promiscuous mode [ 3460.126636][T30694] device veth1_macvtap entered promiscuous mode [ 3460.217494][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3460.228897][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.239018][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3460.249697][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.259798][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3460.270468][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.280600][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3460.291269][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.301391][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3460.312075][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.322130][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3460.332805][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.347811][T30694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3460.360030][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3460.370756][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3460.381323][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3460.392614][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3460.587884][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3460.598923][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.609092][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3460.619846][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.630052][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3460.640787][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.650945][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3460.661826][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.677778][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3460.688978][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.699038][T30694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3460.709706][T30694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.724761][T30694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3460.749414][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3460.760790][T18883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3460.970735][T26309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3460.981894][T26309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3461.015760][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3461.037307][T30629] not chained 17540000 origins [ 3461.042323][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3461.052615][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3461.062778][T30629] Call Trace: [ 3461.066129][T30629] [ 3461.069221][T30629] dump_stack_lvl+0x1c8/0x256 [ 3461.074087][T30629] dump_stack+0x1a/0x1c [ 3461.078409][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3461.084288][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3461.089497][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3461.095542][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3461.100353][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3461.106322][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3461.112292][T30629] ? should_fail+0x3f/0x810 [ 3461.116938][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3461.122211][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3461.128623][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3461.134589][T30629] __msan_chain_origin+0xbd/0x140 [ 3461.139760][T30629] ___sys_recvmsg+0x522/0x890 [ 3461.144574][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3461.149412][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3461.155381][T26309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3461.155463][T26309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3461.163273][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3461.163395][T30629] do_recvmmsg+0x55a/0x1180 [ 3461.163504][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3461.187557][T30629] ? do_syscall_64+0x3d/0xb0 [ 3461.192297][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.197486][T30629] do_syscall_64+0x3d/0xb0 [ 3461.202042][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.208112][T30629] RIP: 0033:0x7fa4f7e89279 [ 3461.212634][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3461.232407][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3461.240968][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3461.249067][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3461.257158][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3461.265248][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3461.273336][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3461.281454][T30629] [ 3461.288809][T30629] Uninit was stored to memory at: [ 3461.294370][T30629] ___sys_recvmsg+0x522/0x890 [ 3461.299178][T30629] do_recvmmsg+0x55a/0x1180 [ 3461.304025][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.309186][T30629] do_syscall_64+0x3d/0xb0 [ 3461.313876][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.319957][T30629] [ 3461.322479][T30629] Uninit was stored to memory at: [ 3461.327673][T30629] ___sys_recvmsg+0x522/0x890 [ 3461.332692][T30629] do_recvmmsg+0x55a/0x1180 [ 3461.337328][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.342621][T30629] do_syscall_64+0x3d/0xb0 [ 3461.347183][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.353384][T30629] [ 3461.355778][T30629] Uninit was stored to memory at: [ 3461.360975][T30629] ___sys_recvmsg+0x522/0x890 [ 3461.365914][T30629] do_recvmmsg+0x55a/0x1180 [ 3461.370552][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.375856][T30629] do_syscall_64+0x3d/0xb0 [ 3461.380407][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.386612][T30629] [ 3461.389038][T30629] Uninit was stored to memory at: [ 3461.394344][T30629] ___sys_recvmsg+0x522/0x890 [ 3461.399143][T30629] do_recvmmsg+0x55a/0x1180 [ 3461.403852][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.409020][T30629] do_syscall_64+0x3d/0xb0 [ 3461.413710][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.419785][T30629] [ 3461.422304][T30629] Uninit was stored to memory at: [ 3461.427494][T30629] ___sys_recvmsg+0x522/0x890 [ 3461.432379][T30629] do_recvmmsg+0x55a/0x1180 [ 3461.437020][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.442314][T30629] do_syscall_64+0x3d/0xb0 [ 3461.446867][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.453435][T30629] [ 3461.455914][T30629] Uninit was stored to memory at: [ 3461.461105][T30629] ___sys_recvmsg+0x522/0x890 [ 3461.466056][T30629] do_recvmmsg+0x55a/0x1180 [ 3461.470699][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.476002][T30629] do_syscall_64+0x3d/0xb0 [ 3461.480553][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.486778][T30629] [ 3461.489198][T30629] Uninit was stored to memory at: [ 3461.494465][T30629] ___sys_recvmsg+0x522/0x890 [ 3461.499274][T30629] do_recvmmsg+0x55a/0x1180 [ 3461.504056][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.509225][T30629] do_syscall_64+0x3d/0xb0 [ 3461.513917][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.520009][T30629] [ 3461.522482][T30629] Local variable msg_sys created at: [ 3461.527851][T30629] do_recvmmsg+0x5c/0x1180 [ 3461.532496][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3461.552502][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3461.634444][T18883] Bluetooth: hci2: command 0x040f tx timeout 23:22:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x3, &(0x7f0000000000)=""/9, &(0x7f0000000040)=0x9) 23:22:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:22:34 executing program 1: r0 = timerfd_create(0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 23:22:34 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 23:22:34 executing program 5: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) 23:22:34 executing program 4: semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000040)=""/28) 23:22:34 executing program 4: r0 = socket(0x1, 0x5, 0x0) write$FUSE_STATFS(r0, 0x0, 0xffad) 23:22:34 executing program 1: syz_emit_ethernet(0x4f, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv4}}, 0x0) 23:22:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000980)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x75317d7de33d1d68) 23:22:34 executing program 3: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19237dd327d8e6b2) 23:22:34 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fcntl$lock(r0, 0xa, 0x0) 23:22:34 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @val, {@ipv6}}, 0x0) 23:22:34 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @random="9688e2e901d7", @val, {@ipv6}}, 0x0) 23:22:34 executing program 5: socket$inet(0x2, 0x3, 0x0) select(0x40, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x3}, 0x0) 23:22:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x1600bd7d, 0x0, &(0x7f0000000780)) 23:22:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x0) 23:22:34 executing program 4: socket$inet(0x2, 0x4001, 0x0) select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x9}, 0x0, 0x0) 23:22:34 executing program 0: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 23:22:35 executing program 0: symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 23:22:35 executing program 4: nanosleep(&(0x7f0000000040)={0x0, 0xfffffffffffffff9}, 0x0) 23:22:35 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000240)=[{&(0x7f0000000100)="b747d139bc721ad78427f9a5f5ad4159a811bb3b08987ecb65693a6886b46d99ac06d3f8bf01d0e37c0160e319", 0x2d}, {&(0x7f00000003c0)="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", 0x7d4}], 0x2}, 0x0) 23:22:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f0000000000)=@raw=[@initr0, @map_fd, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000980)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:22:35 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0xc8, 0x0, 0x0, "8cbd728c0e48e5945fb3b1eb8d4f482ef959c7f74fd5ec054d11f5b7fc56c340ee8511909491cf5d68e5eafd4abbf977b41ad212fe60144095ba567b9a4b385442d58a4b91790902234a2a58947d3cf009bc496d8d25d0de547d8aa0276d90233bae78a5bbd65ac845e36d4973153af5b07d3b76941dc610dea722cb57801f080f9c342ee95cdfd31b579397110ab7a5da4c726b73f992b209e3ef07cc0a51b69a6df43df650135ed81c3d5bb9277d874f"}, {0xd0, 0x0, 0x0, "989a8a73c0c33f3d0624ac6daabf49fcb8d683e3892e982633743baeb15361def2f5207f30c143f9c03c7e9c9e2cd633583713a8d96e5c14002716ff60a96381f2aeb07adf6dd81ba28739001008e3451e10904221559fddb240c7e316a85d52ab3c0e14a8bad59918f1f376bc9ed0e0bf97569e643e31002a9cc2276f407c1b7b3fe18de38f54db35bd101dfd5dc209acae3b9649b3690b3eaad23ddb432782fc589f352ce2bc5c69273aa379e95843ced62511f9b7180699"}, {0x60, 0x0, 0x0, "953748ed2c001d57a44b2bcd04afcf843e840889f4e79cc4d96caddc677694925a1fd6347312cbfade0d2e060ce4a42c77b4f4ef743e88aa7b62c68c4646ec1ab27981f09e4a4c8fe9"}, {0x90, 0x0, 0x0, "9d7b012c0ee9f34f850a19c57d465d39854664519c5af7dd90db27578d71cc4f01fdf737e06746a72e66370770399807817e6e897d91b4f8bf7fb0b33d7fb1ea03ac62d782d18412960da994e2084b9e0bd2ca4e404a4ea27b90c62cdcf12c4f86225b7efe38c731870b96b4f5039350504a7e2d491b8ed589"}, {0x1010, 0x0, 0x0, "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"}, {0xd70, 0x0, 0x0, "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"}], 0x2008}, 0x0) 23:22:35 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}, 0x0) [ 3463.702395][T18883] Bluetooth: hci2: command 0x0419 tx timeout 23:22:35 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 23:22:35 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@txtime={{0x18}}], 0x18}, 0x0) 23:22:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x1000000}, 0x20) 23:22:35 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x22) 23:22:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x13}, 0x48) 23:22:35 executing program 4: bpf$BPF_GET_MAP_INFO(0x15, 0x0, 0x0) 23:22:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0xf}, 0x0) recvmsg(r1, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 23:22:36 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003d00)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000041c0)={0x0, 0x0, 0x0}, 0x0) 23:22:36 executing program 0: ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c40)={0x6, 0x3, &(0x7f00000028c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000002900)='syzkaller\x00', 0x80000001, 0xfd, &(0x7f0000002940)=""/253, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002bc0), 0x10}, 0x80) 23:22:36 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="bf", 0x1}], 0x1, &(0x7f0000000980)=ANY=[], 0x3e8}, 0x20008080) 23:22:36 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82403, 0x0) 23:22:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 23:22:36 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000680)) 23:22:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000180)=""/186, 0x103, 0xba, 0x1}, 0x20) 23:22:36 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x543201, 0x0) 23:22:36 executing program 5: bpf$BPF_LINK_UPDATE(0x3, 0x0, 0x0) 23:22:37 executing program 0: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000480), 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 23:22:37 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="d8", 0x1}], 0x1}, 0x0) 23:22:37 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000e4000000e400000007000000000000000600000d0000000005000000030000000f0000000500000007000000e72d16080e9c0ed9c90a32da1c070100000010000000000000000a0000000000000004"], &(0x7f0000000180)=""/186, 0x103, 0xba, 0x1}, 0x20) 23:22:37 executing program 5: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:22:37 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[], &(0x7f0000000180)=""/186, 0x103, 0xba, 0x1}, 0x20) 23:22:37 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}, 0x0) 23:22:37 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000007800)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007640), 0x0}, 0x48) 23:22:37 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001fc0)=""/151, 0x97}, {&(0x7f0000000380)=""/61, 0x3d}], 0x2}, 0x0) sendmsg$sock(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000040)='Q', 0x1}], 0x1}, 0x0) 23:22:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000380)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 23:22:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="910109858b25334fce9dbb7368c70bb59c9b4ed48eee6ee7f8b142d60954e99bfee1c1ec2444d0ab7f0a4d788b45970305f9bb5555", 0x35}, {&(0x7f0000000100)="403ac147e1e935ea37096ca16f9fbf27", 0x10}, {&(0x7f0000000140)="8f022559af838980debcd57dc5336833122d0aa4465296ed96b313b0a576e6424ff8b07d7e02236da8c2f09a2d725c3750d0d8a50eb2ca240de5e2325fa55de6d5b64f668d3db4887d750cf84a48aa9058b10be2a46f08a78a8964d040e5e39bd4af0e0b12b2c081edd8d0e7770f42bc1ed2a1421f19fe0621c0b607b3e6aa7c46d6274778b4eaa12f010a266976427b2e43153b1de44fd5797fcaef5c7b122c3a020208a8febe50cd69328853d8998841c3fe07f397742369c744d96a19ae0e8747e9423baa360f567cec55567d95ea69e334c254162912746d1c18b9029c3eebfb11252ffe0168154fe099112091b2c16e", 0xf2}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="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", 0x136}], 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x40010) 23:22:37 executing program 4: bpf$ITER_CREATE(0x1e, &(0x7f0000001740), 0x8) 23:22:37 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) 23:22:37 executing program 5: socketpair(0x1d, 0x0, 0x2, &(0x7f0000002680)) 23:22:37 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c40)={0x6, 0x3, &(0x7f00000028c0)=@framed, &(0x7f0000002900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002bc0), 0x10}, 0x80) 23:22:37 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001080)="cc", 0x1}], 0x2}, 0x0) 23:22:37 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c40)={0x6, 0x3, &(0x7f00000028c0)=@framed, &(0x7f0000002900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=[0xffffffffffffffff]}, 0x80) 23:22:37 executing program 5: socketpair(0x18, 0x0, 0x800, &(0x7f0000000080)) 23:22:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e00000020008107e00f80ecdb4cb9020200000400000001810540fb120018000469020074227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 23:22:38 executing program 4: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}, 0x38) 23:22:38 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)={&(0x7f0000000980)='./file0\x00'}, 0x10) 23:22:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x40002102) 23:22:38 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0}, 0x0) 23:22:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0xf}, 0x0) 23:22:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 23:22:38 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000880)=@framed, &(0x7f0000000900)='GPL\x00', 0x2, 0x96, &(0x7f0000000940)=""/150, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:22:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) [ 3466.486477][T30629] not chained 17550000 origins [ 3466.491451][T30629] CPU: 1 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3466.501760][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3466.511931][T30629] Call Trace: [ 3466.515303][T30629] [ 3466.518311][T30629] dump_stack_lvl+0x1c8/0x256 [ 3466.523174][T30629] dump_stack+0x1a/0x1c [ 3466.527490][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3466.533360][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3466.538569][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3466.544620][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3466.549430][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3466.555403][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3466.561373][T30629] ? should_fail+0x3f/0x810 [ 3466.566029][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3466.571300][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3466.577702][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3466.583680][T30629] __msan_chain_origin+0xbd/0x140 [ 3466.588847][T30629] ___sys_recvmsg+0x522/0x890 [ 3466.593652][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3466.598486][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3466.604534][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3466.610497][T30629] do_recvmmsg+0x55a/0x1180 [ 3466.615164][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3466.621571][T30629] ? do_syscall_64+0x3d/0xb0 [ 3466.626284][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3466.631457][T30629] do_syscall_64+0x3d/0xb0 [ 3466.635998][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.642049][T30629] RIP: 0033:0x7fa4f7e89279 [ 3466.646560][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3466.666308][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3466.674843][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3466.682924][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3466.690997][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3466.699083][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3466.707151][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3466.715245][T30629] [ 3466.727650][T30629] Uninit was stored to memory at: [ 3466.734266][T30629] ___sys_recvmsg+0x522/0x890 [ 3466.739078][T30629] do_recvmmsg+0x55a/0x1180 [ 3466.743834][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3466.749004][T30629] do_syscall_64+0x3d/0xb0 [ 3466.753663][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.759734][T30629] [ 3466.762239][T30629] Uninit was stored to memory at: [ 3466.767430][T30629] ___sys_recvmsg+0x522/0x890 [ 3466.772354][T30629] do_recvmmsg+0x55a/0x1180 [ 3466.776998][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3466.782266][T30629] do_syscall_64+0x3d/0xb0 23:22:38 executing program 1: bpf$OBJ_GET_MAP(0x15, 0x0, 0x0) [ 3466.786815][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.793024][T30629] [ 3466.795413][T30629] Uninit was stored to memory at: [ 3466.800601][T30629] ___sys_recvmsg+0x522/0x890 [ 3466.805523][T30629] do_recvmmsg+0x55a/0x1180 [ 3466.810152][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3466.815417][T30629] do_syscall_64+0x3d/0xb0 [ 3466.819982][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.826187][T30629] [ 3466.828576][T30629] Uninit was stored to memory at: 23:22:38 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="c1", 0x1}, {&(0x7f0000000340)="d5", 0x1}], 0x2, &(0x7f00000004c0)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}, 0x0) [ 3466.833878][T30629] ___sys_recvmsg+0x522/0x890 [ 3466.838691][T30629] do_recvmmsg+0x55a/0x1180 [ 3466.843448][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3466.848614][T30629] do_syscall_64+0x3d/0xb0 [ 3466.853271][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.859369][T30629] [ 3466.861876][T30629] Uninit was stored to memory at: [ 3466.867074][T30629] ___sys_recvmsg+0x522/0x890 [ 3466.872003][T30629] do_recvmmsg+0x55a/0x1180 [ 3466.876635][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3466.881909][T30629] do_syscall_64+0x3d/0xb0 [ 3466.886479][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.892659][T30629] [ 3466.895077][T30629] Uninit was stored to memory at: [ 3466.900285][T30629] ___sys_recvmsg+0x522/0x890 [ 3466.905256][T30629] do_recvmmsg+0x55a/0x1180 [ 3466.909901][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3466.915193][T30629] do_syscall_64+0x3d/0xb0 [ 3466.919742][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.925926][T30629] [ 3466.928313][T30629] Uninit was stored to memory at: [ 3466.933625][T30629] ___sys_recvmsg+0x522/0x890 23:22:39 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x111003, 0x0) 23:22:39 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) [ 3466.938447][T30629] do_recvmmsg+0x55a/0x1180 [ 3466.943192][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3466.948349][T30629] do_syscall_64+0x3d/0xb0 [ 3466.953006][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.959067][T30629] [ 3466.961478][T30629] Local variable msg_sys created at: [ 3466.966968][T30629] do_recvmmsg+0x5c/0x1180 [ 3466.971509][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 23:22:39 executing program 0: bpf$OBJ_GET_MAP(0xfe0, 0x0, 0x0) 23:22:39 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="554b56627c8c9602fcd46f41e6b734ab7b3c2d2f0e76871d73cf9c4cc1aef63f10b5a11225b25553855842e37fff81c559797159f4190f4e166bdd9ae816ceee9a04e5fa42b8d89df551e07718df669cfcfead8c5229c2a3a8eda62c5f058de6a7ac84b57afbea20ed77868ff5da3146d33fb054c80eb2c0", 0x78}, {&(0x7f0000000080)="16c3cf1d5f6c4dd83e50187e170afaceb10dd2099dd138a931f27a2546b088ef5ec6720f81b65d992411717c2e141b74370de7e2c3652c31b744f8ec56bf1daef0e4f07971a2a94a6008447a835d7d0ba4ab2d99511222dc024a952610ecba940ee51f8626024862c25f0b6046bc35b91e846bac59d818639c621cb12c651781d50c9e56eac1a392aa418b264186fc20537a6712c278ea41dfba9a1b6995d544ed095a9bbe2e65fc9c44172b0883167654878308ddf58fa3bf2b0031bbc24c9c0ae8a5ad3ac74b55f9e9cbfbceb7dc868ee633608f212a33381fdccbc298970d", 0xe0}, {&(0x7f0000000180)}, {&(0x7f0000000240)="898158fd0b0acda2d8303e2857d8437817d35bff0745b35057e1c0ebf19b525e93c769ff3a952f473e4d4a6db505783a38aee0fee6cb383a7239150cfa47014343426176a445ffdbe1971ae459e49db56c2267fa9c37d8e0d1c11315cc9bd7cb90a6557867da436697c7232edf3dd699bbbfc7abb5da788dafc4b6dec79608d8f3764835b2e7efb3bcac8898573de57b68138fd83b4a217a20339ed65e655b63a07d4566ee826ac3380728cb4a3f26", 0xaf}, {&(0x7f0000000300)="e384b80cb85670792f4ffc75ffa7a7fac7cd5cf9c5b3c13484", 0x19}], 0x5, &(0x7f00000003c0)=[{0x100, 0x119, 0x8, "037a943add5386f362f7bdfcae1ffcd09d1b1992e57fecdd507c85a7e7b58a1657de68ef394e64695c756da2eab7314cfc8acc59d5321f9175fb90dab469a3f2b449ac6d3c734d7b86ffb61e6434776a9550ce17aa0f4a42428341dba2e3df8f4f82c8cecb33111de66647311008a73b85085f26f8b5dc102963c98879eda8c23becf760a18e9ebb39d7cfc0d2b49a7543ee723f7be41dadd72efd3f3a0b6ceda823ed65b4dc5d2a1322d189249f1b57474ae01f749cdbf5e24e12076417e38bf8d4d7911b6db43a03ec1c6dcecbede1a621655999aa01664b452b7f2d3ad763ac0403f68326c5b4a9d17972a6e3"}], 0x100}, 0x80) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000600)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000640)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000680)={r0}) sendmsg$kcm(r3, &(0x7f0000000a40)={&(0x7f00000006c0)=@ll={0x11, 0xf7, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=[{0x40, 0x29, 0x6, "12b7e1982d0a572c6465918160d492478f80f27a154f39e507b68f94d6d6068505f25604d964dbcd42b075"}, {0xa8, 0xff, 0x7, "a36b2d1796d9f421b8545cda8e915d57db6675e01e3744c5b74d64f2c52312b83175b922205d6be6b8a5a7abbfa2ba3732f57175910da1be935970a06f2bd032e23459bf8073707d2e4d1e71f0b62c2b0c88f06c77340468e3597d9464a83dd66f30ffd64e9b70d958d208fe271ed55cb106afc11582fc6a7b475fda9bf211e6992b00d0d309d66b549b339b54c59c59e1"}, {0x98, 0x113, 0x5, "c5e97292fb385cfa38a0fce95e89fb28dcf69d2f0917dbf4944262c33988b566afa6a0eaf996fa0f4eeb743032e75f178f4284e317eb6ac8ecde28ee8e6a7deb780e42aef1023d76bdda61225b153e363944ca9ee852c287608db545b33a0b7ef09b43251b847325108534b71cd01bb4f9a32e02c15cd77d4afefc212532c1fc97"}, {0xe0, 0x112, 0xffff, "3fa4f5262eb21a7359c013755cf82c2cb96d3f1deeae15f9b316131e4dc00ae1f99ec65e48931936e7bf9284d3a344f9a1ce6876b93a974b9fa864e54fc6470bccfb3d098c3880cef2dce43ada3ab7dda723c0e9a449842ff65b07150d5bad7c98b61fc3879ff60769bff1b479a583491137db2411a00a8f417586ccccb6ab03e9120a7d79268a841593428319a01971450c0213137cf0d05c7450f94c46ef892ea0185198c1efd7d3a430ff41d20fbeac2b4362fd4c6a7026544647b66cfd574a7ca42986384fccc8f37781"}, {0x28, 0x0, 0x6, "032656f3a2f267ca90db1d1a1502c102f4a0"}], 0x288}, 0x48000) sendmsg$inet(r3, &(0x7f0000000d40)={&(0x7f0000000a80)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="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", 0xfb}, {&(0x7f0000000bc0)="e3ca88edcc385ab979e765cbd6e1f628eac739523ad0093ae6f71495bf7840b6901a2d349f557f4aa3090eb02f0f75990e0decfa91def94bacbe5e6b5b959f9bfc81941f5ed5257eedf7bd4a96098ef89be203f59b92", 0x56}, {&(0x7f0000000c40)="cba34d561cb647134b7257215bfdc472d9ddc26dbe2ea25834cd38851e592d8f13df9c679f22088fb998ce4752156ce3c481ffa6610672896bbf7c1730c348dbea8a9a7033a8a685efd5994f44cad66721940438af73b717cffddd2243c129", 0x5f}], 0x3, &(0x7f0000000d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x40000) r4 = openat$cgroup_ro(r1, &(0x7f0000000d80)='cgroup.events\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001ec0)={&(0x7f0000000dc0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000000e00)="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", 0x1000}], 0x1, &(0x7f0000001e40)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc1, [@remote, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x36}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x68}, 0x8080) recvmsg(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001f00)=""/184, 0xb8}, {&(0x7f0000001fc0)=""/3, 0x3}, {&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000002080)=""/253, 0xfd}, {&(0x7f0000002180)=""/30, 0x1e}, {&(0x7f00000021c0)=""/197, 0xc5}, {&(0x7f00000022c0)=""/112, 0x70}, {&(0x7f0000002340)=""/6, 0x6}, {&(0x7f0000002380)=""/34, 0x22}], 0x9, &(0x7f0000002480)=""/177, 0xb1}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_tracing={0x1a, 0x8, &(0x7f0000002580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, @jmp={0x5, 0x0, 0x9, 0x7, 0x0, 0x30, 0xfffffffffffffff0}, @ldst={0x3, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffff8, 0x4}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f00000025c0)='syzkaller\x00', 0xd5, 0x63, &(0x7f0000002600)=""/99, 0x41100, 0x13, '\x00', 0x0, 0x18, r4, 0x8, &(0x7f0000002680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000026c0)={0x3, 0xf, 0x2, 0x2}, 0x10, 0x21d3a, r2, 0x0, &(0x7f0000002700)=[r4, r4, r4]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000027c0)={r5, r1, 0x24}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c40)={0x6, 0x4, &(0x7f00000028c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xdf}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000002900)='syzkaller\x00', 0x80000001, 0xfd, &(0x7f0000002940)=""/253, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002b80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002bc0)={0x1, 0xe, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002c00)=[0xffffffffffffffff, r3]}, 0x80) 23:22:40 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x5, 0x98, &(0x7f0000000680)=""/152, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:22:40 executing program 5: bpf$OBJ_GET_MAP(0x1e, 0x0, 0x0) 23:22:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/233, 0x36, 0xe9, 0x1}, 0x20) 23:22:40 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x1) 23:22:40 executing program 0: bpf$BPF_LINK_UPDATE(0xe, 0x0, 0x0) 23:22:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x9, 0x4}]}]}}, &(0x7f0000000380)=""/4096, 0x36, 0x1000, 0x1}, 0x20) 23:22:40 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x0) 23:22:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="910109858b25334fce9dbb7368c70bb59c9b4ed48eee6ee7f8b142d60954e99bfee1c1ec2444d0ab7f0a4d788b4597", 0x2f}, {&(0x7f0000000100)="403ac147e1e935ea37096ca1", 0xc}, {&(0x7f0000000140)="8f022559af838980debcd57dc5336833122d0aa4465296ed96b313b0a576e6424ff8b07d7e02236da8c2f09a2d725c3750d0d8a50eb2ca240de5e2325fa55de6d5b64f668d3db4887d750cf84a48aa9058b10be2a46f08a78a8964d040e5e39bd4af0e0b12b2c081edd8d0e7770f42bc1ed2a1421f19fe0621c0b607b3e6aa7c46d6274778b4eaa12f010a266976427b2e43153b1de44fd5797fcaef5c7b122c3a020208a8febe50cd69328853d8998841c3fe07f397742369c744d96a19ae0e8747e9423baa360f567cec55567d95ea69e334c254162912746d1c18b9029c3eebfb11252ffe0168154fe099112091b2c16e", 0xf2}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="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", 0x12d}], 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x40010) 23:22:40 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)='A', 0x1}], 0x1, &(0x7f00000005c0)=[{0x28, 0x0, 0x0, "6acbb65ac0324c6c560fb9e3e202890d89"}], 0x28}, 0x0) 23:22:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth0_to_bond\x00', 0x400}) 23:22:40 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x2, &(0x7f00000007c0)=@raw=[@map_idx], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 23:22:40 executing program 0: bpf$ITER_CREATE(0xd, &(0x7f0000001740), 0x8) 23:22:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) 23:22:41 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)='9', 0x1}], 0x1}, 0x2000040) 23:22:41 executing program 4: bpf$BPF_GET_MAP_INFO(0x22, 0x0, 0x0) 23:22:41 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000060000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x5, &(0x7f0000000180)=""/5, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200), 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x9b) 23:22:41 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000340)="d5", 0x1}], 0x2}, 0x0) 23:22:41 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8a4852ce721c940d, 0x0, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xbe, &(0x7f0000000080)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3469.241492][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 3469.248994][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 23:22:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x440, 0x4, 0x7ff, 0x0, 0x1, 0x800}, 0x48) 23:22:41 executing program 3: bpf$OBJ_GET_MAP(0x12, 0x0, 0x0) 23:22:41 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 23:22:41 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f00000008c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 23:22:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) 23:22:41 executing program 2: socketpair(0x2b, 0x0, 0x1, &(0x7f0000000100)) 23:22:41 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x1) 23:22:41 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) 23:22:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xa, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 23:22:41 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001800)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003d00)) 23:22:42 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="bf", 0x1}], 0x1, &(0x7f0000000980)=ANY=[], 0x3e8}, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000015c0)="88", 0x1}], 0x1}, 0x0) 23:22:42 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="bf", 0xffffff1f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000980)=ANY=[], 0x3e8}, 0x0) [ 3470.859724][T30629] not chained 17560000 origins [ 3470.864706][T30629] CPU: 0 PID: 30629 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3470.875003][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3470.885177][T30629] Call Trace: [ 3470.888527][T30629] [ 3470.891525][T30629] dump_stack_lvl+0x1c8/0x256 [ 3470.896381][T30629] dump_stack+0x1a/0x1c [ 3470.900740][T30629] kmsan_internal_chain_origin+0x78/0x120 [ 3470.906600][T30629] ? filter_irq_stacks+0x5c/0x1a0 [ 3470.911789][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3470.917821][T30629] ? do_recvmmsg+0x55a/0x1180 [ 3470.922619][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3470.928573][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3470.934525][T30629] ? should_fail+0x3f/0x810 [ 3470.939159][T30629] ? __stack_depot_save+0x21/0x4b0 [ 3470.944404][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3470.950790][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3470.956733][T30629] __msan_chain_origin+0xbd/0x140 [ 3470.961887][T30629] ___sys_recvmsg+0x522/0x890 [ 3470.966680][T30629] ? do_recvmmsg+0x5bc/0x1180 [ 3470.971501][T30629] ? kmsan_internal_check_memory+0x94/0x530 [ 3470.977543][T30629] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3470.983498][T30629] do_recvmmsg+0x55a/0x1180 [ 3470.988140][T30629] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3470.994530][T30629] ? do_syscall_64+0x3d/0xb0 [ 3470.999243][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3471.004407][T30629] do_syscall_64+0x3d/0xb0 [ 3471.008941][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.015000][T30629] RIP: 0033:0x7fa4f7e89279 [ 3471.019514][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3471.039263][T30629] RSP: 002b:00007fa4f8fae168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3471.047803][T30629] RAX: ffffffffffffffda RBX: 00007fa4f7f9bf80 RCX: 00007fa4f7e89279 [ 3471.055882][T30629] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 3471.063948][T30629] RBP: 00007fa4f7ee3189 R08: 0000000000000000 R09: 0000000000000000 [ 3471.072017][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3471.080092][T30629] R13: 00007fa4f84cfb1f R14: 00007fa4f8fae300 R15: 0000000000022000 [ 3471.088195][T30629] [ 3471.094824][T30629] Uninit was stored to memory at: [ 3471.100040][T30629] ___sys_recvmsg+0x522/0x890 [ 3471.105248][T30629] do_recvmmsg+0x55a/0x1180 [ 3471.109881][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3471.115132][T30629] do_syscall_64+0x3d/0xb0 [ 3471.119695][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.125843][T30629] [ 3471.128228][T30629] Uninit was stored to memory at: [ 3471.133491][T30629] ___sys_recvmsg+0x522/0x890 [ 3471.138291][T30629] do_recvmmsg+0x55a/0x1180 [ 3471.143025][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3471.148192][T30629] do_syscall_64+0x3d/0xb0 [ 3471.152822][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.158900][T30629] [ 3471.161290][T30629] Uninit was stored to memory at: [ 3471.166612][T30629] ___sys_recvmsg+0x522/0x890 [ 3471.171418][T30629] do_recvmmsg+0x55a/0x1180 [ 3471.176184][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3471.181347][T30629] do_syscall_64+0x3d/0xb0 [ 3471.186019][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.192174][T30629] [ 3471.194567][T30629] Uninit was stored to memory at: [ 3471.199756][T30629] ___sys_recvmsg+0x522/0x890 [ 3471.204697][T30629] do_recvmmsg+0x55a/0x1180 [ 3471.209351][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3471.214647][T30629] do_syscall_64+0x3d/0xb0 [ 3471.219184][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.225505][T30629] [ 3471.227894][T30629] Uninit was stored to memory at: [ 3471.233232][T30629] ___sys_recvmsg+0x522/0x890 [ 3471.238037][T30629] do_recvmmsg+0x55a/0x1180 [ 3471.242751][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3471.247913][T30629] do_syscall_64+0x3d/0xb0 [ 3471.252597][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.258671][T30629] [ 3471.261063][T30629] Uninit was stored to memory at: [ 3471.266383][T30629] ___sys_recvmsg+0x522/0x890 [ 3471.271190][T30629] do_recvmmsg+0x55a/0x1180 [ 3471.275974][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3471.281143][T30629] do_syscall_64+0x3d/0xb0 [ 3471.285842][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.292020][T30629] [ 3471.294411][T30629] Uninit was stored to memory at: [ 3471.299614][T30629] ___sys_recvmsg+0x522/0x890 [ 3471.304557][T30629] do_recvmmsg+0x55a/0x1180 [ 3471.309192][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3471.314496][T30629] do_syscall_64+0x3d/0xb0 [ 3471.319050][T30629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.325268][T30629] [ 3471.327661][T30629] Local variable msg_sys created at: [ 3471.333124][T30629] do_recvmmsg+0x5c/0x1180 [ 3471.337662][T30629] __x64_sys_recvmmsg+0x3a7/0x4b0 23:22:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x111102, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x18) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x5, &(0x7f0000000180)=""/5, 0x41000, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x8000, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r1, r1]}, 0x80) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000300)=r2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x600000, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000380)) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000003c0)={0x0, 0x3, [@remote, @empty, @random="e4f46a38339e"]}) gettid() 23:22:43 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)='h', &(0x7f0000000200)}, 0x48) 23:22:43 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x0, 0xc}, 0xc) 23:22:43 executing program 2: socketpair(0x3, 0x0, 0x7027f887, &(0x7f0000000180)) 23:22:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:22:43 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 23:22:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)='R', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x300) 23:22:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file1\x00', r0, &(0x7f00000000c0)='./file4\x00') readlinkat(r0, &(0x7f0000000080)='./file4\x00', &(0x7f0000000100)=""/192, 0xc0) 23:22:43 executing program 2: pipe2(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, &(0x7f0000000d40)=@abs, &(0x7f0000000d80)=0x8) 23:22:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 23:22:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)=""/46, &(0x7f0000000040)=0x2e) 23:22:44 executing program 5: writev(0xffffffffffffffff, &(0x7f0000001240)=[{0x0}], 0x1) 23:22:44 executing program 1: faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 23:22:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, 0x0) poll(&(0x7f0000000080)=[{r0, 0x40}, {r0}], 0x2, 0x0) 23:22:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000010c0)={&(0x7f0000000000)=@abs, 0x8, 0x0}, 0x0) 23:22:44 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random="16c1afa48854", @val, {@ipv6}}, 0x0) 23:22:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) poll(&(0x7f0000000080)=[{r0, 0x40}, {r0, 0x4}], 0x2, 0x0) 23:22:44 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x3}, 0xc) 23:22:44 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000040)=""/132, 0x84}], 0x1) writev(r0, &(0x7f0000000500)=[{0x0}], 0x1) 23:22:44 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @local, @val, {@ipv4}}, 0x0) 23:22:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) bind$unix(r0, 0x0, 0x0) 23:22:45 executing program 4: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 23:22:45 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x801, 0x0, 0x0) 23:22:45 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2812, r0, 0x0) 23:22:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000bc0)={&(0x7f00000007c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfe, 0x0}, 0x0) 23:22:45 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) 23:22:45 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0) 23:22:45 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000180)="d9", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 23:22:45 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000000)) 23:22:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000), 0x4) 23:22:45 executing program 4: setrlimit(0x8, &(0x7f0000000000)) socket$inet6(0x18, 0x4003, 0x0) 23:22:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)="f2dd47c3f7f7401e612f6e525568180be7b0854bfef81ba04b7c158f9b18ed43af4a81a854e9e9eb91c7c014d3a40afc88cd47a98d6f7f2944685bfbb68258b57dca88dc1900c9f4be30f6a1749318db3ab0a1e373955ba1e313b98060d3dfbb9f0b68167051bb8dc81c3a8f3f1999865a0e08f7b9946598000a3cbf9a3ac4ed39c635a74edfb5f29a933cefbe7880ef", 0x90}, {&(0x7f0000000240)="d3", 0x1}], 0x2) sendmsg$unix(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x0) 23:22:45 executing program 2: open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 23:22:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 23:22:45 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 23:22:45 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @val, {@ipv4}}, 0x0) 23:22:45 executing program 4: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x1012, 0xffffffffffffffff, 0x0) 23:22:45 executing program 5: select(0x40, &(0x7f0000000180)={0x4}, 0x0, 0x0, &(0x7f0000000240)) 23:22:46 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 23:22:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$setown(r0, 0x6, 0x0) 23:22:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 23:22:46 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x0) 23:22:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) shutdown(r1, 0x1) 23:22:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in, 0xc, 0x0, 0x0, &(0x7f00000000c0)=""/145, 0x91}, 0x0) dup2(r0, r1) 23:22:46 executing program 2: r0 = socket$inet(0x2, 0x4003, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:22:46 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) 23:22:46 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @local, @val, {@ipv4}}, 0x0) 23:22:46 executing program 3: setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x7fffffffffffffff}}, 0x0) 23:22:46 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000140), 0x4) 23:22:46 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @broadcast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @multicast1, @random="d72ed4f7a6c8"}}}}, 0x0) 23:22:46 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv6}}, 0x0) 23:22:46 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:22:46 executing program 4: fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000040)) 23:22:46 executing program 5: poll(&(0x7f0000000100), 0x9, 0x0) 23:22:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000), 0x2) 23:22:47 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv6}}, 0x0) 23:22:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) poll(&(0x7f0000000080)=[{r2, 0x40}, {r1, 0x2}], 0x2, 0x0) 23:22:47 executing program 4: shmget(0x2, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) 23:22:47 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f00000001c0), 0x4) 23:22:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000), 0x0) 23:22:47 executing program 0: readv(0xffffffffffffffff, &(0x7f0000001180)=[{0x0}], 0x1) 23:22:47 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000500)=[{0x0, 0x53}], 0x1) 23:22:47 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @local, @val, {@ipv4}}, 0x0) 23:22:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000580)=@in, 0xc, 0x0}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)="f2dd47c3f7f7401e612f6e525568180be7b0854bfef81ba04b7c158f9b18ed43af4a81a854e9e9eb91c7c014d3a40afc88cd47a98d6f7f2944685bfbb68258b57dca88dc1900c9f4be30f6a1749318db3ab0a1e373955ba1e313b98060d3dfbb9f0b68167051bb8dc81c3a8f3f1999865a0e08f7b9946598000a3cbf9a3ac4ed39c635a74edfb5f29a933cefbe7880ef", 0x90}, {&(0x7f0000000240)="d3", 0x1}], 0x100000000000024b) 23:22:47 executing program 4: r0 = socket$inet6(0x18, 0x8003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 23:22:47 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x3, 0x0, 0x0) 23:22:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1007, 0x0, 0x0) 23:22:47 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = getpgid(0x0) fcntl$setown(r0, 0x6, r1) fcntl$getown(r0, 0x5) 23:22:48 executing program 4: socket$inet6(0x18, 0x3, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, &(0x7f0000000080)={0x9}, 0x0) 23:22:48 executing program 0: r0 = socket$inet6(0x18, 0x8003, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) 23:22:48 executing program 1: r0 = socket$inet6(0x18, 0x8003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f00000000c0), 0x4) 23:22:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0x8000, 0x0) linkat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 23:22:48 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendto(r0, 0x0, 0x0, 0x408, 0x0, 0x0) 23:22:48 executing program 4: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000025c0)=@abs={0x0, 0x0, 0x3}, 0x8) 23:22:48 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 23:22:48 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2811, r0, 0x0) 23:22:48 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000580)={@local, @local, @val, {@arp={0x806, @generic={0x1, 0x0, 0x6, 0x0, 0x0, @empty, "", @local, "eb3f35f13df9132dd4d244105d928556"}}}}, 0x0) 23:22:48 executing program 2: select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x2}, 0x0, 0x0) pipe(&(0x7f0000000ac0)) select(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xff}) 23:22:48 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) 23:22:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)="c10694c75cf05979e69e5b5ba9b55b0690b02dcdc99afa751ecdf84703d14b13ab8793d47cf204e563471308bab19865cd34a96a4a4581b089f4e4df930579a4b03bb6d42a592a3f4eb9ebe21565ec63a545d99dd703564fc563500d04f2c7a9e979b7a05b853744fb96718f9feb359ed664154319e4e03fda93fbc68463123c18413c189415b16f550fde558d10d52237", 0x91}, {&(0x7f00000001c0)="a360ff2c8af88ed7486a02ee349a55b4421bd4a8a28fad9c3c6fbaa9097a3fddac09e6b6f030580686f1a4d25b98e5719be69510fc8a57b7a2f650e41c8d10901c377cdf8dc77c6dd3ded71a20d62a9c171d", 0x52}, {&(0x7f0000000240)="a00cfb2166bbb39f344e289354e0d866051cc99324d821ef6d702ab3", 0x1c}, {&(0x7f00000002c0)="31bd167ee7a7ab8a6a7bafa9158c478b4e1295ee941c040aeba721a5f4c0bbe06f53906defd4f80c0bd611ca4d0b84b1b687ff1a67116f4fc3f30d876e6c1b04b8dc4ad0547c984b4b7366ade285d0aed43e89e0e311977a85c6bcaf2a6b2e71e04f2dd97933c30e47f903e4c290a344413f", 0x72}], 0x4}, 0x0) 23:22:48 executing program 5: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 23:22:48 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0) 23:22:48 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140), 0xc) 23:22:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) fcntl$setown(r1, 0x6, r2) 23:22:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 23:22:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8) 23:22:49 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 23:22:49 executing program 2: r0 = getgid() setregid(r0, r0) 23:22:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 23:22:49 executing program 1: socket(0x1, 0x2, 0x1) 23:22:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = dup2(r1, r1) poll(&(0x7f0000000480)=[{r2}], 0x1, 0x0) pipe(&(0x7f0000000580)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 23:22:49 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 23:22:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) lseek(r0, 0x0, 0x0) 23:22:49 executing program 3: select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x2}, 0x0, 0x0) 23:22:49 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000001340)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8, 0x0}, 0xd) 23:22:49 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs, 0x8) 23:22:49 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) 23:22:49 executing program 3: faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0) 23:22:49 executing program 5: recvmsg(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x0) 23:22:49 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) flock(r0, 0x3) 23:22:49 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="89a2269fb607", @remote, @val, {@arp={0x806, @generic={0x1, 0x0, 0x6, 0x0, 0x0, @remote, "", @remote, "73297e5abf70a36b12fe38b430e7583c"}}}}, 0x0) 23:22:49 executing program 0: open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 23:22:50 executing program 4: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 23:22:50 executing program 5: semctl$SETVAL(0x0, 0x0, 0x8, 0x0) 23:22:50 executing program 3: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff4000/0xc000)=nil, 0xc000) 23:22:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f00000005c0)={@local, @remote, @val, {@ipv6}}, 0x0) 23:22:50 executing program 0: pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x3) 23:22:50 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) fchdir(r0) 23:22:50 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 23:22:50 executing program 2: socket(0x16, 0x0, 0xff) 23:22:50 executing program 3: socket(0x11, 0x0, 0x7) 23:22:50 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:22:50 executing program 1: r0 = socket(0xa, 0x3, 0x7) bind(r0, &(0x7f0000000000), 0x80) 23:22:50 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, 0x0}, 0x0) 23:22:50 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x40}}}}}}]}}, 0x0) 23:22:50 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x6, 0x0) 23:22:50 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000100)=@un=@abs={0x0, 0x0, 0x2}, 0x8) 23:22:51 executing program 1: recvmsg(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 23:22:51 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, &(0x7f0000001400), &(0x7f0000001440)=0xc) 23:22:51 executing program 5: bind$unix(0xffffffffffffff9c, &(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8) 23:22:51 executing program 0: mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 23:22:51 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) [ 3479.211772][ T28] usb 4-1: new full-speed USB device number 92 using dummy_hcd 23:22:51 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockname$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) 23:22:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 23:22:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000040), 0x4) 23:22:51 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) close(r1) [ 3479.572411][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3479.584841][ T28] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3479.594919][ T28] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3479.883390][ T28] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3479.892908][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3479.901109][ T28] usb 4-1: Product: syz [ 3479.906070][ T28] usb 4-1: Manufacturer: syz [ 3479.910848][ T28] usb 4-1: SerialNumber: syz [ 3480.003250][T31159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3480.284439][ T28] cdc_ncm 4-1:1.0: bind() failure [ 3480.327487][ T28] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 3480.339853][ T28] cdc_ncm 4-1:1.1: bind() failure [ 3480.377106][ T28] usb 4-1: USB disconnect, device number 92 23:22:52 executing program 3: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@file={0xa}, 0xa) 23:22:52 executing program 5: getresgid(0x0, 0x0, &(0x7f00000002c0)) 23:22:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x7d, 0x2b, 0xaa, 0x10, 0x20b9, 0x1682, 0x482a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x92, 0x74, 0x9}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000002900)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 23:22:52 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 23:22:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x384}, 0x98) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 23:22:52 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000003c0)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f00000017c0)}, 0x0) 23:22:53 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x316, 0x0, 0x2}, 0x98) 23:22:53 executing program 1: renameat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00') 23:22:53 executing program 0: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0xc0084504, 0x0) 23:22:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x384}, 0x98) 23:22:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) [ 3481.252171][ T28] usb 3-1: new high-speed USB device number 88 using dummy_hcd 23:22:53 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) 23:22:53 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) accept4$inet6(r0, &(0x7f0000000080), &(0x7f0000000140)=0x1c, 0x0) 23:22:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000180), 0x4) [ 3481.522689][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 3481.812923][ T28] usb 3-1: New USB device found, idVendor=20b9, idProduct=1682, bcdDevice=48.2a [ 3481.822366][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3481.830564][ T28] usb 3-1: Product: syz [ 3481.835065][ T28] usb 3-1: Manufacturer: syz [ 3481.839848][ T28] usb 3-1: SerialNumber: syz [ 3482.019912][ T28] usb 3-1: config 0 descriptor?? [ 3482.069065][ T28] option 3-1:0.0: GSM modem (1-port) converter detected [ 3482.265727][T26321] device hsr_slave_0 left promiscuous mode [ 3482.294527][T26321] device hsr_slave_1 left promiscuous mode [ 3482.310707][T26321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3482.319133][T26321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3482.355361][T26321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3482.363801][T26321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3482.428258][T26321] device bridge_slave_1 left promiscuous mode [ 3482.435357][T26321] bridge0: port 2(bridge_slave_1) entered disabled state [ 3482.490709][T26321] device bridge_slave_0 left promiscuous mode [ 3482.498093][T26321] bridge0: port 1(bridge_slave_0) entered disabled state [ 3482.560394][T26321] device veth1_macvtap left promiscuous mode [ 3482.566917][T26321] device veth0_macvtap left promiscuous mode [ 3482.573434][T26321] device veth1_vlan left promiscuous mode [ 3482.579534][T26321] device veth0_vlan left promiscuous mode [ 3482.622855][T31221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3482.632599][T31221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:22:56 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) 23:22:56 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000001100)=[@rights, @rights, @cred, @rights, @rights], 0xe8}, 0x0) 23:22:56 executing program 0: pipe2(&(0x7f0000000180), 0x0) 23:22:56 executing program 1: fcntl$lock(0xffffffffffffffff, 0xc, &(0x7f0000000540)) 23:22:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)='/', 0x1, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c2", 0x1, 0x0, 0x0, 0x0) 23:22:56 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x40044b40, 0x0) [ 3484.174456][T30515] usb 3-1: USB disconnect, device number 88 [ 3484.184317][T30515] option 3-1:0.0: device disconnected 23:22:56 executing program 5: r0 = socket(0x1, 0x5, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)=""/235, &(0x7f0000000140)=0xeb) 23:22:56 executing program 4: sendfile(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 23:22:56 executing program 0: getsockopt$inet_buf(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 23:22:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) fcntl$lock(r0, 0x0, 0x0) 23:22:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x2}, 0x10) 23:22:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000080)={0x10, 0x2}, 0x10) 23:22:56 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 23:22:56 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, &(0x7f0000000280), 0x8) 23:22:57 executing program 0: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000002440)={&(0x7f0000000380)=@abs={0x8}, 0x8, 0x0}, 0x0) 23:22:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000540)) 23:22:57 executing program 4: sendfile(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 23:22:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) accept4$inet6(r0, 0x0, 0x0, 0x0) 23:22:57 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=[@rights], 0x10}, 0x0) 23:22:57 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000040)) 23:22:57 executing program 0: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000002440)={&(0x7f0000000380)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000002380)=[@cred], 0x68}, 0x0) 23:22:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) [ 3486.073592][T26321] team0 (unregistering): Port device team_slave_1 removed 23:22:58 executing program 2: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) 23:22:58 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 23:22:58 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$fb(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000001, 0x10011, r0, 0x0) pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 23:22:58 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000440)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x800}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="397e2d22906713872f10fdf9e54c908364ef34517eea874f265f4077e32be404ab6b58eaf0f4ef721babd2c64823a0b3c6a9f791508fc2921bc6a6e133854e436097d459", 0x44}, {0x0}], 0x2, &(0x7f00000002c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x78}, 0x8000) [ 3486.451294][T26321] team0 (unregistering): Port device team_slave_0 removed 23:22:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 23:22:58 executing program 3: timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) [ 3486.672992][T26321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 23:22:58 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10011, r0, 0xb0000) 23:22:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x0) 23:22:58 executing program 4: r0 = socket(0x23, 0x5, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) [ 3486.904167][T26321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 23:22:59 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x30) 23:22:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 23:22:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x911) 23:22:59 executing program 2: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, r0/1000+10000}) 23:22:59 executing program 4: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mlock2(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) 23:22:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1, 0x0, 0x0) 23:22:59 executing program 1: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 23:22:59 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'cbcmac(aes-fixed-time)\x00'}}) 23:22:59 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000001100)='./file0/file0\x00', 0x2000000) 23:22:59 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) 23:23:00 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') [ 3488.147649][T26321] bond0 (unregistering): Released all slaves 23:23:00 executing program 1: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) 23:23:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000060000000c7d16000000"], 0x20}}, 0x0) 23:23:00 executing program 4: r0 = socket(0x1e, 0x5, 0x0) connect$caif(r0, 0x0, 0x0) 23:23:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="12ee47009d"]) 23:23:00 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) [ 3488.583418][T31332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3488.669519][T31319] could not allocate digest TFM handle cbcmac(aes-fixed-time) 23:23:00 executing program 3: r0 = socket(0x2, 0x3, 0x13) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x20000804) 23:23:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0xd, '\x00', [@jumbo, @hao={0xc9, 0x10, @private2}]}, 0x20) 23:23:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f00000001c0)={0xa, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}, 0x0) 23:23:00 executing program 0: write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='=\x00\x00\x00}\x00\x00\x00\x006'], 0x3d) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080), 0x5f, 0x0) 23:23:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)) 23:23:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:23:01 executing program 3: select(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200), &(0x7f0000000400)) 23:23:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, 0x4, 0x8, 0x301}, 0x14}}, 0x0) 23:23:01 executing program 0: syz_open_procfs(0x0, &(0x7f0000000480)='net/nf_conntrack\x00') 23:23:01 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x82401, 0x0) write$eventfd(r0, 0x0, 0x0) 23:23:01 executing program 4: r0 = socket(0x18, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 23:23:01 executing program 5: r0 = socket(0x2, 0x3, 0x13) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}, 0x0) 23:23:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2, 0x0, 0x7800}}) 23:23:01 executing program 0: clock_gettime(0x0, &(0x7f0000000240)={0x0}) select(0x40, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000400)={r0}) 23:23:01 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0), 0x50400, 0x0) 23:23:01 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0xdc) 23:23:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000000b010400000000000000000a000004070001"], 0x24}}, 0x0) 23:23:01 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065726d70726f66696c6520287b6984c5c331"], 0x13) 23:23:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000180)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x7}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0xa}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c1, 0xe, {@wo_ht, 0x0, @random, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xae, "77a6ce59787b82e488e3627bb0fe0e73b18013d1691ba70ab203dcb7559b1f524d205c3eb013703bf0bca7e59a90d27f91b8930a6a2c9a97e2a1f65b7c7942022ab41acf8083df0c44991c1106267f5c99137fac73186db450a8ebca5c2662e78d2c930319fc6ba6b2d313dbceccc7821a697892dce11539e0927cd273f825fa6d3cd7944282a575fb74d6546690258a8eb10bbe2d43df030e6c7c201ad4244b214647ea88e2a568576d2435bed8"}, {0xdd, 0xfb, "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"}, {0xdd, 0xba, "05bab9f4019c84ad771f02a3eeda5abc6b6f6dafab77ab769b6d64da23e054c105af01199f339c605b2e51d2a8072be30e73e73af6554ab2b7c8fe51a1cc0febca66b8f35cc36949fd85776449dd70909cb1a62acdee02702eaaa5d4a8c513412c0ba81c6598f09588bc8d442067efdcf4964626819e04080225b43bf79905b00a42661a6f35e6ddcfe3f517ee3effafe4b9eb8b2ffb9f6b1fc056ddc0faa9e617f95b1097b6c41e924df78f24cb15fbf4638d791c63a316924f"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xd, 0x7f, [@mesh_config={0x71, 0x7}]}, @NL80211_ATTR_FTM_RESPONDER={0x1fc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x61, 0x3, "4b33de71baa1ddd6d5e8008b8c8de4572eea364d1c054f2e4187965c21d8125cd004a639382db571c07ea66739354ec124441e6b76f15b0c10ada37c3f69d2a16ba9ad2221b77eece53d5ef6480f40534dffd24be9e49e772ed509aa70"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb9, 0x3, "4ea5f5ea87d12e50b5f521521383e054947785d7b8f236bcbb1dbb1fca1f5200adca71f32ea8e40c5227acf5c6afcaba7f2feef971b1fcf4a4291cd055015b08576d1178cd9001a6087912873bb753005008cfef533dc6ed584178b39970e354f63f23ab08200e80bd385a0392269ea0d580da2b3f706583e81fc3aa2ee014b1aa1c62de05b4216cb9d32cf5d68b145e0c515a78d89097b0b825379f1159103ae2efc150c6e2c1191d5540653014577861bdc69e23"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd, 0x2, "a32bf37119d194dadc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb5, 0x3, "f615c605af4001ece1f1a40e98877dde23ed5a94e8d6a1bfabaeb72822b2a0aae94e7948753d47d18ab1965cd0900b9a5c19dd247e2779036dbd1fa3b54ff0405fdd3eca15b6a006b9a2328413fcc291497c181efb96e67d80d252c96e75ddfcab3a9716d64aec8a2de5aa1576684be44b04579e4f2f06ae0a9ec7c3325159b15b4b3509c372accb27256eca87aee304daf90f36371badecdcf9b0e153204887ec7a353cd72629a17b6cbb3953ab2aad9f"}]}, @NL80211_ATTR_BEACON_HEAD={0x4a1, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="60fe50af87a3"}, 0x0, @random, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x4b, {0x0, 0x0, 0x0, "9509bec10c1d97838cb75cc7c491023e0e2b414b4c708be246541f72a8244cdfa735b4407d2eb9761543a627d0ced1241558597c74d910a1c0477970cfb70d33f52db7f0da358b29"}}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x7e, "1ffb95fc77f4384165ef6bf03727892e65705a440b2e08a12b1361ecff8eb154209139430faf6ab96dde376012753a22484000644c33e4672413d72ed8c3a24db60251d588f6f3d7b50342caed2185de081803226614dec401c8130ab759095046a352b9efff679a93c744ae75fd18dee086e76cb8cc0389df19a62a8ded"}, {0xdd, 0xd7, "c1eea7eb9b2ed6880a4bb20dfcc2312656f93868623825e03f4f9c15b69cb060762adc5d969152170acffa2a4dfcbec948c60e2defd78acd800625a5aa8141d27824696a11464537d7499f0f03a8dbff00fa768b47fa8c04e0174de5a63b9b4426687ca835788b2a6027d9b84496f7608cf745187164239c205d6a00e3facf7b8bf8fe6c020cc07ef84f7965c4f8946c2b5e0efc3c7505f2f85e7fbf965eecb49845a3207a0acf437b898f0d20247ebe955c64d7af221cf3a55a60c39588e869748c2c88cfb337907ec8d00432e218b13c192c6d766d32"}, {0xdd, 0xfa, "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"}, {0xdd, 0xf3, "eb789f1cec02b5011347389020a5b8d221fa951494292c2c8d4da6528ce144d5fae4aed3be538f0653e651779326e67b70133f272a74798cadfeb77b3f9dff974d154e6e988652b86946fd1ab36ce7668a72cf6b46498cc522aeba8bc52460592df0dbd2de328fcbdfe7163586f642cee07c96b6ff15306e03d40087da0244eb798da683c26fabc7879e4efe9158a0455e31615b2c4d2863cb9f8b28aa706dbc96de39b4e63816617ae66019d36cfb0addcdd47fb90ec32a5c5c587a0b6d7e286156ed5c7c3467dbff3a55af3a38d629346641e118f3f49a590eeb85b2b1691c89950ed452d4de5a29728b9f453b1429a5ca11"}, {0xdd, 0x15, "b639f7fb935b3805eafdf10d88a00b48d85540ac05"}, {0xdd, 0x89, "8228a43bf104e1e597222c715535cd95abaacb807a55aaf316e1c4d3f0c7cc97b188508374bcf4e3d14d9cb04b2927b642da21cb7302bcb25de3013a2b404af2d4901616e552a17a9e03f483726b91209f770b67e06f690d668028690d932f6e0be31b02217d0dc4f33dd947cbd26295891eadf431d00e43822dc232e0b91f4d3b820b0f638a88c4d6"}]}}, @NL80211_ATTR_IE={0x185, 0x2a, [@random={0x0, 0x30, "0ae957d3faf050d1c402d54a8eb06361f36a74abbec06eefc00d8433f21fcfd1d1468bb0be2b6a573518cd66a4582b3a"}, @cf={0x4, 0x6}, @ibss={0x6, 0x2}, @perr={0x84, 0x141, {0x0, 0x13, [@ext, @ext={{}, @device_b, 0x0, @device_b}, @not_ext={{}, @broadcast}, @not_ext, @ext={{}, @broadcast}, @not_ext={{}, @device_b}, @not_ext={{}, @device_b}, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext, @ext, @not_ext={{}, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @ext={{}, @device_a, 0x0, @broadcast}, @ext={{}, @broadcast}, @ext, @ext={{}, @broadcast}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "e8761a1f937b5b2aef65f4811ed152b634310644d12e3aaff2da8478018061ff0be4eda8bdf031b94a841d42fbfaba14b8ec79a824a063e128bcf4bf41ecf62568b077fec7bf96883127fc958a3b87c9c3a2eb67f76f53e6163b2432c6a5efd80ea26bd16957baf8122aaffb9f7dad2076b0de72c35859c630d36eb4d1"}]}], @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]]}, 0xec4}}, 0x0) [ 3490.010004][ T24] audit: type=1400 audit(1661124182.055:140): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=287B6984C5C331 pid=31375 comm="syz-executor.3" [ 3490.043058][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:23:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x0) 23:23:02 executing program 3: syz_open_dev$audion(&(0x7f00000000c0), 0x1f, 0x24501) 23:23:02 executing program 4: mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x0, 0x38031, 0xffffffffffffffff, 0x0) 23:23:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 23:23:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x32, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) 23:23:02 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x0, 0x5e, ['\x00', '[\x00', '/proc/thread-self/attr/current\x00', '/dev/autofs\x00']}, 0x4b) 23:23:02 executing program 0: mlock2(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil) 23:23:02 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='@'], 0x55) 23:23:02 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) 23:23:02 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 23:23:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x13, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 23:23:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a00000006"], 0x2a) 23:23:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x1c, 0x13, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}}, 0x0) 23:23:03 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x84002, 0x0) 23:23:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$fb(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000001, 0x10011, r0, 0x0) munmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000) 23:23:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000280), 0x4) 23:23:03 executing program 4: mlock2(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff0000/0x4000)=nil) 23:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 23:23:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) 23:23:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000240)) 23:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000022c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 23:23:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 23:23:03 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x55) 23:23:03 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000180), 0xb, 0x101182) write$cgroup_int(r0, &(0x7f0000000000), 0x12) 23:23:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, 0x0) 23:23:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 23:23:04 executing program 1: mremap(&(0x7f0000ff7000/0x5000)=nil, 0x5000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 23:23:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) 23:23:04 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 23:23:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000340)) 23:23:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x0) 23:23:04 executing program 2: mount$fuseblk(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 23:23:04 executing program 3: r0 = socket(0x23, 0x5, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 23:23:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xa}, 0x0) 23:23:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r1, 0x0, 0x0, 0x1}}, 0x20) 23:23:05 executing program 5: pkey_mprotect(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) mlock2(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) 23:23:05 executing program 4: r0 = socket(0xa, 0x3, 0x13) read$usbfs(r0, 0x0, 0x0) 23:23:05 executing program 3: syz_clone(0x24009400, 0x0, 0x0, 0x0, 0x0, 0x0) 23:23:05 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) select(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f00000000c0)={0x8}, 0x0) 23:23:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000400)) 23:23:05 executing program 0: r0 = socket(0x26, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) 23:23:05 executing program 4: fanotify_mark(0xffffffffffffffff, 0x56, 0x1008, 0xffffffffffffffff, 0x0) 23:23:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 23:23:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x203, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 23:23:05 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)) 23:23:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x20}}, 0x0) 23:23:05 executing program 4: r0 = socket(0x2, 0x3, 0x13) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0) [ 3490.653033][T31393] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 3493.745280][T31478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 23:23:05 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x6, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="24000004"], 0x28}, 0x0) 23:23:05 executing program 2: r0 = socket(0x23, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x200000c4) 23:23:05 executing program 3: r0 = socket(0xa, 0x3, 0x13) read$usbfs(r0, &(0x7f0000000080)=""/101, 0x65) 23:23:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x80, 0x0}, 0x0) 23:23:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 23:23:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 23:23:06 executing program 0: mlock2(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) mlock2(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) 23:23:06 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x1b0}, 0x0) 23:23:06 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000180), 0xb, 0x101182) write$cgroup_int(r0, 0x0, 0x0) 23:23:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x21, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 23:23:06 executing program 0: r0 = socket(0x2, 0x3, 0x13) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, 0x15, 0x0, 0x0, &(0x7f0000000080)=[{0x3}], 0x10}, 0x0) 23:23:06 executing program 5: mbind(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x4001, 0x0, 0x0, 0x0) 23:23:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x20}}, 0x0) 23:23:07 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmat(r0, &(0x7f0000ff4000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) 23:23:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$fb(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10011, r0, 0x0) pkey_mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 23:23:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) 23:23:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 23:23:07 executing program 2: mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) 23:23:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x18, 0x3, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 23:23:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) 23:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000320001000000000000eeffff01"], 0x18}}, 0x0) 23:23:07 executing program 1: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 23:23:07 executing program 0: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000003, 0x0) 23:23:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x1c}}, 0x0) 23:23:07 executing program 3: timer_create(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 23:23:07 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '\x00\x00\xcbW&f!\xc3\xf6\xd3\x00\xb0~\x80\xd8\xa4\xa0\n\v\xc7\x9e/u\xae\xb6YY\xf0`\xeb\x19\xe9u\xf3\xa2\x1b/\xe6\xccx\x81-Y\xd1\x90`w\x94o\xad\x84i\t\xd5\x8f\xe1R\x14\x14,\xe0O\xd3\xff\xfd\xbe\xf6\xbe\xf8\xb0\xdd\xb2\x97\xf7\xa8\xd2\xb2 \xb6\xb5\xedU\x96\xdf\xa2\x9c\xc5\x94\r\xaa\x11\xdc\xdb\xbc\x1fP[wd\x88w\x19\v\xbdY\xac\xb9\x85w\\\x96M\xf1\x8b(\xa5\xb7(?|9\x9dF\xbc\xf0\x1d\x01\x87\x8dtM\x99\n~\xa5\xfb\xa3\x14\x96G\x1aP\xbb$\xd5G\xdeQQp\x12\nV\xb1zW\xc3\xdc\xd0\xdc+F_\xc5kU\xd2\xfdb\x1e\x8b\xd6\x97\x00\xa9\x05&\xf6\xb5iFM\x17\xc2\xb2\xfa.\x86\a\xd6\x9f?yp\x81S\xe6`\xffp\x86\xb8\xdc\xe3\xa5\x8f\xaf\xfa\xa9meo\xd4\xbe\x8b\x18]L\xe1`\'MP2\x1e\xa4~\x0f\xcf\xba\xec\xbc\xc4\xdb\"Y\f\xe7\xd7H\x18\x01\x9b\x9f\x92]\xf5\xbd\x9a*\x1a\"\xcaO'}, 0xffffffffffffff6a) 23:23:07 executing program 4: r0 = socket(0x23, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) 23:23:07 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') close$fd_v4l2_buffer(r0) 23:23:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) 23:23:08 executing program 1: r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f00000000c0)=""/192, 0xc0) 23:23:08 executing program 4: r0 = socket(0xa, 0x6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x0) 23:23:08 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$msr(r0, 0x0, 0xfffffffffffffe84) 23:23:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000070a0102000000000000f0ffffffffff0800020073797a32"], 0x20}}, 0x0) 23:23:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$usbfs(r0, &(0x7f0000000680)=""/4096, 0x1000) [ 3496.303906][T31549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 23:23:08 executing program 3: syz_open_procfs(0x0, &(0x7f0000000400)='net/arp\x00') 23:23:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}}, 0x0) 23:23:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0) 23:23:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 23:23:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x0) 23:23:08 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 23:23:08 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) 23:23:08 executing program 4: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 23:23:08 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, 0xfffffffffffffffe) 23:23:08 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0xfffffffffffffdcf) 23:23:09 executing program 3: r0 = socket(0xa, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 23:23:09 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') 23:23:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}]}, 0x1c}}, 0x0) 23:23:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 23:23:09 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:23:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x121, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 23:23:09 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/xfrm_stat\x00') 23:23:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}}, 0x0) 23:23:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f00000001c0)={0xa, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="240000d6"], 0x28}, 0x0) 23:23:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000320001"], 0x18}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) 23:23:09 executing program 2: setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 23:23:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000002c0)={@private0}, 0x2) 23:23:09 executing program 5: r0 = socket(0xa, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0xfffffffffffffd9a) 23:23:09 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1000, 0x402) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0x14) 23:23:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 23:23:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000060000000c7d"], 0x20}}, 0x0) 23:23:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 23:23:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x1}, 0x24}}, 0x0) 23:23:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2}}) 23:23:10 executing program 2: select(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0xd}, 0x0) 23:23:10 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1ff, 0x0) 23:23:10 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fc75e0f5"}}) [ 3498.244264][T31608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 23:23:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x0, 0xb, 0x5, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 23:23:10 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 23:23:10 executing program 2: syz_clone(0x8000800, 0x0, 0x0, 0x0, 0x0, 0x0) 23:23:10 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 23:23:10 executing program 5: r0 = socket(0x2, 0x3, 0x13) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0}, 0x0) 23:23:10 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_flowlabel\x00') 23:23:10 executing program 1: r0 = socket(0x18, 0x0, 0x2) ioctl$IMSETDEVNAME(r0, 0x80184947, 0x0) 23:23:10 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000003, 0x12, r0, 0x0) 23:23:10 executing program 2: r0 = socket(0x1e, 0x4, 0x0) bind$isdn(r0, &(0x7f0000000300), 0x6) 23:23:10 executing program 4: syz_open_dev$audion(&(0x7f00000001c0), 0x0, 0x680) 23:23:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "1e4e86de9674b6dace87a13ad2f2546dc4ff43bfd2530c796a91a8482a25d2a8", "d240b3920481b8276ba6e09ec287290e3b0f0b24080dafc6f95c2afa495bd2c5"}}}]}, 0x268}}, 0x0) 23:23:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 23:23:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 23:23:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) 23:23:11 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000300)=@profile={'permprofile ', '\x00\x00}F\xd2\v\xa3'}, 0x13) 23:23:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d1d32bbd7000fddbdf2508"], 0x60}}, 0x0) 23:23:11 executing program 4: socketpair(0x25, 0x5, 0x5, 0x0) 23:23:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c) 23:23:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000360001000000000000eeffff01"], 0x18}}, 0x0) 23:23:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000000180)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x31, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c1, 0xe, {@wo_ht, 0x0, @random, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xae, "77a6ce59787b82e488e3627bb0fe0e73b18013d1691ba70ab203dcb7559b1f524d205c3eb013703bf0bca7e59a90d27f91b8930a6a2c9a97e2a1f65b7c7942022ab41acf8083df0c44991c1106267f5c99137fac73186db450a8ebca5c2662e78d2c930319fc6ba6b2d313dbceccc7821a697892dce11539e0927cd273f825fa6d3cd7944282a575fb74d6546690258a8eb10bbe2d43df030e6c7c201ad4244b214647ea88e2a568576d2435bed8"}, {0xdd, 0xfb, "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"}, {0xdd, 0xba, "05bab9f4019c84ad771f02a3eeda5abc6b6f6dafab77ab769b6d64da23e054c105af01199f339c605b2e51d2a8072be30e73e73af6554ab2b7c8fe51a1cc0febca66b8f35cc36949fd85776449dd70909cb1a62acdee02702eaaa5d4a8c513412c0ba81c6598f09588bc8d442067efdcf4964626819e04080225b43bf79905b00a42661a6f35e6ddcfe3f517ee3effafe4b9eb8b2ffb9f6b1fc056ddc0faa9e617f95b1097b6c41e924df78f24cb15fbf4638d791c63a316924f"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xd, 0x7f, [@mesh_config={0x71, 0x7}]}, @NL80211_ATTR_FTM_RESPONDER={0x1fc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x61, 0x3, "4b33de71baa1ddd6d5e8008b8c8de4572eea364d1c054f2e4187965c21d8125cd004a639382db571c07ea66739354ec124441e6b76f15b0c10ada37c3f69d2a16ba9ad2221b77eece53d5ef6480f40534dffd24be9e49e772ed509aa70"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb9, 0x3, "4ea5f5ea87d12e50b5f521521383e054947785d7b8f236bcbb1dbb1fca1f5200adca71f32ea8e40c5227acf5c6afcaba7f2feef971b1fcf4a4291cd055015b08576d1178cd9001a6087912873bb753005008cfef533dc6ed584178b39970e354f63f23ab08200e80bd385a0392269ea0d580da2b3f706583e81fc3aa2ee014b1aa1c62de05b4216cb9d32cf5d68b145e0c515a78d89097b0b825379f1159103ae2efc150c6e2c1191d5540653014577861bdc69e23"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd, 0x2, "a32bf37119d194dadc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb5, 0x3, "f615c605af4001ece1f1a40e98877dde23ed5a94e8d6a1bfabaeb72822b2a0aae94e7948753d47d18ab1965cd0900b9a5c19dd247e2779036dbd1fa3b54ff0405fdd3eca15b6a006b9a2328413fcc291497c181efb96e67d80d252c96e75ddfcab3a9716d64aec8a2de5aa1576684be44b04579e4f2f06ae0a9ec7c3325159b15b4b3509c372accb27256eca87aee304daf90f36371badecdcf9b0e153204887ec7a353cd72629a17b6cbb3953ab2aad9f"}]}, @NL80211_ATTR_BEACON_HEAD={0x4a1, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="60fe50af87a3"}, 0x0, @random, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x4b, {0x0, 0x0, 0x0, "9509bec10c1d97838cb75cc7c491023e0e2b414b4c708be246541f72a8244cdfa735b4407d2eb9761543a627d0ced1241558597c74d910a1c0477970cfb70d33f52db7f0da358b29"}}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x7e, "1ffb95fc77f4384165ef6bf03727892e65705a440b2e08a12b1361ecff8eb154209139430faf6ab96dde376012753a22484000644c33e4672413d72ed8c3a24db60251d588f6f3d7b50342caed2185de081803226614dec401c8130ab759095046a352b9efff679a93c744ae75fd18dee086e76cb8cc0389df19a62a8ded"}, {0xdd, 0xd7, "c1eea7eb9b2ed6880a4bb20dfcc2312656f93868623825e03f4f9c15b69cb060762adc5d969152170acffa2a4dfcbec948c60e2defd78acd800625a5aa8141d27824696a11464537d7499f0f03a8dbff00fa768b47fa8c04e0174de5a63b9b4426687ca835788b2a6027d9b84496f7608cf745187164239c205d6a00e3facf7b8bf8fe6c020cc07ef84f7965c4f8946c2b5e0efc3c7505f2f85e7fbf965eecb49845a3207a0acf437b898f0d20247ebe955c64d7af221cf3a55a60c39588e869748c2c88cfb337907ec8d00432e218b13c192c6d766d32"}, {0xdd, 0xfa, "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"}, {0xdd, 0xf3, "eb789f1cec02b5011347389020a5b8d221fa951494292c2c8d4da6528ce144d5fae4aed3be538f0653e651779326e67b70133f272a74798cadfeb77b3f9dff974d154e6e988652b86946fd1ab36ce7668a72cf6b46498cc522aeba8bc52460592df0dbd2de328fcbdfe7163586f642cee07c96b6ff15306e03d40087da0244eb798da683c26fabc7879e4efe9158a0455e31615b2c4d2863cb9f8b28aa706dbc96de39b4e63816617ae66019d36cfb0addcdd47fb90ec32a5c5c587a0b6d7e286156ed5c7c3467dbff3a55af3a38d629346641e118f3f49a590eeb85b2b1691c89950ed452d4de5a29728b9f453b1429a5ca11"}, {0xdd, 0x15, "b639f7fb935b3805eafdf10d88a00b48d85540ac05"}, {0xdd, 0x89, "8228a43bf104e1e597222c715535cd95abaacb807a55aaf316e1c4d3f0c7cc97b188508374bcf4e3d14d9cb04b2927b642da21cb7302bcb25de3013a2b404af2d4901616e552a17a9e03f483726b91209f770b67e06f690d668028690d932f6e0be31b02217d0dc4f33dd947cbd26295891eadf431d00e43822dc232e0b91f4d3b820b0f638a88c4d6"}]}}, @NL80211_ATTR_IE={0x185, 0x2a, [@random={0x0, 0x30, "0ae957d3faf050d1c402d54a8eb06361f36a74abbec06eefc00d8433f21fcfd1d1468bb0be2b6a573518cd66a4582b3a"}, @cf={0x4, 0x6}, @ibss={0x6, 0x2}, @perr={0x84, 0x141, {0x0, 0x13, [@ext, @ext={{}, @device_b, 0x0, @device_b}, @not_ext={{}, @broadcast}, @not_ext, @ext={{}, @broadcast}, @not_ext={{}, @device_b}, @not_ext={{}, @device_b}, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext, @ext, @not_ext={{}, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @ext={{}, @device_a, 0x0, @broadcast}, @ext={{}, @broadcast}, @ext, @ext={{}, @broadcast}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "e8761a1f937b5b2aef65f4811ed152b634310644d12e3aaff2da8478018061ff0be4eda8bdf031b94a841d42fbfaba14b8ec79a824a063e128bcf4bf41ecf62568b077fec7bf96883127fc958a3b87c9c3a2eb67f76f53e6163b2432c6a5efd80ea26bd16957baf8122aaffb9f7dad2076b0de72c35859c630d36eb4d1"}]}], @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]]}, 0xec4}}, 0x0) 23:23:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1400000022000100000000000000000002"], 0x14}}, 0x0) 23:23:11 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 23:23:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000060000000c"], 0x20}}, 0x0) 23:23:11 executing program 3: r0 = socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 23:23:11 executing program 2: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 23:23:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x6, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$'], 0x28}, 0x0) 23:23:12 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) 23:23:12 executing program 5: r0 = socket(0x2, 0x3, 0x13) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}, 0xc800) 23:23:12 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 23:23:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0xf0, 0x15, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE, @NFTA_OBJ_USERDATA={0x108, 0x8, "49f7a0a3e3f5c70a61a901c3b10489f651afbceb51bbbebb76444b39319dd3f64cbf8a170a65e4ad5e7d8ee1ad75fbd72ddcadc1482dfab9b2b03e56a0eb576d0d124317f488c2961053cac21c7e0af77e42d6afdadbd19fe1763f38ba6ff724ec2334b3cbbf8e4cfc9c5083dc4b6ca27d1b91f6fdc2f4a9bb6a57e5e6c33b65b2da9c3e9505c595b538d1f1687644479085faf5b1cd0b9f20097618400748a261f28dde356f3ce004"}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0xf0}}, 0x0) 23:23:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 23:23:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x6) 23:23:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)='9', 0x1}], 0x1, &(0x7f00000002c0)=[@hoplimit={{0x14}}, @rthdr={{0x18}}], 0x30}, 0x0) 23:23:12 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x1b0}, 0x0) 23:23:12 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$fb(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000001, 0x10011, r0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 3500.365995][T31680] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. 23:23:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) 23:23:12 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) 23:23:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201}, 0x14}}, 0x0) 23:23:12 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x24000) 23:23:12 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fc75e0f5"}, 0x0, 0x4, {}, 0xdd13}) 23:23:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, '^-${[+\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}}, 0x0) 23:23:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000340)=0x4, 0x4) [ 3500.872805][T31701] nft_compat: unsupported protocol 0 23:23:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 23:23:13 executing program 4: socket$inet(0x2, 0x80803, 0x1) 23:23:13 executing program 5: sysinfo(&(0x7f0000000040)) 23:23:13 executing program 0: r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x7, {{0x1}}}, 0x10) 23:23:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe89}, 0x0) [ 3501.209616][T31711] tipc: Can't bind to reserved service type 1 23:23:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}]}, 0x1c}}, 0x0) 23:23:13 executing program 2: lstat(&(0x7f0000000000)='.\x00', &(0x7f0000000080)) 23:23:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') 23:23:13 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0xffffffe3) 23:23:13 executing program 0: mlock2(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000), 0x4, 0x2) 23:23:13 executing program 3: r0 = socket(0x23, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000040) 23:23:13 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f00000010c0)=""/4096, 0x1000) 23:23:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0xf0, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0x108, 0x8, "49f7a0a3e3f5c70a61a901c3b10489f651afbceb51bbbebb76444b39319dd3f64cbf8a170a65e4ad5e7d8ee1ad75fbd72ddcadc1482dfab9b2b03e56a0eb576d0d124317f488c2961053cac21c7e0af77e42d6afdadbd19fe1763f38ba6ff724ec2334b3cbbf8e4cfc9c5083dc4b6ca27d1b91f6fdc2f4a9bb6a57e5e6c33b65b2da9c3e9505c595b538d1f1687644479085faf5b1cd0b9f20097618400748a261f28dde356f3ce004"}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0xf0}}, 0x0) 23:23:13 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x1) read$eventfd(r0, 0x0, 0x0) 23:23:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000140)=0x3) 23:23:13 executing program 3: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 23:23:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d1d32bbd7000fddbdf2508"], 0x60}}, 0x0) [ 3501.848932][T31735] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. 23:23:13 executing program 5: mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 23:23:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, '^-${[+\x00'}]}, 0x28}}, 0x0) 23:23:14 executing program 1: r0 = socket(0x18, 0x0, 0x2) accept4$alg(r0, 0x0, 0x0, 0x0) 23:23:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001500)={0x0, {0x0, 0x0, 0x80000000}}) 23:23:14 executing program 0: lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 23:23:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="12"]) 23:23:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x7}}, 0x0) 23:23:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$pptp(r0, &(0x7f0000000000), 0x1e) 23:23:14 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') 23:23:14 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)) 23:23:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x18, 0x32, 0x1, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 23:23:14 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) 23:23:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) 23:23:14 executing program 3: r0 = socket(0x2, 0x3, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) 23:23:14 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x23) 23:23:14 executing program 2: socket$tipc(0x1e, 0x4, 0x0) 23:23:14 executing program 1: r0 = socket(0x2, 0x3, 0x13) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)='\v', 0x1}], 0x1, &(0x7f0000000940)=[{0x10, 0x115}, {0x10, 0x8a}], 0x20}, 0x20000c50) 23:23:14 executing program 4: r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x10) 23:23:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x13, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 23:23:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x26, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 23:23:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x200000000010009) 23:23:15 executing program 1: select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x5}, 0x0, 0x0) 23:23:15 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e"], 0x55) 23:23:15 executing program 5: syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) 23:23:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0xffffffffffffffff) 23:23:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000060000000c7d16000000000000000000"], 0x20}}, 0x0) [ 3503.560553][T31792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:23:15 executing program 0: socketpair(0x25, 0x1, 0x5, &(0x7f0000000100)) 23:23:15 executing program 1: r0 = socket(0x2, 0x3, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 23:23:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000360001"], 0x18}}, 0x0) 23:23:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/arp\x00') close$fd_v4l2_buffer(r0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 23:23:15 executing program 5: r0 = socket(0xa, 0x3, 0x13) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 23:23:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="240000000000000029000000320000001b"], 0x28}, 0x0) 23:23:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hopopts={{0x18}}, @hoplimit_2292={{0x14}}], 0x30}, 0x0) 23:23:16 executing program 4: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000240)) 23:23:16 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) 23:23:16 executing program 5: socketpair(0x6, 0x0, 0x0, &(0x7f0000000280)) 23:23:16 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x102, 0x0) 23:23:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}}}}}) 23:23:16 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000002000/0x2000)=nil) shmat(r0, &(0x7f0000003000/0x4000)=nil, 0x6000) 23:23:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:23:16 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) 23:23:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 23:23:16 executing program 0: ptrace$peeksig(0x4209, 0xffffffffffffffff, 0x0, 0x0) 23:23:16 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xfadb29bf54ae6874, 0x0) 23:23:16 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0x5460, 0x0) 23:23:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}) 23:23:16 executing program 3: socketpair(0x2c, 0x3, 0x6, &(0x7f0000000000)) 23:23:16 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 23:23:16 executing program 2: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000140)=""/4096) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000002000/0x2000)=nil) shmat(r0, &(0x7f0000003000/0x4000)=nil, 0x6000) 23:23:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) 23:23:16 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) 23:23:17 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0xc0880, 0x0) 23:23:17 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 23:23:17 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000002000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000140)=""/4096) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000002000/0x2000)=nil) shmat(r1, &(0x7f0000003000/0x4000)=nil, 0x6000) shmctl$IPC_INFO(0x0, 0x3, 0x0) 23:23:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@empty, @broadcast}}) 23:23:17 executing program 5: socketpair(0x15, 0x5, 0x9a, &(0x7f00000003c0)) 23:23:17 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 23:23:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @remote}}}}) 23:23:17 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 23:23:17 executing program 1: socketpair(0x3, 0x0, 0xc09, &(0x7f0000000000)) 23:23:17 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0x40305828, 0x0) 23:23:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 23:23:17 executing program 0: socketpair(0x11, 0x3, 0xe0, &(0x7f0000000040)) 23:23:17 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) 23:23:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000340)={'batadv_slave_1\x00', {0x2, 0x0, @dev}}) 23:23:17 executing program 1: socketpair(0x21, 0x0, 0x2, &(0x7f0000000040)) 23:23:17 executing program 2: socketpair(0x2b, 0x1, 0x0, &(0x7f0000000880)) 23:23:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)=@ipv6_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) 23:23:17 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 23:23:18 executing program 3: select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000000100)={0x77359400}) 23:23:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) 23:23:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xff, 0x4) 23:23:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:23:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0xfffffffffffffffe, 0x0) 23:23:18 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000b80), 0x10d442, 0x0) 23:23:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000013c0)=0x5, 0x4) 23:23:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @dev}}}}) 23:23:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x0}) 23:23:18 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb705, 0x0) 23:23:18 executing program 0: r0 = socket(0x2, 0x3, 0x13) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[{0x10, 0x115}, {0x10, 0x8a}], 0x20}, 0x20000c50) 23:23:18 executing program 4: open$dir(&(0x7f00000004c0)='./file0\x00', 0x100, 0x0) 23:23:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) 23:23:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000000901"], 0x3c}}, 0x0) 23:23:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000039c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) 23:23:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000046000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="260f01c20f01c3b9800000c00f3235008000000f3066ba4200b830df0000ef3508000000c74424000c000000c64424022906924b0f0114240f01c3b95c0300000f32c4c209ae3d09640000bfba410066b8010066ef0f8217000000", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) 23:23:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0x5d00}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0xff, 0x42, &(0x7f00000002c0)=""/66, 0x41100, 0x1, '\x00', r4, 0x0, r1, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x10, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0xffffffffffffffff, r6, 0x0, 0xd, &(0x7f00000004c0)='%[[-{@]\'^,\'+\x00'}, 0x30) [ 3507.159634][T31911] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 23:23:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xa4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0xe8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @private=0xa010102, 0x4, 0xffffffff}}}, {{@arp={@loopback, @local, 0x0, 0xffffffff, 0x7, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x0, 0x5118, 0x7, 0x0, 0x7ff, 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @remote, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 23:23:19 executing program 1: r0 = syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019c4f40833280102902a0000000109023b00010000000009040000000e010000052406000105240000000d240f0100000000000000000006"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 23:23:19 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'netdevsim0\x00', 0x1000}) [ 3507.357394][T31917] bond0: option fail_over_mac: unable to set because the bond device has slaves 23:23:19 executing program 5: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') syz_usb_connect$uac1(0x0, 0xa7, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x7, 0x3, 've'}, @mixer_unit={0xa, 0x24, 0x4, 0x0, 0x0, "6026bb29f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, '>', "3ca0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x5, 0x0, {0x7}}}}}}}]}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x103040, 0x0) syz_usb_connect(0x4, 0x874, &(0x7f0000000880)={{0x12, 0x1, 0x10, 0xd6, 0x6d, 0x27, 0x0, 0x1bbb, 0x203, 0xea6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x862, 0x2, 0x54, 0xaf, 0x10, 0x8, [{{0x9, 0x4, 0x73, 0x49, 0x9, 0x24, 0x85, 0x11, 0x2, [], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x7f, 0xd0, 0x6}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x5, 0x20, 0x3}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x7, 0x8, [@generic={0xcc, 0x11, "ac94a180fccccdd03a51e48240cd85b0fd5ae278613beee841e9daf30a7cb86e0ddf488226679503094d4216e61292720bdd978550ac1b6f5dfc2fbd8088a65722c63ee07fc0b59f1d5be523543861e2b1882dab89cb21d34f43def9aa52e0e3910f43ca10e4be485b4ade59626c88a6935a7f1e63d1a6e6781bd24fe0fe95c85c225ed317f64988a7a040a422f840d25460e90ce261b36d07a574a8c4de10a839fd6f71bf3bf95016be12397a1939b3daa1905a8be9d190f32b05e8a6279cd0cf02a76e2b7d31e953e6"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x40, 0x8, [@generic={0x8b, 0x23, "ac774bb3156c7bccd20569944cd136f9c0d489db582f7b093d05ef25f272c4c4719471ff9a5f2d8b5f1abbffa8f9e6122b92d22c3e2a49104086545ef36865b04ed091009e6fcee0d700220221e094f980d532409d9dd417ddecdae519975a325279a3f78c91442189e3801f5885276e0aa1a979adcf52bfc277f3a4e8873230c43e51b04fba123b14"}, @generic={0x51, 0x23, "e60bdbe0d12c3777cb5cfd7917126fdff3aca949e939debc2ec05f5337d512fc7af32f1baa212d788da74d68b2817d121d91473e7052174370daaedcd882b555b6dacbb1fbf21e7e3a9b6d0abf8bb2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x6, 0x5, 0x19, [@generic={0xaf, 0x2, "6a43825a4544a01a4d77169816648282bdd7fc3ec520c76055acf284e084504317f34b5dafd8919d04451e5966f2913ecd6b997f70e25a898459f641f5a3f40e1a276b32eb3390d116617544f8d1f6f895a2781c22ede6349493ec72900625df5b0cfad0469b6d628b70b9217032f964ad2cafa006ad38b8803b36af9cb52a759a811f969dbc214584cb1841738f4f356e98165d196e289a4dd4e155991149dc82c64a4809c7ab5b92427335ce"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x460, 0xfd, 0x7, 0x9, [@generic={0x9f, 0x30, "2366e0c30ada8e8e59fd667f7f77a763de51eeed804ddaad433eb42013e988c13b5280b1b9b00236dbe9b4074e49a06a2b7c1482a88b8d70db32268714e8c4cf9f5ec10fe238ae86fc471af61ac10d8d8c6e6e1ceff716492caeeb27f18a9c62774c074a4bcabd4df1567822855d1cb9badbd97f0d9e1a22bc43840b65106e4a218b823206cb8cac4719e17d0ed71638d536c160d450352ab5e23193c3"}, @generic={0xc5, 0x23, "674d62426fe2699fe3915f1cf21a14ade97b6711058feea53d78ed5e3c70497ae2ce622acb51e67956dd2835e4acc5f2ed74c5ae72aa973337f31bbea080a93fc79496d6a6820a243549743d95c63a0d9041b0bd3e342c8753ca9bd758411942e3a9a60b518b2195c97967e880645ada1c4a6e8206a6af69b95663929fb042245560d628366dd0cb3417014ee39fe9633a2d14536c31f377a061e3db052bf15b2b41e326b6fed7820606420a3acbcbce6eea3ec1ff95a74a98c32eae5fed227f93a4d0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7f, 0x2, 0xff}}]}}, {{0x9, 0x4, 0x39, 0x9, 0xd, 0x3, 0x90, 0x70, 0x40, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f8715a35"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0xb10, 0x6, 0x4f}, {0x6, 0x24, 0x1a, 0xb7f0, 0x9}, [@mdlm={0x15}]}], [{{0x9, 0x5, 0xe, 0x4, 0x10, 0xe2, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6}, @generic={0xb, 0x24, "f28fee243842b7552e"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x80, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x30}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x4, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x9, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4b, 0xd6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x8, 0x1}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0x20, 0x2, [@generic={0x53, 0x23, "001da4e8d94b748834828ee3bacffb19e03d8b0f207b496d72bc87630d093ba864c5074767da59cde41114008ccb25dcd174165215458c9818fd4661026190b084a3f2384de9da778d3bff7759cd5ec0c5"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x3, 0x3, 0xcc, [@generic={0xf6, 0x30, "df71c2d0306a1e7c47a6c039686b949347c424dd1ce984dc58a5038ee94ee9090439c9f367bbc9628449e132e93c2a5df8c63bfacc404b4af3d70f7ead952120a10357618dfe91c2414c6eff3c9e81a5f765f736b7a5c0ad62bf0b130ec22b4e9422f506c2cc2a7e00f5c68533d3621235567020d74532d6433f13bacfbd642e4aa80f3207f40be8283af78ca4e2a907a510b31275dff01e2bfac5169a37959d7deaab63f6c7ebb8f48c3639d86653918025d4c61befb4b8b62f1c8be9cbe9af139079f3f60ca86322e9bfaa6ede486e46700e902f93621e7d1bf5508a23972834e09d5ff03f84cd70235e7630a588d732ce612f"}, @generic={0x2e, 0x10, "1607a08505e226430bec0cf37d57e362eb19719b8248224d2d10efaacba124bbf28a0bfd914114def8b51bbd"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x9, 0x0, 0xff, [@generic={0xf0, 0xd, "0b202d326e8d115d98499c766c4f63b38bb030fde28ea76c8d4e620aed108fc57ef6ecd509ed46a78a192679f1592c9cf874c5005ae045e4ef6d8c90c04dfdbefa7b023ce7f108644b0951fd7af9b2d6b85e19db099ea007a9ac0e5e4a2286a68ae7f2a4c26e4d7cf14eaf85fe1c298b9fb3ffc4ca08508fe862943a82703a39c988434febcb9cfb4fb7bd36e3fd5564b03e2a531f79afa3e749d0c1ccd97e399938636f0bb168622c42ab0e80e65061e9855020d145a48ae8937b76ecb08f36f6bd7ee2fa53eaf33b4497b731d04eccfab5015efd339b4669ae3071805b504417f34074e6741e7d14555182797e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x5, 0x9, 0x8, [@generic={0x59, 0x21, "871d99625e12e050e28d026818be13109c1bf745c345a7b3848877d23e6392131daecde0f5da42b63a0e46e288fe3b3a5e86359e23f8211b40b030b9d783985d7b6c909d23deea4869f14a9a143ec767b11256dfbed26e"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x0, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x3f, 0xf9}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x4, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9e72}, @generic={0x94, 0x39, "7d6e54d91ff39cdc8957e3c6d71ec382421f6b255c431f41d6499db18ca64f27699bdcc27c6996979072360bfde15a029d109df213e45f37cb8ea603435487bb917c3d928f8c3d36c838f8e1c311608ad0b5086a25859cf73fbb1a5cc6569745547fb99883379661689c9ac30bb1ef48e1b38dc00763a27af3614354c24d79db2325215a5acd4fceac90a1231c2f7f8cef6d"}]}}, {{0x9, 0x5, 0x96, 0x10, 0x10, 0x1, 0x0, 0x20}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x7f, 0x7, 0x20, 0x5}, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="050f36000320100a01250100000f000100c000ff003000ff000fff00000fc00000c000df080000f4020600793f6663cd850f6ccef690b40dfbd930ee9fe273d72e8bde5240cd3cedea5c2025917ba12c87edfb22a8a6755b34a85de9b66ea2a07573d29c02cc316c87fe03d862ff70311b02d74f7d9386d319e191078dbf77307acc217ffb244a58e22dba3b8a95188035b1355deb9ec39aac372e09c3fa1743fdbeb1b03efedca3c63e4fcbcc40e1ecb95d0b3ab66ce4abafa633e251d3d90ab18c871af3f8a4b039645c642dc4e8d13ccdd77c73378df150e0a9ae2ef35c5192f7a7c1d2c6cf5f3c0449162c55d15aeb22834a9dc083a1009c57d7a2cf24f578496237948d6097aede5a32"], 0x4, [{0x99, &(0x7f0000000180)=@string={0x99, 0x3, "c2101710c1a86b920e80b69997cb41ee15f7ec0f0e2fa1bfac0ce96f73687f0507c2070420e0415f676ff626dae3e58e3e0d22779008ae75d48db10c9336ff1f63db5730554c0fc56362ee2e63a5908a285d5f1e90d4ab25d360895f584ddceeed1288d31e96254d17142af0af34aaa3c602a8bca733968d76dc8232ed7d656623ce3716e98aa48f362df4431ccf0f2edaee75f83af575"}}, {0x20, &(0x7f0000000240)=@string={0x20, 0x3, "992e6f0edcb09c6a43e3397773a716685d8ffe0ec0d673894b37c2afcaf1"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1009}}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x9, 0xffffffffffffffc0, 0xcfa}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimensat(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={{r3, r4/1000+60000}, {r5, r6/1000+10000}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept$alg(r7, 0x0, 0x0) close_range(r1, r7, 0x0) [ 3507.442432][T31924] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:23:19 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) (async) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'netdevsim0\x00', 0x1000}) [ 3507.562306][T31931] x_tables: duplicate underflow at hook 1 23:23:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0) (async) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0x5d00}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0xff, 0x42, &(0x7f00000002c0)=""/66, 0x41100, 0x1, '\x00', r4, 0x0, r1, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x10, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0xffffffffffffffff, r6, 0x0, 0xd, &(0x7f00000004c0)='%[[-{@]\'^,\'+\x00'}, 0x30) 23:23:19 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) (async) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'netdevsim0\x00', 0x1000}) 23:23:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xa4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0xe8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @private=0xa010102, 0x4, 0xffffffff}}}, {{@arp={@loopback, @local, 0x0, 0xffffffff, 0x7, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x0, 0x5118, 0x7, 0x0, 0x7ff, 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @remote, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 3507.782242][T17879] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 3507.802215][T31937] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 3507.812971][T31219] usb 2-1: new high-speed USB device number 113 using dummy_hcd 23:23:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000046000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="260f01c20f01c3b9800000c00f3235008000000f3066ba4200b830df0000ef3508000000c74424000c000000c64424022906924b0f0114240f01c3b95c0300000f32c4c209ae3d09640000bfba410066b8010066ef0f8217000000", 0x5b}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)=ANY=[]) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) 23:23:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xa4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0xe8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @private=0xa010102, 0x4, 0xffffffff}}}, {{@arp={@loopback, @local, 0x0, 0xffffffff, 0x7, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x0, 0x5118, 0x7, 0x0, 0x7ff, 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @remote, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xa4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0xe8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @private=0xa010102, 0x4, 0xffffffff}}}, {{@arp={@loopback, @local, 0x0, 0xffffffff, 0x7, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x0, 0x5118, 0x7, 0x0, 0x7ff, 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @remote, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) [ 3508.058929][T31219] usb 2-1: Using ep0 maxpacket: 8 23:23:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000001c0)=0x8000, 0x4) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000985a252a54d74e74678633f59b25bca534fdb2ce2790690e67fc6447f3e203b0055a0ab5cf587599b44a6b50fe9783b2677caa1fbc663c0772ed72baab1396457b2bde860429ca64eff9e4b966417b0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="9b420000bb78d981b3c84ba388292830500759b48f4204ecf5891a759196c679c598af66091b8e8bd6cfa048e1f6fc86fea1880d153acc003b625a165c1ad09e2d036af10dbe194b"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x0, 0x40, {}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "dd0cb4adfb486f58"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000180)=0xb111, 0xab3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x18, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x18) 23:23:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0) (async) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0x5d00}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0xff, 0x42, &(0x7f00000002c0)=""/66, 0x41100, 0x1, '\x00', r4, 0x0, r1, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x10, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0xffffffffffffffff, r6, 0x0, 0xd, &(0x7f00000004c0)='%[[-{@]\'^,\'+\x00'}, 0x30) [ 3508.160449][T31958] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 3508.175090][T17879] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3508.184130][T17879] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3508.194507][T17879] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3508.203679][T17879] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3508.214474][T17879] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3508.242521][T31219] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3508.253507][T31219] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.90 [ 3508.263047][T31219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3508.318805][T31958] x_tables: duplicate underflow at hook 1 [ 3508.320618][T31219] usb 2-1: config 0 descriptor?? 23:23:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async, rerun: 32) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r3, &(0x7f0000000000), 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000001c0)=0x8000, 0x4) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000985a252a54d74e74678633f59b25bca534fdb2ce2790690e67fc6447f3e203b0055a0ab5cf587599b44a6b50fe9783b2677caa1fbc663c0772ed72baab1396457b2bde860429ca64eff9e4b966417b0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="9b420000bb78d981b3c84ba388292830500759b48f4204ecf5891a759196c679c598af66091b8e8bd6cfa048e1f6fc86fea1880d153acc003b625a165c1ad09e2d036af10dbe194b"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x0, 0x40, {}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "dd0cb4adfb486f58"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r4, 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000180)=0xb111, 0xab3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) (async) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x18, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x18) [ 3508.359970][T31958] x_tables: duplicate underflow at hook 1 [ 3508.451413][T31967] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 3508.552282][T17879] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3508.561940][T17879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3508.570176][T17879] usb 6-1: Product: syz [ 3508.574758][T17879] usb 6-1: Manufacturer: syz [ 3508.579559][T17879] usb 6-1: SerialNumber: syz [ 3508.612351][T31219] usb 2-1: language id specifier not provided by device, defaulting to English [ 3508.844095][T31219] usb 2-1: Found UVC 0.00 device (2833:0201) [ 3508.851335][T31219] usb 2-1: No valid video chain found. [ 3508.888301][T31219] usb 2-1: USB disconnect, device number 113 [ 3509.002693][T17879] usb 6-1: 0:2 : does not exist [ 3509.059594][T17879] usb 6-1: USB disconnect, device number 84 23:23:21 executing program 1: r0 = syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019c4f40833280102902a0000000109023b00010000000009040000000e010000052406000105240000000d240f0100000000000000000006"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 23:23:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000046000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="260f01c20f01c3b9800000c00f3235008000000f3066ba4200b830df0000ef3508000000c74424000c000000c64424022906924b0f0114240f01c3b95c0300000f32c4c209ae3d09640000bfba410066b8010066ef0f8217000000", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)=ANY=[]) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) 23:23:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="000f425df4f8d36d66be8c1526153fc097ffbf730ed0cb1cb48dd25368dee73d7a608859208658fc007632b67ed5f1735f7414e3fe61e7d3a0fac7154354e7b2b7d65a88f03b07ecaed9a6265d5aa74ab0e7bdcb910ae06c072ea31ae4f1610f339921a7d6be01630d56c16501183859ec0990093ba8ae8ee91d5c3198b42ddf92e8d8f5cee54a31ce16f95c075ec53fc4c2609c1413548cc7fbf4527917b71517516c25624fddb71bbf50a4180f6597f1e460fa8987f5ef2052b4773ad6194ae7b8bc8ef5f42c1479539fc3e7c19a6d6195", 0xd2}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xd0, 0x117, 0x2, 0xbb, "7cdd18b0757ff347e5ee27b3123a9485b7dee952225ff16da45c5a0e4109efd4b2f8d3a381a2c24c82848c545f2a7be319e6c98cf84aa7301d1ed14eed53c92750dcf5ca4ec7ebe0de224813715a9a3c8f03ea99e4c4eb50fcb978b3ba1c6a66f797013eb83fa589289dfd2ccf7b7ab5d8d0e5c9c4defec1b1e310431f299a082714500a47578672fc70740f10e6e3ec587ae87846f37baddad638bd134dc2dd6b6ea041627c163e92e8af884a51ff5ab1b1ca6319e1907f9e495e"}], 0xe8, 0x14}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES64=r0], 0x3c}}, 0x0) 23:23:21 executing program 3: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x590, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x9) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="6236645ea82fce48965e018a9ff845e8615906069687bd766b3d737cb25144110d188c00b7"], &(0x7f0000000080)='GPL\x00', 0x3, 0x10f, &(0x7f0000000640)=""/271, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) r2 = socket(0x15, 0x5, 0x0) recvfrom$phonet(r2, 0x0, 0x0, 0x40002000, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x40, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x88) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c00, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000040)=""/240, 0xf0}], 0x1) close(r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800000000008) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="44f161202ef7a738f12c777201cec73f0fc7111c4f8b228f56244dff2ce7a1cca7305ffe8dd9850d2e1dfd9ca0206812f79d8c4bd1e311635295052fc6e72970b786cc8214ed12a18fdbd3d43c0ad898c9d253c0114df732779de0ad05a2f13eea494c9001f6be0ab9390b771272385d628a6cc52e07e435a9eafd09780d0d", 0x7f, 0x40011, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) 23:23:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000001c0)=0x8000, 0x4) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000985a252a54d74e74678633f59b25bca534fdb2ce2790690e67fc6447f3e203b0055a0ab5cf587599b44a6b50fe9783b2677caa1fbc663c0772ed72baab1396457b2bde860429ca64eff9e4b966417b0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="9b420000bb78d981b3c84ba388292830500759b48f4204ecf5891a759196c679c598af66091b8e8bd6cfa048e1f6fc86fea1880d153acc003b625a165c1ad09e2d036af10dbe194b"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x0, 0x40, {}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "dd0cb4adfb486f58"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r5, 0x0, 0x0) (async, rerun: 64) sendfile(r4, r5, &(0x7f0000000180)=0xb111, 0xab3) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x18, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x18) 23:23:21 executing program 5: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') syz_usb_connect$uac1(0x0, 0xa7, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x7, 0x3, 've'}, @mixer_unit={0xa, 0x24, 0x4, 0x0, 0x0, "6026bb29f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, '>', "3ca0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x5, 0x0, {0x7}}}}}}}]}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x103040, 0x0) syz_usb_connect(0x4, 0x874, &(0x7f0000000880)={{0x12, 0x1, 0x10, 0xd6, 0x6d, 0x27, 0x0, 0x1bbb, 0x203, 0xea6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x862, 0x2, 0x54, 0xaf, 0x10, 0x8, [{{0x9, 0x4, 0x73, 0x49, 0x9, 0x24, 0x85, 0x11, 0x2, [], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x7f, 0xd0, 0x6}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x5, 0x20, 0x3}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x7, 0x8, [@generic={0xcc, 0x11, "ac94a180fccccdd03a51e48240cd85b0fd5ae278613beee841e9daf30a7cb86e0ddf488226679503094d4216e61292720bdd978550ac1b6f5dfc2fbd8088a65722c63ee07fc0b59f1d5be523543861e2b1882dab89cb21d34f43def9aa52e0e3910f43ca10e4be485b4ade59626c88a6935a7f1e63d1a6e6781bd24fe0fe95c85c225ed317f64988a7a040a422f840d25460e90ce261b36d07a574a8c4de10a839fd6f71bf3bf95016be12397a1939b3daa1905a8be9d190f32b05e8a6279cd0cf02a76e2b7d31e953e6"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x40, 0x8, [@generic={0x8b, 0x23, "ac774bb3156c7bccd20569944cd136f9c0d489db582f7b093d05ef25f272c4c4719471ff9a5f2d8b5f1abbffa8f9e6122b92d22c3e2a49104086545ef36865b04ed091009e6fcee0d700220221e094f980d532409d9dd417ddecdae519975a325279a3f78c91442189e3801f5885276e0aa1a979adcf52bfc277f3a4e8873230c43e51b04fba123b14"}, @generic={0x51, 0x23, "e60bdbe0d12c3777cb5cfd7917126fdff3aca949e939debc2ec05f5337d512fc7af32f1baa212d788da74d68b2817d121d91473e7052174370daaedcd882b555b6dacbb1fbf21e7e3a9b6d0abf8bb2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x6, 0x5, 0x19, [@generic={0xaf, 0x2, "6a43825a4544a01a4d77169816648282bdd7fc3ec520c76055acf284e084504317f34b5dafd8919d04451e5966f2913ecd6b997f70e25a898459f641f5a3f40e1a276b32eb3390d116617544f8d1f6f895a2781c22ede6349493ec72900625df5b0cfad0469b6d628b70b9217032f964ad2cafa006ad38b8803b36af9cb52a759a811f969dbc214584cb1841738f4f356e98165d196e289a4dd4e155991149dc82c64a4809c7ab5b92427335ce"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x460, 0xfd, 0x7, 0x9, [@generic={0x9f, 0x30, "2366e0c30ada8e8e59fd667f7f77a763de51eeed804ddaad433eb42013e988c13b5280b1b9b00236dbe9b4074e49a06a2b7c1482a88b8d70db32268714e8c4cf9f5ec10fe238ae86fc471af61ac10d8d8c6e6e1ceff716492caeeb27f18a9c62774c074a4bcabd4df1567822855d1cb9badbd97f0d9e1a22bc43840b65106e4a218b823206cb8cac4719e17d0ed71638d536c160d450352ab5e23193c3"}, @generic={0xc5, 0x23, "674d62426fe2699fe3915f1cf21a14ade97b6711058feea53d78ed5e3c70497ae2ce622acb51e67956dd2835e4acc5f2ed74c5ae72aa973337f31bbea080a93fc79496d6a6820a243549743d95c63a0d9041b0bd3e342c8753ca9bd758411942e3a9a60b518b2195c97967e880645ada1c4a6e8206a6af69b95663929fb042245560d628366dd0cb3417014ee39fe9633a2d14536c31f377a061e3db052bf15b2b41e326b6fed7820606420a3acbcbce6eea3ec1ff95a74a98c32eae5fed227f93a4d0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7f, 0x2, 0xff}}]}}, {{0x9, 0x4, 0x39, 0x9, 0xd, 0x3, 0x90, 0x70, 0x40, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f8715a35"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0xb10, 0x6, 0x4f}, {0x6, 0x24, 0x1a, 0xb7f0, 0x9}, [@mdlm={0x15}]}], [{{0x9, 0x5, 0xe, 0x4, 0x10, 0xe2, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6}, @generic={0xb, 0x24, "f28fee243842b7552e"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x80, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x30}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x4, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x9, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4b, 0xd6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x8, 0x1}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0x20, 0x2, [@generic={0x53, 0x23, "001da4e8d94b748834828ee3bacffb19e03d8b0f207b496d72bc87630d093ba864c5074767da59cde41114008ccb25dcd174165215458c9818fd4661026190b084a3f2384de9da778d3bff7759cd5ec0c5"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x3, 0x3, 0xcc, [@generic={0xf6, 0x30, "df71c2d0306a1e7c47a6c039686b949347c424dd1ce984dc58a5038ee94ee9090439c9f367bbc9628449e132e93c2a5df8c63bfacc404b4af3d70f7ead952120a10357618dfe91c2414c6eff3c9e81a5f765f736b7a5c0ad62bf0b130ec22b4e9422f506c2cc2a7e00f5c68533d3621235567020d74532d6433f13bacfbd642e4aa80f3207f40be8283af78ca4e2a907a510b31275dff01e2bfac5169a37959d7deaab63f6c7ebb8f48c3639d86653918025d4c61befb4b8b62f1c8be9cbe9af139079f3f60ca86322e9bfaa6ede486e46700e902f93621e7d1bf5508a23972834e09d5ff03f84cd70235e7630a588d732ce612f"}, @generic={0x2e, 0x10, "1607a08505e226430bec0cf37d57e362eb19719b8248224d2d10efaacba124bbf28a0bfd914114def8b51bbd"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x9, 0x0, 0xff, [@generic={0xf0, 0xd, "0b202d326e8d115d98499c766c4f63b38bb030fde28ea76c8d4e620aed108fc57ef6ecd509ed46a78a192679f1592c9cf874c5005ae045e4ef6d8c90c04dfdbefa7b023ce7f108644b0951fd7af9b2d6b85e19db099ea007a9ac0e5e4a2286a68ae7f2a4c26e4d7cf14eaf85fe1c298b9fb3ffc4ca08508fe862943a82703a39c988434febcb9cfb4fb7bd36e3fd5564b03e2a531f79afa3e749d0c1ccd97e399938636f0bb168622c42ab0e80e65061e9855020d145a48ae8937b76ecb08f36f6bd7ee2fa53eaf33b4497b731d04eccfab5015efd339b4669ae3071805b504417f34074e6741e7d14555182797e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x5, 0x9, 0x8, [@generic={0x59, 0x21, "871d99625e12e050e28d026818be13109c1bf745c345a7b3848877d23e6392131daecde0f5da42b63a0e46e288fe3b3a5e86359e23f8211b40b030b9d783985d7b6c909d23deea4869f14a9a143ec767b11256dfbed26e"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x0, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x3f, 0xf9}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x4, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9e72}, @generic={0x94, 0x39, "7d6e54d91ff39cdc8957e3c6d71ec382421f6b255c431f41d6499db18ca64f27699bdcc27c6996979072360bfde15a029d109df213e45f37cb8ea603435487bb917c3d928f8c3d36c838f8e1c311608ad0b5086a25859cf73fbb1a5cc6569745547fb99883379661689c9ac30bb1ef48e1b38dc00763a27af3614354c24d79db2325215a5acd4fceac90a1231c2f7f8cef6d"}]}}, {{0x9, 0x5, 0x96, 0x10, 0x10, 0x1, 0x0, 0x20}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x7f, 0x7, 0x20, 0x5}, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, [{0x99, &(0x7f0000000180)=@string={0x99, 0x3, "c2101710c1a86b920e80b69997cb41ee15f7ec0f0e2fa1bfac0ce96f73687f0507c2070420e0415f676ff626dae3e58e3e0d22779008ae75d48db10c9336ff1f63db5730554c0fc56362ee2e63a5908a285d5f1e90d4ab25d360895f584ddceeed1288d31e96254d17142af0af34aaa3c602a8bca733968d76dc8232ed7d656623ce3716e98aa48f362df4431ccf0f2edaee75f83af575"}}, {0x20, &(0x7f0000000240)=@string={0x20, 0x3, "992e6f0edcb09c6a43e3397773a716685d8ffe0ec0d673894b37c2afcaf1"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1009}}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x9, 0xffffffffffffffc0, 0xcfa}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimensat(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={{r3, r4/1000+60000}, {r5, r6/1000+10000}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept$alg(r7, 0x0, 0x0) close_range(r1, r7, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) (async) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') (async) syz_usb_connect$uac1(0x0, 0xa7, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x7, 0x3, 've'}, @mixer_unit={0xa, 0x24, 0x4, 0x0, 0x0, "6026bb29f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, '>', "3ca0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x5, 0x0, {0x7}}}}}}}]}}, 0x0) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x103040, 0x0) (async) syz_usb_connect(0x4, 0x874, &(0x7f0000000880)={{0x12, 0x1, 0x10, 0xd6, 0x6d, 0x27, 0x0, 0x1bbb, 0x203, 0xea6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x862, 0x2, 0x54, 0xaf, 0x10, 0x8, [{{0x9, 0x4, 0x73, 0x49, 0x9, 0x24, 0x85, 0x11, 0x2, [], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x7f, 0xd0, 0x6}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x5, 0x20, 0x3}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x7, 0x8, [@generic={0xcc, 0x11, "ac94a180fccccdd03a51e48240cd85b0fd5ae278613beee841e9daf30a7cb86e0ddf488226679503094d4216e61292720bdd978550ac1b6f5dfc2fbd8088a65722c63ee07fc0b59f1d5be523543861e2b1882dab89cb21d34f43def9aa52e0e3910f43ca10e4be485b4ade59626c88a6935a7f1e63d1a6e6781bd24fe0fe95c85c225ed317f64988a7a040a422f840d25460e90ce261b36d07a574a8c4de10a839fd6f71bf3bf95016be12397a1939b3daa1905a8be9d190f32b05e8a6279cd0cf02a76e2b7d31e953e6"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x40, 0x8, [@generic={0x8b, 0x23, "ac774bb3156c7bccd20569944cd136f9c0d489db582f7b093d05ef25f272c4c4719471ff9a5f2d8b5f1abbffa8f9e6122b92d22c3e2a49104086545ef36865b04ed091009e6fcee0d700220221e094f980d532409d9dd417ddecdae519975a325279a3f78c91442189e3801f5885276e0aa1a979adcf52bfc277f3a4e8873230c43e51b04fba123b14"}, @generic={0x51, 0x23, "e60bdbe0d12c3777cb5cfd7917126fdff3aca949e939debc2ec05f5337d512fc7af32f1baa212d788da74d68b2817d121d91473e7052174370daaedcd882b555b6dacbb1fbf21e7e3a9b6d0abf8bb2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x6, 0x5, 0x19, [@generic={0xaf, 0x2, "6a43825a4544a01a4d77169816648282bdd7fc3ec520c76055acf284e084504317f34b5dafd8919d04451e5966f2913ecd6b997f70e25a898459f641f5a3f40e1a276b32eb3390d116617544f8d1f6f895a2781c22ede6349493ec72900625df5b0cfad0469b6d628b70b9217032f964ad2cafa006ad38b8803b36af9cb52a759a811f969dbc214584cb1841738f4f356e98165d196e289a4dd4e155991149dc82c64a4809c7ab5b92427335ce"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x460, 0xfd, 0x7, 0x9, [@generic={0x9f, 0x30, "2366e0c30ada8e8e59fd667f7f77a763de51eeed804ddaad433eb42013e988c13b5280b1b9b00236dbe9b4074e49a06a2b7c1482a88b8d70db32268714e8c4cf9f5ec10fe238ae86fc471af61ac10d8d8c6e6e1ceff716492caeeb27f18a9c62774c074a4bcabd4df1567822855d1cb9badbd97f0d9e1a22bc43840b65106e4a218b823206cb8cac4719e17d0ed71638d536c160d450352ab5e23193c3"}, @generic={0xc5, 0x23, "674d62426fe2699fe3915f1cf21a14ade97b6711058feea53d78ed5e3c70497ae2ce622acb51e67956dd2835e4acc5f2ed74c5ae72aa973337f31bbea080a93fc79496d6a6820a243549743d95c63a0d9041b0bd3e342c8753ca9bd758411942e3a9a60b518b2195c97967e880645ada1c4a6e8206a6af69b95663929fb042245560d628366dd0cb3417014ee39fe9633a2d14536c31f377a061e3db052bf15b2b41e326b6fed7820606420a3acbcbce6eea3ec1ff95a74a98c32eae5fed227f93a4d0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7f, 0x2, 0xff}}]}}, {{0x9, 0x4, 0x39, 0x9, 0xd, 0x3, 0x90, 0x70, 0x40, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f8715a35"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0xb10, 0x6, 0x4f}, {0x6, 0x24, 0x1a, 0xb7f0, 0x9}, [@mdlm={0x15}]}], [{{0x9, 0x5, 0xe, 0x4, 0x10, 0xe2, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6}, @generic={0xb, 0x24, "f28fee243842b7552e"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x80, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x30}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x4, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x9, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4b, 0xd6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x8, 0x1}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0x20, 0x2, [@generic={0x53, 0x23, "001da4e8d94b748834828ee3bacffb19e03d8b0f207b496d72bc87630d093ba864c5074767da59cde41114008ccb25dcd174165215458c9818fd4661026190b084a3f2384de9da778d3bff7759cd5ec0c5"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x3, 0x3, 0xcc, [@generic={0xf6, 0x30, "df71c2d0306a1e7c47a6c039686b949347c424dd1ce984dc58a5038ee94ee9090439c9f367bbc9628449e132e93c2a5df8c63bfacc404b4af3d70f7ead952120a10357618dfe91c2414c6eff3c9e81a5f765f736b7a5c0ad62bf0b130ec22b4e9422f506c2cc2a7e00f5c68533d3621235567020d74532d6433f13bacfbd642e4aa80f3207f40be8283af78ca4e2a907a510b31275dff01e2bfac5169a37959d7deaab63f6c7ebb8f48c3639d86653918025d4c61befb4b8b62f1c8be9cbe9af139079f3f60ca86322e9bfaa6ede486e46700e902f93621e7d1bf5508a23972834e09d5ff03f84cd70235e7630a588d732ce612f"}, @generic={0x2e, 0x10, "1607a08505e226430bec0cf37d57e362eb19719b8248224d2d10efaacba124bbf28a0bfd914114def8b51bbd"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x9, 0x0, 0xff, [@generic={0xf0, 0xd, "0b202d326e8d115d98499c766c4f63b38bb030fde28ea76c8d4e620aed108fc57ef6ecd509ed46a78a192679f1592c9cf874c5005ae045e4ef6d8c90c04dfdbefa7b023ce7f108644b0951fd7af9b2d6b85e19db099ea007a9ac0e5e4a2286a68ae7f2a4c26e4d7cf14eaf85fe1c298b9fb3ffc4ca08508fe862943a82703a39c988434febcb9cfb4fb7bd36e3fd5564b03e2a531f79afa3e749d0c1ccd97e399938636f0bb168622c42ab0e80e65061e9855020d145a48ae8937b76ecb08f36f6bd7ee2fa53eaf33b4497b731d04eccfab5015efd339b4669ae3071805b504417f34074e6741e7d14555182797e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x5, 0x9, 0x8, [@generic={0x59, 0x21, "871d99625e12e050e28d026818be13109c1bf745c345a7b3848877d23e6392131daecde0f5da42b63a0e46e288fe3b3a5e86359e23f8211b40b030b9d783985d7b6c909d23deea4869f14a9a143ec767b11256dfbed26e"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x0, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x3f, 0xf9}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x4, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9e72}, @generic={0x94, 0x39, "7d6e54d91ff39cdc8957e3c6d71ec382421f6b255c431f41d6499db18ca64f27699bdcc27c6996979072360bfde15a029d109df213e45f37cb8ea603435487bb917c3d928f8c3d36c838f8e1c311608ad0b5086a25859cf73fbb1a5cc6569745547fb99883379661689c9ac30bb1ef48e1b38dc00763a27af3614354c24d79db2325215a5acd4fceac90a1231c2f7f8cef6d"}]}}, {{0x9, 0x5, 0x96, 0x10, 0x10, 0x1, 0x0, 0x20}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x7f, 0x7, 0x20, 0x5}, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, [{0x99, &(0x7f0000000180)=@string={0x99, 0x3, "c2101710c1a86b920e80b69997cb41ee15f7ec0f0e2fa1bfac0ce96f73687f0507c2070420e0415f676ff626dae3e58e3e0d22779008ae75d48db10c9336ff1f63db5730554c0fc56362ee2e63a5908a285d5f1e90d4ab25d360895f584ddceeed1288d31e96254d17142af0af34aaa3c602a8bca733968d76dc8232ed7d656623ce3716e98aa48f362df4431ccf0f2edaee75f83af575"}}, {0x20, &(0x7f0000000240)=@string={0x20, 0x3, "992e6f0edcb09c6a43e3397773a716685d8ffe0ec0d673894b37c2afcaf1"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1009}}]}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x9, 0xffffffffffffffc0, 0xcfa}) (async) clock_gettime(0x0, &(0x7f0000000480)) (async) clock_gettime(0x0, &(0x7f00000004c0)) (async) utimensat(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={{r3, r4/1000+60000}, {r5, r6/1000+10000}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r7, 0x0, 0x0) (async) close_range(r1, r7, 0x0) (async) [ 3509.762817][ T3147] usb 2-1: new high-speed USB device number 114 using dummy_hcd 23:23:22 executing program 4: ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {0x0, 0x64}]}}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x1f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x8002, 0x4) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x5d00}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:23:22 executing program 0: r0 = socket(0x25, 0xa, 0x6) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) close(r0) socket(0x10, 0x800, 0xfffffffe) [ 3510.022215][T31219] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 3510.031906][ T3147] usb 2-1: Using ep0 maxpacket: 8 [ 3510.162735][ T3147] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3510.173356][ T3147] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.90 [ 3510.183628][ T3147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:23:22 executing program 0: r0 = socket(0x25, 0xa, 0x6) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) (async, rerun: 64) close(r0) (rerun: 64) socket(0x10, 0x800, 0xfffffffe) [ 3510.314483][ T3147] usb 2-1: config 0 descriptor?? [ 3510.394587][T31219] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3510.403919][T31219] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3510.414539][T31219] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3510.425080][T31219] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3510.435899][T31219] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 23:23:22 executing program 4: ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {0x0, 0x64}]}}) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x1f, 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x8002, 0x4) (async) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x5d00}) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) (async) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 3510.574062][ T3147] usb 2-1: language id specifier not provided by device, defaulting to English [ 3510.673486][T31219] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3510.683116][T31219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.691321][T31219] usb 6-1: Product: syz [ 3510.695865][T31219] usb 6-1: Manufacturer: syz [ 3510.700652][T31219] usb 6-1: SerialNumber: syz 23:23:22 executing program 0: r0 = socket(0x25, 0xa, 0x6) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) close(r0) socket(0x10, 0x800, 0xfffffffe) socket(0x25, 0xa, 0x6) (async) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) (async) socket(0x10, 0x3, 0xc) (async) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) (async) close(r0) (async) socket(0x10, 0x800, 0xfffffffe) (async) [ 3510.803761][ T3147] usb 2-1: Found UVC 0.00 device (2833:0201) [ 3510.810920][ T3147] usb 2-1: No valid video chain found. 23:23:22 executing program 4: ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {0x0, 0x64}]}}) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x1f, 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x8002, 0x4) (async) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x5d00}) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) (async) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 3510.872745][ T3147] usb 2-1: USB disconnect, device number 114 [ 3511.011892][T32019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3511.021429][T32019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:23:23 executing program 1: r0 = syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019c4f40833280102902a0000000109023b00010000000009040000000e010000052406000105240000000d240f0100000000000000000006"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 23:23:23 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@deltaction={0x98, 0x31, 0xf01, 0x70bd28, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf7}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x402c000) sendmsg$netlink(r1, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="09010000e29d010000000000000000000c004000a3792b00a2d2b9400635e2de9bda4fea02"], 0x1100}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x5d00}) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) [ 3511.393040][T31219] usb 6-1: 0:2 : does not exist [ 3511.448620][T31219] usb 6-1: USB disconnect, device number 85 [ 3511.762363][T17879] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3512.012326][T17879] usb 2-1: Using ep0 maxpacket: 8 [ 3512.132675][T17879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3512.143759][T17879] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.90 [ 3512.153235][T17879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3512.244423][T17879] usb 2-1: config 0 descriptor?? [ 3512.494931][T17879] usb 2-1: language id specifier not provided by device, defaulting to English [ 3512.708599][T31990] not chained 17570000 origins [ 3512.713636][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3512.723972][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3512.734149][T31990] Call Trace: [ 3512.737511][T31990] [ 3512.740520][T31990] dump_stack_lvl+0x1c8/0x256 [ 3512.742275][T17879] usb 2-1: Found UVC 0.00 device (2833:0201) [ 3512.745341][T31990] dump_stack+0x1a/0x1c [ 3512.752514][T17879] usb 2-1: No valid video chain found. [ 3512.756455][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3512.767846][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3512.773070][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3512.779128][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3512.783947][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3512.789926][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3512.795902][T31990] ? should_fail+0x3f/0x810 [ 3512.800550][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3512.805812][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3512.812222][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3512.818187][T31990] __msan_chain_origin+0xbd/0x140 [ 3512.823362][T31990] ___sys_recvmsg+0x522/0x890 [ 3512.828171][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3512.829382][T17879] usb 2-1: USB disconnect, device number 115 [ 3512.832959][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3512.833074][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3512.833191][T31990] do_recvmmsg+0x55a/0x1180 [ 3512.855601][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3512.862021][T31990] ? do_syscall_64+0x3d/0xb0 [ 3512.866778][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3512.871970][T31990] do_syscall_64+0x3d/0xb0 [ 3512.876520][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3512.882594][T31990] RIP: 0033:0x7f6695089279 [ 3512.887115][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3512.906918][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3512.915481][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3512.923579][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3512.931666][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3512.939752][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3512.947832][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3512.955963][T31990] [ 3512.962759][T31990] Uninit was stored to memory at: [ 3512.967974][T31990] ___sys_recvmsg+0x522/0x890 [ 3512.973159][T31990] do_recvmmsg+0x55a/0x1180 [ 3512.977800][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3512.983048][T31990] do_syscall_64+0x3d/0xb0 [ 3512.987596][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3512.993739][T31990] [ 3512.996125][T31990] Uninit was stored to memory at: [ 3513.001334][T31990] ___sys_recvmsg+0x522/0x890 [ 3513.006221][T31990] do_recvmmsg+0x55a/0x1180 [ 3513.010855][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3513.016147][T31990] do_syscall_64+0x3d/0xb0 [ 3513.020710][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3513.026913][T31990] [ 3513.029307][T31990] Uninit was stored to memory at: [ 3513.034629][T31990] ___sys_recvmsg+0x522/0x890 [ 3513.039438][T31990] do_recvmmsg+0x55a/0x1180 [ 3513.044201][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3513.049365][T31990] do_syscall_64+0x3d/0xb0 [ 3513.054047][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3513.060131][T31990] [ 3513.062646][T31990] Uninit was stored to memory at: [ 3513.067843][T31990] ___sys_recvmsg+0x522/0x890 [ 3513.072782][T31990] do_recvmmsg+0x55a/0x1180 [ 3513.077422][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3513.082657][T31990] do_syscall_64+0x3d/0xb0 [ 3513.087202][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3513.093393][T31990] [ 3513.095814][T31990] Uninit was stored to memory at: [ 3513.101016][T31990] ___sys_recvmsg+0x522/0x890 [ 3513.105947][T31990] do_recvmmsg+0x55a/0x1180 [ 3513.110577][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3513.115872][T31990] do_syscall_64+0x3d/0xb0 [ 3513.120427][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3513.126635][T31990] [ 3513.129028][T31990] Uninit was stored to memory at: [ 3513.134350][T31990] ___sys_recvmsg+0x522/0x890 [ 3513.139159][T31990] do_recvmmsg+0x55a/0x1180 [ 3513.143932][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3513.149105][T31990] do_syscall_64+0x3d/0xb0 [ 3513.153769][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3513.159853][T31990] [ 3513.162411][T31990] Uninit was stored to memory at: [ 3513.167603][T31990] ___sys_recvmsg+0x522/0x890 [ 3513.172527][T31990] do_recvmmsg+0x55a/0x1180 [ 3513.177167][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3513.182453][T31990] do_syscall_64+0x3d/0xb0 [ 3513.187002][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3513.193142][T31990] [ 3513.195532][T31990] Local variable msg_sys created at: [ 3513.200895][T31990] do_recvmmsg+0x5c/0x1180 [ 3513.205557][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.320441][T31990] not chained 17580000 origins [ 3515.326203][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3515.336519][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3515.346698][T31990] Call Trace: [ 3515.350064][T31990] [ 3515.353088][T31990] dump_stack_lvl+0x1c8/0x256 [ 3515.357950][T31990] dump_stack+0x1a/0x1c [ 3515.362272][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3515.368159][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3515.373373][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3515.379443][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3515.384260][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3515.390253][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3515.396241][T31990] ? should_fail+0x3f/0x810 [ 3515.400902][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3515.406169][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3515.412580][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3515.418554][T31990] __msan_chain_origin+0xbd/0x140 [ 3515.423736][T31990] ___sys_recvmsg+0x522/0x890 [ 3515.428569][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3515.433419][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3515.439482][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3515.445463][T31990] do_recvmmsg+0x55a/0x1180 [ 3515.450128][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3515.456544][T31990] ? do_syscall_64+0x3d/0xb0 [ 3515.461282][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.466480][T31990] do_syscall_64+0x3d/0xb0 [ 3515.471047][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.477123][T31990] RIP: 0033:0x7f6695089279 [ 3515.481679][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3515.501456][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3515.510105][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3515.518211][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3515.526398][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3515.534493][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3515.542585][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3515.550710][T31990] [ 3515.557694][T31990] Uninit was stored to memory at: [ 3515.566628][T31990] ___sys_recvmsg+0x522/0x890 [ 3515.571448][T31990] do_recvmmsg+0x55a/0x1180 [ 3515.576403][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.581651][T31990] do_syscall_64+0x3d/0xb0 [ 3515.586204][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.592368][T31990] [ 3515.594761][T31990] Uninit was stored to memory at: [ 3515.599997][T31990] ___sys_recvmsg+0x522/0x890 [ 3515.604891][T31990] do_recvmmsg+0x55a/0x1180 [ 3515.609526][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.614771][T31990] do_syscall_64+0x3d/0xb0 [ 3515.619317][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.625528][T31990] [ 3515.627945][T31990] Uninit was stored to memory at: [ 3515.633220][T31990] ___sys_recvmsg+0x522/0x890 [ 3515.638021][T31990] do_recvmmsg+0x55a/0x1180 [ 3515.642772][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.647920][T31990] do_syscall_64+0x3d/0xb0 [ 3515.652597][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.658674][T31990] [ 3515.661108][T31990] Uninit was stored to memory at: [ 3515.666431][T31990] ___sys_recvmsg+0x522/0x890 [ 3515.671239][T31990] do_recvmmsg+0x55a/0x1180 [ 3515.676015][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.681196][T31990] do_syscall_64+0x3d/0xb0 [ 3515.685889][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.692053][T31990] [ 3515.694444][T31990] Uninit was stored to memory at: [ 3515.699638][T31990] ___sys_recvmsg+0x522/0x890 [ 3515.704573][T31990] do_recvmmsg+0x55a/0x1180 [ 3515.709208][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.714460][T31990] do_syscall_64+0x3d/0xb0 [ 3515.719013][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.725220][T31990] [ 3515.727614][T31990] Uninit was stored to memory at: [ 3515.732891][T31990] ___sys_recvmsg+0x522/0x890 [ 3515.737705][T31990] do_recvmmsg+0x55a/0x1180 [ 3515.742485][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.747652][T31990] do_syscall_64+0x3d/0xb0 [ 3515.752328][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.758418][T31990] [ 3515.760807][T31990] Uninit was stored to memory at: [ 3515.766145][T31990] ___sys_recvmsg+0x522/0x890 [ 3515.770972][T31990] do_recvmmsg+0x55a/0x1180 [ 3515.775752][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3515.780915][T31990] do_syscall_64+0x3d/0xb0 [ 3515.785607][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3515.791781][T31990] [ 3515.794272][T31990] Local variable msg_sys created at: [ 3515.799638][T31990] do_recvmmsg+0x5c/0x1180 [ 3515.804347][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3516.067932][T32037] udevd[32037]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3516.840678][T32039] udevd[32039]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3518.963697][T31990] not chained 17590000 origins [ 3518.968587][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3518.978880][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3518.989006][T31990] Call Trace: [ 3518.992345][T31990] [ 3518.995341][T31990] dump_stack_lvl+0x1c8/0x256 [ 3519.000126][T31990] dump_stack+0x1a/0x1c [ 3519.004392][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3519.010248][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3519.015395][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3519.021376][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3519.026126][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3519.032124][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3519.038063][T31990] ? should_fail+0x3f/0x810 [ 3519.042680][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3519.047930][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3519.054267][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3519.060166][T31990] __msan_chain_origin+0xbd/0x140 [ 3519.065292][T31990] ___sys_recvmsg+0x522/0x890 [ 3519.070090][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3519.074855][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3519.080842][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3519.086745][T31990] do_recvmmsg+0x55a/0x1180 [ 3519.091341][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3519.097676][T31990] ? do_syscall_64+0x3d/0xb0 [ 3519.102363][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3519.107520][T31990] do_syscall_64+0x3d/0xb0 [ 3519.112025][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.118102][T31990] RIP: 0033:0x7f6695089279 [ 3519.122572][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3519.142293][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3519.150852][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3519.158939][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3519.166973][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3519.175003][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3519.183031][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3519.191081][T31990] [ 3519.198132][T31990] Uninit was stored to memory at: [ 3519.203751][T31990] ___sys_recvmsg+0x522/0x890 [ 3519.208565][T31990] do_recvmmsg+0x55a/0x1180 [ 3519.213284][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3519.218450][T31990] do_syscall_64+0x3d/0xb0 [ 3519.223071][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.229141][T31990] [ 3519.231530][T31990] Uninit was stored to memory at: [ 3519.236804][T31990] ___sys_recvmsg+0x522/0x890 [ 3519.241685][T31990] do_recvmmsg+0x55a/0x1180 [ 3519.246333][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3519.251489][T31990] do_syscall_64+0x3d/0xb0 [ 3519.256115][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.262277][T31990] [ 3519.264671][T31990] Uninit was stored to memory at: [ 3519.269863][T31990] ___sys_recvmsg+0x522/0x890 [ 3519.274759][T31990] do_recvmmsg+0x55a/0x1180 [ 3519.279402][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3519.284678][T31990] do_syscall_64+0x3d/0xb0 [ 3519.289215][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.295368][T31990] [ 3519.297756][T31990] Uninit was stored to memory at: [ 3519.303076][T31990] ___sys_recvmsg+0x522/0x890 [ 3519.307978][T31990] do_recvmmsg+0x55a/0x1180 [ 3519.312704][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3519.317991][T31990] do_syscall_64+0x3d/0xb0 [ 3519.322989][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.329066][T31990] [ 3519.331453][T31990] Uninit was stored to memory at: [ 3519.336817][T31990] ___sys_recvmsg+0x522/0x890 [ 3519.341707][T31990] do_recvmmsg+0x55a/0x1180 [ 3519.346367][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3519.351525][T31990] do_syscall_64+0x3d/0xb0 [ 3519.356195][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.362406][T31990] [ 3519.364797][T31990] Uninit was stored to memory at: [ 3519.369963][T31990] ___sys_recvmsg+0x522/0x890 [ 3519.374871][T31990] do_recvmmsg+0x55a/0x1180 [ 3519.379503][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3519.384758][T31990] do_syscall_64+0x3d/0xb0 [ 3519.389312][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.395479][T31990] [ 3519.397866][T31990] Uninit was stored to memory at: [ 3519.403194][T31990] ___sys_recvmsg+0x522/0x890 [ 3519.408004][T31990] do_recvmmsg+0x55a/0x1180 [ 3519.412773][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3519.417950][T31990] do_syscall_64+0x3d/0xb0 [ 3519.422630][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3519.428712][T31990] [ 3519.431088][T31990] Local variable msg_sys created at: [ 3519.436563][T31990] do_recvmmsg+0x5c/0x1180 [ 3519.441120][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.307493][T31990] not chained 17600000 origins [ 3520.312526][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3520.322825][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3520.333009][T31990] Call Trace: [ 3520.336369][T31990] [ 3520.339383][T31990] dump_stack_lvl+0x1c8/0x256 [ 3520.344258][T31990] dump_stack+0x1a/0x1c [ 3520.348561][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3520.354391][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3520.359583][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3520.365582][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3520.370395][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3520.376376][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3520.382453][T31990] ? should_fail+0x3f/0x810 [ 3520.387103][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3520.392336][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3520.398722][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3520.404636][T31990] __msan_chain_origin+0xbd/0x140 [ 3520.409787][T31990] ___sys_recvmsg+0x522/0x890 [ 3520.414557][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3520.419369][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3520.425380][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3520.431332][T31990] do_recvmmsg+0x55a/0x1180 [ 3520.435951][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3520.442366][T31990] ? do_syscall_64+0x3d/0xb0 [ 3520.447099][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.452295][T31990] do_syscall_64+0x3d/0xb0 [ 3520.456834][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.462845][T31990] RIP: 0033:0x7f6695089279 [ 3520.467369][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3520.487162][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3520.495708][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3520.503763][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3520.511852][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3520.519939][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3520.528000][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3520.536077][T31990] [ 3520.545797][T31990] Uninit was stored to memory at: [ 3520.551020][T31990] ___sys_recvmsg+0x522/0x890 [ 3520.557390][T31990] do_recvmmsg+0x55a/0x1180 [ 3520.562127][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.567290][T31990] do_syscall_64+0x3d/0xb0 [ 3520.571959][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.578051][T31990] [ 3520.580447][T31990] Uninit was stored to memory at: [ 3520.585726][T31990] ___sys_recvmsg+0x522/0x890 [ 3520.590531][T31990] do_recvmmsg+0x55a/0x1180 [ 3520.595316][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.600469][T31990] do_syscall_64+0x3d/0xb0 [ 3520.605103][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.611162][T31990] [ 3520.613669][T31990] Uninit was stored to memory at: [ 3520.618821][T31990] ___sys_recvmsg+0x522/0x890 [ 3520.623706][T31990] do_recvmmsg+0x55a/0x1180 [ 3520.628340][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.633639][T31990] do_syscall_64+0x3d/0xb0 [ 3520.638171][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.644317][T31990] [ 3520.646711][T31990] Uninit was stored to memory at: [ 3520.651983][T31990] ___sys_recvmsg+0x522/0x890 [ 3520.656798][T31990] do_recvmmsg+0x55a/0x1180 [ 3520.661436][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.666728][T31990] do_syscall_64+0x3d/0xb0 [ 3520.671276][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.677445][T31990] [ 3520.679833][T31990] Uninit was stored to memory at: [ 3520.685160][T31990] ___sys_recvmsg+0x522/0x890 [ 3520.689968][T31990] do_recvmmsg+0x55a/0x1180 [ 3520.694743][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.699923][T31990] do_syscall_64+0x3d/0xb0 [ 3520.704610][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.710697][T31990] [ 3520.713206][T31990] Uninit was stored to memory at: [ 3520.718548][T31990] ___sys_recvmsg+0x522/0x890 [ 3520.723452][T31990] do_recvmmsg+0x55a/0x1180 [ 3520.728072][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.733318][T31990] do_syscall_64+0x3d/0xb0 [ 3520.737876][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.744080][T31990] [ 3520.746454][T31990] Uninit was stored to memory at: [ 3520.751765][T31990] ___sys_recvmsg+0x522/0x890 [ 3520.756666][T31990] do_recvmmsg+0x55a/0x1180 [ 3520.761301][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3520.766612][T31990] do_syscall_64+0x3d/0xb0 [ 3520.771149][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3520.777306][T31990] [ 3520.779714][T31990] Local variable msg_sys created at: [ 3520.785195][T31990] do_recvmmsg+0x5c/0x1180 [ 3520.789762][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3521.645430][T31990] not chained 17610000 origins [ 3521.650271][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3521.660509][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3521.670648][T31990] Call Trace: [ 3521.673987][T31990] [ 3521.677000][T31990] dump_stack_lvl+0x1c8/0x256 [ 3521.681868][T31990] dump_stack+0x1a/0x1c [ 3521.686183][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3521.692011][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3521.697218][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3521.703277][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3521.708101][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3521.714084][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3521.720066][T31990] ? should_fail+0x3f/0x810 [ 3521.724725][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3521.729985][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3521.736357][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3521.742339][T31990] __msan_chain_origin+0xbd/0x140 [ 3521.747526][T31990] ___sys_recvmsg+0x522/0x890 [ 3521.752342][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3521.757172][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3521.763184][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3521.769132][T31990] do_recvmmsg+0x55a/0x1180 [ 3521.773779][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3521.780163][T31990] ? do_syscall_64+0x3d/0xb0 [ 3521.784851][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3521.790043][T31990] do_syscall_64+0x3d/0xb0 [ 3521.794598][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3521.800654][T31990] RIP: 0033:0x7f6695089279 [ 3521.805142][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3521.824929][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3521.833503][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3521.841600][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3521.849671][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3521.857738][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3521.865815][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3521.873996][T31990] [ 3521.880835][T31990] Uninit was stored to memory at: [ 3521.886442][T31990] ___sys_recvmsg+0x522/0x890 [ 3521.891265][T31990] do_recvmmsg+0x55a/0x1180 [ 3521.896011][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3521.901183][T31990] do_syscall_64+0x3d/0xb0 [ 3521.905833][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3521.912007][T31990] [ 3521.914403][T31990] Uninit was stored to memory at: [ 3521.919595][T31990] ___sys_recvmsg+0x522/0x890 [ 3521.924545][T31990] do_recvmmsg+0x55a/0x1180 [ 3521.929192][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3521.934472][T31990] do_syscall_64+0x3d/0xb0 [ 3521.939006][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3521.945252][T31990] [ 3521.947649][T31990] Uninit was stored to memory at: [ 3521.953017][T31990] ___sys_recvmsg+0x522/0x890 [ 3521.957859][T31990] do_recvmmsg+0x55a/0x1180 [ 3521.962636][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3521.967813][T31990] do_syscall_64+0x3d/0xb0 [ 3521.972495][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3521.978572][T31990] [ 3521.980970][T31990] Uninit was stored to memory at: [ 3521.986256][T31990] ___sys_recvmsg+0x522/0x890 [ 3521.991065][T31990] do_recvmmsg+0x55a/0x1180 [ 3521.995776][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3522.000948][T31990] do_syscall_64+0x3d/0xb0 [ 3522.005656][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3522.011812][T31990] [ 3522.014205][T31990] Uninit was stored to memory at: [ 3522.019398][T31990] ___sys_recvmsg+0x522/0x890 [ 3522.024351][T31990] do_recvmmsg+0x55a/0x1180 [ 3522.028991][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3522.034245][T31990] do_syscall_64+0x3d/0xb0 [ 3522.038792][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3522.044947][T31990] [ 3522.047334][T31990] Uninit was stored to memory at: [ 3522.052616][T31990] ___sys_recvmsg+0x522/0x890 [ 3522.057419][T31990] do_recvmmsg+0x55a/0x1180 [ 3522.062136][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3522.067298][T31990] do_syscall_64+0x3d/0xb0 [ 3522.071930][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3522.078005][T31990] [ 3522.080398][T31990] Uninit was stored to memory at: [ 3522.085740][T31990] ___sys_recvmsg+0x522/0x890 [ 3522.091252][T31990] do_recvmmsg+0x55a/0x1180 [ 3522.095957][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3522.101108][T31990] do_syscall_64+0x3d/0xb0 [ 3522.105735][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3522.111875][T31990] [ 3522.114263][T31990] Local variable msg_sys created at: [ 3522.119618][T31990] do_recvmmsg+0x5c/0x1180 [ 3522.124231][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.099671][T31990] not chained 17620000 origins [ 3523.104675][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3523.114971][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3523.125137][T31990] Call Trace: [ 3523.128472][T31990] [ 3523.131532][T31990] dump_stack_lvl+0x1c8/0x256 [ 3523.136391][T31990] dump_stack+0x1a/0x1c [ 3523.140710][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3523.146586][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3523.152142][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3523.158179][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3523.162948][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3523.168907][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3523.174828][T31990] ? should_fail+0x3f/0x810 [ 3523.179458][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3523.184670][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3523.191056][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3523.196972][T31990] __msan_chain_origin+0xbd/0x140 [ 3523.202145][T31990] ___sys_recvmsg+0x522/0x890 [ 3523.206942][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3523.211774][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3523.217811][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3523.223723][T31990] do_recvmmsg+0x55a/0x1180 [ 3523.228402][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3523.234808][T31990] ? do_syscall_64+0x3d/0xb0 [ 3523.239544][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.244733][T31990] do_syscall_64+0x3d/0xb0 [ 3523.249320][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.255396][T31990] RIP: 0033:0x7f6695089279 [ 3523.259923][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3523.279683][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3523.288214][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3523.296274][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3523.304365][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3523.312538][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3523.320603][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3523.328657][T31990] [ 3523.334804][T31990] Uninit was stored to memory at: [ 3523.343875][T31990] ___sys_recvmsg+0x522/0x890 [ 3523.348714][T31990] do_recvmmsg+0x55a/0x1180 [ 3523.353728][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.358897][T31990] do_syscall_64+0x3d/0xb0 [ 3523.363520][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.369593][T31990] [ 3523.372060][T31990] Uninit was stored to memory at: [ 3523.377255][T31990] ___sys_recvmsg+0x522/0x890 [ 3523.382137][T31990] do_recvmmsg+0x55a/0x1180 [ 3523.386769][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.392058][T31990] do_syscall_64+0x3d/0xb0 [ 3523.396607][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.402809][T31990] [ 3523.405194][T31990] Uninit was stored to memory at: [ 3523.410383][T31990] ___sys_recvmsg+0x522/0x890 [ 3523.415317][T31990] do_recvmmsg+0x55a/0x1180 [ 3523.419945][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.425226][T31990] do_syscall_64+0x3d/0xb0 [ 3523.429753][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.435873][T31990] [ 3523.438265][T31990] Uninit was stored to memory at: [ 3523.443571][T31990] ___sys_recvmsg+0x522/0x890 [ 3523.448377][T31990] do_recvmmsg+0x55a/0x1180 [ 3523.453140][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.458302][T31990] do_syscall_64+0x3d/0xb0 [ 3523.462985][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.469068][T31990] [ 3523.471432][T31990] Uninit was stored to memory at: [ 3523.476738][T31990] ___sys_recvmsg+0x522/0x890 [ 3523.481528][T31990] do_recvmmsg+0x55a/0x1180 [ 3523.486285][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.491432][T31990] do_syscall_64+0x3d/0xb0 [ 3523.496084][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.502232][T31990] [ 3523.504615][T31990] Uninit was stored to memory at: [ 3523.509758][T31990] ___sys_recvmsg+0x522/0x890 [ 3523.514652][T31990] do_recvmmsg+0x55a/0x1180 [ 3523.519721][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.525019][T31990] do_syscall_64+0x3d/0xb0 [ 3523.529554][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.535711][T31990] [ 3523.538093][T31990] Uninit was stored to memory at: [ 3523.543396][T31990] ___sys_recvmsg+0x522/0x890 [ 3523.548199][T31990] do_recvmmsg+0x55a/0x1180 [ 3523.552959][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3523.558127][T31990] do_syscall_64+0x3d/0xb0 [ 3523.562801][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3523.568863][T31990] [ 3523.571217][T31990] Local variable msg_sys created at: [ 3523.576690][T31990] do_recvmmsg+0x5c/0x1180 [ 3523.581217][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.439497][T31990] not chained 17630000 origins [ 3524.444532][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3524.455094][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3524.465267][T31990] Call Trace: [ 3524.468624][T31990] [ 3524.471635][T31990] dump_stack_lvl+0x1c8/0x256 [ 3524.476498][T31990] dump_stack+0x1a/0x1c [ 3524.480815][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3524.486781][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3524.492008][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3524.498041][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3524.502815][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3524.508775][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3524.514697][T31990] ? should_fail+0x3f/0x810 [ 3524.519346][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3524.524609][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3524.530998][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3524.536907][T31990] __msan_chain_origin+0xbd/0x140 [ 3524.542039][T31990] ___sys_recvmsg+0x522/0x890 [ 3524.546831][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3524.551638][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3524.557690][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3524.563722][T31990] do_recvmmsg+0x55a/0x1180 [ 3524.568309][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3524.574665][T31990] ? do_syscall_64+0x3d/0xb0 [ 3524.579410][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.584595][T31990] do_syscall_64+0x3d/0xb0 [ 3524.589146][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.595217][T31990] RIP: 0033:0x7f6695089279 [ 3524.599722][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3524.619421][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3524.627947][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3524.636122][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3524.644179][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3524.652269][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3524.660329][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3524.668413][T31990] [ 3524.674733][T31990] Uninit was stored to memory at: [ 3524.679959][T31990] ___sys_recvmsg+0x522/0x890 [ 3524.685168][T31990] do_recvmmsg+0x55a/0x1180 [ 3524.689807][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.695061][T31990] do_syscall_64+0x3d/0xb0 [ 3524.699612][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.705824][T31990] [ 3524.708217][T31990] Uninit was stored to memory at: [ 3524.713546][T31990] ___sys_recvmsg+0x522/0x890 [ 3524.718353][T31990] do_recvmmsg+0x55a/0x1180 [ 3524.723137][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.728308][T31990] do_syscall_64+0x3d/0xb0 [ 3524.732981][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.739056][T31990] [ 3524.741427][T31990] Uninit was stored to memory at: [ 3524.746690][T31990] ___sys_recvmsg+0x522/0x890 [ 3524.751479][T31990] do_recvmmsg+0x55a/0x1180 [ 3524.756199][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.761338][T31990] do_syscall_64+0x3d/0xb0 [ 3524.765944][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.772093][T31990] [ 3524.774492][T31990] Uninit was stored to memory at: [ 3524.779675][T31990] ___sys_recvmsg+0x522/0x890 [ 3524.784608][T31990] do_recvmmsg+0x55a/0x1180 [ 3524.789239][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.794548][T31990] do_syscall_64+0x3d/0xb0 [ 3524.799094][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.805295][T31990] [ 3524.807686][T31990] Uninit was stored to memory at: [ 3524.813025][T31990] ___sys_recvmsg+0x522/0x890 [ 3524.817957][T31990] do_recvmmsg+0x55a/0x1180 [ 3524.822733][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.827900][T31990] do_syscall_64+0x3d/0xb0 [ 3524.832577][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.838633][T31990] [ 3524.840983][T31990] Uninit was stored to memory at: [ 3524.846282][T31990] ___sys_recvmsg+0x522/0x890 [ 3524.851092][T31990] do_recvmmsg+0x55a/0x1180 [ 3524.855820][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.861031][T31990] do_syscall_64+0x3d/0xb0 [ 3524.865672][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.871910][T31990] [ 3524.874294][T31990] Uninit was stored to memory at: [ 3524.879494][T31990] ___sys_recvmsg+0x522/0x890 [ 3524.884439][T31990] do_recvmmsg+0x55a/0x1180 [ 3524.889085][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3524.894337][T31990] do_syscall_64+0x3d/0xb0 [ 3524.898869][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3524.905022][T31990] [ 3524.907410][T31990] Local variable msg_sys created at: [ 3524.912898][T31990] do_recvmmsg+0x5c/0x1180 [ 3524.917447][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3525.770171][T31990] not chained 17640000 origins [ 3525.775160][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3525.785468][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3525.795649][T31990] Call Trace: [ 3525.799008][T31990] [ 3525.802017][T31990] dump_stack_lvl+0x1c8/0x256 [ 3525.806877][T31990] dump_stack+0x1a/0x1c [ 3525.811633][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3525.817494][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3525.822652][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3525.828688][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3525.833458][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3525.839437][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3525.845396][T31990] ? should_fail+0x3f/0x810 [ 3525.849980][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3525.855455][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3525.861861][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3525.867821][T31990] __msan_chain_origin+0xbd/0x140 [ 3525.872978][T31990] ___sys_recvmsg+0x522/0x890 [ 3525.877787][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3525.882620][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3525.888681][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3525.894599][T31990] do_recvmmsg+0x55a/0x1180 [ 3525.899257][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3525.905633][T31990] ? do_syscall_64+0x3d/0xb0 [ 3525.910549][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3525.915759][T31990] do_syscall_64+0x3d/0xb0 [ 3525.920294][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3525.926313][T31990] RIP: 0033:0x7f6695089279 [ 3525.930818][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3525.950527][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3525.959121][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3525.967185][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3525.975264][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3525.983361][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3525.991431][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3525.999512][T31990] [ 3526.006215][T31990] Uninit was stored to memory at: [ 3526.011421][T31990] ___sys_recvmsg+0x522/0x890 [ 3526.016588][T31990] do_recvmmsg+0x55a/0x1180 [ 3526.021218][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3526.026464][T31990] do_syscall_64+0x3d/0xb0 [ 3526.031012][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3526.037170][T31990] [ 3526.039558][T31990] Uninit was stored to memory at: [ 3526.044828][T31990] ___sys_recvmsg+0x522/0x890 [ 3526.049637][T31990] do_recvmmsg+0x55a/0x1180 [ 3526.054347][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3526.059510][T31990] do_syscall_64+0x3d/0xb0 [ 3526.064139][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3526.070188][T31990] [ 3526.072666][T31990] Uninit was stored to memory at: [ 3526.077814][T31990] ___sys_recvmsg+0x522/0x890 [ 3526.082703][T31990] do_recvmmsg+0x55a/0x1180 [ 3526.087331][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3526.092618][T31990] do_syscall_64+0x3d/0xb0 [ 3526.097165][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3526.103350][T31990] [ 3526.105770][T31990] Uninit was stored to memory at: [ 3526.110966][T31990] ___sys_recvmsg+0x522/0x890 [ 3526.115909][T31990] do_recvmmsg+0x55a/0x1180 [ 3526.120548][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3526.125841][T31990] do_syscall_64+0x3d/0xb0 [ 3526.130384][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3526.136534][T31990] [ 3526.138906][T31990] Uninit was stored to memory at: [ 3526.144206][T31990] ___sys_recvmsg+0x522/0x890 [ 3526.149006][T31990] do_recvmmsg+0x55a/0x1180 [ 3526.153715][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3526.158876][T31990] do_syscall_64+0x3d/0xb0 [ 3526.163557][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3526.169613][T31990] [ 3526.172121][T31990] Uninit was stored to memory at: [ 3526.177306][T31990] ___sys_recvmsg+0x522/0x890 [ 3526.182252][T31990] do_recvmmsg+0x55a/0x1180 [ 3526.186884][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3526.192170][T31990] do_syscall_64+0x3d/0xb0 [ 3526.196714][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3526.202845][T31990] [ 3526.205231][T31990] Uninit was stored to memory at: [ 3526.210417][T31990] ___sys_recvmsg+0x522/0x890 [ 3526.215343][T31990] do_recvmmsg+0x55a/0x1180 [ 3526.219973][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3526.225199][T31990] do_syscall_64+0x3d/0xb0 [ 3526.229737][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3526.235935][T31990] [ 3526.238325][T31990] Local variable msg_sys created at: [ 3526.243808][T31990] do_recvmmsg+0x5c/0x1180 [ 3526.248336][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.116128][T31990] not chained 17650000 origins [ 3527.120999][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3527.131261][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3527.141414][T31990] Call Trace: [ 3527.144747][T31990] [ 3527.147806][T31990] dump_stack_lvl+0x1c8/0x256 [ 3527.152965][T31990] dump_stack+0x1a/0x1c [ 3527.157281][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3527.163156][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3527.168367][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3527.174418][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3527.179216][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3527.185135][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3527.191090][T31990] ? should_fail+0x3f/0x810 [ 3527.195680][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3527.200909][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3527.207241][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3527.213158][T31990] __msan_chain_origin+0xbd/0x140 [ 3527.218326][T31990] ___sys_recvmsg+0x522/0x890 [ 3527.223138][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3527.227981][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3527.234040][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3527.240015][T31990] do_recvmmsg+0x55a/0x1180 [ 3527.244677][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3527.251073][T31990] ? do_syscall_64+0x3d/0xb0 [ 3527.255759][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.260928][T31990] do_syscall_64+0x3d/0xb0 [ 3527.265442][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.271496][T31990] RIP: 0033:0x7f6695089279 [ 3527.275990][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3527.295718][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3527.304280][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3527.312383][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3527.320449][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3527.328500][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3527.336671][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3527.344789][T31990] [ 3527.350998][T31990] Uninit was stored to memory at: [ 3527.356626][T31990] ___sys_recvmsg+0x522/0x890 [ 3527.361439][T31990] do_recvmmsg+0x55a/0x1180 [ 3527.366168][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.371334][T31990] do_syscall_64+0x3d/0xb0 [ 3527.376009][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.382152][T31990] [ 3527.384547][T31990] Uninit was stored to memory at: [ 3527.389733][T31990] ___sys_recvmsg+0x522/0x890 [ 3527.394673][T31990] do_recvmmsg+0x55a/0x1180 [ 3527.399305][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.404568][T31990] do_syscall_64+0x3d/0xb0 [ 3527.409097][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.415243][T31990] [ 3527.417636][T31990] Uninit was stored to memory at: [ 3527.422957][T31990] ___sys_recvmsg+0x522/0x890 [ 3527.427744][T31990] do_recvmmsg+0x55a/0x1180 [ 3527.432451][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.437632][T31990] do_syscall_64+0x3d/0xb0 [ 3527.442315][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.448382][T31990] [ 3527.450768][T31990] Uninit was stored to memory at: [ 3527.456097][T31990] ___sys_recvmsg+0x522/0x890 [ 3527.460906][T31990] do_recvmmsg+0x55a/0x1180 [ 3527.465680][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.470850][T31990] do_syscall_64+0x3d/0xb0 [ 3527.475536][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.481679][T31990] [ 3527.484067][T31990] Uninit was stored to memory at: [ 3527.489253][T31990] ___sys_recvmsg+0x522/0x890 [ 3527.494184][T31990] do_recvmmsg+0x55a/0x1180 [ 3527.498814][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.504107][T31990] do_syscall_64+0x3d/0xb0 [ 3527.508637][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.514775][T31990] [ 3527.517156][T31990] Uninit was stored to memory at: [ 3527.522441][T31990] ___sys_recvmsg+0x522/0x890 [ 3527.527226][T31990] do_recvmmsg+0x55a/0x1180 [ 3527.531936][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.537078][T31990] do_syscall_64+0x3d/0xb0 [ 3527.541693][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.547764][T31990] [ 3527.550149][T31990] Uninit was stored to memory at: [ 3527.555464][T31990] ___sys_recvmsg+0x522/0x890 [ 3527.560266][T31990] do_recvmmsg+0x55a/0x1180 [ 3527.564998][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3527.570140][T31990] do_syscall_64+0x3d/0xb0 [ 3527.574733][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3527.580794][T31990] [ 3527.583292][T31990] Local variable msg_sys created at: [ 3527.588659][T31990] do_recvmmsg+0x5c/0x1180 [ 3527.593317][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.470453][T31990] not chained 17660000 origins [ 3528.475522][T31990] CPU: 1 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3528.485773][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3528.495928][T31990] Call Trace: [ 3528.499246][T31990] [ 3528.502213][T31990] dump_stack_lvl+0x1c8/0x256 [ 3528.507002][T31990] dump_stack+0x1a/0x1c [ 3528.511327][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3528.517133][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3528.522260][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3528.528233][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3528.533005][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3528.538981][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3528.544946][T31990] ? should_fail+0x3f/0x810 [ 3528.549597][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3528.554844][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3528.561200][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3528.567120][T31990] __msan_chain_origin+0xbd/0x140 [ 3528.572277][T31990] ___sys_recvmsg+0x522/0x890 [ 3528.577027][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3528.581815][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3528.587870][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3528.593831][T31990] do_recvmmsg+0x55a/0x1180 [ 3528.598441][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3528.604790][T31990] ? do_syscall_64+0x3d/0xb0 [ 3528.609462][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.614576][T31990] do_syscall_64+0x3d/0xb0 [ 3528.619059][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.625054][T31990] RIP: 0033:0x7f6695089279 [ 3528.629525][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3528.649235][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3528.658085][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3528.666139][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3528.674210][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3528.682260][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3528.690338][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3528.698453][T31990] [ 3528.705867][T31990] Uninit was stored to memory at: [ 3528.711092][T31990] ___sys_recvmsg+0x522/0x890 [ 3528.716436][T31990] do_recvmmsg+0x55a/0x1180 [ 3528.721073][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.726382][T31990] do_syscall_64+0x3d/0xb0 [ 3528.730933][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.737165][T31990] [ 3528.739558][T31990] Uninit was stored to memory at: [ 3528.744837][T31990] ___sys_recvmsg+0x522/0x890 [ 3528.749649][T31990] do_recvmmsg+0x55a/0x1180 [ 3528.754433][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.759594][T31990] do_syscall_64+0x3d/0xb0 [ 3528.764298][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.770389][T31990] [ 3528.772917][T31990] Uninit was stored to memory at: [ 3528.778116][T31990] ___sys_recvmsg+0x522/0x890 [ 3528.783133][T31990] do_recvmmsg+0x55a/0x1180 [ 3528.787775][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.793077][T31990] do_syscall_64+0x3d/0xb0 [ 3528.797612][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.803781][T31990] [ 3528.806254][T31990] Uninit was stored to memory at: [ 3528.811441][T31990] ___sys_recvmsg+0x522/0x890 [ 3528.816398][T31990] do_recvmmsg+0x55a/0x1180 [ 3528.821128][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.826399][T31990] do_syscall_64+0x3d/0xb0 [ 3528.830933][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.837097][T31990] [ 3528.839493][T31990] Uninit was stored to memory at: [ 3528.844809][T31990] ___sys_recvmsg+0x522/0x890 [ 3528.849599][T31990] do_recvmmsg+0x55a/0x1180 [ 3528.854295][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.859437][T31990] do_syscall_64+0x3d/0xb0 [ 3528.864082][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.870157][T31990] [ 3528.872670][T31990] Uninit was stored to memory at: [ 3528.877859][T31990] ___sys_recvmsg+0x522/0x890 [ 3528.882817][T31990] do_recvmmsg+0x55a/0x1180 [ 3528.887433][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.892697][T31990] do_syscall_64+0x3d/0xb0 [ 3528.897246][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.903412][T31990] [ 3528.905805][T31990] Uninit was stored to memory at: [ 3528.910976][T31990] ___sys_recvmsg+0x522/0x890 [ 3528.915942][T31990] do_recvmmsg+0x55a/0x1180 [ 3528.920581][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3528.925890][T31990] do_syscall_64+0x3d/0xb0 [ 3528.930432][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3528.936669][T31990] [ 3528.939061][T31990] Local variable msg_sys created at: [ 3528.944582][T31990] do_recvmmsg+0x5c/0x1180 [ 3528.949132][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3529.785658][T31990] not chained 17670000 origins [ 3529.790536][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3529.800803][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3529.810953][T31990] Call Trace: [ 3529.814290][T31990] [ 3529.817280][T31990] dump_stack_lvl+0x1c8/0x256 [ 3529.822092][T31990] dump_stack+0x1a/0x1c [ 3529.826394][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3529.832217][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3529.837428][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3529.843493][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3529.848314][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3529.854289][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3529.860243][T31990] ? should_fail+0x3f/0x810 [ 3529.864847][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3529.870110][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3529.876496][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3529.882457][T31990] __msan_chain_origin+0xbd/0x140 [ 3529.887619][T31990] ___sys_recvmsg+0x522/0x890 [ 3529.892390][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3529.897227][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3529.903279][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3529.909231][T31990] do_recvmmsg+0x55a/0x1180 [ 3529.913848][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3529.920229][T31990] ? do_syscall_64+0x3d/0xb0 [ 3529.924908][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3529.930063][T31990] do_syscall_64+0x3d/0xb0 [ 3529.934577][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3529.940635][T31990] RIP: 0033:0x7f6695089279 [ 3529.945125][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3529.964900][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3529.973457][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3529.981559][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3529.989629][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3529.997686][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3530.005774][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3530.013890][T31990] [ 3530.020311][T31990] Uninit was stored to memory at: [ 3530.025993][T31990] ___sys_recvmsg+0x522/0x890 [ 3530.030802][T31990] do_recvmmsg+0x55a/0x1180 [ 3530.035517][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3530.040684][T31990] do_syscall_64+0x3d/0xb0 [ 3530.045314][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.051392][T31990] [ 3530.053858][T31990] Uninit was stored to memory at: [ 3530.059045][T31990] ___sys_recvmsg+0x522/0x890 [ 3530.063942][T31990] do_recvmmsg+0x55a/0x1180 [ 3530.068579][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3530.073830][T31990] do_syscall_64+0x3d/0xb0 [ 3530.078379][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.084547][T31990] [ 3530.086939][T31990] Uninit was stored to memory at: [ 3530.092216][T31990] ___sys_recvmsg+0x522/0x890 [ 3530.097029][T31990] do_recvmmsg+0x55a/0x1180 [ 3530.101799][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3530.106962][T31990] do_syscall_64+0x3d/0xb0 [ 3530.111509][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.117667][T31990] [ 3530.120049][T31990] Uninit was stored to memory at: [ 3530.125259][T31990] ___sys_recvmsg+0x522/0x890 [ 3530.130003][T31990] do_recvmmsg+0x55a/0x1180 [ 3530.134727][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3530.139873][T31990] do_syscall_64+0x3d/0xb0 [ 3530.144518][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.150578][T31990] [ 3530.153094][T31990] Uninit was stored to memory at: [ 3530.158284][T31990] ___sys_recvmsg+0x522/0x890 [ 3530.163190][T31990] do_recvmmsg+0x55a/0x1180 [ 3530.167822][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3530.173115][T31990] do_syscall_64+0x3d/0xb0 [ 3530.177661][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.183814][T31990] [ 3530.186203][T31990] Uninit was stored to memory at: [ 3530.191389][T31990] ___sys_recvmsg+0x522/0x890 [ 3530.196334][T31990] do_recvmmsg+0x55a/0x1180 [ 3530.200967][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3530.206235][T31990] do_syscall_64+0x3d/0xb0 [ 3530.210763][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.216959][T31990] [ 3530.219332][T31990] Uninit was stored to memory at: [ 3530.224635][T31990] ___sys_recvmsg+0x522/0x890 [ 3530.229403][T31990] do_recvmmsg+0x55a/0x1180 [ 3530.234131][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3530.239294][T31990] do_syscall_64+0x3d/0xb0 [ 3530.243979][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3530.250035][T31990] [ 3530.252545][T31990] Local variable msg_sys created at: [ 3530.257904][T31990] do_recvmmsg+0x5c/0x1180 [ 3530.262588][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3530.682960][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 3530.689579][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 3531.144834][T31990] not chained 17680000 origins [ 3531.149678][T31990] CPU: 1 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3531.159902][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3531.170008][T31990] Call Trace: [ 3531.173320][T31990] [ 3531.176282][T31990] dump_stack_lvl+0x1c8/0x256 [ 3531.181065][T31990] dump_stack+0x1a/0x1c [ 3531.185306][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3531.191107][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3531.196267][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3531.202321][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3531.207135][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3531.213088][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3531.218984][T31990] ? should_fail+0x3f/0x810 [ 3531.223564][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3531.228779][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3531.235166][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3531.241083][T31990] __msan_chain_origin+0xbd/0x140 [ 3531.246205][T31990] ___sys_recvmsg+0x522/0x890 [ 3531.251450][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3531.256264][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3531.262248][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3531.268143][T31990] do_recvmmsg+0x55a/0x1180 [ 3531.272732][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3531.279060][T31990] ? do_syscall_64+0x3d/0xb0 [ 3531.283722][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3531.288830][T31990] do_syscall_64+0x3d/0xb0 [ 3531.293345][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3531.299421][T31990] RIP: 0033:0x7f6695089279 [ 3531.303931][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3531.323628][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3531.332140][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3531.340215][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3531.348266][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3531.356873][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3531.364942][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3531.373009][T31990] [ 3531.381456][T31990] Uninit was stored to memory at: [ 3531.387403][T31990] ___sys_recvmsg+0x522/0x890 [ 3531.392341][T31990] do_recvmmsg+0x55a/0x1180 [ 3531.396985][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3531.402298][T31990] do_syscall_64+0x3d/0xb0 [ 3531.406854][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3531.413081][T31990] [ 3531.415492][T31990] Uninit was stored to memory at: [ 3531.420695][T31990] ___sys_recvmsg+0x522/0x890 [ 3531.425660][T31990] do_recvmmsg+0x55a/0x1180 [ 3531.430309][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3531.435623][T31990] do_syscall_64+0x3d/0xb0 [ 3531.440155][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3531.446290][T31990] [ 3531.448668][T31990] Uninit was stored to memory at: [ 3531.453996][T31990] ___sys_recvmsg+0x522/0x890 [ 3531.458809][T31990] do_recvmmsg+0x55a/0x1180 [ 3531.463572][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3531.468730][T31990] do_syscall_64+0x3d/0xb0 [ 3531.473377][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3531.479439][T31990] [ 3531.481966][T31990] Uninit was stored to memory at: [ 3531.487114][T31990] ___sys_recvmsg+0x522/0x890 [ 3531.492037][T31990] do_recvmmsg+0x55a/0x1180 [ 3531.496674][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3531.501990][T31990] do_syscall_64+0x3d/0xb0 [ 3531.506551][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3531.512719][T31990] [ 3531.515120][T31990] Uninit was stored to memory at: [ 3531.520235][T31990] ___sys_recvmsg+0x522/0x890 [ 3531.525153][T31990] do_recvmmsg+0x55a/0x1180 [ 3531.529770][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3531.535027][T31990] do_syscall_64+0x3d/0xb0 [ 3531.539575][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3531.545807][T31990] [ 3531.548200][T31990] Uninit was stored to memory at: [ 3531.553551][T31990] ___sys_recvmsg+0x522/0x890 [ 3531.558340][T31990] do_recvmmsg+0x55a/0x1180 [ 3531.563116][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3531.568262][T31990] do_syscall_64+0x3d/0xb0 [ 3531.572918][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3531.578970][T31990] [ 3531.581322][T31990] Uninit was stored to memory at: [ 3531.586649][T31990] ___sys_recvmsg+0x522/0x890 [ 3531.591436][T31990] do_recvmmsg+0x55a/0x1180 [ 3531.596191][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3531.601336][T31990] do_syscall_64+0x3d/0xb0 [ 3531.605957][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3531.612133][T31990] [ 3531.614528][T31990] Local variable msg_sys created at: [ 3531.619866][T31990] do_recvmmsg+0x5c/0x1180 [ 3531.624531][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.465084][T31990] not chained 17690000 origins [ 3532.469951][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3532.480183][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3532.490319][T31990] Call Trace: [ 3532.493657][T31990] [ 3532.496820][T31990] dump_stack_lvl+0x1c8/0x256 [ 3532.501624][T31990] dump_stack+0x1a/0x1c [ 3532.505933][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3532.511804][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3532.517014][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3532.523071][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3532.527863][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3532.533786][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3532.539754][T31990] ? should_fail+0x3f/0x810 [ 3532.544407][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3532.549646][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3532.555996][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3532.561972][T31990] __msan_chain_origin+0xbd/0x140 [ 3532.567154][T31990] ___sys_recvmsg+0x522/0x890 [ 3532.571974][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3532.576787][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3532.582788][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3532.588759][T31990] do_recvmmsg+0x55a/0x1180 [ 3532.593430][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3532.599816][T31990] ? do_syscall_64+0x3d/0xb0 [ 3532.604503][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.609667][T31990] do_syscall_64+0x3d/0xb0 [ 3532.614203][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.620208][T31990] RIP: 0033:0x7f6695089279 [ 3532.624710][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3532.644491][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3532.653051][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3532.661158][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3532.669246][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3532.677312][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3532.685436][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3532.693522][T31990] [ 3532.703272][T31990] Uninit was stored to memory at: [ 3532.708511][T31990] ___sys_recvmsg+0x522/0x890 [ 3532.714497][T31990] do_recvmmsg+0x55a/0x1180 [ 3532.719141][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.724397][T31990] do_syscall_64+0x3d/0xb0 [ 3532.728955][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.735153][T31990] [ 3532.737567][T31990] Uninit was stored to memory at: [ 3532.742853][T31990] ___sys_recvmsg+0x522/0x890 [ 3532.747667][T31990] do_recvmmsg+0x55a/0x1180 [ 3532.752440][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.757607][T31990] do_syscall_64+0x3d/0xb0 [ 3532.762290][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.768369][T31990] [ 3532.770764][T31990] Uninit was stored to memory at: [ 3532.776102][T31990] ___sys_recvmsg+0x522/0x890 [ 3532.780920][T31990] do_recvmmsg+0x55a/0x1180 [ 3532.785656][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.790799][T31990] do_syscall_64+0x3d/0xb0 [ 3532.795444][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.801497][T31990] [ 3532.804018][T31990] Uninit was stored to memory at: [ 3532.809242][T31990] ___sys_recvmsg+0x522/0x890 [ 3532.814144][T31990] do_recvmmsg+0x55a/0x1180 [ 3532.818876][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.824161][T31990] do_syscall_64+0x3d/0xb0 [ 3532.828690][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.834831][T31990] [ 3532.837223][T31990] Uninit was stored to memory at: [ 3532.842540][T31990] ___sys_recvmsg+0x522/0x890 [ 3532.847341][T31990] do_recvmmsg+0x55a/0x1180 [ 3532.852052][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.857218][T31990] do_syscall_64+0x3d/0xb0 [ 3532.861873][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.867942][T31990] [ 3532.870328][T31990] Uninit was stored to memory at: [ 3532.875602][T31990] ___sys_recvmsg+0x522/0x890 [ 3532.880419][T31990] do_recvmmsg+0x55a/0x1180 [ 3532.885189][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.890341][T31990] do_syscall_64+0x3d/0xb0 [ 3532.894986][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.901047][T31990] [ 3532.903550][T31990] Uninit was stored to memory at: [ 3532.908701][T31990] ___sys_recvmsg+0x522/0x890 [ 3532.913592][T31990] do_recvmmsg+0x55a/0x1180 [ 3532.918228][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3532.923523][T31990] do_syscall_64+0x3d/0xb0 [ 3532.928050][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3532.934192][T31990] [ 3532.936590][T31990] Local variable msg_sys created at: [ 3532.942071][T31990] do_recvmmsg+0x5c/0x1180 [ 3532.946609][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3533.809367][T31990] not chained 17700000 origins [ 3533.814351][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3533.824584][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3533.834698][T31990] Call Trace: [ 3533.838023][T31990] [ 3533.840990][T31990] dump_stack_lvl+0x1c8/0x256 [ 3533.845773][T31990] dump_stack+0x1a/0x1c [ 3533.850014][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3533.855814][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3533.860940][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3533.867087][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3533.871851][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3533.877819][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3533.883797][T31990] ? should_fail+0x3f/0x810 [ 3533.888462][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3533.893722][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3533.900140][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3533.906106][T31990] __msan_chain_origin+0xbd/0x140 [ 3533.911212][T31990] ___sys_recvmsg+0x522/0x890 [ 3533.915961][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3533.920723][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3533.926726][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3533.932680][T31990] do_recvmmsg+0x55a/0x1180 [ 3533.937271][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3533.945162][T31990] ? do_syscall_64+0x3d/0xb0 [ 3533.949819][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3533.955280][T31990] do_syscall_64+0x3d/0xb0 [ 3533.959850][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3533.965863][T31990] RIP: 0033:0x7f6695089279 [ 3533.970344][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3533.990154][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3533.998695][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3534.006740][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3534.014765][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3534.022812][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3534.030900][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3534.039013][T31990] [ 3534.045260][T31990] Uninit was stored to memory at: [ 3534.050462][T31990] ___sys_recvmsg+0x522/0x890 [ 3534.055757][T31990] do_recvmmsg+0x55a/0x1180 [ 3534.060396][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3534.065667][T31990] do_syscall_64+0x3d/0xb0 [ 3534.070212][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.076387][T31990] [ 3534.078774][T31990] Uninit was stored to memory at: [ 3534.084083][T31990] ___sys_recvmsg+0x522/0x890 [ 3534.088869][T31990] do_recvmmsg+0x55a/0x1180 [ 3534.093600][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3534.098770][T31990] do_syscall_64+0x3d/0xb0 [ 3534.103482][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.109551][T31990] [ 3534.112075][T31990] Uninit was stored to memory at: [ 3534.117221][T31990] ___sys_recvmsg+0x522/0x890 [ 3534.122131][T31990] do_recvmmsg+0x55a/0x1180 [ 3534.126762][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3534.132071][T31990] do_syscall_64+0x3d/0xb0 [ 3534.136625][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.142844][T31990] [ 3534.145242][T31990] Uninit was stored to memory at: [ 3534.150422][T31990] ___sys_recvmsg+0x522/0x890 [ 3534.155328][T31990] do_recvmmsg+0x55a/0x1180 [ 3534.160119][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3534.165353][T31990] do_syscall_64+0x3d/0xb0 [ 3534.169894][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.176082][T31990] [ 3534.178459][T31990] Uninit was stored to memory at: [ 3534.183782][T31990] ___sys_recvmsg+0x522/0x890 [ 3534.188596][T31990] do_recvmmsg+0x55a/0x1180 [ 3534.193371][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3534.198530][T31990] do_syscall_64+0x3d/0xb0 [ 3534.203230][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.209299][T31990] [ 3534.211841][T31990] Uninit was stored to memory at: [ 3534.217042][T31990] ___sys_recvmsg+0x522/0x890 [ 3534.222015][T31990] do_recvmmsg+0x55a/0x1180 [ 3534.226645][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3534.231952][T31990] do_syscall_64+0x3d/0xb0 [ 3534.236564][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.242735][T31990] [ 3534.245128][T31990] Uninit was stored to memory at: [ 3534.250269][T31990] ___sys_recvmsg+0x522/0x890 [ 3534.255190][T31990] do_recvmmsg+0x55a/0x1180 [ 3534.259804][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3534.265084][T31990] do_syscall_64+0x3d/0xb0 [ 3534.269624][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3534.275794][T31990] [ 3534.278269][T31990] Local variable msg_sys created at: [ 3534.283775][T31990] do_recvmmsg+0x5c/0x1180 [ 3534.288325][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.123390][T31990] not chained 17710000 origins [ 3535.128293][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3535.138588][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3535.148710][T31990] Call Trace: [ 3535.152027][T31990] [ 3535.154994][T31990] dump_stack_lvl+0x1c8/0x256 [ 3535.159788][T31990] dump_stack+0x1a/0x1c [ 3535.164030][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3535.169833][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3535.174954][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3535.180948][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3535.185724][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3535.191700][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3535.197667][T31990] ? should_fail+0x3f/0x810 [ 3535.202330][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3535.207577][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3535.213969][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3535.219902][T31990] __msan_chain_origin+0xbd/0x140 [ 3535.225079][T31990] ___sys_recvmsg+0x522/0x890 [ 3535.229869][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3535.234670][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3535.240727][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3535.246701][T31990] do_recvmmsg+0x55a/0x1180 [ 3535.251358][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3535.257744][T31990] ? do_syscall_64+0x3d/0xb0 [ 3535.262519][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.267630][T31990] do_syscall_64+0x3d/0xb0 [ 3535.272110][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.278103][T31990] RIP: 0033:0x7f6695089279 [ 3535.282590][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3535.302337][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3535.310821][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3535.318866][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3535.326915][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3535.335007][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3535.343082][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3535.351183][T31990] [ 3535.357650][T31990] Uninit was stored to memory at: [ 3535.363255][T31990] ___sys_recvmsg+0x522/0x890 [ 3535.368060][T31990] do_recvmmsg+0x55a/0x1180 [ 3535.372793][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.377993][T31990] do_syscall_64+0x3d/0xb0 [ 3535.382640][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.388694][T31990] [ 3535.391042][T31990] Uninit was stored to memory at: [ 3535.396370][T31990] ___sys_recvmsg+0x522/0x890 [ 3535.401176][T31990] do_recvmmsg+0x55a/0x1180 [ 3535.405919][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.411066][T31990] do_syscall_64+0x3d/0xb0 [ 3535.415682][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.421842][T31990] [ 3535.424246][T31990] Uninit was stored to memory at: [ 3535.429432][T31990] ___sys_recvmsg+0x522/0x890 [ 3535.434385][T31990] do_recvmmsg+0x55a/0x1180 [ 3535.439027][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.444253][T31990] do_syscall_64+0x3d/0xb0 [ 3535.448798][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.454957][T31990] [ 3535.457348][T31990] Uninit was stored to memory at: [ 3535.462626][T31990] ___sys_recvmsg+0x522/0x890 [ 3535.467422][T31990] do_recvmmsg+0x55a/0x1180 [ 3535.472204][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.477367][T31990] do_syscall_64+0x3d/0xb0 [ 3535.482031][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.488105][T31990] [ 3535.490468][T31990] Uninit was stored to memory at: [ 3535.495790][T31990] ___sys_recvmsg+0x522/0x890 [ 3535.500578][T31990] do_recvmmsg+0x55a/0x1180 [ 3535.505277][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.510417][T31990] do_syscall_64+0x3d/0xb0 [ 3535.515079][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.521127][T31990] [ 3535.523648][T31990] Uninit was stored to memory at: [ 3535.528839][T31990] ___sys_recvmsg+0x522/0x890 [ 3535.533808][T31990] do_recvmmsg+0x55a/0x1180 [ 3535.538444][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.543770][T31990] do_syscall_64+0x3d/0xb0 [ 3535.548474][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.554644][T31990] [ 3535.557018][T31990] Uninit was stored to memory at: [ 3535.562336][T31990] ___sys_recvmsg+0x522/0x890 [ 3535.567132][T31990] do_recvmmsg+0x55a/0x1180 [ 3535.571857][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3535.577019][T31990] do_syscall_64+0x3d/0xb0 [ 3535.581654][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3535.587722][T31990] [ 3535.590106][T31990] Local variable msg_sys created at: [ 3535.595614][T31990] do_recvmmsg+0x5c/0x1180 [ 3535.600140][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.488610][T31990] not chained 17720000 origins [ 3536.493588][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3536.503837][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3536.514009][T31990] Call Trace: [ 3536.517353][T31990] [ 3536.520341][T31990] dump_stack_lvl+0x1c8/0x256 [ 3536.525195][T31990] dump_stack+0x1a/0x1c [ 3536.529513][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3536.535374][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3536.540503][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3536.546498][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3536.551261][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3536.557233][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3536.563211][T31990] ? should_fail+0x3f/0x810 [ 3536.567863][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3536.573130][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3536.579519][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3536.585410][T31990] __msan_chain_origin+0xbd/0x140 [ 3536.590566][T31990] ___sys_recvmsg+0x522/0x890 [ 3536.595324][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3536.600092][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3536.606129][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3536.612134][T31990] do_recvmmsg+0x55a/0x1180 [ 3536.616800][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3536.623202][T31990] ? do_syscall_64+0x3d/0xb0 [ 3536.627911][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.633044][T31990] do_syscall_64+0x3d/0xb0 [ 3536.637552][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.643551][T31990] RIP: 0033:0x7f6695089279 [ 3536.648022][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3536.667753][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3536.676292][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3536.684327][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3536.692367][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3536.700395][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3536.708446][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3536.716561][T31990] [ 3536.722970][T31990] Uninit was stored to memory at: [ 3536.728479][T31990] ___sys_recvmsg+0x522/0x890 [ 3536.733395][T31990] do_recvmmsg+0x55a/0x1180 [ 3536.738029][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.743296][T31990] do_syscall_64+0x3d/0xb0 [ 3536.747851][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.754071][T31990] [ 3536.756473][T31990] Uninit was stored to memory at: [ 3536.761758][T31990] ___sys_recvmsg+0x522/0x890 [ 3536.766563][T31990] do_recvmmsg+0x55a/0x1180 [ 3536.771199][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.776539][T31990] do_syscall_64+0x3d/0xb0 [ 3536.781082][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.787286][T31990] [ 3536.789673][T31990] Uninit was stored to memory at: [ 3536.794993][T31990] ___sys_recvmsg+0x522/0x890 [ 3536.799787][T31990] do_recvmmsg+0x55a/0x1180 [ 3536.804555][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.809719][T31990] do_syscall_64+0x3d/0xb0 [ 3536.814432][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.820506][T31990] [ 3536.823096][T31990] Uninit was stored to memory at: [ 3536.828290][T31990] ___sys_recvmsg+0x522/0x890 [ 3536.833221][T31990] do_recvmmsg+0x55a/0x1180 [ 3536.837852][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.843176][T31990] do_syscall_64+0x3d/0xb0 [ 3536.847726][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.853910][T31990] [ 3536.856277][T31990] Uninit was stored to memory at: [ 3536.861443][T31990] ___sys_recvmsg+0x522/0x890 [ 3536.866401][T31990] do_recvmmsg+0x55a/0x1180 [ 3536.871030][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.876337][T31990] do_syscall_64+0x3d/0xb0 [ 3536.880868][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.887074][T31990] [ 3536.889459][T31990] Uninit was stored to memory at: [ 3536.894817][T31990] ___sys_recvmsg+0x522/0x890 [ 3536.899632][T31990] do_recvmmsg+0x55a/0x1180 [ 3536.904434][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.909574][T31990] do_syscall_64+0x3d/0xb0 [ 3536.914246][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.920303][T31990] [ 3536.922825][T31990] Uninit was stored to memory at: [ 3536.928022][T31990] ___sys_recvmsg+0x522/0x890 [ 3536.932992][T31990] do_recvmmsg+0x55a/0x1180 [ 3536.937635][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3536.942966][T31990] do_syscall_64+0x3d/0xb0 [ 3536.947500][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3536.953679][T31990] [ 3536.956171][T31990] Local variable msg_sys created at: [ 3536.961529][T31990] do_recvmmsg+0x5c/0x1180 [ 3536.966276][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3537.838948][T31990] not chained 17730000 origins [ 3537.843904][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3537.854156][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3537.864302][T31990] Call Trace: [ 3537.867616][T31990] [ 3537.870580][T31990] dump_stack_lvl+0x1c8/0x256 [ 3537.875381][T31990] dump_stack+0x1a/0x1c [ 3537.879631][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3537.885461][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3537.890664][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3537.896663][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3537.901420][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3537.907344][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3537.913316][T31990] ? should_fail+0x3f/0x810 [ 3537.917965][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3537.923227][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3537.929614][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3537.935507][T31990] __msan_chain_origin+0xbd/0x140 [ 3537.940781][T31990] ___sys_recvmsg+0x522/0x890 [ 3537.945543][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3537.950322][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3537.956321][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3537.962289][T31990] do_recvmmsg+0x55a/0x1180 [ 3537.966999][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3537.973342][T31990] ? do_syscall_64+0x3d/0xb0 [ 3537.978009][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3537.983121][T31990] do_syscall_64+0x3d/0xb0 [ 3537.987682][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3537.993750][T31990] RIP: 0033:0x7f6695089279 [ 3537.998223][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3538.017933][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3538.026423][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3538.034455][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3538.042481][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3538.050503][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3538.058721][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3538.066843][T31990] [ 3538.073414][T31990] Uninit was stored to memory at: [ 3538.078632][T31990] ___sys_recvmsg+0x522/0x890 [ 3538.083922][T31990] do_recvmmsg+0x55a/0x1180 [ 3538.088591][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3538.093857][T31990] do_syscall_64+0x3d/0xb0 [ 3538.098418][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.104660][T31990] [ 3538.107061][T31990] Uninit was stored to memory at: [ 3538.112397][T31990] ___sys_recvmsg+0x522/0x890 [ 3538.117188][T31990] do_recvmmsg+0x55a/0x1180 [ 3538.121912][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3538.127085][T31990] do_syscall_64+0x3d/0xb0 [ 3538.131763][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.137832][T31990] [ 3538.140179][T31990] Uninit was stored to memory at: [ 3538.145507][T31990] ___sys_recvmsg+0x522/0x890 [ 3538.150302][T31990] do_recvmmsg+0x55a/0x1180 [ 3538.155050][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3538.160191][T31990] do_syscall_64+0x3d/0xb0 [ 3538.164861][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.170921][T31990] [ 3538.173456][T31990] Uninit was stored to memory at: [ 3538.178642][T31990] ___sys_recvmsg+0x522/0x890 [ 3538.183558][T31990] do_recvmmsg+0x55a/0x1180 [ 3538.188188][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3538.193491][T31990] do_syscall_64+0x3d/0xb0 [ 3538.198039][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.204228][T31990] [ 3538.206610][T31990] Uninit was stored to memory at: [ 3538.211908][T31990] ___sys_recvmsg+0x522/0x890 [ 3538.216718][T31990] do_recvmmsg+0x55a/0x1180 [ 3538.221347][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3538.226619][T31990] do_syscall_64+0x3d/0xb0 [ 3538.231151][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.237271][T31990] [ 3538.239676][T31990] Uninit was stored to memory at: [ 3538.244990][T31990] ___sys_recvmsg+0x522/0x890 [ 3538.249799][T31990] do_recvmmsg+0x55a/0x1180 [ 3538.254547][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3538.259750][T31990] do_syscall_64+0x3d/0xb0 [ 3538.264411][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.270468][T31990] [ 3538.272997][T31990] Uninit was stored to memory at: [ 3538.278144][T31990] ___sys_recvmsg+0x522/0x890 [ 3538.283071][T31990] do_recvmmsg+0x55a/0x1180 [ 3538.287687][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3538.292947][T31990] do_syscall_64+0x3d/0xb0 [ 3538.297491][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3538.303661][T31990] [ 3538.306059][T31990] Local variable msg_sys created at: [ 3538.311417][T31990] do_recvmmsg+0x5c/0x1180 [ 3538.316136][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.155902][T31990] not chained 17740000 origins [ 3539.160745][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3539.171064][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3539.181180][T31990] Call Trace: [ 3539.184519][T31990] [ 3539.187525][T31990] dump_stack_lvl+0x1c8/0x256 [ 3539.192386][T31990] dump_stack+0x1a/0x1c [ 3539.196699][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3539.202574][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3539.207783][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3539.213895][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3539.218711][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3539.224685][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3539.230652][T31990] ? should_fail+0x3f/0x810 [ 3539.235248][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3539.240469][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3539.246828][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3539.252757][T31990] __msan_chain_origin+0xbd/0x140 [ 3539.257935][T31990] ___sys_recvmsg+0x522/0x890 [ 3539.262711][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3539.267543][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3539.273596][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3539.279579][T31990] do_recvmmsg+0x55a/0x1180 [ 3539.284203][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3539.290593][T31990] ? do_syscall_64+0x3d/0xb0 [ 3539.295299][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.300484][T31990] do_syscall_64+0x3d/0xb0 [ 3539.305038][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.311097][T31990] RIP: 0033:0x7f6695089279 [ 3539.315586][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3539.335368][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3539.343935][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3539.352032][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3539.360108][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3539.368154][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3539.376210][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3539.384328][T31990] [ 3539.390524][T31990] Uninit was stored to memory at: [ 3539.396142][T31990] ___sys_recvmsg+0x522/0x890 [ 3539.400952][T31990] do_recvmmsg+0x55a/0x1180 [ 3539.405908][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.411115][T31990] do_syscall_64+0x3d/0xb0 [ 3539.415754][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.421923][T31990] [ 3539.424319][T31990] Uninit was stored to memory at: [ 3539.429514][T31990] ___sys_recvmsg+0x522/0x890 [ 3539.434400][T31990] do_recvmmsg+0x55a/0x1180 [ 3539.439035][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.444277][T31990] do_syscall_64+0x3d/0xb0 [ 3539.448822][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.454974][T31990] [ 3539.457353][T31990] Uninit was stored to memory at: [ 3539.462634][T31990] ___sys_recvmsg+0x522/0x890 [ 3539.467445][T31990] do_recvmmsg+0x55a/0x1180 [ 3539.472200][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.477368][T31990] do_syscall_64+0x3d/0xb0 [ 3539.482047][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.488100][T31990] [ 3539.490448][T31990] Uninit was stored to memory at: [ 3539.495760][T31990] ___sys_recvmsg+0x522/0x890 [ 3539.500562][T31990] do_recvmmsg+0x55a/0x1180 [ 3539.505293][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.510438][T31990] do_syscall_64+0x3d/0xb0 [ 3539.515081][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.521148][T31990] [ 3539.523646][T31990] Uninit was stored to memory at: [ 3539.528837][T31990] ___sys_recvmsg+0x522/0x890 [ 3539.533770][T31990] do_recvmmsg+0x55a/0x1180 [ 3539.538404][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.543702][T31990] do_syscall_64+0x3d/0xb0 [ 3539.548249][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.554459][T31990] [ 3539.556857][T31990] Uninit was stored to memory at: [ 3539.562170][T31990] ___sys_recvmsg+0x522/0x890 [ 3539.566955][T31990] do_recvmmsg+0x55a/0x1180 [ 3539.571680][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.576821][T31990] do_syscall_64+0x3d/0xb0 [ 3539.581305][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.587518][T31990] [ 3539.589908][T31990] Uninit was stored to memory at: [ 3539.595246][T31990] ___sys_recvmsg+0x522/0x890 [ 3539.600042][T31990] do_recvmmsg+0x55a/0x1180 [ 3539.604790][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3539.609949][T31990] do_syscall_64+0x3d/0xb0 [ 3539.614589][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3539.620668][T31990] [ 3539.623162][T31990] Local variable msg_sys created at: [ 3539.628550][T31990] do_recvmmsg+0x5c/0x1180 [ 3539.633182][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.474825][T31990] not chained 17750000 origins [ 3540.479750][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3540.489982][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3540.500091][T31990] Call Trace: [ 3540.503406][T31990] [ 3540.506388][T31990] dump_stack_lvl+0x1c8/0x256 [ 3540.511176][T31990] dump_stack+0x1a/0x1c [ 3540.515427][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3540.521237][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3540.526493][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3540.532544][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3540.537352][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3540.543320][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3540.549293][T31990] ? should_fail+0x3f/0x810 [ 3540.553932][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3540.559155][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3540.565487][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3540.571378][T31990] __msan_chain_origin+0xbd/0x140 [ 3540.576500][T31990] ___sys_recvmsg+0x522/0x890 [ 3540.581317][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3540.586123][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3540.592105][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3540.598009][T31990] do_recvmmsg+0x55a/0x1180 [ 3540.602595][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3540.608942][T31990] ? do_syscall_64+0x3d/0xb0 [ 3540.613606][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.618713][T31990] do_syscall_64+0x3d/0xb0 [ 3540.623214][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.629284][T31990] RIP: 0033:0x7f6695089279 [ 3540.633783][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3540.653482][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3540.661972][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3540.670006][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3540.678049][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3540.686132][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3540.694210][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3540.702296][T31990] [ 3540.708591][T31990] Uninit was stored to memory at: [ 3540.714192][T31990] ___sys_recvmsg+0x522/0x890 [ 3540.719001][T31990] do_recvmmsg+0x55a/0x1180 [ 3540.723745][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.728908][T31990] do_syscall_64+0x3d/0xb0 [ 3540.733557][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.739626][T31990] [ 3540.742110][T31990] Uninit was stored to memory at: [ 3540.747274][T31990] ___sys_recvmsg+0x522/0x890 [ 3540.752237][T31990] do_recvmmsg+0x55a/0x1180 [ 3540.756878][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.762302][T31990] do_syscall_64+0x3d/0xb0 [ 3540.766852][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.773046][T31990] [ 3540.775418][T31990] Uninit was stored to memory at: [ 3540.780537][T31990] ___sys_recvmsg+0x522/0x890 [ 3540.785411][T31990] do_recvmmsg+0x55a/0x1180 [ 3540.790047][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.795310][T31990] do_syscall_64+0x3d/0xb0 [ 3540.799851][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.806026][T31990] [ 3540.808414][T31990] Uninit was stored to memory at: [ 3540.813759][T31990] ___sys_recvmsg+0x522/0x890 [ 3540.818560][T31990] do_recvmmsg+0x55a/0x1180 [ 3540.823303][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.828446][T31990] do_syscall_64+0x3d/0xb0 [ 3540.833095][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.839173][T31990] [ 3540.841699][T31990] Uninit was stored to memory at: [ 3540.846839][T31990] ___sys_recvmsg+0x522/0x890 [ 3540.851723][T31990] do_recvmmsg+0x55a/0x1180 [ 3540.856355][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.861497][T31990] do_syscall_64+0x3d/0xb0 [ 3540.866161][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.872337][T31990] [ 3540.874710][T31990] Uninit was stored to memory at: [ 3540.879822][T31990] ___sys_recvmsg+0x522/0x890 [ 3540.884732][T31990] do_recvmmsg+0x55a/0x1180 [ 3540.889347][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.894611][T31990] do_syscall_64+0x3d/0xb0 [ 3540.899138][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.905256][T31990] [ 3540.907629][T31990] Uninit was stored to memory at: [ 3540.912928][T31990] ___sys_recvmsg+0x522/0x890 [ 3540.917733][T31990] do_recvmmsg+0x55a/0x1180 [ 3540.922449][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3540.927603][T31990] do_syscall_64+0x3d/0xb0 [ 3540.932282][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3540.938339][T31990] [ 3540.940779][T31990] Local variable msg_sys created at: [ 3540.946226][T31990] do_recvmmsg+0x5c/0x1180 [ 3540.950839][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3541.775401][T31990] not chained 17760000 origins [ 3541.780291][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3541.790591][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3541.800758][T31990] Call Trace: [ 3541.804220][T31990] [ 3541.807227][T31990] dump_stack_lvl+0x1c8/0x256 [ 3541.812095][T31990] dump_stack+0x1a/0x1c [ 3541.816414][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3541.822290][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3541.827489][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3541.833499][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3541.838317][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3541.844290][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3541.850254][T31990] ? should_fail+0x3f/0x810 [ 3541.854858][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3541.860106][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3541.866462][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3541.872424][T31990] __msan_chain_origin+0xbd/0x140 [ 3541.877591][T31990] ___sys_recvmsg+0x522/0x890 [ 3541.882404][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3541.887213][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3541.893214][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3541.899163][T31990] do_recvmmsg+0x55a/0x1180 [ 3541.903781][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3541.910196][T31990] ? do_syscall_64+0x3d/0xb0 [ 3541.914884][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3541.920071][T31990] do_syscall_64+0x3d/0xb0 [ 3541.924615][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3541.930668][T31990] RIP: 0033:0x7f6695089279 [ 3541.935154][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3541.954907][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3541.963428][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3541.971505][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3541.979579][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3541.987662][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3541.995731][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3542.003836][T31990] [ 3542.010178][T31990] Uninit was stored to memory at: [ 3542.015750][T31990] ___sys_recvmsg+0x522/0x890 [ 3542.020557][T31990] do_recvmmsg+0x55a/0x1180 [ 3542.025276][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3542.030441][T31990] do_syscall_64+0x3d/0xb0 [ 3542.035118][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3542.041185][T31990] [ 3542.043649][T31990] Uninit was stored to memory at: [ 3542.048840][T31990] ___sys_recvmsg+0x522/0x890 [ 3542.053768][T31990] do_recvmmsg+0x55a/0x1180 [ 3542.058403][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3542.063685][T31990] do_syscall_64+0x3d/0xb0 [ 3542.068210][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3542.074350][T31990] [ 3542.076740][T31990] Uninit was stored to memory at: [ 3542.082005][T31990] ___sys_recvmsg+0x522/0x890 [ 3542.086811][T31990] do_recvmmsg+0x55a/0x1180 [ 3542.091424][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3542.096647][T31990] do_syscall_64+0x3d/0xb0 [ 3542.101177][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3542.107329][T31990] [ 3542.109704][T31990] Uninit was stored to memory at: [ 3542.115001][T31990] ___sys_recvmsg+0x522/0x890 [ 3542.119791][T31990] do_recvmmsg+0x55a/0x1180 [ 3542.124534][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3542.129674][T31990] do_syscall_64+0x3d/0xb0 [ 3542.134302][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3542.140369][T31990] [ 3542.142905][T31990] Uninit was stored to memory at: [ 3542.148115][T31990] ___sys_recvmsg+0x522/0x890 [ 3542.153048][T31990] do_recvmmsg+0x55a/0x1180 [ 3542.157662][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3542.162905][T31990] do_syscall_64+0x3d/0xb0 [ 3542.167457][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3542.173651][T31990] [ 3542.176044][T31990] Uninit was stored to memory at: [ 3542.181183][T31990] ___sys_recvmsg+0x522/0x890 [ 3542.186060][T31990] do_recvmmsg+0x55a/0x1180 [ 3542.190690][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3542.195979][T31990] do_syscall_64+0x3d/0xb0 [ 3542.200506][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3542.206606][T31990] [ 3542.208983][T31990] Uninit was stored to memory at: [ 3542.214267][T31990] ___sys_recvmsg+0x522/0x890 [ 3542.219051][T31990] do_recvmmsg+0x55a/0x1180 [ 3542.223765][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3542.228906][T31990] do_syscall_64+0x3d/0xb0 [ 3542.233536][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3542.239599][T31990] [ 3542.242102][T31990] Local variable msg_sys created at: [ 3542.247455][T31990] do_recvmmsg+0x5c/0x1180 [ 3542.252067][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.092692][T31990] not chained 17770000 origins [ 3543.097579][T31990] CPU: 1 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3543.107874][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3543.118083][T31990] Call Trace: [ 3543.121396][T31990] [ 3543.124357][T31990] dump_stack_lvl+0x1c8/0x256 [ 3543.129138][T31990] dump_stack+0x1a/0x1c [ 3543.133391][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3543.139203][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3543.144351][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3543.150397][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3543.155208][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3543.161158][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3543.167051][T31990] ? should_fail+0x3f/0x810 [ 3543.171644][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3543.176835][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3543.183162][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3543.189047][T31990] __msan_chain_origin+0xbd/0x140 [ 3543.194179][T31990] ___sys_recvmsg+0x522/0x890 [ 3543.198992][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3543.203819][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3543.209872][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3543.215825][T31990] do_recvmmsg+0x55a/0x1180 [ 3543.220410][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3543.226743][T31990] ? do_syscall_64+0x3d/0xb0 [ 3543.231401][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.236507][T31990] do_syscall_64+0x3d/0xb0 [ 3543.241164][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.247174][T31990] RIP: 0033:0x7f6695089279 [ 3543.251678][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3543.271639][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3543.280133][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3543.288177][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3543.296223][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3543.304288][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3543.312332][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3543.320419][T31990] [ 3543.327809][T31990] Uninit was stored to memory at: [ 3543.333531][T31990] ___sys_recvmsg+0x522/0x890 [ 3543.338335][T31990] do_recvmmsg+0x55a/0x1180 [ 3543.343064][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.348227][T31990] do_syscall_64+0x3d/0xb0 [ 3543.352881][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.358951][T31990] [ 3543.361338][T31990] Uninit was stored to memory at: [ 3543.366682][T31990] ___sys_recvmsg+0x522/0x890 [ 3543.371476][T31990] do_recvmmsg+0x55a/0x1180 [ 3543.376222][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.381360][T31990] do_syscall_64+0x3d/0xb0 [ 3543.385974][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.392117][T31990] [ 3543.394484][T31990] Uninit was stored to memory at: [ 3543.399605][T31990] ___sys_recvmsg+0x522/0x890 [ 3543.404512][T31990] do_recvmmsg+0x55a/0x1180 [ 3543.409151][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.414454][T31990] do_syscall_64+0x3d/0xb0 [ 3543.419000][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.426830][T31990] [ 3543.429210][T31990] Uninit was stored to memory at: [ 3543.434527][T31990] ___sys_recvmsg+0x522/0x890 [ 3543.439319][T31990] do_recvmmsg+0x55a/0x1180 [ 3543.444062][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.449207][T31990] do_syscall_64+0x3d/0xb0 [ 3543.453856][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.459933][T31990] [ 3543.462466][T31990] Uninit was stored to memory at: [ 3543.467623][T31990] ___sys_recvmsg+0x522/0x890 [ 3543.472541][T31990] do_recvmmsg+0x55a/0x1180 [ 3543.477155][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.482419][T31990] do_syscall_64+0x3d/0xb0 [ 3543.486993][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.493215][T31990] [ 3543.495608][T31990] Uninit was stored to memory at: [ 3543.500759][T31990] ___sys_recvmsg+0x522/0x890 [ 3543.505700][T31990] do_recvmmsg+0x55a/0x1180 [ 3543.510334][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.515586][T31990] do_syscall_64+0x3d/0xb0 [ 3543.520133][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.526345][T31990] [ 3543.528725][T31990] Uninit was stored to memory at: [ 3543.534004][T31990] ___sys_recvmsg+0x522/0x890 [ 3543.538800][T31990] do_recvmmsg+0x55a/0x1180 [ 3543.543547][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3543.548709][T31990] do_syscall_64+0x3d/0xb0 [ 3543.553407][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3543.559467][T31990] [ 3543.561986][T31990] Local variable msg_sys created at: [ 3543.567358][T31990] do_recvmmsg+0x5c/0x1180 [ 3543.571990][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.417857][T31990] not chained 17780000 origins [ 3544.422779][T31990] CPU: 1 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3544.433024][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3544.443197][T31990] Call Trace: [ 3544.446559][T31990] [ 3544.449552][T31990] dump_stack_lvl+0x1c8/0x256 [ 3544.454337][T31990] dump_stack+0x1a/0x1c [ 3544.458578][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3544.464378][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3544.469589][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3544.475567][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3544.480314][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3544.486233][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3544.492202][T31990] ? should_fail+0x3f/0x810 [ 3544.496852][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3544.502100][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3544.508434][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3544.514330][T31990] __msan_chain_origin+0xbd/0x140 [ 3544.519446][T31990] ___sys_recvmsg+0x522/0x890 [ 3544.524197][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3544.528955][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3544.534956][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3544.540926][T31990] do_recvmmsg+0x55a/0x1180 [ 3544.545589][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3544.551977][T31990] ? do_syscall_64+0x3d/0xb0 [ 3544.556642][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.561754][T31990] do_syscall_64+0x3d/0xb0 [ 3544.566253][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.572244][T31990] RIP: 0033:0x7f6695089279 [ 3544.576733][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3544.596436][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3544.604929][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3544.612971][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3544.621003][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3544.629035][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3544.637084][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3544.645200][T31990] [ 3544.654607][T31990] Uninit was stored to memory at: [ 3544.659832][T31990] ___sys_recvmsg+0x522/0x890 [ 3544.665672][T31990] do_recvmmsg+0x55a/0x1180 [ 3544.670292][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.675625][T31990] do_syscall_64+0x3d/0xb0 [ 3544.680176][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.686413][T31990] [ 3544.688803][T31990] Uninit was stored to memory at: [ 3544.694170][T31990] ___sys_recvmsg+0x522/0x890 [ 3544.698978][T31990] do_recvmmsg+0x55a/0x1180 [ 3544.703769][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.708944][T31990] do_syscall_64+0x3d/0xb0 [ 3544.713606][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.719664][T31990] [ 3544.722144][T31990] Uninit was stored to memory at: [ 3544.727287][T31990] ___sys_recvmsg+0x522/0x890 [ 3544.732200][T31990] do_recvmmsg+0x55a/0x1180 [ 3544.736832][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.742140][T31990] do_syscall_64+0x3d/0xb0 [ 3544.746725][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.752963][T31990] [ 3544.755350][T31990] Uninit was stored to memory at: [ 3544.760538][T31990] ___sys_recvmsg+0x522/0x890 [ 3544.765507][T31990] do_recvmmsg+0x55a/0x1180 [ 3544.770126][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.775361][T31990] do_syscall_64+0x3d/0xb0 [ 3544.779921][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.786077][T31990] [ 3544.788458][T31990] Uninit was stored to memory at: [ 3544.793794][T31990] ___sys_recvmsg+0x522/0x890 [ 3544.798588][T31990] do_recvmmsg+0x55a/0x1180 [ 3544.803340][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.808488][T31990] do_syscall_64+0x3d/0xb0 [ 3544.813157][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.819329][T31990] [ 3544.821867][T31990] Uninit was stored to memory at: [ 3544.827067][T31990] ___sys_recvmsg+0x522/0x890 [ 3544.832035][T31990] do_recvmmsg+0x55a/0x1180 [ 3544.836657][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.841895][T31990] do_syscall_64+0x3d/0xb0 [ 3544.846445][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.852679][T31990] [ 3544.855068][T31990] Uninit was stored to memory at: [ 3544.860261][T31990] ___sys_recvmsg+0x522/0x890 [ 3544.865189][T31990] do_recvmmsg+0x55a/0x1180 [ 3544.869806][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3544.875092][T31990] do_syscall_64+0x3d/0xb0 [ 3544.879707][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3544.885884][T31990] [ 3544.888278][T31990] Local variable msg_sys created at: [ 3544.893798][T31990] do_recvmmsg+0x5c/0x1180 [ 3544.898329][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3545.739413][T31990] not chained 17790000 origins [ 3545.744346][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3545.754625][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3545.764759][T31990] Call Trace: [ 3545.768119][T31990] [ 3545.771129][T31990] dump_stack_lvl+0x1c8/0x256 [ 3545.775999][T31990] dump_stack+0x1a/0x1c [ 3545.780318][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3545.786146][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3545.791329][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3545.797340][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3545.802155][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3545.808144][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3545.814130][T31990] ? should_fail+0x3f/0x810 [ 3545.818721][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3545.823953][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3545.830378][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3545.836339][T31990] __msan_chain_origin+0xbd/0x140 [ 3545.841461][T31990] ___sys_recvmsg+0x522/0x890 [ 3545.846254][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3545.851074][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3545.857067][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3545.863007][T31990] do_recvmmsg+0x55a/0x1180 [ 3545.867642][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3545.874010][T31990] ? do_syscall_64+0x3d/0xb0 [ 3545.878747][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3545.883933][T31990] do_syscall_64+0x3d/0xb0 [ 3545.888467][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3545.894481][T31990] RIP: 0033:0x7f6695089279 [ 3545.898987][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3545.918718][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3545.927279][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3545.935383][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3545.943477][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3545.951572][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3545.959633][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3545.967692][T31990] [ 3545.974087][T31990] Uninit was stored to memory at: [ 3545.979294][T31990] ___sys_recvmsg+0x522/0x890 [ 3545.984485][T31990] do_recvmmsg+0x55a/0x1180 [ 3545.990082][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3545.995370][T31990] do_syscall_64+0x3d/0xb0 [ 3545.999923][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3546.006090][T31990] [ 3546.008480][T31990] Uninit was stored to memory at: [ 3546.013801][T31990] ___sys_recvmsg+0x522/0x890 [ 3546.018623][T31990] do_recvmmsg+0x55a/0x1180 [ 3546.023382][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3546.028543][T31990] do_syscall_64+0x3d/0xb0 [ 3546.033221][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3546.039275][T31990] [ 3546.041753][T31990] Uninit was stored to memory at: [ 3546.046956][T31990] ___sys_recvmsg+0x522/0x890 [ 3546.051876][T31990] do_recvmmsg+0x55a/0x1180 [ 3546.056516][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3546.061786][T31990] do_syscall_64+0x3d/0xb0 [ 3546.066325][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3546.072470][T31990] [ 3546.074876][T31990] Uninit was stored to memory at: [ 3546.080069][T31990] ___sys_recvmsg+0x522/0x890 [ 3546.085004][T31990] do_recvmmsg+0x55a/0x1180 [ 3546.089640][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3546.094926][T31990] do_syscall_64+0x3d/0xb0 [ 3546.099458][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3546.105596][T31990] [ 3546.107984][T31990] Uninit was stored to memory at: [ 3546.113266][T31990] ___sys_recvmsg+0x522/0x890 [ 3546.118072][T31990] do_recvmmsg+0x55a/0x1180 [ 3546.122832][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3546.128005][T31990] do_syscall_64+0x3d/0xb0 [ 3546.132672][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3546.138753][T31990] [ 3546.141150][T31990] Uninit was stored to memory at: [ 3546.146473][T31990] ___sys_recvmsg+0x522/0x890 [ 3546.151268][T31990] do_recvmmsg+0x55a/0x1180 [ 3546.155987][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3546.161131][T31990] do_syscall_64+0x3d/0xb0 [ 3546.165765][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3546.171920][T31990] [ 3546.174297][T31990] Uninit was stored to memory at: [ 3546.179460][T31990] ___sys_recvmsg+0x522/0x890 [ 3546.184383][T31990] do_recvmmsg+0x55a/0x1180 [ 3546.189020][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3546.194261][T31990] do_syscall_64+0x3d/0xb0 [ 3546.198789][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3546.204938][T31990] [ 3546.207330][T31990] Local variable msg_sys created at: [ 3546.212814][T31990] do_recvmmsg+0x5c/0x1180 [ 3546.217344][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.065613][T31990] not chained 17800000 origins [ 3547.070491][T31990] CPU: 1 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3547.080776][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3547.090885][T31990] Call Trace: [ 3547.094198][T31990] [ 3547.097180][T31990] dump_stack_lvl+0x1c8/0x256 [ 3547.102048][T31990] dump_stack+0x1a/0x1c [ 3547.106349][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3547.112177][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3547.117385][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3547.123452][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3547.128252][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3547.134152][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3547.140048][T31990] ? should_fail+0x3f/0x810 [ 3547.144628][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3547.149837][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3547.156169][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3547.162076][T31990] __msan_chain_origin+0xbd/0x140 [ 3547.167242][T31990] ___sys_recvmsg+0x522/0x890 [ 3547.172054][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3547.176882][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3547.182921][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3547.188821][T31990] do_recvmmsg+0x55a/0x1180 [ 3547.193406][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3547.199768][T31990] ? do_syscall_64+0x3d/0xb0 [ 3547.204503][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.209689][T31990] do_syscall_64+0x3d/0xb0 [ 3547.214245][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3547.220319][T31990] RIP: 0033:0x7f6695089279 [ 3547.224843][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3547.244608][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3547.253097][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3547.261193][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3547.269249][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3547.277336][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3547.285362][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3547.293408][T31990] [ 3547.301875][T31990] Uninit was stored to memory at: [ 3547.307099][T31990] ___sys_recvmsg+0x522/0x890 [ 3547.316352][T31990] do_recvmmsg+0x55a/0x1180 [ 3547.321007][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.326725][T31990] do_syscall_64+0x3d/0xb0 [ 3547.331279][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3547.337550][T31990] [ 3547.339949][T31990] Uninit was stored to memory at: [ 3547.345230][T31990] ___sys_recvmsg+0x522/0x890 [ 3547.350053][T31990] do_recvmmsg+0x55a/0x1180 [ 3547.354882][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.360061][T31990] do_syscall_64+0x3d/0xb0 [ 3547.364686][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3547.370738][T31990] [ 3547.373220][T31990] Uninit was stored to memory at: [ 3547.378363][T31990] ___sys_recvmsg+0x522/0x890 [ 3547.383281][T31990] do_recvmmsg+0x55a/0x1180 [ 3547.387913][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.393235][T31990] do_syscall_64+0x3d/0xb0 [ 3547.397769][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3547.403899][T31990] [ 3547.406306][T31990] Uninit was stored to memory at: [ 3547.411450][T31990] ___sys_recvmsg+0x522/0x890 [ 3547.416375][T31990] do_recvmmsg+0x55a/0x1180 [ 3547.421033][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.426331][T31990] do_syscall_64+0x3d/0xb0 [ 3547.430860][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3547.437038][T31990] [ 3547.439437][T31990] Uninit was stored to memory at: [ 3547.444778][T31990] ___sys_recvmsg+0x522/0x890 [ 3547.449572][T31990] do_recvmmsg+0x55a/0x1180 [ 3547.454313][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.459459][T31990] do_syscall_64+0x3d/0xb0 [ 3547.464119][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3547.470173][T31990] [ 3547.472692][T31990] Uninit was stored to memory at: [ 3547.477865][T31990] ___sys_recvmsg+0x522/0x890 [ 3547.482785][T31990] do_recvmmsg+0x55a/0x1180 [ 3547.487397][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.492664][T31990] do_syscall_64+0x3d/0xb0 [ 3547.497208][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3547.503437][T31990] [ 3547.505865][T31990] Uninit was stored to memory at: [ 3547.511044][T31990] ___sys_recvmsg+0x522/0x890 [ 3547.516004][T31990] do_recvmmsg+0x55a/0x1180 [ 3547.520622][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3547.525851][T31990] do_syscall_64+0x3d/0xb0 [ 3547.530384][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3547.536534][T31990] [ 3547.538915][T31990] Local variable msg_sys created at: [ 3547.544402][T31990] do_recvmmsg+0x5c/0x1180 [ 3547.548955][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.402535][T31990] not chained 17810000 origins [ 3548.407412][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3548.417640][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3548.427752][T31990] Call Trace: [ 3548.431088][T31990] [ 3548.434098][T31990] dump_stack_lvl+0x1c8/0x256 [ 3548.438948][T31990] dump_stack+0x1a/0x1c [ 3548.443193][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3548.448996][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3548.454146][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3548.460191][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3548.465013][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3548.470921][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3548.476815][T31990] ? should_fail+0x3f/0x810 [ 3548.481399][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3548.486603][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3548.492970][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3548.498889][T31990] __msan_chain_origin+0xbd/0x140 [ 3548.504018][T31990] ___sys_recvmsg+0x522/0x890 [ 3548.508835][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3548.513670][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3548.519729][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3548.525683][T31990] do_recvmmsg+0x55a/0x1180 [ 3548.530273][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3548.536647][T31990] ? do_syscall_64+0x3d/0xb0 [ 3548.541359][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.546476][T31990] do_syscall_64+0x3d/0xb0 [ 3548.550958][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3548.556974][T31990] RIP: 0033:0x7f6695089279 [ 3548.561494][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3548.581251][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3548.589751][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3548.597783][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3548.605828][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3548.613888][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3548.621913][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3548.629973][T31990] [ 3548.636450][T31990] Uninit was stored to memory at: [ 3548.642062][T31990] ___sys_recvmsg+0x522/0x890 [ 3548.646877][T31990] do_recvmmsg+0x55a/0x1180 [ 3548.651516][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.656788][T31990] do_syscall_64+0x3d/0xb0 [ 3548.661329][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3548.667521][T31990] [ 3548.669907][T31990] Uninit was stored to memory at: [ 3548.675208][T31990] ___sys_recvmsg+0x522/0x890 [ 3548.680019][T31990] do_recvmmsg+0x55a/0x1180 [ 3548.684761][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.689938][T31990] do_syscall_64+0x3d/0xb0 [ 3548.694656][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3548.700734][T31990] [ 3548.703272][T31990] Uninit was stored to memory at: [ 3548.708522][T31990] ___sys_recvmsg+0x522/0x890 [ 3548.713490][T31990] do_recvmmsg+0x55a/0x1180 [ 3548.718128][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.723449][T31990] do_syscall_64+0x3d/0xb0 [ 3548.727989][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3548.734177][T31990] [ 3548.736584][T31990] Uninit was stored to memory at: [ 3548.741919][T31990] ___sys_recvmsg+0x522/0x890 [ 3548.746738][T31990] do_recvmmsg+0x55a/0x1180 [ 3548.751389][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.756630][T31990] do_syscall_64+0x3d/0xb0 [ 3548.761124][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3548.767324][T31990] [ 3548.769725][T31990] Uninit was stored to memory at: [ 3548.775080][T31990] ___sys_recvmsg+0x522/0x890 [ 3548.779925][T31990] do_recvmmsg+0x55a/0x1180 [ 3548.784744][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.789924][T31990] do_syscall_64+0x3d/0xb0 [ 3548.794590][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3548.800641][T31990] [ 3548.803175][T31990] Uninit was stored to memory at: [ 3548.808320][T31990] ___sys_recvmsg+0x522/0x890 [ 3548.813244][T31990] do_recvmmsg+0x55a/0x1180 [ 3548.817887][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.823177][T31990] do_syscall_64+0x3d/0xb0 [ 3548.827703][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3548.833885][T31990] [ 3548.836802][T31990] Uninit was stored to memory at: [ 3548.842162][T31990] ___sys_recvmsg+0x522/0x890 [ 3548.846970][T31990] do_recvmmsg+0x55a/0x1180 [ 3548.851710][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3548.856876][T31990] do_syscall_64+0x3d/0xb0 [ 3548.861419][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3548.867664][T31990] [ 3548.870205][T31990] Local variable msg_sys created at: [ 3548.875715][T31990] do_recvmmsg+0x5c/0x1180 [ 3548.880258][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3549.732094][T31990] not chained 17820000 origins [ 3549.736976][T31990] CPU: 0 PID: 31990 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3549.747205][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3549.757319][T31990] Call Trace: [ 3549.760656][T31990] [ 3549.763663][T31990] dump_stack_lvl+0x1c8/0x256 [ 3549.768510][T31990] dump_stack+0x1a/0x1c [ 3549.772757][T31990] kmsan_internal_chain_origin+0x78/0x120 [ 3549.778629][T31990] ? filter_irq_stacks+0x5c/0x1a0 [ 3549.783798][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3549.789863][T31990] ? do_recvmmsg+0x55a/0x1180 [ 3549.794687][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3549.800663][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3549.806620][T31990] ? should_fail+0x3f/0x810 [ 3549.811232][T31990] ? __stack_depot_save+0x21/0x4b0 [ 3549.816446][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3549.822792][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3549.828690][T31990] __msan_chain_origin+0xbd/0x140 [ 3549.833813][T31990] ___sys_recvmsg+0x522/0x890 [ 3549.838622][T31990] ? do_recvmmsg+0x5bc/0x1180 [ 3549.843451][T31990] ? kmsan_internal_check_memory+0x94/0x530 [ 3549.849486][T31990] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3549.855387][T31990] do_recvmmsg+0x55a/0x1180 [ 3549.859978][T31990] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 3549.866333][T31990] ? do_syscall_64+0x3d/0xb0 [ 3549.871042][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3549.876155][T31990] do_syscall_64+0x3d/0xb0 [ 3549.880636][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3549.886648][T31990] RIP: 0033:0x7f6695089279 [ 3549.891171][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3549.910951][T31990] RSP: 002b:00007f6696177168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3549.919573][T31990] RAX: ffffffffffffffda RBX: 00007f669519bf80 RCX: 00007f6695089279 [ 3549.927609][T31990] RDX: 00000000040000c1 RSI: 0000000020001ec0 RDI: 0000000000000007 [ 3549.935655][T31990] RBP: 00007f66950e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3549.943742][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3549.951806][T31990] R13: 00007f66956cfb1f R14: 00007f6696177300 R15: 0000000000022000 [ 3549.959949][T31990] [ 3549.966472][T31990] Uninit was stored to memory at: [ 3549.972087][T31990] ___sys_recvmsg+0x522/0x890 [ 3549.976897][T31990] do_recvmmsg+0x55a/0x1180 [ 3549.981530][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3549.986806][T31990] do_syscall_64+0x3d/0xb0 [ 3549.991361][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3549.997549][T31990] [ 3549.999946][T31990] Uninit was stored to memory at: [ 3550.005256][T31990] ___sys_recvmsg+0x522/0x890 [ 3550.010065][T31990] do_recvmmsg+0x55a/0x1180 [ 3550.014856][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3550.020029][T31990] do_syscall_64+0x3d/0xb0 [ 3550.024643][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3550.030664][T31990] [ 3550.033193][T31990] Uninit was stored to memory at: [ 3550.038341][T31990] ___sys_recvmsg+0x522/0x890 [ 3550.043260][T31990] do_recvmmsg+0x55a/0x1180 [ 3550.047967][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3550.053242][T31990] do_syscall_64+0x3d/0xb0 [ 3550.057785][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3550.063969][T31990] [ 3550.066373][T31990] Uninit was stored to memory at: [ 3550.071708][T31990] ___sys_recvmsg+0x522/0x890 [ 3550.076515][T31990] do_recvmmsg+0x55a/0x1180 [ 3550.081145][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3550.086422][T31990] do_syscall_64+0x3d/0xb0 [ 3550.090958][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3550.097144][T31990] [ 3550.099538][T31990] Uninit was stored to memory at: [ 3550.104864][T31990] ___sys_recvmsg+0x522/0x890 [ 3550.109659][T31990] do_recvmmsg+0x55a/0x1180 [ 3550.114848][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3550.120004][T31990] do_syscall_64+0x3d/0xb0 [ 3550.124670][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3550.130724][T31990] [ 3550.133210][T31990] Uninit was stored to memory at: [ 3550.138356][T31990] ___sys_recvmsg+0x522/0x890 [ 3550.143280][T31990] do_recvmmsg+0x55a/0x1180 [ 3550.147901][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3550.153179][T31990] do_syscall_64+0x3d/0xb0 [ 3550.157714][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3550.163982][T31990] [ 3550.166376][T31990] Uninit was stored to memory at: [ 3550.171710][T31990] ___sys_recvmsg+0x522/0x890 [ 3550.176518][T31990] do_recvmmsg+0x55a/0x1180 [ 3550.181150][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 3550.186476][T31990] do_syscall_64+0x3d/0xb0 [ 3550.191025][T31990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3550.197220][T31990] [ 3550.199623][T31990] Local variable msg_sys created at: [ 3550.205108][T31990] do_recvmmsg+0x5c/0x1180 [ 3550.209640][T31990] __x64_sys_recvmmsg+0x3a7/0x4b0 23:24:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="000f425df4f8d36d66be8c1526153fc097ffbf730ed0cb1cb48dd25368dee73d7a608859208658fc007632b67ed5f1735f7414e3fe61e7d3a0fac7154354e7b2b7d65a88f03b07ecaed9a6265d5aa74ab0e7bdcb910ae06c072ea31ae4f1610f339921a7d6be01630d56c16501183859ec0990093ba8ae8ee91d5c3198b42ddf92e8d8f5cee54a31ce16f95c075ec53fc4c2609c1413548cc7fbf4527917b71517516c25624fddb71bbf50a4180f6597f1e460fa8987f5ef2052b4773ad6194ae7b8bc8ef5f42c1479539fc3e7c19a6d6195", 0xd2}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xd0, 0x117, 0x2, 0xbb, "7cdd18b0757ff347e5ee27b3123a9485b7dee952225ff16da45c5a0e4109efd4b2f8d3a381a2c24c82848c545f2a7be319e6c98cf84aa7301d1ed14eed53c92750dcf5ca4ec7ebe0de224813715a9a3c8f03ea99e4c4eb50fcb978b3ba1c6a66f797013eb83fa589289dfd2ccf7b7ab5d8d0e5c9c4defec1b1e310431f299a082714500a47578672fc70740f10e6e3ec587ae87846f37baddad638bd134dc2dd6b6ea041627c163e92e8af884a51ff5ab1b1ca6319e1907f9e495e"}], 0xe8, 0x14}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES64=r0], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r1, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r3, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) (async) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="000f425df4f8d36d66be8c1526153fc097ffbf730ed0cb1cb48dd25368dee73d7a608859208658fc007632b67ed5f1735f7414e3fe61e7d3a0fac7154354e7b2b7d65a88f03b07ecaed9a6265d5aa74ab0e7bdcb910ae06c072ea31ae4f1610f339921a7d6be01630d56c16501183859ec0990093ba8ae8ee91d5c3198b42ddf92e8d8f5cee54a31ce16f95c075ec53fc4c2609c1413548cc7fbf4527917b71517516c25624fddb71bbf50a4180f6597f1e460fa8987f5ef2052b4773ad6194ae7b8bc8ef5f42c1479539fc3e7c19a6d6195", 0xd2}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xd0, 0x117, 0x2, 0xbb, "7cdd18b0757ff347e5ee27b3123a9485b7dee952225ff16da45c5a0e4109efd4b2f8d3a381a2c24c82848c545f2a7be319e6c98cf84aa7301d1ed14eed53c92750dcf5ca4ec7ebe0de224813715a9a3c8f03ea99e4c4eb50fcb978b3ba1c6a66f797013eb83fa589289dfd2ccf7b7ab5d8d0e5c9c4defec1b1e310431f299a082714500a47578672fc70740f10e6e3ec587ae87846f37baddad638bd134dc2dd6b6ea041627c163e92e8af884a51ff5ab1b1ca6319e1907f9e495e"}], 0xe8, 0x14}, 0x800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES64=r0], 0x3c}}, 0x0) (async) 23:24:02 executing program 0: r0 = syz_io_uring_setup(0x28da, &(0x7f0000000080), &(0x7f00006d3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000100)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0x5d00}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x40000c1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000001c0)={'\x00', {0x2, 0x4e24, @remote}}) io_uring_enter(r3, 0x2e67, 0x18e0, 0x3, &(0x7f0000000040), 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0x5d00}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x3, {0x7ff, 0x81, 0x54ee, 0x4c1}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)="ba", 0x1}, 0x0) io_uring_enter(r0, 0x637a, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0xee151dc8b93e1bba}, 0x0) 23:24:02 executing program 5: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') syz_usb_connect$uac1(0x0, 0xa7, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x7, 0x3, 've'}, @mixer_unit={0xa, 0x24, 0x4, 0x0, 0x0, "6026bb29f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, '>', "3ca0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x5, 0x0, {0x7}}}}}}}]}}, 0x0) (async) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x103040, 0x0) syz_usb_connect(0x4, 0x874, &(0x7f0000000880)={{0x12, 0x1, 0x10, 0xd6, 0x6d, 0x27, 0x0, 0x1bbb, 0x203, 0xea6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x862, 0x2, 0x54, 0xaf, 0x10, 0x8, [{{0x9, 0x4, 0x73, 0x49, 0x9, 0x24, 0x85, 0x11, 0x2, [], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x7f, 0xd0, 0x6}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x5, 0x20, 0x3}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x7, 0x8, [@generic={0xcc, 0x11, "ac94a180fccccdd03a51e48240cd85b0fd5ae278613beee841e9daf30a7cb86e0ddf488226679503094d4216e61292720bdd978550ac1b6f5dfc2fbd8088a65722c63ee07fc0b59f1d5be523543861e2b1882dab89cb21d34f43def9aa52e0e3910f43ca10e4be485b4ade59626c88a6935a7f1e63d1a6e6781bd24fe0fe95c85c225ed317f64988a7a040a422f840d25460e90ce261b36d07a574a8c4de10a839fd6f71bf3bf95016be12397a1939b3daa1905a8be9d190f32b05e8a6279cd0cf02a76e2b7d31e953e6"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x40, 0x8, [@generic={0x8b, 0x23, "ac774bb3156c7bccd20569944cd136f9c0d489db582f7b093d05ef25f272c4c4719471ff9a5f2d8b5f1abbffa8f9e6122b92d22c3e2a49104086545ef36865b04ed091009e6fcee0d700220221e094f980d532409d9dd417ddecdae519975a325279a3f78c91442189e3801f5885276e0aa1a979adcf52bfc277f3a4e8873230c43e51b04fba123b14"}, @generic={0x51, 0x23, "e60bdbe0d12c3777cb5cfd7917126fdff3aca949e939debc2ec05f5337d512fc7af32f1baa212d788da74d68b2817d121d91473e7052174370daaedcd882b555b6dacbb1fbf21e7e3a9b6d0abf8bb2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x6, 0x5, 0x19, [@generic={0xaf, 0x2, "6a43825a4544a01a4d77169816648282bdd7fc3ec520c76055acf284e084504317f34b5dafd8919d04451e5966f2913ecd6b997f70e25a898459f641f5a3f40e1a276b32eb3390d116617544f8d1f6f895a2781c22ede6349493ec72900625df5b0cfad0469b6d628b70b9217032f964ad2cafa006ad38b8803b36af9cb52a759a811f969dbc214584cb1841738f4f356e98165d196e289a4dd4e155991149dc82c64a4809c7ab5b92427335ce"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x460, 0xfd, 0x7, 0x9, [@generic={0x9f, 0x30, "2366e0c30ada8e8e59fd667f7f77a763de51eeed804ddaad433eb42013e988c13b5280b1b9b00236dbe9b4074e49a06a2b7c1482a88b8d70db32268714e8c4cf9f5ec10fe238ae86fc471af61ac10d8d8c6e6e1ceff716492caeeb27f18a9c62774c074a4bcabd4df1567822855d1cb9badbd97f0d9e1a22bc43840b65106e4a218b823206cb8cac4719e17d0ed71638d536c160d450352ab5e23193c3"}, @generic={0xc5, 0x23, "674d62426fe2699fe3915f1cf21a14ade97b6711058feea53d78ed5e3c70497ae2ce622acb51e67956dd2835e4acc5f2ed74c5ae72aa973337f31bbea080a93fc79496d6a6820a243549743d95c63a0d9041b0bd3e342c8753ca9bd758411942e3a9a60b518b2195c97967e880645ada1c4a6e8206a6af69b95663929fb042245560d628366dd0cb3417014ee39fe9633a2d14536c31f377a061e3db052bf15b2b41e326b6fed7820606420a3acbcbce6eea3ec1ff95a74a98c32eae5fed227f93a4d0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7f, 0x2, 0xff}}]}}, {{0x9, 0x4, 0x39, 0x9, 0xd, 0x3, 0x90, 0x70, 0x40, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f8715a35"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0xb10, 0x6, 0x4f}, {0x6, 0x24, 0x1a, 0xb7f0, 0x9}, [@mdlm={0x15}]}], [{{0x9, 0x5, 0xe, 0x4, 0x10, 0xe2, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6}, @generic={0xb, 0x24, "f28fee243842b7552e"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x80, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x30}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x4, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x9, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4b, 0xd6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x8, 0x1}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0x20, 0x2, [@generic={0x53, 0x23, "001da4e8d94b748834828ee3bacffb19e03d8b0f207b496d72bc87630d093ba864c5074767da59cde41114008ccb25dcd174165215458c9818fd4661026190b084a3f2384de9da778d3bff7759cd5ec0c5"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x3, 0x3, 0xcc, [@generic={0xf6, 0x30, "df71c2d0306a1e7c47a6c039686b949347c424dd1ce984dc58a5038ee94ee9090439c9f367bbc9628449e132e93c2a5df8c63bfacc404b4af3d70f7ead952120a10357618dfe91c2414c6eff3c9e81a5f765f736b7a5c0ad62bf0b130ec22b4e9422f506c2cc2a7e00f5c68533d3621235567020d74532d6433f13bacfbd642e4aa80f3207f40be8283af78ca4e2a907a510b31275dff01e2bfac5169a37959d7deaab63f6c7ebb8f48c3639d86653918025d4c61befb4b8b62f1c8be9cbe9af139079f3f60ca86322e9bfaa6ede486e46700e902f93621e7d1bf5508a23972834e09d5ff03f84cd70235e7630a588d732ce612f"}, @generic={0x2e, 0x10, "1607a08505e226430bec0cf37d57e362eb19719b8248224d2d10efaacba124bbf28a0bfd914114def8b51bbd"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x9, 0x0, 0xff, [@generic={0xf0, 0xd, "0b202d326e8d115d98499c766c4f63b38bb030fde28ea76c8d4e620aed108fc57ef6ecd509ed46a78a192679f1592c9cf874c5005ae045e4ef6d8c90c04dfdbefa7b023ce7f108644b0951fd7af9b2d6b85e19db099ea007a9ac0e5e4a2286a68ae7f2a4c26e4d7cf14eaf85fe1c298b9fb3ffc4ca08508fe862943a82703a39c988434febcb9cfb4fb7bd36e3fd5564b03e2a531f79afa3e749d0c1ccd97e399938636f0bb168622c42ab0e80e65061e9855020d145a48ae8937b76ecb08f36f6bd7ee2fa53eaf33b4497b731d04eccfab5015efd339b4669ae3071805b504417f34074e6741e7d14555182797e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x5, 0x9, 0x8, [@generic={0x59, 0x21, "871d99625e12e050e28d026818be13109c1bf745c345a7b3848877d23e6392131daecde0f5da42b63a0e46e288fe3b3a5e86359e23f8211b40b030b9d783985d7b6c909d23deea4869f14a9a143ec767b11256dfbed26e"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x0, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x3f, 0xf9}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x4, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9e72}, @generic={0x94, 0x39, "7d6e54d91ff39cdc8957e3c6d71ec382421f6b255c431f41d6499db18ca64f27699bdcc27c6996979072360bfde15a029d109df213e45f37cb8ea603435487bb917c3d928f8c3d36c838f8e1c311608ad0b5086a25859cf73fbb1a5cc6569745547fb99883379661689c9ac30bb1ef48e1b38dc00763a27af3614354c24d79db2325215a5acd4fceac90a1231c2f7f8cef6d"}]}}, {{0x9, 0x5, 0x96, 0x10, 0x10, 0x1, 0x0, 0x20}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x7f, 0x7, 0x20, 0x5}, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, [{0x99, &(0x7f0000000180)=@string={0x99, 0x3, "c2101710c1a86b920e80b69997cb41ee15f7ec0f0e2fa1bfac0ce96f73687f0507c2070420e0415f676ff626dae3e58e3e0d22779008ae75d48db10c9336ff1f63db5730554c0fc56362ee2e63a5908a285d5f1e90d4ab25d360895f584ddceeed1288d31e96254d17142af0af34aaa3c602a8bca733968d76dc8232ed7d656623ce3716e98aa48f362df4431ccf0f2edaee75f83af575"}}, {0x20, &(0x7f0000000240)=@string={0x20, 0x3, "992e6f0edcb09c6a43e3397773a716685d8ffe0ec0d673894b37c2afcaf1"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1009}}]}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x9, 0xffffffffffffffc0, 0xcfa}) (async) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimensat(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={{r3, r4/1000+60000}, {r5, r6/1000+10000}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept$alg(r7, 0x0, 0x0) (async) close_range(r1, r7, 0x0) 23:24:02 executing program 3: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x590, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x9) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="6236645ea82fce48965e018a9ff845e8615906069687bd766b3d737cb25144110d188c00b7"], &(0x7f0000000080)='GPL\x00', 0x3, 0x10f, &(0x7f0000000640)=""/271, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) r2 = socket(0x15, 0x5, 0x0) recvfrom$phonet(r2, 0x0, 0x0, 0x40002000, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x40, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x88) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c00, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000040)=""/240, 0xf0}], 0x1) close(r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800000000008) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="44f161202ef7a738f12c777201cec73f0fc7111c4f8b228f56244dff2ce7a1cca7305ffe8dd9850d2e1dfd9ca0206812f79d8c4bd1e311635295052fc6e72970b786cc8214ed12a18fdbd3d43c0ad898c9d253c0114df732779de0ad05a2f13eea494c9001f6be0ab9390b771272385d628a6cc52e07e435a9eafd09780d0d", 0x7f, 0x40011, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x590, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) (async) set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x9) (async) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="6236645ea82fce48965e018a9ff845e8615906069687bd766b3d737cb25144110d188c00b7"], &(0x7f0000000080)='GPL\x00', 0x3, 0x10f, &(0x7f0000000640)=""/271, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe(&(0x7f00000002c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) (async) socket(0x15, 0x5, 0x0) (async) recvfrom$phonet(r2, 0x0, 0x0, 0x40002000, 0x0, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x40, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x88) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c00, 0x0) (async) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000040)=""/240, 0xf0}], 0x1) (async) close(r3) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800000000008) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="44f161202ef7a738f12c777201cec73f0fc7111c4f8b228f56244dff2ce7a1cca7305ffe8dd9850d2e1dfd9ca0206812f79d8c4bd1e311635295052fc6e72970b786cc8214ed12a18fdbd3d43c0ad898c9d253c0114df732779de0ad05a2f13eea494c9001f6be0ab9390b771272385d628a6cc52e07e435a9eafd09780d0d", 0x7f, 0x40011, 0x0, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) (async) 23:24:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@deltaction={0x98, 0x31, 0xf01, 0x70bd28, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf7}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x402c000) (async) sendmsg$netlink(r1, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="09010000e29d010000000000000000000c004000a3792b00a2d2b9400635e2de9bda4fea02"], 0x1100}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x5d00}) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 23:24:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @sdr={0x35315258, 0x8}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x990a22}) 23:24:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @sdr={0x35315258, 0x8}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x990a22}) 23:24:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@deltaction={0x98, 0x31, 0xf01, 0x70bd28, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf7}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x402c000) sendmsg$netlink(r1, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="09010000e29d010000000000000000000c004000a3792b00a2d2b9400635e2de9bda4fea02"], 0x1100}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x5d00}) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) socket(0x11, 0x800000003, 0x0) (async) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) (async) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@deltaction={0x98, 0x31, 0xf01, 0x70bd28, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf7}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x402c000) (async) sendmsg$netlink(r1, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="09010000e29d010000000000000000000c004000a3792b00a2d2b9400635e2de9bda4fea02"], 0x1100}], 0x1}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x5d00}) (async) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) 23:24:03 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="e6ff080000000000400012800b000100697036746e6c000030000280050004000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="08000440a4"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:24:03 executing program 3: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x590, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x9) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="6236645ea82fce48965e018a9ff845e8615906069687bd766b3d737cb25144110d188c00b7"], &(0x7f0000000080)='GPL\x00', 0x3, 0x10f, &(0x7f0000000640)=""/271, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) r2 = socket(0x15, 0x5, 0x0) recvfrom$phonet(r2, 0x0, 0x0, 0x40002000, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x40, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x88) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c00, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000040)=""/240, 0xf0}], 0x1) close(r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800000000008) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="44f161202ef7a738f12c777201cec73f0fc7111c4f8b228f56244dff2ce7a1cca7305ffe8dd9850d2e1dfd9ca0206812f79d8c4bd1e311635295052fc6e72970b786cc8214ed12a18fdbd3d43c0ad898c9d253c0114df732779de0ad05a2f13eea494c9001f6be0ab9390b771272385d628a6cc52e07e435a9eafd09780d0d", 0x7f, 0x40011, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x590, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) (async) set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x9) (async) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="6236645ea82fce48965e018a9ff845e8615906069687bd766b3d737cb25144110d188c00b7"], &(0x7f0000000080)='GPL\x00', 0x3, 0x10f, &(0x7f0000000640)=""/271, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe(&(0x7f00000002c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) (async) socket(0x15, 0x5, 0x0) (async) recvfrom$phonet(r2, 0x0, 0x0, 0x40002000, 0x0, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x40, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x88) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c00, 0x0) (async) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000040)=""/240, 0xf0}], 0x1) (async) close(r3) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800000000008) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="44f161202ef7a738f12c777201cec73f0fc7111c4f8b228f56244dff2ce7a1cca7305ffe8dd9850d2e1dfd9ca0206812f79d8c4bd1e311635295052fc6e72970b786cc8214ed12a18fdbd3d43c0ad898c9d253c0114df732779de0ad05a2f13eea494c9001f6be0ab9390b771272385d628a6cc52e07e435a9eafd09780d0d", 0x7f, 0x40011, 0x0, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) (async) [ 3551.354267][T32102] device ip6tnl1 entered promiscuous mode 23:24:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @sdr={0x35315258, 0x8}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x990a22}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @sdr={0x35315258, 0x8}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x990a22}) (async) 23:24:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x2}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a5}]]}, 0x38}, 0x1, 0x0, 0x0, 0x24000101}, 0x44001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="181e00002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000c0001007463696e64657800e81d02000800040001000000080005"], 0x1e18}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 3551.744470][T32079] ===================================================== [ 3551.751977][T32079] BUG: KMSAN: uninit-value in io_issue_sqe+0x163a1/0x19760 [ 3551.759322][T32079] io_issue_sqe+0x163a1/0x19760 [ 3551.764524][T32079] io_wq_submit_work+0x617/0x7e0 [ 3551.769630][T32079] io_worker_handle_work+0xd9f/0x2310 [ 3551.775382][T32079] io_wqe_worker+0x3ae/0x1480 [ 3551.780224][T32079] ret_from_fork+0x1f/0x30 [ 3551.785159][T32079] [ 3551.787553][T32079] Local variable msg.i450 created at: [ 3551.793168][T32079] io_issue_sqe+0x4946/0x19760 [ 3551.798065][T32079] io_wq_submit_work+0x617/0x7e0 [ 3551.803361][T32079] [ 3551.805762][T32079] CPU: 1 PID: 32079 Comm: iou-wrk-32076 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3551.820581][T32079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3551.831342][T32079] ===================================================== [ 3551.838520][T32079] Disabling lock debugging due to kernel taint [ 3551.844842][T32079] Kernel panic - not syncing: kmsan.panic set ... [ 3551.851343][T32079] CPU: 1 PID: 32079 Comm: iou-wrk-32076 Tainted: G B 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 3551.862948][T32079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3551.873116][T32079] Call Trace: [ 3551.876470][T32079] [ 3551.879472][T32079] dump_stack_lvl+0x1c8/0x256 [ 3551.884318][T32079] dump_stack+0x1a/0x1c [ 3551.888634][T32079] panic+0x4d3/0xc69 [ 3551.892704][T32079] kmsan_report+0x2cc/0x2d0 [ 3551.897350][T32079] ? preempt_count_sub+0x7d/0x280 [ 3551.902578][T32079] ? __msan_warning+0x92/0x110 [ 3551.907470][T32079] ? io_issue_sqe+0x163a1/0x19760 [ 3551.912627][T32079] ? io_wq_submit_work+0x617/0x7e0 [ 3551.917884][T32079] ? io_worker_handle_work+0xd9f/0x2310 [ 3551.923582][T32079] ? io_wqe_worker+0x3ae/0x1480 [ 3551.928576][T32079] ? ret_from_fork+0x1f/0x30 [ 3551.933303][T32079] ? _raw_spin_unlock_bh+0x29/0x30 [ 3551.938572][T32079] ? release_sock+0x1bf/0x1d0 [ 3551.943385][T32079] ? tipc_recvstream+0x16a2/0x18a0 [ 3551.948734][T32079] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3551.954689][T32079] ? io_put_kbuf+0x50a/0x9e0 [ 3551.959405][T32079] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3551.965361][T32079] __msan_warning+0x92/0x110 [ 3551.970078][T32079] io_issue_sqe+0x163a1/0x19760 [ 3551.975056][T32079] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3551.981004][T32079] ? switch_mm_irqs_off+0x9a/0x980 [ 3551.986267][T32079] ? switch_mm_irqs_off+0x9a/0x980 [ 3551.991529][T32079] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3551.997518][T32079] ? finish_task_switch+0x226/0xa20 [ 3552.002871][T32079] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3552.008820][T32079] ? io_assign_file+0x49/0x7e0 [ 3552.013709][T32079] ? __schedule+0x1609/0x21d0 [ 3552.018520][T32079] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 3552.024475][T32079] io_wq_submit_work+0x617/0x7e0 [ 3552.029556][T32079] ? io_wq_free_work+0x340/0x340 [ 3552.034629][T32079] io_worker_handle_work+0xd9f/0x2310 [ 3552.040208][T32079] io_wqe_worker+0x3ae/0x1480 [ 3552.045059][T32079] ? schedule_tail+0x12a/0x1b0 [ 3552.049965][T32079] ? __switch_to_asm+0x42/0x70 [ 3552.054860][T32079] ? create_worker_cont+0x7f0/0x7f0 [ 3552.060205][T32079] ret_from_fork+0x1f/0x30 [ 3552.064786][T32079] RIP: 0033:0x0 [ 3552.068327][T32079] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 3552.076127][T32079] RSP: 002b:0000000000000000 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3552.084656][T32079] RAX: 0000000000000000 RBX: 00007fd1bb59c050 RCX: 00007fd1bb489279 [ 3552.092728][T32079] RDX: 0000000000000000 RSI: 000000000000637a RDI: 0000000000000003 [ 3552.100793][T32079] RBP: 00007fd1bb4e3189 R08: 0000000000000000 R09: 0000000000000000 [ 3552.108862][T32079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3552.116926][T32079] R13: 00007fd1bbacfb1f R14: 00007fd1bc545300 R15: 0000000000022000 [ 3552.125018][T32079] [ 3552.128268][T32079] Kernel Offset: disabled [ 3552.132644][T32079] Rebooting in 86400 seconds..