, 0x10000}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffff80, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5f87}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x6dd0}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x6c8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x101}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffe00, @local}}]}, {0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x2a5, 0x8, 0x8100}}, {0x14, 0x1, {0x7, 0x808, 0x9, 0x8100}}, {0x14, 0x1, {0x3, 0xe6e, 0x7, 0x88a8}}, {0x14, 0x1, {0xc00, 0xe70, 0x0, 0x8100}}, {0x14, 0x1, {0x1, 0x886, 0x491, 0x88a8}}, {0x14, 0x1, {0xe1, 0xfd5, 0x41, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xabf, 0x30000, 0x88a8}}, {0x14, 0x1, {0x0, 0x91b, 0xffff, 0x88a8}}, {0x14, 0x1, {0x3, 0xd, 0x4d, 0x88a8}}, {0x14, 0x1, {0x3, 0x9a5, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x60, 0x81, 0x88a8}}, {0x14, 0x1, {0x2, 0xd83, 0x1, 0x8100}}]}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x380, 0x400}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x400}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r4}, "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"}) socket(0x2, 0x80a, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7594}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) [ 1012.490640][T16358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getlink={0x184, 0x12, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10008, 0x80}, [@IFLA_VFINFO_LIST={0x164, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x100, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xfff00, 0x2}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x3f}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xd20, 0x8, 0x8100}}, {0x14, 0x1, {0x1, 0x249, 0x6, 0x8100}}, {0x14, 0x1, {0x2, 0x552, 0x3, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xffff257a, 0x7}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0xfffeffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x1, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xfffff220}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb5, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x731, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @remote}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xa4d2, 0x80000000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3af, 0x777}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0xfffffffffffffffd}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x94000000, 0x1}}]}]}]}, 0x184}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r2, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000001480)=@newlinkprop={0x43c, 0x6c, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'syz_tun\x00'}]}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vcan0\x00'}, @IFLA_VFINFO_LIST={0x2b0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x80000000}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x152, 0x20}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7fff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @local}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xfa3a}}, @IFLA_VF_TRUST={0xc, 0x9, {0xf62, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x2cf7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3b2048c3, 0xfffffffffffffff7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x40, 0x10000}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffff80, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5f87}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x6dd0}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x6c8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x101}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffe00, @local}}]}, {0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x2a5, 0x8, 0x8100}}, {0x14, 0x1, {0x7, 0x808, 0x9, 0x8100}}, {0x14, 0x1, {0x3, 0xe6e, 0x7, 0x88a8}}, {0x14, 0x1, {0xc00, 0xe70, 0x0, 0x8100}}, {0x14, 0x1, {0x1, 0x886, 0x491, 0x88a8}}, {0x14, 0x1, {0xe1, 0xfd5, 0x41, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xabf, 0x30000, 0x88a8}}, {0x14, 0x1, {0x0, 0x91b, 0xffff, 0x88a8}}, {0x14, 0x1, {0x3, 0xd, 0x4d, 0x88a8}}, {0x14, 0x1, {0x3, 0x9a5, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x60, 0x81, 0x88a8}}, {0x14, 0x1, {0x2, 0xd83, 0x1, 0x8100}}]}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x380, 0x400}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x400}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r4}, "8fef97b9f7ace2ec1cdf49a362c0b3607bf1975a07489ddf1b3d07b8157acb91534e4eb110100e09bbe3541eae114d36c2b982611fe1c0b2c05ccc0e0be12e990c0740d6101a6d0b0fed1caeefefaf507f33dae1ce170aacce872ae0644f3a8f33940a6852736f6ffe9b9b07c65bd8a13ee978245e0f84fb1f125c48767dc75ae7686a85f78703181446e29393a02abc6a67c2a17964089f79ad39e974775b838b842cd2363f95b06528df3407954b9170891d85f1dade203e577cf40111c973113a0161821b0bd1521b3b6a06da0f945194d10a9b483cf0ba9f7a39a5cb68c09a2be9a518a2e91970d612a799244e215b19c64b16db212a09f4644ade5c91cacbb2a1e17675561be54e0afe43d3f30b603598826b0cc7f135132c70e4730e5b87ba50ddc0c18ad5c5b927e112988d142e2a51fb33041b53839a678c6c14fa8bb2ca78f523cda4fd89a3f8b69cf12bddea5ef4a5c92ebe9af3fb7654fbc9df636989b6157afc820873132296e5e9c58a1cf3f3290050dee1ed810e712a34c23ac57b12de0a1681b7034b3158c2b7b017a553aea861f9d3c04f2c04d973509b55de0838da770ea5044bd9369525e59ab0d6022e9cc9f43ae3d85bbb5a52a35ce2783081bb7d2fdde238dcac5ee78d9f6c43a29d24d54d084c3c49e5edc4bfa0dd4440b6f2aadb1aa5b55581e5d883a311099d1b93fa58f1ae92dd53217bbcfa35b5f84ac1ba7005ab5435505602e5c8958afc6701c05b9c865bea242463ce2df8d49c4f213fdb9db9673b23b6c91484612b853da454764fabca628b904acb242762866b83a3dc6bcb3ef11f7b9fb0572e1430e9709394597c99464a0224a581bacd8117eb52ac1bdb793c9fd915ae295b5400e3bd5d17dc9e457bcb3710b07b19d86ba403390f5999c441a0bc82776a84f447dd32c0cbc84214d05a3c3af150bc1ee62abec3ce04e2ae6bdaf3c923a01b89b8ea06f282bb748b75b99be55f75cd44e16b800f3863397e746282b52b449acbf154e0cb012bfdf5952522dcafe886d4ae2795acd8651c921edd798def7c0b4406e12f56b27b9452ef3ef55c34072e96357051d2900956d672125ab7c64e6bbfd27e3c9b99904303d1295167cb58d9d08b5ee91dcb2deea296552bff72637e8da5a7ea697bcc5758e174c98132d51e8d142a56463d90bf82dd0924b599ed7f4128d1815ec50774c0a33cfdd8317b23e1b5125fe5e9b03fcba3448dd518b1e2f0650483f7199d50eea6ad844c230ab115a4dea47fe7eda2586c5cddd09ec5aa432a66d8085563dd342cce0dd17d021c4f6d3d00ff65c851e50c87f62e65cf3b1b128cf4ec8169f8de24bfd6bda88609a43fce6503758a2e87ae0c9f84abe991c0380a6cd0ee1a51ba8de58cb678650a16ddd05ff64db92f4826eee7d98cc68eda8356898f7f99b44997f851c929445b147de1593efcb6c66d898464daf6e4dd31c4d239460d74e1b192cc65fe13a8c79c408efb6b797bc920af2f11de06379c7b6eb0333625186938878319ea9f4fa7be439751c6842081add9c64d4d2544debba8a825ae38ec229dd5ff85e0b0cea3788bea8cf163705baa10fa3fe3a0c6052048b6d2bb816f0b2aefc8a85b0211857e4087435e95d3048c125c7799d08536365349331bce93b805e3fda7a9f4c62730afae09b47420a2ce54a86dbd29ac164d38ddd09559e26298300eac9caf209cbd32fedea0085ce3347dfed485e704da0a88fd2b7cdf14d0aa52e61c4f00c4c2fc653c447c2a88df925a4a680320fd5a51f30f912abf8fceffa26328d92a49e4740441195894614720238bc1746a44cd14ff83d4dcf970423c27246ac450c329be9d44e272a946f3561414829142ad74b8f0215afd9776715e45d20cc0c78d0c4aa3035c0c9c42ab881600110867ab94aea072ee0441187370eccf23815454da142cfa7ab6b88fc395b030b64c2e1b8d76f7c8862582a7742cd461610a3b7a97917e31d49de87011a27f1ac71abf819e2a252bf0be2aed2be600dcdda96eef134a61a99071ab8d16950f07b3409774075002300ccfbce8e0460b52809e384c8dcc5f98c2b94698ad05dcbde4c44e921001c1b5f5f83e584b89e2024bf88f98197fe92c7c126a826c3d0630b6ba15aa08ed623e4599df07bd0b61671be5063d4dc78ef40ff6f31175db8799918ea86564f700f82e9bc18c406ce0f9486afa73e80de26486496728f7f149c7a815aee18462c80a15d18cfa00803ca0cbfaf64dc352885017a7b7c6bf974d2dac9987556890a12c92dba6518b428167c93a4dc3bf1190fab0eabb0886fdf550aa196531859fe66640872a9a415561152ec9f5f6b7ce04f333ffa14bc7235ce5406842d8f50541b268fab552a998269905676a6740e1c277f175dfac9a04ad4e2902ed4cabbbf38658c85dce2beb9494e8630f3aec933a8e22703f1792f1404a3521653e6cd5823154442951c39ccd8518e6d5d310518804148bcb43e45de5599b1c7dc5cf6dc91c484aa62287503aaddaab813cdab79b6cf2b9ba81d611b4ce2544911d8a86a45e8968d855a9a5ea333641ae442297f5df9937f8a4c0be6ab47f306ed57e710b0de1665d37d24ad86517a8da71ddea9e0d86405a6c8d5bcba5a4ebf8519eb762197ad73685c662fb7506d6e26cca6cd2ba84263ded71afcd43db337e1bd7be9564d6aa5afe45ae216015fadd8eef23e4c9d8e9ce1df0556ae3a6717769aea8f05ef0cb7512aa0cf669a607f54f2398099ebf053c60dabf9937a26d12fe15e053b07b328e531d86d4d0cf7d56c861d7b56d3c10582063db1c4ae0177f9db1e45bc0b3a417b3446652a155719bfdcfeb0756cf3cb43bf442b7959fd86873fe367c79c33f78f62ae539c203090b911031165a8df3d8bcb79658eeee721f888cdce8a83baea19bc7e264356d5e911fe9ea1f6718cf01865b8662cef784d3bf46e44debd7d88f432da2c0b6ad0ec98855679e87204be8ca74d97a8f202c53e25f4028e4a666481778eec3e78aaa2945182dab71106ee8ab604dfc8d03af3c4763cb65015646b27d5951a916add6a76728b9221cae3ed352ef8e75ca75c3db62f1b82dfa9a65e4ce9e2cf535de9dbe3abb37f80705a79135aaf73aa2022d5d5de0c4c59c796556c8a25c266271ef30d210a6db049a363a145013d77eea35aedc68473df6f567aa9976c5f14b14d50d376cb5d78fbf54efdfd7a14c930a98499103119d7051848e5dd41adbbcfc093fa854c1ad6defa2ec13fbd73363c5f056b64c03b86f22eac103a84b2a4052fdad0c1cc76a0a197bc6348c082c9956d39cfef46c1c73ab4221c422290b7bb5cd58e410cfe86277a31b74a112fc5bd22bd498f51f84e6d2c66d6f1aaf87553aa1682e9afaac1b9d60e81f292cbde82b1cc7b4ccbd8c34dae9c391514a8032cfb2f35fdf59aaff384eea733bc40628461bac25d834c703820b75a59cc7f38c725035b94c8fc5b33af4d1722a6ad19921d6ef5df11e5173de3c2d5897a56c4179e49927cab27f4ac2b752c878709f0295f00a0890a50bb2aff5347fc27273ec78c8c49eff4c1016dfc3859beee0a998bc8b3ebbe05c14c75a356699ebcd0af39a00e76c290caf5c758de5691d6d517d2a0e085589a87128a07df6099ad0a803e01cb9b78d0271f47f7a0b25dfc4960b57d19b5ef077871eae312e0b9bdeaa810af2d06ce9fcc3ebaf607e1507d9beaa531d40561a8d49aba1ef994659dbd5ff65ddbce5ca0c7912d9aa832406729d75c7592af50b82a3e8ca3ffbb0018e622a46bd3bb19eeb24a404dc6f1e17b31978b7a3713a432d4581d7c7921816fb7ab33710a4028d76bbe84f6bd5ea7f175614b8c63394f975736c1a820c4a61ed515c444a1c078a9d9062e1c7e88da5933270f0b62cfdf330b3d5907535ac1a21864cd93d5733c2b3c2b9f08247240d383ce9b0542ab5572d46ab7bc49223c7e41687367bc6faf3d9641a6fec6b1190266f0c21f85dc731efa928c1cc5688c544d0c36d5ae018fb64ac0c5fda92471c724e93388ff921ffcbf9675c2a1481ead00faae065090713c70747739e1006ace871b4195483d47d876c14703ebe522fe396bab492c59518c8fb384e8d03951e8d3e9bf0bc9309e9827b9cfd9bae2b7030b3ef73746646bc768cbd63907488b82d27b9fee3bb301dba5ed0e726a19248222fce450f8782092c8fbc25f33c332b12574cdf0ca89921125d8eafbcdbf099066c91b621f4cd8fa69011cc02a236761ed57d790cfee8c516d16a4ba55839d826c60222e4150c569d30eb237be970702049cd688663306889b745c46627e4ec01c4ae39e50d76451ce1819f4d37bc8e997e385e25d8b818444c43569c4502b6fd67e9f1bb20287ab0396ce01494cef8654665b3786371be06175b02945a55b98f5fc75bfc2df96e10e1d82be1c503629368cc361f21e963278f627dd938fcd3b6db0cb401c1ade12ce3e2a155a7dbc08161c0c9bce74f3d89f19bb644979d65c6901eb7a974210c5b77fb1608c18df0063b0ac10ed256be44943bee929c0f6662ae32abcf4fa52ce0a50e30653ca96c06cd82ec8666a20f53d831acbe39950f0111bd2a9bf173a69a24363932e0e162377c34ebe016ff50328e5a50c8b2a3c4d9491c3ab5bd9dd3eabbd647bbc470edf19f7da5941e59399b1f07b3b694ff6cead481dd0c88f0a7237206b09a50a6fc43157c756d7907ebb988fb04ac9798aadff6c3837a2d6255a9a62e0a3f2aea95e96d589f1eb813592d86cae115c0aeef7fb120a30bac252580bf07dd4ab8688df5790f1c85b28426b4bb5c9dbe058de7791b9f47fc1914c2c741fe4fe8ebc82243c3fc0412c9f29d8a55a5aef8dd6d1f9045ce1ba9d4e3b4ea965076488cb310b45ac8aeb1cb73ec05c3d3262b89ab5d00b11c70ca15e61ec68c07dafe9948f8d817c8862fa3cc2c99f4154cefb76c8c03c08215b11b7e6a0a8c26bfaf5457224d9c0179bda4daf5223621d2e75d50121527efa85127d375ddeff2ebc4506ad0ec9247fff6e6da5732baa2fde94d0c931cbfe48c2c162886c85844fbefe9bf11c437b38d86a6aa0204b221c28c8beaad68d4cc9e693a09ad7cca55fda6e20eb77f5c70cf8162f2792713f2d4637802115beb903cb52a0fb08919aa46ca8631cf394d1aa6063b14afdcc5846e052ea46951a4b2f529fcf7a107365baad57b932766b179c420b532580e0b989b94eba1c68a2cb4b7253b43a3d7f635ba43c7d6d266f6f8477f1b93e9cb4699e4d09d45436f7bb6c5dbaa3a84cedeeeb4eb2eeb3fc6cce83b91b3790ead280ae112fa6cfed3e5cbca48dd84f8107b966bf4ca78edeec4893efd0159085ba6426b564dba1eb26c54abeddfb0366c1d4d2993744e574e20e8fe7ba7e6180918de8587d4b7cd7f1e3d174f9b12bbfd41eb073992ba12619fab6bf2cf267b5ef904033585f8c02381614e7ef94d45273beb53a36eed21299cbfadb5688b3b3cd71a1eb049a7e7009c97258d1f36dd34fe5bad98d366f3b0d890245a0f63abcf91cd60dacaf31ba3ba2b272ff6e23821e3761fbeac2ae77fce191f6f31e7b02a023a07426d25731d2934f3f2830adbff3d15d7c57e818b33e2ccd27038947129a1d84b7bf1b75684879904f3a44013a9d324e39d382b3abc7e973b7760d0ef402b7badba7915645a6614e555a5754150ac77f3ccda1db0c2d0eade933b7a0e4db5298f4862ea0832bde03313e0b5439eac1c8bf70a5d6f797b1a057761ccb6f93f4379b33fd24e"}) socket(0x2, 0x80a, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7594}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) [ 1012.828790][T16362] device ipip0 entered promiscuous mode 03:41:12 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) 03:41:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x68b1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) [ 1013.294452][T16373] device ipip0 entered promiscuous mode 03:41:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) 03:41:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getlink={0x184, 0x12, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10008, 0x80}, [@IFLA_VFINFO_LIST={0x164, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x100, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xfff00, 0x2}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x3f}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xd20, 0x8, 0x8100}}, {0x14, 0x1, {0x1, 0x249, 0x6, 0x8100}}, {0x14, 0x1, {0x2, 0x552, 0x3, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xffff257a, 0x7}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0xfffeffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x1, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xfffff220}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb5, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x731, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @remote}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xa4d2, 0x80000000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3af, 0x777}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0xfffffffffffffffd}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x94000000, 0x1}}]}]}]}, 0x184}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r2, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000001480)=@newlinkprop={0x43c, 0x6c, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'syz_tun\x00'}]}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vcan0\x00'}, @IFLA_VFINFO_LIST={0x2b0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x80000000}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x152, 0x20}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7fff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @local}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xfa3a}}, @IFLA_VF_TRUST={0xc, 0x9, {0xf62, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x2cf7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3b2048c3, 0xfffffffffffffff7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x40, 0x10000}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffff80, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5f87}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x6dd0}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x6c8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x101}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffe00, @local}}]}, {0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x2a5, 0x8, 0x8100}}, {0x14, 0x1, {0x7, 0x808, 0x9, 0x8100}}, {0x14, 0x1, {0x3, 0xe6e, 0x7, 0x88a8}}, {0x14, 0x1, {0xc00, 0xe70, 0x0, 0x8100}}, {0x14, 0x1, {0x1, 0x886, 0x491, 0x88a8}}, {0x14, 0x1, {0xe1, 0xfd5, 0x41, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xabf, 0x30000, 0x88a8}}, {0x14, 0x1, {0x0, 0x91b, 0xffff, 0x88a8}}, {0x14, 0x1, {0x3, 0xd, 0x4d, 0x88a8}}, {0x14, 0x1, {0x3, 0x9a5, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x60, 0x81, 0x88a8}}, {0x14, 0x1, {0x2, 0xd83, 0x1, 0x8100}}]}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x380, 0x400}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x400}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r4}, "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"}) socket(0x2, 0x80a, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7594}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) [ 1013.460662][T16372] device ipip0 entered promiscuous mode 03:41:13 executing program 5: bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) [ 1013.592406][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd 03:41:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getlink={0x184, 0x12, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10008, 0x80}, [@IFLA_VFINFO_LIST={0x164, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x100, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xfff00, 0x2}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x3f}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xd20, 0x8, 0x8100}}, {0x14, 0x1, {0x1, 0x249, 0x6, 0x8100}}, {0x14, 0x1, {0x2, 0x552, 0x3, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xffff257a, 0x7}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0xfffeffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x1, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xfffff220}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb5, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x731, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @remote}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xa4d2, 0x80000000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3af, 0x777}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0xfffffffffffffffd}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x94000000, 0x1}}]}]}]}, 0x184}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r2, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000001480)=@newlinkprop={0x43c, 0x6c, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'syz_tun\x00'}]}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vcan0\x00'}, @IFLA_VFINFO_LIST={0x2b0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x80000000}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x152, 0x20}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7fff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @local}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xfa3a}}, @IFLA_VF_TRUST={0xc, 0x9, {0xf62, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x2cf7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3b2048c3, 0xfffffffffffffff7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x40, 0x10000}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffff80, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5f87}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x6dd0}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x6c8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x101}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffe00, @local}}]}, {0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x2a5, 0x8, 0x8100}}, {0x14, 0x1, {0x7, 0x808, 0x9, 0x8100}}, {0x14, 0x1, {0x3, 0xe6e, 0x7, 0x88a8}}, {0x14, 0x1, {0xc00, 0xe70, 0x0, 0x8100}}, {0x14, 0x1, {0x1, 0x886, 0x491, 0x88a8}}, {0x14, 0x1, {0xe1, 0xfd5, 0x41, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xabf, 0x30000, 0x88a8}}, {0x14, 0x1, {0x0, 0x91b, 0xffff, 0x88a8}}, {0x14, 0x1, {0x3, 0xd, 0x4d, 0x88a8}}, {0x14, 0x1, {0x3, 0x9a5, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x60, 0x81, 0x88a8}}, {0x14, 0x1, {0x2, 0xd83, 0x1, 0x8100}}]}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x380, 0x400}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x400}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r4}, "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"}) socket(0x2, 0x80a, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7594}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) [ 1013.797566][T16382] device ipip0 entered promiscuous mode 03:41:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getlink={0x184, 0x12, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10008, 0x80}, [@IFLA_VFINFO_LIST={0x164, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x100, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xfff00, 0x2}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x3f}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xd20, 0x8, 0x8100}}, {0x14, 0x1, {0x1, 0x249, 0x6, 0x8100}}, {0x14, 0x1, {0x2, 0x552, 0x3, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xffff257a, 0x7}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0xfffeffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x1, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xfffff220}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb5, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x731, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @remote}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xa4d2, 0x80000000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3af, 0x777}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0xfffffffffffffffd}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x94000000, 0x1}}]}]}]}, 0x184}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r2, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000001480)=@newlinkprop={0x43c, 0x6c, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'syz_tun\x00'}]}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vcan0\x00'}, @IFLA_VFINFO_LIST={0x2b0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x80000000}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x152, 0x20}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7fff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @local}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xfa3a}}, @IFLA_VF_TRUST={0xc, 0x9, {0xf62, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x2cf7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3b2048c3, 0xfffffffffffffff7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x40, 0x10000}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffff80, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5f87}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x6dd0}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x6c8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x101}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffe00, @local}}]}, {0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x2a5, 0x8, 0x8100}}, {0x14, 0x1, {0x7, 0x808, 0x9, 0x8100}}, {0x14, 0x1, {0x3, 0xe6e, 0x7, 0x88a8}}, {0x14, 0x1, {0xc00, 0xe70, 0x0, 0x8100}}, {0x14, 0x1, {0x1, 0x886, 0x491, 0x88a8}}, {0x14, 0x1, {0xe1, 0xfd5, 0x41, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xabf, 0x30000, 0x88a8}}, {0x14, 0x1, {0x0, 0x91b, 0xffff, 0x88a8}}, {0x14, 0x1, {0x3, 0xd, 0x4d, 0x88a8}}, {0x14, 0x1, {0x3, 0x9a5, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x60, 0x81, 0x88a8}}, {0x14, 0x1, {0x2, 0xd83, 0x1, 0x8100}}]}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x380, 0x400}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x400}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r4}, "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"}) socket(0x2, 0x80a, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7594}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) 03:41:13 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) [ 1013.952984][ T25] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.963463][ T25] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1013.972899][ T25] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.040665][T16388] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1014.202976][ T25] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a9, bcdDevice=b7.40 [ 1014.212752][ T25] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1014.221371][ T25] usb 1-1: Product: syz [ 1014.225865][ T25] usb 1-1: Manufacturer: syz [ 1014.230627][ T25] usb 1-1: SerialNumber: syz 03:41:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getlink={0x184, 0x12, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10008, 0x80}, [@IFLA_VFINFO_LIST={0x164, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x100, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xfff00, 0x2}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x3f}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xd20, 0x8, 0x8100}}, {0x14, 0x1, {0x1, 0x249, 0x6, 0x8100}}, {0x14, 0x1, {0x2, 0x552, 0x3, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xffff257a, 0x7}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0xfffeffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x1, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xfffff220}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb5, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x731, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @remote}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xa4d2, 0x80000000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3af, 0x777}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0xfffffffffffffffd}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x94000000, 0x1}}]}]}]}, 0x184}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sys_exit\x00', r1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r2, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000001480)=@newlinkprop={0x43c, 0x6c, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'syz_tun\x00'}]}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vcan0\x00'}, @IFLA_VFINFO_LIST={0x2b0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x80000000}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x152, 0x20}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7fff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @local}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xfa3a}}, @IFLA_VF_TRUST={0xc, 0x9, {0xf62, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x2cf7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3b2048c3, 0xfffffffffffffff7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x40, 0x10000}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffff80, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5f87}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x6dd0}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x6c8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x101}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffe00, @local}}]}, {0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x2a5, 0x8, 0x8100}}, {0x14, 0x1, {0x7, 0x808, 0x9, 0x8100}}, {0x14, 0x1, {0x3, 0xe6e, 0x7, 0x88a8}}, {0x14, 0x1, {0xc00, 0xe70, 0x0, 0x8100}}, {0x14, 0x1, {0x1, 0x886, 0x491, 0x88a8}}, {0x14, 0x1, {0xe1, 0xfd5, 0x41, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xabf, 0x30000, 0x88a8}}, {0x14, 0x1, {0x0, 0x91b, 0xffff, 0x88a8}}, {0x14, 0x1, {0x3, 0xd, 0x4d, 0x88a8}}, {0x14, 0x1, {0x3, 0x9a5, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0x60, 0x81, 0x88a8}}, {0x14, 0x1, {0x2, 0xd83, 0x1, 0x8100}}]}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x380, 0x400}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x400}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r4}, "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"}) socket(0x2, 0x80a, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7594}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) [ 1014.342031][T16392] device ipip0 entered promiscuous mode 03:41:14 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) [ 1014.464075][ T25] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1014.470233][ T25] cdc_wdm 1-1:21.0: Unknown control protocol 03:41:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) [ 1014.593753][T16394] device ipip0 entered promiscuous mode [ 1014.633635][ T6] usb 1-1: USB disconnect, device number 21 03:41:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@remote, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 1014.979772][T16403] device ipip0 entered promiscuous mode [ 1015.116478][T16409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:15 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) 03:41:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) 03:41:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@remote, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 03:41:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) 03:41:15 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) 03:41:15 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) [ 1015.982341][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd 03:41:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@remote, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 03:41:15 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64}, @generic="c898d63bab6b91", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091511131"]}]}, 0x114}], 0x1}, 0x0) [ 1016.125669][T16427] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1016.134611][T16427] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:16 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {}]}, 0xe0) 03:41:16 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) 03:41:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64}, @generic="c898d63bab6b91", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091511131"]}]}, 0x114}], 0x1}, 0x0) [ 1016.352540][ T25] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.363132][ T25] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1016.372596][ T25] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.388543][ T3547] usb 5-1: new high-speed USB device number 32 using dummy_hcd 03:41:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@remote, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 1016.623967][ T25] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a9, bcdDevice=b7.40 [ 1016.633862][ T25] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1016.642616][ T25] usb 1-1: Product: syz [ 1016.646928][ T25] usb 1-1: Manufacturer: syz [ 1016.651769][ T25] usb 1-1: SerialNumber: syz [ 1016.703197][T16436] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1016.711509][T16436] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1016.802509][ T3547] usb 5-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.813069][ T3547] usb 5-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1016.822513][ T3547] usb 5-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.855013][ T25] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1016.861295][ T25] cdc_wdm 1-1:21.0: Unknown control protocol [ 1017.048149][ T6] usb 1-1: USB disconnect, device number 22 [ 1017.106871][ T3547] usb 5-1: New USB device found, idVendor=0535, idProduct=a4a9, bcdDevice=b7.40 [ 1017.116412][ T3547] usb 5-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1017.125854][ T3547] usb 5-1: Product: syz [ 1017.130181][ T3547] usb 5-1: Manufacturer: syz [ 1017.135120][ T3547] usb 5-1: SerialNumber: syz [ 1017.219206][ T3547] cdc_wdm 5-1:21.0: cdc-wdm0: USB WDM device [ 1017.225643][ T3547] cdc_wdm 5-1:21.0: Unknown control protocol [ 1017.426240][ T6] usb 5-1: USB disconnect, device number 32 03:41:17 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) 03:41:17 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {}]}, 0xe0) 03:41:17 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64}, @generic="c898d63bab6b91", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091511131"]}]}, 0x114}], 0x1}, 0x0) 03:41:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x37, 0x7e2881d4b0058261, 0x0, 0x0, {0x2}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x2c}}, 0x0) 03:41:17 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) [ 1017.703385][T16445] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1017.716437][T16445] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:17 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) 03:41:17 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {}]}, 0xe0) 03:41:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x37, 0x7e2881d4b0058261, 0x0, 0x0, {0x2}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x2c}}, 0x0) 03:41:17 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64}, @generic="c898d63bab6b91", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091511131"]}]}, 0x114}], 0x1}, 0x0) [ 1018.103142][ T3547] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1018.138312][T16453] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1018.147065][T16453] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x37, 0x7e2881d4b0058261, 0x0, 0x0, {0x2}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x2c}}, 0x0) 03:41:18 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000008940)=[{{&(0x7f0000000300)=@can, 0x80, 0x0}}, {{&(0x7f00000035c0)=@can, 0x80, 0x0}}], 0x2, 0x0) 03:41:18 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {}]}, 0xe0) [ 1018.463775][ T3547] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.474394][ T3547] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1018.483794][ T3547] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.642927][ T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1018.673168][ T3547] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a9, bcdDevice=b7.40 [ 1018.682966][ T3547] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1018.691575][ T3547] usb 1-1: Product: syz [ 1018.696244][ T3547] usb 1-1: Manufacturer: syz [ 1018.701065][ T3547] usb 1-1: SerialNumber: syz [ 1018.820418][ T3547] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1018.827645][ T3547] cdc_wdm 1-1:21.0: Unknown control protocol [ 1019.032125][ T25] usb 5-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.046491][ T25] usb 5-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1019.056474][ T25] usb 5-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.080526][ T3547] usb 1-1: USB disconnect, device number 23 [ 1019.086781][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1019.086896][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1019.086992][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1019.252259][ T25] usb 5-1: New USB device found, idVendor=0535, idProduct=a4a9, bcdDevice=b7.40 [ 1019.261539][ T25] usb 5-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1019.270351][ T25] usb 5-1: Product: syz [ 1019.274819][ T25] usb 5-1: Manufacturer: syz [ 1019.279555][ T25] usb 5-1: SerialNumber: syz [ 1019.329577][ T25] cdc_wdm 5-1:21.0: cdc-wdm0: USB WDM device [ 1019.336124][ T25] cdc_wdm 5-1:21.0: Unknown control protocol [ 1019.532996][ T3547] usb 5-1: USB disconnect, device number 33 03:41:19 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) 03:41:19 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x37, 0x7e2881d4b0058261, 0x0, 0x0, {0x2}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x2c}}, 0x0) 03:41:19 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000008940)=[{{&(0x7f0000000300)=@can, 0x80, 0x0}}, {{&(0x7f00000035c0)=@can, 0x80, 0x0}}], 0x2, 0x0) 03:41:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}]}, 0x58}}, 0x0) 03:41:20 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000403505a9a440b7aa24e80109025c000215000000090400000102090000052406120105240f00150d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0, 0x48}, {&(0x7f0000000100)='B', 0x1}], 0x2, 0x0, 0x0) 03:41:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000008940)=[{{&(0x7f0000000300)=@can, 0x80, 0x0}}, {{&(0x7f00000035c0)=@can, 0x80, 0x0}}], 0x2, 0x0) 03:41:20 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000180)='+', 0x20000181, 0x4000, 0x0, 0x0) 03:41:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}]}, 0x58}}, 0x0) [ 1020.263628][ T3547] usb 1-1: new high-speed USB device number 24 using dummy_hcd 03:41:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000008940)=[{{&(0x7f0000000300)=@can, 0x80, 0x0}}, {{&(0x7f00000035c0)=@can, 0x80, 0x0}}], 0x2, 0x0) 03:41:20 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000180)='+', 0x20000181, 0x4000, 0x0, 0x0) 03:41:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}]}, 0x58}}, 0x0) [ 1020.643098][ T3547] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.653565][ T3547] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1020.662872][ T3547] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.822160][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1020.912744][ T3547] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a9, bcdDevice=b7.40 [ 1020.922393][ T3547] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1020.931019][ T3547] usb 1-1: Product: syz [ 1020.935860][ T3547] usb 1-1: Manufacturer: syz [ 1020.940623][ T3547] usb 1-1: SerialNumber: syz [ 1021.068353][ T3547] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1021.074765][ T3547] cdc_wdm 1-1:21.0: Unknown control protocol [ 1021.182765][ T25] usb 5-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.197503][ T25] usb 5-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1021.206840][ T25] usb 5-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.272242][T10296] usb 1-1: USB disconnect, device number 24 [ 1021.429008][ T25] usb 5-1: New USB device found, idVendor=0535, idProduct=a4a9, bcdDevice=b7.40 [ 1021.438496][ T25] usb 5-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1021.447480][ T25] usb 5-1: Product: syz [ 1021.451938][ T25] usb 5-1: Manufacturer: syz [ 1021.456678][ T25] usb 5-1: SerialNumber: syz [ 1021.524510][ T25] cdc_wdm 5-1:21.0: cdc-wdm0: USB WDM device [ 1021.530769][ T25] cdc_wdm 5-1:21.0: Unknown control protocol [ 1021.733486][ T25] usb 5-1: USB disconnect, device number 34 03:41:21 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000180)='+', 0x20000181, 0x4000, 0x0, 0x0) 03:41:21 executing program 1: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c1142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000000c0)=0x20) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:41:21 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}]}, 0x58}}, 0x0) [ 1021.987407][ T24] audit: type=1804 audit(2000000481.839:209): pid=16497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/file0/file0/file0/file0/root/syzkaller-testdir982190979/syzkaller.EQ7nOS/913/bus" dev="sda1" ino=1159 res=1 errno=0 03:41:22 executing program 1: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c1142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000000c0)=0x20) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:41:22 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000180)='+', 0x20000181, 0x4000, 0x0, 0x0) 03:41:22 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:22 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:22 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) [ 1022.797893][ T24] audit: type=1804 audit(2000000482.649:210): pid=16509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/file0/file0/file0/file0/root/syzkaller-testdir982190979/syzkaller.EQ7nOS/914/bus" dev="sda1" ino=1177 res=1 errno=0 03:41:22 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 03:41:22 executing program 1: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c1142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000000c0)=0x20) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:41:22 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001d80)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9600010000901b10fb54a8cb72d232ad558c46fff4208d49631979a42d6884ec11ce1413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d510100c4d86abeb12303ff139fe0d0020000d60400df0007d3670000008aff66d6b3181ffc1d62a3954c11c27839dc007c4d296e7359ea79a75dd098bbc4fa13aee48ca9e8969faebf3183fe803ab3f503f7ebf296f272e27a9a84024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf46cef3c6a76e3abdb21696e340bb8e2a093adc57196b40def3858ef569147fa4108328392d322ab4df10a2f69a6bdf72570000e81042410f57466f59aea2544047d6d8ac442e0000000000ee16c729300d230180000000000000a87db3670bba302085a22b5a8b051dc254ed5290a8cd8470e776d6b80630d6cbd849b29a6cb5f4fc0001745cff0e5fe57238aeada5acf3209a08439f1ff01ffbe5b57922b6f6c67e02aa6d7760525b595fe1f697bc114ed1778e97a3f0295f946974cfb458be2a34cf924dc37b558fbf17a76f3547497aba5086e30ec8a55251875432e74b54afaf4985683c229ff92be0dade95ae7b68136b0046d535dd39c0f35469869e9b342b953f81447e6b9e522d62b1e6ffdaab304f134306335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e0fbc70bcb975f97ed7b0300000000000000e54e9072a22d91744a332e2fa806e63c5cd98a12ebf5dfbcfb0000002cf6c75ac63f04af77c98a1459ab1664885173b2b7130eae67e0ebe380d0f648713e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe98682efbf3983f283face3b58700992774814d63c933912dd0c6908149cb79c5cb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83df998a7469426ec8b0000000000000010ff2cd18bdd8ad0983bc90770bbd26a82b9fb9d17c02a97b523c47ef8c33400e90d34be011904ff782ca00edf1147a71bcc738ef636d32b01933556f9afe772cd45af8aeffe2753088e02ca6bb2fd29aa5b789ff9d220980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b506380591a8c68e537dd659a7418c1e122bd4c219f8a30160f2ac54f842e3be1c95b15175d0e664beb126000e96549e1a1208c686edb475b705e8a9515c96f4fc6b3c925ea404edbb3845111aed1637ec3890f1de61026dc6c6603000000000000002c1756f6d105671241d48a8abe64f5caecc45f953383722135ed9925989e01eae489ec7052f8ed72c326c7a8aa63999ee1f47ce5cb7365773ea52b6dbbd56d222659480e82c6f84d2033d9d1b597c54ce1822d14b7c7699b9d54f5f11f2e7fdc7557515eb70212e8701e94e7b421dd474cffbc35bc8623cd5e8af82275a940be0400000000000000bce3fbe7d90de96d6a8e9f54cf881f606b381e4803b500000000000000001200004a2357ba5f6000de1cfa88b7165dcfcf2a6a932f37f05b5ae4fc2bbc908fdb686d5da2da1a4b5024b6537b1296d7923c19e6cb723c1923b3eea2d73e136dff383c6fbbac53dfdcb1a68c98d8e96fe38207ac753faf3ebed3409144c7c53d6318ced678a621450a2e0000000000000054d68d90677d8de36c3215d2ff3cfadcf65eb92adc6c62d66b11cb2d7556414a86dfa94bb7aa52c7febb169b2efcbbc57f000000bed802f4f056976a128c76629a362ee9cc624ec454b90200fd96000000000000000000b1694e5012efb1d1673ff0c156fdca4856b7ae66c5168bd8a928a9b1881e1905520c22498190530db8d0e3bbf2696f83c605454359c8593ab4f4122ebc32ca59c3b18ec03b883eb77df5c6d4b3c7ebce768f85f2ba0f973425be5e4f1fa7dd74c8bcbe124cb932bed6d05fc3261dcfb051b8dd1eb06decf00633be33881b9d888387b6d8e8ecb15a8df9f31f16ebeac6d63b3a2ddb179abdfc568036382b4f3fc72eb76036a64d8756486e294f8bd6df372198dd1efca86ad88d2162387f44058fd58debc66ababf5b438ee5b723216d6a537a51497167bee970158c183e1b89466a096450e43db127fee41bf1a38bf055f5f8822b9b0e93b142fe3000aa54e98b011d84487ecd4ee69d58a4913475daffedc5fc723aa256fd322b518202e0d93e273ccabcb657e59d7149c2628863d331efe81b19af99bd7cd524cd70d283ed3815c29ac673ee69e8208b6a4413e9a8cd46df359280fc9a0e1bdde37378050a8b2e08dbfd3f8a897df751efd4d9d8d287e9b126091098e79ab931b23e6d2fbd3fba"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) close(r0) close(r2) [ 1023.322307][ T24] audit: type=1804 audit(2000000483.169:211): pid=16519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/file0/file0/file0/file0/root/syzkaller-testdir982190979/syzkaller.EQ7nOS/915/bus" dev="sda1" ino=1178 res=1 errno=0 03:41:23 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 03:41:23 executing program 1: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c1142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000000c0)=0x20) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 1023.870709][ T24] audit: type=1804 audit(2000000483.719:212): pid=16526 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/file0/file0/file0/file0/root/syzkaller-testdir982190979/syzkaller.EQ7nOS/916/bus" dev="sda1" ino=1177 res=1 errno=0 03:41:25 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:25 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) close(r0) close(r2) 03:41:25 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 03:41:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) close(r0) close(r2) 03:41:25 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:25 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:25 executing program 4: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) quotactl(0x40001080000102, 0x0, 0xee01, 0x0) 03:41:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001d80)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9600010000901b10fb54a8cb72d232ad558c46fff4208d49631979a42d6884ec11ce1413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d510100c4d86abeb12303ff139fe0d0020000d60400df0007d3670000008aff66d6b3181ffc1d62a3954c11c27839dc007c4d296e7359ea79a75dd098bbc4fa13aee48ca9e8969faebf3183fe803ab3f503f7ebf296f272e27a9a84024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf46cef3c6a76e3abdb21696e340bb8e2a093adc57196b40def3858ef569147fa4108328392d322ab4df10a2f69a6bdf72570000e81042410f57466f59aea2544047d6d8ac442e0000000000ee16c729300d230180000000000000a87db3670bba302085a22b5a8b051dc254ed5290a8cd8470e776d6b80630d6cbd849b29a6cb5f4fc0001745cff0e5fe57238aeada5acf3209a08439f1ff01ffbe5b57922b6f6c67e02aa6d7760525b595fe1f697bc114ed1778e97a3f0295f946974cfb458be2a34cf924dc37b558fbf17a76f3547497aba5086e30ec8a55251875432e74b54afaf4985683c229ff92be0dade95ae7b68136b0046d535dd39c0f35469869e9b342b953f81447e6b9e522d62b1e6ffdaab304f134306335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e0fbc70bcb975f97ed7b0300000000000000e54e9072a22d91744a332e2fa806e63c5cd98a12ebf5dfbcfb0000002cf6c75ac63f04af77c98a1459ab1664885173b2b7130eae67e0ebe380d0f648713e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe98682efbf3983f283face3b58700992774814d63c933912dd0c6908149cb79c5cb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83df998a7469426ec8b0000000000000010ff2cd18bdd8ad0983bc90770bbd26a82b9fb9d17c02a97b523c47ef8c33400e90d34be011904ff782ca00edf1147a71bcc738ef636d32b01933556f9afe772cd45af8aeffe2753088e02ca6bb2fd29aa5b789ff9d220980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b506380591a8c68e537dd659a7418c1e122bd4c219f8a30160f2ac54f842e3be1c95b15175d0e664beb126000e96549e1a1208c686edb475b705e8a9515c96f4fc6b3c925ea404edbb3845111aed1637ec3890f1de61026dc6c6603000000000000002c1756f6d105671241d48a8abe64f5caecc45f953383722135ed9925989e01eae489ec7052f8ed72c326c7a8aa63999ee1f47ce5cb7365773ea52b6dbbd56d222659480e82c6f84d2033d9d1b597c54ce1822d14b7c7699b9d54f5f11f2e7fdc7557515eb70212e8701e94e7b421dd474cffbc35bc8623cd5e8af82275a940be0400000000000000bce3fbe7d90de96d6a8e9f54cf881f606b381e4803b500000000000000001200004a2357ba5f6000de1cfa88b7165dcfcf2a6a932f37f05b5ae4fc2bbc908fdb686d5da2da1a4b5024b6537b1296d7923c19e6cb723c1923b3eea2d73e136dff383c6fbbac53dfdcb1a68c98d8e96fe38207ac753faf3ebed3409144c7c53d6318ced678a621450a2e0000000000000054d68d90677d8de36c3215d2ff3cfadcf65eb92adc6c62d66b11cb2d7556414a86dfa94bb7aa52c7febb169b2efcbbc57f000000bed802f4f056976a128c76629a362ee9cc624ec454b90200fd96000000000000000000b1694e5012efb1d1673ff0c156fdca4856b7ae66c5168bd8a928a9b1881e1905520c22498190530db8d0e3bbf2696f83c605454359c8593ab4f4122ebc32ca59c3b18ec03b883eb77df5c6d4b3c7ebce768f85f2ba0f973425be5e4f1fa7dd74c8bcbe124cb932bed6d05fc3261dcfb051b8dd1eb06decf00633be33881b9d888387b6d8e8ecb15a8df9f31f16ebeac6d63b3a2ddb179abdfc568036382b4f3fc72eb76036a64d8756486e294f8bd6df372198dd1efca86ad88d2162387f44058fd58debc66ababf5b438ee5b723216d6a537a51497167bee970158c183e1b89466a096450e43db127fee41bf1a38bf055f5f8822b9b0e93b142fe3000aa54e98b011d84487ecd4ee69d58a4913475daffedc5fc723aa256fd322b518202e0d93e273ccabcb657e59d7149c2628863d331efe81b19af99bd7cd524cd70d283ed3815c29ac673ee69e8208b6a4413e9a8cd46df359280fc9a0e1bdde37378050a8b2e08dbfd3f8a897df751efd4d9d8d287e9b126091098e79ab931b23e6d2fbd3fba"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) close(r0) close(r2) 03:41:25 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) close(r0) close(r2) 03:41:26 executing program 4: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) quotactl(0x40001080000102, 0x0, 0xee01, 0x0) 03:41:26 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) close(r0) close(r2) 03:41:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) close(r0) close(r2) 03:41:29 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x5c}}, 0x0) 03:41:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x2) 03:41:29 executing program 4: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) quotactl(0x40001080000102, 0x0, 0xee01, 0x0) 03:41:29 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:29 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba0898caf3314f59db0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 03:41:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x5c}}, 0x0) 03:41:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x2) 03:41:29 executing program 4: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) quotactl(0x40001080000102, 0x0, 0xee01, 0x0) 03:41:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x5c}}, 0x0) 03:41:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x2) 03:41:30 executing program 4: r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, 0x0) 03:41:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)={[{@session={'session', 0x3d, 0x68}}]}) 03:41:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x2) 03:41:32 executing program 4: r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, 0x0) 03:41:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x5c}}, 0x0) 03:41:33 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)="ca", 0x1}], 0x1) 03:41:33 executing program 2: mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x7) r0 = geteuid() syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0/file0\x00', 0x8000, 0x0, 0x0, 0x118860, &(0x7f0000000980)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000a40)={0x1d, @rand_addr=0x64010100, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x8cf}, 0x2c) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setreuid(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x1801010, &(0x7f0000000c80)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) syz_mount_image$exfat(0x0, 0x0, 0xfffffffffffffff7, 0x4, &(0x7f0000001fc0)=[{0x0, 0x0, 0x800}, {&(0x7f0000001e40)="3b1bdcfd2d7be02eac508d19e8fdb64b1850", 0x12}, {&(0x7f0000001e80)="5e2132bfe64252976c1857f2693d92d2d388712075fed751d0cb7c80c5fa1f2b9ffc07de4bea180d0e6f56fe7c228fe9d345a519f22a26ef41fd4ddfb15ec077dffb966752ef54b146fcf1f5f3a1f448976ecf1d01ae8e9fffcdc70ec22e80eb484139e7598db3f3edea81300cd8", 0x6e, 0x40}, {0x0, 0x0, 0x7f}], 0x0, &(0x7f0000002040)={[{@errors_remount}, {@fmask}, {@umask={'umask', 0x3d, 0x3}}, {@umask}, {@umask}], [{@audit}, {@obj_type}, {@measure}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 03:41:33 executing program 4: r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, 0x0) 03:41:33 executing program 1: r0 = memfd_create(&(0x7f0000000540)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xe5\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\x95\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O\x88\x8a_\vLM\xc3\"\xb9\x95\xbd\vr\x8f\xcf\xc9q_s\xca\xd6\xb1\x14>SJ\xfeg\xa3\x98K\xc2\xe2\x94B#uk=\x92\xbf\xec\x9bn\x82\xb1=\x90f\xbc\xbf\x90\xda\xf5u\xd1\xffo{?\xa9\xediK\xd4\x1ee\x01\x03\xd5\x16\xf5\xbeW\x8f\xe8\x1e\xef\xfdCn\x8d{n\x17\xad\xfd<\xfdD\xb5\xc2 \x01J\x88\xe3\xb2\xf0\x82\x89p{\xd0\xe1O\xael+we\xe6M\xc8$\xf8s\xe6\x84\xb9A\xa0\xf4\xa8k\ru5[>mKv\xc5\x80Lz\x1fqv%z\x90W\x02T\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x89\xb9I\x95\x00\x00\xeb\x003e\x8bc3m\xa7\xa2\x1f\xd8\x97\xd4\xbe\xaf\xb7@\xd4\x97S\xa9*\xdaE\x9a\xcfw\xbd\x1f\xf71}J\x911;\xf2\x12\x12\xe5\x9e=D\nt{\x1d\x8f\xcf\x03.\xc0\x97{\x90A\xfd\xfb\xbd\x8f\xbb\xee\xebT\x1e8\xd8\xe6\x97\xbe\xdd\xd4\xa8\x9c\xb4\xde\x91\x8b\xc5\v\xbc/\xcb\x11C8\xf8\x83\x14\x15\xf8;\xf6\x1d\xff\xdb\xf5\x04\xd0(\x04-\xbb\xe7\xd4\xcf\x92\xb3\xffk\x96\xf6\x80\x94\xc9\x85\x8f\x92n_\x03Q<\xb7\xec\"oh\xca\xe7.\xb2\'\xaf\xa8j\xe8O\x0e\x97\xb3L0\xd3\xe1\x9c,.\xd8\xfa\xa6\xca\xc7N\xdaYi\xb1RI\\\xceJ}F\xfe\x97\xb8\xaen\xf6\xa6d\x90\xd58\x01ic\xad\xe1\xa1\x00_X\xa2s\x01\xf2$\\\x8cZ$\xdf\x04\x9cxD_\tx\xd8\x89%v\x12\xecp\xad\x12\f9\xca\xfd\xbb}v\x17W\xda2\x96x4\xdf\xa5-\xf4\x9bP\x9fN^F\xae\x9d`\xd9\x00\xaac\x80L\x17\x11m\xf46\x9d\xc7\x12\x03TXR\xa3\xcb\x0f\xd7+w<\xe1W\x06\xf6\x17\x1cF:_\xf6\xe4t\xb2\x7f9\xc1\xf5\x8c/\xcd\xe26k\xf4Ou\xe0\xc4\x97\xcf%\x98\xe3\x94@?Jc\xb9~\xbc=\xaa\x80\x96\xe4UY\x8aS\xfdyc\x91\xe5z\x9e\xd3\x0e\x80\x00\x00\x00\x00\x00\x00\x00g\xf5\x1a\xa2\xec', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r4, 0x1, r5, 0x6}) 03:41:33 executing program 5: syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)={[{@session={'session', 0x3d, 0x68}}]}) 03:41:33 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) [ 1033.586635][T16604] loop2: detected capacity change from 0 to 264192 03:41:33 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)="ca", 0x1}], 0x1) 03:41:33 executing program 4: r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, 0x0) 03:41:33 executing program 2: mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x7) r0 = geteuid() syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0/file0\x00', 0x8000, 0x0, 0x0, 0x118860, &(0x7f0000000980)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000a40)={0x1d, @rand_addr=0x64010100, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x8cf}, 0x2c) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setreuid(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x1801010, &(0x7f0000000c80)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) syz_mount_image$exfat(0x0, 0x0, 0xfffffffffffffff7, 0x4, &(0x7f0000001fc0)=[{0x0, 0x0, 0x800}, {&(0x7f0000001e40)="3b1bdcfd2d7be02eac508d19e8fdb64b1850", 0x12}, {&(0x7f0000001e80)="5e2132bfe64252976c1857f2693d92d2d388712075fed751d0cb7c80c5fa1f2b9ffc07de4bea180d0e6f56fe7c228fe9d345a519f22a26ef41fd4ddfb15ec077dffb966752ef54b146fcf1f5f3a1f448976ecf1d01ae8e9fffcdc70ec22e80eb484139e7598db3f3edea81300cd8", 0x6e, 0x40}, {0x0, 0x0, 0x7f}], 0x0, &(0x7f0000002040)={[{@errors_remount}, {@fmask}, {@umask={'umask', 0x3d, 0x3}}, {@umask}, {@umask}], [{@audit}, {@obj_type}, {@measure}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 03:41:33 executing program 5: syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)={[{@session={'session', 0x3d, 0x68}}]}) 03:41:33 executing program 1: mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x7) r0 = geteuid() syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0/file0\x00', 0x8000, 0x0, 0x0, 0x118860, &(0x7f0000000980)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000a40)={0x1d, @rand_addr=0x64010100, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x8cf}, 0x2c) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setreuid(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x1801010, &(0x7f0000000c80)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) syz_mount_image$exfat(0x0, 0x0, 0xfffffffffffffff7, 0x4, &(0x7f0000001fc0)=[{0x0, 0x0, 0x800}, {&(0x7f0000001e40)="3b1bdcfd2d7be02eac508d19e8fdb64b1850", 0x12}, {&(0x7f0000001e80)="5e2132bfe64252976c1857f2693d92d2d388712075fed751d0cb7c80c5fa1f2b9ffc07de4bea180d0e6f56fe7c228fe9d345a519f22a26ef41fd4ddfb15ec077dffb966752ef54b146fcf1f5f3a1f448976ecf1d01ae8e9fffcdc70ec22e80eb484139e7598db3f3edea81300cd8", 0x6e, 0x40}, {0x0, 0x0, 0x7f}], 0x0, &(0x7f0000002040)={[{@errors_remount}, {@fmask}, {@umask={'umask', 0x3d, 0x3}}, {@umask}, {@umask}], [{@audit}, {@obj_type}, {@measure}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 03:41:33 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 03:41:34 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)="ca", 0x1}], 0x1) [ 1034.329744][T16620] loop2: detected capacity change from 0 to 264192 03:41:34 executing program 1: mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x7) r0 = geteuid() syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0/file0\x00', 0x8000, 0x0, 0x0, 0x118860, &(0x7f0000000980)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000a40)={0x1d, @rand_addr=0x64010100, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x8cf}, 0x2c) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setreuid(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x1801010, &(0x7f0000000c80)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) syz_mount_image$exfat(0x0, 0x0, 0xfffffffffffffff7, 0x4, &(0x7f0000001fc0)=[{0x0, 0x0, 0x800}, {&(0x7f0000001e40)="3b1bdcfd2d7be02eac508d19e8fdb64b1850", 0x12}, {&(0x7f0000001e80)="5e2132bfe64252976c1857f2693d92d2d388712075fed751d0cb7c80c5fa1f2b9ffc07de4bea180d0e6f56fe7c228fe9d345a519f22a26ef41fd4ddfb15ec077dffb966752ef54b146fcf1f5f3a1f448976ecf1d01ae8e9fffcdc70ec22e80eb484139e7598db3f3edea81300cd8", 0x6e, 0x40}, {0x0, 0x0, 0x7f}], 0x0, &(0x7f0000002040)={[{@errors_remount}, {@fmask}, {@umask={'umask', 0x3d, 0x3}}, {@umask}, {@umask}], [{@audit}, {@obj_type}, {@measure}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 03:41:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0/file0\x00', 0x0) 03:41:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)={[{@session={'session', 0x3d, 0x68}}]}) 03:41:34 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 03:41:34 executing program 2: mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x7) r0 = geteuid() syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0/file0\x00', 0x8000, 0x0, 0x0, 0x118860, &(0x7f0000000980)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000a40)={0x1d, @rand_addr=0x64010100, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x8cf}, 0x2c) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setreuid(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x1801010, &(0x7f0000000c80)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) syz_mount_image$exfat(0x0, 0x0, 0xfffffffffffffff7, 0x4, &(0x7f0000001fc0)=[{0x0, 0x0, 0x800}, {&(0x7f0000001e40)="3b1bdcfd2d7be02eac508d19e8fdb64b1850", 0x12}, {&(0x7f0000001e80)="5e2132bfe64252976c1857f2693d92d2d388712075fed751d0cb7c80c5fa1f2b9ffc07de4bea180d0e6f56fe7c228fe9d345a519f22a26ef41fd4ddfb15ec077dffb966752ef54b146fcf1f5f3a1f448976ecf1d01ae8e9fffcdc70ec22e80eb484139e7598db3f3edea81300cd8", 0x6e, 0x40}, {0x0, 0x0, 0x7f}], 0x0, &(0x7f0000002040)={[{@errors_remount}, {@fmask}, {@umask={'umask', 0x3d, 0x3}}, {@umask}, {@umask}], [{@audit}, {@obj_type}, {@measure}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 03:41:34 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)="ca", 0x1}], 0x1) 03:41:35 executing program 1: mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x7) r0 = geteuid() syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0/file0\x00', 0x8000, 0x0, 0x0, 0x118860, &(0x7f0000000980)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000a40)={0x1d, @rand_addr=0x64010100, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x8cf}, 0x2c) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setreuid(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x1801010, &(0x7f0000000c80)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) syz_mount_image$exfat(0x0, 0x0, 0xfffffffffffffff7, 0x4, &(0x7f0000001fc0)=[{0x0, 0x0, 0x800}, {&(0x7f0000001e40)="3b1bdcfd2d7be02eac508d19e8fdb64b1850", 0x12}, {&(0x7f0000001e80)="5e2132bfe64252976c1857f2693d92d2d388712075fed751d0cb7c80c5fa1f2b9ffc07de4bea180d0e6f56fe7c228fe9d345a519f22a26ef41fd4ddfb15ec077dffb966752ef54b146fcf1f5f3a1f448976ecf1d01ae8e9fffcdc70ec22e80eb484139e7598db3f3edea81300cd8", 0x6e, 0x40}, {0x0, 0x0, 0x7f}], 0x0, &(0x7f0000002040)={[{@errors_remount}, {@fmask}, {@umask={'umask', 0x3d, 0x3}}, {@umask}, {@umask}], [{@audit}, {@obj_type}, {@measure}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 03:41:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0/file0\x00', 0x0) [ 1035.217245][T16638] loop2: detected capacity change from 0 to 264192 03:41:35 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 03:41:35 executing program 2: mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x7) r0 = geteuid() syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0/file0\x00', 0x8000, 0x0, 0x0, 0x118860, &(0x7f0000000980)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000a40)={0x1d, @rand_addr=0x64010100, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x8cf}, 0x2c) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setreuid(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x1801010, &(0x7f0000000c80)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) syz_mount_image$exfat(0x0, 0x0, 0xfffffffffffffff7, 0x4, &(0x7f0000001fc0)=[{0x0, 0x0, 0x800}, {&(0x7f0000001e40)="3b1bdcfd2d7be02eac508d19e8fdb64b1850", 0x12}, {&(0x7f0000001e80)="5e2132bfe64252976c1857f2693d92d2d388712075fed751d0cb7c80c5fa1f2b9ffc07de4bea180d0e6f56fe7c228fe9d345a519f22a26ef41fd4ddfb15ec077dffb966752ef54b146fcf1f5f3a1f448976ecf1d01ae8e9fffcdc70ec22e80eb484139e7598db3f3edea81300cd8", 0x6e, 0x40}, {0x0, 0x0, 0x7f}], 0x0, &(0x7f0000002040)={[{@errors_remount}, {@fmask}, {@umask={'umask', 0x3d, 0x3}}, {@umask}, {@umask}], [{@audit}, {@obj_type}, {@measure}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 03:41:35 executing program 3: faccessat(0xffffffffffffffff, 0x0, 0x42) 03:41:35 executing program 5: bpf$MAP_CREATE(0x1e, 0x0, 0x0) 03:41:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) 03:41:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0/file0\x00', 0x0) 03:41:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x8994, &(0x7f0000000080)={@private0={0xfc, 0x3a}, @rand_addr=' \x01\x00', @private2}) 03:41:35 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x400, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') utimes(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:41:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0xaec7, 0x0) [ 1036.122223][T16653] loop2: detected capacity change from 0 to 264192 03:41:36 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x49080) 03:41:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) 03:41:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0/file0\x00', 0x0) 03:41:36 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x400, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') utimes(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:41:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 03:41:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x8994, &(0x7f0000000080)={@private0={0xfc, 0x3a}, @rand_addr=' \x01\x00', @private2}) 03:41:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) 03:41:36 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x49080) 03:41:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 03:41:37 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000400)="b1f17f5db78d3dfa18f1c6381ac70df1da267228b2ed85d7c88dee18e0d3ba46d6e89dde24fe88d434c60870cf6fcc02cda6bbd01b6441b08caaf67fb0fba369e8f03bfafba130dda800d284a55a0f9944e32bdb56ecf80361e65f9a01adb2a90b098c9f7b898e369108ffc20540c70664c848ae5871345f6f81", 0x7a}, {&(0x7f0000000480)="e3d57de5e5864de3d8480296ab4e69b52b0139c8be84d18c8727c4b2d2af3cc68bf06ceb0afa70110d1c9d32d1d0a93a91f51dec6da89975661115016a5d044037f2c06a4636f6d1c2e9a19686706bd23c66d078bbc478c69040ef3c127c2bcbb2b12c26aa22dd7f3b7fc65d3f3d6f45dd691566fe45262d9ed332a8bef40891200fcd487af336de537fc8fd865366b6ba636fadaec761b8f05bc4dd4d8e99539598675c3f524585b97d5c3481aee16b88881ae12afff1440b4971b3ddd640cf8e87a8818e28a2295234f7c8666ed378e85863e40029447f2ded0dc3", 0xdc}, {&(0x7f0000000580)="771f5260b848b74455925bbd23d9b4c81a07c127d1a9940633182f9068dfa3a76cc5b0622e3a5babecc3befc9bb2b461d186f6f9bb574ec8bc8922155530fb32de1e45cb1c7dd237bc248ad87442ea7193d2e435235025e2a0b2952c1a852aaaaf8e2c9729aa13ba9e011afa78d94403dbc0719c0a6f6805766699bfc9fe085c2d10bfe566aead0a31e566b8e83477876a6400f87e9876a8b5b1057fd5c32f3379254b3880f9572186067467f7781b634bed06d6967b1220d58adb08344efd98c1e9e301ef637ae40f2f890204aae7b4ff19e383a455babfab4c04", 0xdb}, {&(0x7f0000000680)="458d3b529d3a53bc29cb3a0805a407e04174cd4dc6af40a39049592f722e7fe50586c4e6630954645ee0d2bd2805ff8a9478a384112c872a706932da69234b11f2949bd54d97106f88b904bbed64577150721738c87d08ea0a760f2e734ba79131645c75efdfeaf7514969ed66cb1627b5a08ceeb88aaf47592924b427ebbfd3dcec1e467bef3fafefa1", 0x8a}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="286ca8c10a78bb65eeb65b2ecb478192452b41fab5ef6f11d54c0a3c72bfa0d284d8f4a878702d97985522234cb545ddb468d01ab769278e9d13f3b6e1cae0f9dfda0b74dc97a167641fca8e166da30032128d2e6e83a47fff0cfc3348a1c7f9d85d6183cc94d818a42d2d976483c4efd28ad18973a9b44d61f3585a0f01770175e66e0e11543f8af6fb9b86133d97298c3a867b0a5e16aa2fa8f186d0037ba095eee7fd9c1968b4c0a66d4bc58a88f3", 0xb0}, {&(0x7f0000001800)="73cd4af3e43d7842331d503ec2aab6edc6e516121aea8beb7aa84cc2961ca3439562ee654da148ca00c54f5ef8a7c90f0345374c008656fad4b0d9e27791969a70ca1086317dde7cc740a9bce6d39f787ab6024e5f11f55ba0b5e26b9b8434d094", 0x61}, {&(0x7f0000001880)="0581501b4d3fc8919b5668e1d751bcfaf84580e7eb495ed2a0f3d5a5dc2cf9b110e5fac0d0a5e8e69f86abae94f9bb22f618d44a1b64cd862af4276eb4578a516b69400badee7b6036e8fa49d1f08aed2e92efd536f0ad92c78815f50ddac452fb16a26c1ead737fb2c0e6de3c614429f24fcfa17d593b74a2aaf3d9b82da8be395fc1e3ef5aba778ce958294435bd7003bb8c276bad03eb2e92a60a9b701178c8950303e62c8d8eed77bdbd588360730a8e1bea14c4b5651c7139cd5fc3b7b3ff5082f08589af", 0xc7}], 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002001d00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x4008884}}], 0x1, 0xc000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x1d}, 0x10) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x4}, &(0x7f0000000040)) 03:41:37 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x400, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') utimes(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:41:37 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x49080) 03:41:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) 03:41:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 03:41:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x8994, &(0x7f0000000080)={@private0={0xfc, 0x3a}, @rand_addr=' \x01\x00', @private2}) 03:41:37 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x400, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') utimes(&(0x7f0000000300)='./file0/file0\x00', 0x0) 03:41:37 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000400)="b1f17f5db78d3dfa18f1c6381ac70df1da267228b2ed85d7c88dee18e0d3ba46d6e89dde24fe88d434c60870cf6fcc02cda6bbd01b6441b08caaf67fb0fba369e8f03bfafba130dda800d284a55a0f9944e32bdb56ecf80361e65f9a01adb2a90b098c9f7b898e369108ffc20540c70664c848ae5871345f6f81", 0x7a}, {&(0x7f0000000480)="e3d57de5e5864de3d8480296ab4e69b52b0139c8be84d18c8727c4b2d2af3cc68bf06ceb0afa70110d1c9d32d1d0a93a91f51dec6da89975661115016a5d044037f2c06a4636f6d1c2e9a19686706bd23c66d078bbc478c69040ef3c127c2bcbb2b12c26aa22dd7f3b7fc65d3f3d6f45dd691566fe45262d9ed332a8bef40891200fcd487af336de537fc8fd865366b6ba636fadaec761b8f05bc4dd4d8e99539598675c3f524585b97d5c3481aee16b88881ae12afff1440b4971b3ddd640cf8e87a8818e28a2295234f7c8666ed378e85863e40029447f2ded0dc3", 0xdc}, {&(0x7f0000000580)="771f5260b848b74455925bbd23d9b4c81a07c127d1a9940633182f9068dfa3a76cc5b0622e3a5babecc3befc9bb2b461d186f6f9bb574ec8bc8922155530fb32de1e45cb1c7dd237bc248ad87442ea7193d2e435235025e2a0b2952c1a852aaaaf8e2c9729aa13ba9e011afa78d94403dbc0719c0a6f6805766699bfc9fe085c2d10bfe566aead0a31e566b8e83477876a6400f87e9876a8b5b1057fd5c32f3379254b3880f9572186067467f7781b634bed06d6967b1220d58adb08344efd98c1e9e301ef637ae40f2f890204aae7b4ff19e383a455babfab4c04", 0xdb}, {&(0x7f0000000680)="458d3b529d3a53bc29cb3a0805a407e04174cd4dc6af40a39049592f722e7fe50586c4e6630954645ee0d2bd2805ff8a9478a384112c872a706932da69234b11f2949bd54d97106f88b904bbed64577150721738c87d08ea0a760f2e734ba79131645c75efdfeaf7514969ed66cb1627b5a08ceeb88aaf47592924b427ebbfd3dcec1e467bef3fafefa1", 0x8a}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="286ca8c10a78bb65eeb65b2ecb478192452b41fab5ef6f11d54c0a3c72bfa0d284d8f4a878702d97985522234cb545ddb468d01ab769278e9d13f3b6e1cae0f9dfda0b74dc97a167641fca8e166da30032128d2e6e83a47fff0cfc3348a1c7f9d85d6183cc94d818a42d2d976483c4efd28ad18973a9b44d61f3585a0f01770175e66e0e11543f8af6fb9b86133d97298c3a867b0a5e16aa2fa8f186d0037ba095eee7fd9c1968b4c0a66d4bc58a88f3", 0xb0}, {&(0x7f0000001800)="73cd4af3e43d7842331d503ec2aab6edc6e516121aea8beb7aa84cc2961ca3439562ee654da148ca00c54f5ef8a7c90f0345374c008656fad4b0d9e27791969a70ca1086317dde7cc740a9bce6d39f787ab6024e5f11f55ba0b5e26b9b8434d094", 0x61}, {&(0x7f0000001880)="0581501b4d3fc8919b5668e1d751bcfaf84580e7eb495ed2a0f3d5a5dc2cf9b110e5fac0d0a5e8e69f86abae94f9bb22f618d44a1b64cd862af4276eb4578a516b69400badee7b6036e8fa49d1f08aed2e92efd536f0ad92c78815f50ddac452fb16a26c1ead737fb2c0e6de3c614429f24fcfa17d593b74a2aaf3d9b82da8be395fc1e3ef5aba778ce958294435bd7003bb8c276bad03eb2e92a60a9b701178c8950303e62c8d8eed77bdbd588360730a8e1bea14c4b5651c7139cd5fc3b7b3ff5082f08589af", 0xc7}], 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002001d00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x4008884}}], 0x1, 0xc000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x1d}, 0x10) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x4}, &(0x7f0000000040)) 03:41:38 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x49080) 03:41:38 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 03:41:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 03:41:38 executing program 0: getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) r0 = openat$null(0xffffff9c, &(0x7f0000000080), 0x404000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f00000002c0)=0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000400), 0x80) bpf$ITER_CREATE(0x21, 0x0, 0x0) 03:41:38 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000400)="b1f17f5db78d3dfa18f1c6381ac70df1da267228b2ed85d7c88dee18e0d3ba46d6e89dde24fe88d434c60870cf6fcc02cda6bbd01b6441b08caaf67fb0fba369e8f03bfafba130dda800d284a55a0f9944e32bdb56ecf80361e65f9a01adb2a90b098c9f7b898e369108ffc20540c70664c848ae5871345f6f81", 0x7a}, {&(0x7f0000000480)="e3d57de5e5864de3d8480296ab4e69b52b0139c8be84d18c8727c4b2d2af3cc68bf06ceb0afa70110d1c9d32d1d0a93a91f51dec6da89975661115016a5d044037f2c06a4636f6d1c2e9a19686706bd23c66d078bbc478c69040ef3c127c2bcbb2b12c26aa22dd7f3b7fc65d3f3d6f45dd691566fe45262d9ed332a8bef40891200fcd487af336de537fc8fd865366b6ba636fadaec761b8f05bc4dd4d8e99539598675c3f524585b97d5c3481aee16b88881ae12afff1440b4971b3ddd640cf8e87a8818e28a2295234f7c8666ed378e85863e40029447f2ded0dc3", 0xdc}, {&(0x7f0000000580)="771f5260b848b74455925bbd23d9b4c81a07c127d1a9940633182f9068dfa3a76cc5b0622e3a5babecc3befc9bb2b461d186f6f9bb574ec8bc8922155530fb32de1e45cb1c7dd237bc248ad87442ea7193d2e435235025e2a0b2952c1a852aaaaf8e2c9729aa13ba9e011afa78d94403dbc0719c0a6f6805766699bfc9fe085c2d10bfe566aead0a31e566b8e83477876a6400f87e9876a8b5b1057fd5c32f3379254b3880f9572186067467f7781b634bed06d6967b1220d58adb08344efd98c1e9e301ef637ae40f2f890204aae7b4ff19e383a455babfab4c04", 0xdb}, {&(0x7f0000000680)="458d3b529d3a53bc29cb3a0805a407e04174cd4dc6af40a39049592f722e7fe50586c4e6630954645ee0d2bd2805ff8a9478a384112c872a706932da69234b11f2949bd54d97106f88b904bbed64577150721738c87d08ea0a760f2e734ba79131645c75efdfeaf7514969ed66cb1627b5a08ceeb88aaf47592924b427ebbfd3dcec1e467bef3fafefa1", 0x8a}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="286ca8c10a78bb65eeb65b2ecb478192452b41fab5ef6f11d54c0a3c72bfa0d284d8f4a878702d97985522234cb545ddb468d01ab769278e9d13f3b6e1cae0f9dfda0b74dc97a167641fca8e166da30032128d2e6e83a47fff0cfc3348a1c7f9d85d6183cc94d818a42d2d976483c4efd28ad18973a9b44d61f3585a0f01770175e66e0e11543f8af6fb9b86133d97298c3a867b0a5e16aa2fa8f186d0037ba095eee7fd9c1968b4c0a66d4bc58a88f3", 0xb0}, {&(0x7f0000001800)="73cd4af3e43d7842331d503ec2aab6edc6e516121aea8beb7aa84cc2961ca3439562ee654da148ca00c54f5ef8a7c90f0345374c008656fad4b0d9e27791969a70ca1086317dde7cc740a9bce6d39f787ab6024e5f11f55ba0b5e26b9b8434d094", 0x61}, {&(0x7f0000001880)="0581501b4d3fc8919b5668e1d751bcfaf84580e7eb495ed2a0f3d5a5dc2cf9b110e5fac0d0a5e8e69f86abae94f9bb22f618d44a1b64cd862af4276eb4578a516b69400badee7b6036e8fa49d1f08aed2e92efd536f0ad92c78815f50ddac452fb16a26c1ead737fb2c0e6de3c614429f24fcfa17d593b74a2aaf3d9b82da8be395fc1e3ef5aba778ce958294435bd7003bb8c276bad03eb2e92a60a9b701178c8950303e62c8d8eed77bdbd588360730a8e1bea14c4b5651c7139cd5fc3b7b3ff5082f08589af", 0xc7}], 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002001d00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x4008884}}], 0x1, 0xc000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x1d}, 0x10) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x4}, &(0x7f0000000040)) 03:41:38 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000200)={'netdevsim0\x00', 0x7f}) 03:41:38 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 03:41:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x388, 0x0, 0xe4, 0xe4, 0x2a8, 0x2a8, 0x2a8, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@random="56c2b40a4330"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'veth1\x00'}, 0xbc, 0xe4}, @unspec=@MARK={0x28}}, {{@arp={@multicast2, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x2}}, {{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ip6_vti0\x00'}, 0xbc, 0xe4}, @unspec=@MARK={0x28}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4) 03:41:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x8994, &(0x7f0000000080)={@private0={0xfc, 0x3a}, @rand_addr=' \x01\x00', @private2}) [ 1039.174708][T16726] x_tables: duplicate underflow at hook 1 03:41:39 executing program 0: unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='O'], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001380)={0x0, ""/115}, 0x319abb17, 0x0, 0x4800) 03:41:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x388, 0x0, 0xe4, 0xe4, 0x2a8, 0x2a8, 0x2a8, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@random="56c2b40a4330"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'veth1\x00'}, 0xbc, 0xe4}, @unspec=@MARK={0x28}}, {{@arp={@multicast2, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x2}}, {{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ip6_vti0\x00'}, 0xbc, 0xe4}, @unspec=@MARK={0x28}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4) 03:41:39 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000200)={'netdevsim0\x00', 0x7f}) 03:41:39 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000400)="b1f17f5db78d3dfa18f1c6381ac70df1da267228b2ed85d7c88dee18e0d3ba46d6e89dde24fe88d434c60870cf6fcc02cda6bbd01b6441b08caaf67fb0fba369e8f03bfafba130dda800d284a55a0f9944e32bdb56ecf80361e65f9a01adb2a90b098c9f7b898e369108ffc20540c70664c848ae5871345f6f81", 0x7a}, {&(0x7f0000000480)="e3d57de5e5864de3d8480296ab4e69b52b0139c8be84d18c8727c4b2d2af3cc68bf06ceb0afa70110d1c9d32d1d0a93a91f51dec6da89975661115016a5d044037f2c06a4636f6d1c2e9a19686706bd23c66d078bbc478c69040ef3c127c2bcbb2b12c26aa22dd7f3b7fc65d3f3d6f45dd691566fe45262d9ed332a8bef40891200fcd487af336de537fc8fd865366b6ba636fadaec761b8f05bc4dd4d8e99539598675c3f524585b97d5c3481aee16b88881ae12afff1440b4971b3ddd640cf8e87a8818e28a2295234f7c8666ed378e85863e40029447f2ded0dc3", 0xdc}, {&(0x7f0000000580)="771f5260b848b74455925bbd23d9b4c81a07c127d1a9940633182f9068dfa3a76cc5b0622e3a5babecc3befc9bb2b461d186f6f9bb574ec8bc8922155530fb32de1e45cb1c7dd237bc248ad87442ea7193d2e435235025e2a0b2952c1a852aaaaf8e2c9729aa13ba9e011afa78d94403dbc0719c0a6f6805766699bfc9fe085c2d10bfe566aead0a31e566b8e83477876a6400f87e9876a8b5b1057fd5c32f3379254b3880f9572186067467f7781b634bed06d6967b1220d58adb08344efd98c1e9e301ef637ae40f2f890204aae7b4ff19e383a455babfab4c04", 0xdb}, {&(0x7f0000000680)="458d3b529d3a53bc29cb3a0805a407e04174cd4dc6af40a39049592f722e7fe50586c4e6630954645ee0d2bd2805ff8a9478a384112c872a706932da69234b11f2949bd54d97106f88b904bbed64577150721738c87d08ea0a760f2e734ba79131645c75efdfeaf7514969ed66cb1627b5a08ceeb88aaf47592924b427ebbfd3dcec1e467bef3fafefa1", 0x8a}, {&(0x7f0000000740)="27351a4730eb7794905f72586b2bd360897b780a20e6b03d568190bd4cddbe69306a1767be872e4a88a4ea7f3a9259aa188a97703d125ad1eb02790987b6d14f3850a66d69c46f4337a62892cc87981c75d2547c5b9b3ead711dcd72e3e2be2c728fa5bacfd428ba5cbdb3db4074501fc51481d6b367b146092dc63239fa2b1261c79ffa8a6aa467043899e357690d3bad63fce9d294dc1a0f2a33d96e9cd9f86fb5d34bbb40275510b81cc517d12d8105528e24e80e3bec6e6cd970f623af379ea5f9f35e1d24ef2fc20f61cdc54e2da1412db21f009ee1490c318c34c844253cb21565aa4db5d8d4e0143bd17756fa2a2774032cc0de4e70d2668baebb7f724ac5739cf6f4e06d4d99d3b523ba9bbf5107d8c1b4f59bd9c3cbbb1e452eeacffc3c30dadba7dda9f9aecf5979d500d3bf61664946dccdf9660577223b5e1c311e5b7509040ff690f43b285ba93a4cfe6abd7b511df7f1066ce2b9e330cda292944f1657571b0cdab8e186d2e84a7c7ef6709801e7e0940e200a6bbe0c26db0807f98b08401867a9c4a2a46fe8eb00aae825f6d273b0b6dde8fd8fba695ddd7432257e5f35bf9bb2b18a3c54aff978e22dbdb26b0da5242945743200d5475b3085b03a422302f1bf90c327981b4227379929eb862eb0ba5e42ebebda9bd5caf2358283a27f6cc74e22ed9c7ae6643b73a421b79c2990b0bf2d383ef50d8ea05cf9b4bbeca6b1d20bd69b43cfbd8925a3bd5cb70838cb41787ebc218dbadfa7ff16c3574bd9edbd19e1add6312d73a235768e6d95365096bc94f0ff19c2663ccbe9e71707d5349458a8ad5fa046f08608f1f23762284a8be6cfa42bc9c6d82373348405ab3c948b8166df3a240e042e2b0d0c59373e0858635b499ed2b0a6b3ade90dd85689152a1cb20b8aa55165d0f4939f6ac91a9ae953ab3eab2c25ba3a38fa8f926097e2f3ee8311905c410279534787a2dafa736d0dcf7efd1f376d26eb71d2778240365f80e6f94f7375256620440786edaad548fbec57f66193475588ff382376f1d318bf97dbce4243a8117856316b55375b87d67856c60b17c05daa28786c72dc51e5c17849fe56c73b10a6ae88d8a3fbe29e4078b00b3af36cc0c449b74f15255cba703a8d1eee52080d48414475774c78ce0725123a0afa7298dee88cf317e2ec296b9ca92cd191196166f25dea43c7b483052b0f390d5cc663d0cd648f2e5609b8d87fa3594f836297747a0d46b9a0d86d4f4c21fd7f52f9d32b683ee634de1bb251122ba218a8b07a730f4f571f32560f9022292dc6036d97ef4f08a96ed9112ade8ed399556671b9a4f675e0af5789e960d03cf4c12ae3940da25ddffaf6074d25ee5651e56ab4ec1c5c09d45e62d444808b51b85c9a502d6e1ad00fc606117e0d9e91c7de4c93f13eadf60b9726a8b001bc279638a0211d449dd591a015d30e3861b4aa750590a28a68dbe37a18017a2a35aa4ad39d226b9556e9cafca5eda12f039f48277d1aa459ed343e7ec6e0bbfd5c2668b9c41dfb42cbc4e7f4e413c6f0f4c28d206f35e53dff9f281da792ac56a4db9e396031755b1bad4a91f59abf5aa06edff6968169202d846dc8f998813695a030142e2b61ae37d2581fa65ef14ffd22522bf3f52f4ab9d5d31d8575d846421245647ee47b645a26562c54c7afb83e81ca74b78a7588e2866ad2b864f7fa82ba9d602d89e5ed29fb211d43e30a4f400b6103c5580fa21afb941d024e6ba96f8d28018c1e61d52a34605d748cf1f78c16f709c26b45c00e84992a61ef642a4b4abdec9887cceccd4056a37a1a9634124d83d83a197464cb40af8c1482e0deb65ed4e2e32c7c145ddf5d24b078826123851ec0f90342b09dddd775d1eee88e87fa00dc6ed2a3a39211aa3052de9f52d92b68ac61d6955174371a1e506bea3e46bacea5e1ccdf0db56b12056e8d5424a0a231657570d724e3f451457494da380aaca9d2635745b3d87d9a9224b408bcc4b38f831c3b74a3f3ac49a59774651662372d4c9d8bd317d7adedb50aaee075f06ee3d67ee04b6dc2456a1ee1d8cddac7778e263a1a5a42ed71b4c1db713d769ddc0a21c2c5fe60fa6fb4c1f5b13357703d8bb4fd998477e001307339b5a07dd411a5d1b206917124815492b4841d1321b9ddfb76595a94c9b7f2723b8ccdf3fee59f245e512bc262adefae2c637b6671070eadbccf2716c1ab3ba59361a8cf3408443e97cf48d81d313ec0f9f4f80eb3dbe1b81126725d80aca3dd8650fb861f4ed84d706011519a9ea8d1d802df5b796f6409ce7e1a332605d72ff15ea34cf2f130d335835647e999e52a06e9b889cfeb76cf87e0062e0eaef1f73315c3ded753d326ec08b033e816fb6072e0b165e22d6c53a0177e3f68daa12eb95d6559d8ef589c8183c9d2b7ffca9448b60584508ea84307f43b671b0cd65fb8a0326e48a66e25a7a43b88c75a39ae595ca7d317cef0384c24743532538e5a20e6003079c3687ea92ce43e4db31fb6e811fbe28f197624b62d6aeb977bada85a633c5b94eb2d9585ece23d1b3489abd7338650ae9b45cdae433e55be83ca339237b2bb72d20bd406cb71421256c83ef4ff0b175c5d0ad05cf8a4720d7d8fb34deaec8424aae5a32456e780e11ad605cceb7a47d1dd3a71d43c4cde91f14222ec6e37f2a9fc479f2242e2e673d591ecb1d13d5aaac6d314ffb297b42746be96a2884bdb0eedab6fd3ca91a30be523c3e61ba44ad8d82f41f990ac434492464d3f11328b914bdace2a3568f27682f8f299a39bab14a695396861917f3eca0539229cdba52782f31db4df191f5c6d524bf492d83c1af278d17ced58130561ec5e6362186b86a7510c74c0c867e27cf826cf85fc6268a710060a7c43bbeb3a682965c886ec5172f0f405029b2d3101998e80283d04d2231168afe02fcfaed0f5641c14aa242cb8bc0892aca339c47245c0e5c58e23f8fd86086e8a43514442c901f3947cdf29012fbcd7ee69c9f3611043376afe0d3e02a65bfc7eeab138d48c11919adf782c700198c300ffaf8b819f6f8667d5a8fab8aa036e4a59a491ae7b254e5aa17163ef056ae3488ab5e56607b88b9b96ffb7f0a6bc964527114fafc2aa13e1a2c498b1259fa20ae146e1ec641e501f6dacfaf554a84d45688ff84eb1ea513def8e9d447acbbcbfa87a1924f50b23da26aa909d517bfeba0d27cd4d658560b771b08fee1865d92d21402901c25f3f14c7fb99f3fbf224f2ff304184abb18335ded552c0449189d34efbbbb6cfb1e06a4dd77af9b6f8e9416ab7390760522fb39686aa4048b90deb68f629e87e4ec1c4e7c1f31df1092d07e2d68c53cd65a6e5f608e7617b303552c9910463f9b113ef770cf99f26e5ea42da0144a10a6ba774c592f96c972b48debc05e5c17f644518eb8d14723eafdc0255bd3256b532a63922477b068cb0cfe08d6cfa5aec6f255972fdcf6dbf626388bb9733741a54a37720bba99c93ca137dc5082c26b48f958d2973a1d322fadceee87337240f508d881116a9429577eb302bdc648a3a63bc8e989a5570587a7d5474d0c0d8ba98946eb635983c0d24458f5d190cf1104ba105024988bf3012f5857065d3704f017071a0584673c225278de576b23a7744551fe0f37be8faacf31a538dc5c0f0f24ebb1074596e166ad70260c6248c5255e508efb0782312c5a765fe6e581647e1b0da2f6e69442a65c9f56ec45385799deba3485eaff76885ac790db4cc6d8d5e7a9adbc87fe9942be8856f0b02de308b93e47898b60ad4470b77ae6ad6da269c79ef3d1745d17ad15c803b193078169af8345c1b45010ffa3b1331d1afc45cdf04a2399bfffe299750cd52aef943b852bea1855fbd50f89049fd2efedcb938462a740656e4a36ce6fadc9d74f5d79395b863300cce534503c144d4bd8bdfb088bd5d00fb895bdb3cc207095a37c89045332b6e6d253ff9a36a6ca1adc8cf9b242d44c99afbae5fd21cd7cc5252378fa020de1e9a4e9b1b0f6a901cddc46324c88245ae7d37f6b3b76c9c956db1bacc14cc7466a112abe91524e52a2e148912b30c56b97f9f9189ecf3c8a5286f1a7586f678d6c96264364e58c825b049fe37fdd2c9789b1ef389f159fb74c96b9c1f6dc8c87155c235e27e6c523ca9136330603e296b23d9ffc4e132736dd7535429e86061b0303537daa8d83e56c86cfedebd80ee3d447cc032444d04a43634a8766fcf7bae323b25e413d92ace975003af5fc684347ecb557b406f050314bf5c1d7d5f15021ac8225348e84f9ad0cbab0a39cedaabac125b0415e34eb0cf18774fd5e1305ad06849bd3fc57d9f3cce511c33bc54e6180ab90a0c213075cdd37c5e31b156b76b6e1ea83cc1054b037761881c2832f4c7dce3120640966d8167fec6e1571adf03ee9070300be16c55456b53618382aaffdd20cf2fa482fe361f25d5b3b90ea0423fcfa37e72632e7898bf1be6f896d01c3c24895edb3e3ed8eac0438c1cb3bcf38319a07c0cad883a8a5c8e6d29d93dcbc3d8a0b980cc18613566b815682ddae446ecc46b4731e2c5ee9b36dac390d019755f9ca39d4602aa4de69bc960c94cec3be446debd5ab971a4c106f109aa442d1cd051cc984835d175818e42443f1dea89a09d86b71d70d9efe6f8966c9d2d47eb43f4afc82369cb49e246026e2bf5f0ae21563f28151f6094745753771acc5ace91e00d0d172c998087a3dbd441b3a4680249540a502e52860bc389a5b8ac9c0eda04a3195e7a41db0af7407f593ec31b22e7d34b1454f8611787843e5815695ecacc3238153ba31dd5b0868cf1efcf3ed6c43a9c452fc606bb4902f782a99bf09ea1c0563eb680b0275f3cc516311fb75734f4eff81c033b0f89c5d2cb30f4e936d00d18a11a39f556705ae2907a4f76adedc59faafb2ceb4819c46c22ad7a76cfd8b734ec5951e063212d529959327eacadf56cc3f64ca885e36d93d8646be0c4d6a0d93124250dc32fcfb97bff0663fe4ebd1ed5f14834a6e1cd6caf62f7e94d82d0fa25f4c42e18cf58f71dcd627ec5ebcced1fecd6c9279fc6f0ab6f72b1e065a344cd4c54080ae326cf264d077fb2a5b938dcae7d9d2fe6696008c07ffae342b8590e64edaea388229ea7d275be6223ecf3b32f45ece543c61b2a05501f1f37ca22fce46c70b0ed69b499287db21c0992b0d85109f43a096ddb7209fa8848e3e56a1213034364ecfb59afed18ba99da62c6a2422de23944886eb9de0e02ca5e748a5c79830202f0e0e0b1ce1f855a67dcee84f75fa448b7f3dc8c8f587046dd92479de11a51c0fcd2d30c64ec491a4e4a1b6265f210fc4a1ac423b59557070b8934ab9be10ceb12002050cce8848141e34d626bae819b3159a8f646c3df04b8cf8a363727aeecbb4afb4794a9e3adb9c901dcebe35f65f292e8c73643c11b698913f0c93abc64f1008f3c98ab57f7be23fdfd3ef1160efbedd113536ad8d07f3e026dad24fe2c722aa87df3491f9769fad5cae854d4a73af5bfccefbeb9b311ec105c7f792732e7b2f2111bb372755f60e0425c78e0c803648481f3f70f932917a9dd71d1919815deae8f1771fcd29ced369864990e06ee92b3064bfcf3be3cf4c140e41d38da79c4e2ac7df930e99eaa89df54da9b89872f39f51a2de9528d9ff12928153555cf43e4cc5ccd2e348079d87764e7d59bc3f4557da8548aebdaa588d2e3161a70380f30f5426ded8bfcfa8150aed7f196b1e4cb5145b61f558e5985679b6105f2f613e92246bc71cdc95779856322", 0x1000}, {&(0x7f0000001740)="286ca8c10a78bb65eeb65b2ecb478192452b41fab5ef6f11d54c0a3c72bfa0d284d8f4a878702d97985522234cb545ddb468d01ab769278e9d13f3b6e1cae0f9dfda0b74dc97a167641fca8e166da30032128d2e6e83a47fff0cfc3348a1c7f9d85d6183cc94d818a42d2d976483c4efd28ad18973a9b44d61f3585a0f01770175e66e0e11543f8af6fb9b86133d97298c3a867b0a5e16aa2fa8f186d0037ba095eee7fd9c1968b4c0a66d4bc58a88f3", 0xb0}, {&(0x7f0000001800)="73cd4af3e43d7842331d503ec2aab6edc6e516121aea8beb7aa84cc2961ca3439562ee654da148ca00c54f5ef8a7c90f0345374c008656fad4b0d9e27791969a70ca1086317dde7cc740a9bce6d39f787ab6024e5f11f55ba0b5e26b9b8434d094", 0x61}, {&(0x7f0000001880)="0581501b4d3fc8919b5668e1d751bcfaf84580e7eb495ed2a0f3d5a5dc2cf9b110e5fac0d0a5e8e69f86abae94f9bb22f618d44a1b64cd862af4276eb4578a516b69400badee7b6036e8fa49d1f08aed2e92efd536f0ad92c78815f50ddac452fb16a26c1ead737fb2c0e6de3c614429f24fcfa17d593b74a2aaf3d9b82da8be395fc1e3ef5aba778ce958294435bd7003bb8c276bad03eb2e92a60a9b701178c8950303e62c8d8eed77bdbd588360730a8e1bea14c4b5651c7139cd5fc3b7b3ff5082f08589af", 0xc7}], 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002001d00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x4008884}}], 0x1, 0xc000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x1d}, 0x10) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x4}, &(0x7f0000000040)) 03:41:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) [ 1039.699344][T16740] x_tables: duplicate underflow at hook 1 03:41:39 executing program 0: unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='O'], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001380)={0x0, ""/115}, 0x319abb17, 0x0, 0x4800) 03:41:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x388, 0x0, 0xe4, 0xe4, 0x2a8, 0x2a8, 0x2a8, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@random="56c2b40a4330"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'veth1\x00'}, 0xbc, 0xe4}, @unspec=@MARK={0x28}}, {{@arp={@multicast2, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x2}}, {{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ip6_vti0\x00'}, 0xbc, 0xe4}, @unspec=@MARK={0x28}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4) 03:41:40 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 03:41:40 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000200)={'netdevsim0\x00', 0x7f}) 03:41:40 executing program 4: io_setup(0xab2, &(0x7f00000000c0)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) io_submit(r0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 03:41:40 executing program 5: sysfs$1(0x1, &(0x7f0000000100)='sysfs\x00') [ 1040.643272][T16755] x_tables: duplicate underflow at hook 1 03:41:40 executing program 0: unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='O'], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001380)={0x0, ""/115}, 0x319abb17, 0x0, 0x4800) 03:41:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x388, 0x0, 0xe4, 0xe4, 0x2a8, 0x2a8, 0x2a8, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@random="56c2b40a4330"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'veth1\x00'}, 0xbc, 0xe4}, @unspec=@MARK={0x28}}, {{@arp={@multicast2, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x2}}, {{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ip6_vti0\x00'}, 0xbc, 0xe4}, @unspec=@MARK={0x28}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4) 03:41:40 executing program 4: io_setup(0xab2, &(0x7f00000000c0)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) io_submit(r0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 03:41:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001802000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000000060000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000080)) 03:41:41 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000200)={'netdevsim0\x00', 0x7f}) 03:41:41 executing program 5: sysfs$1(0x1, &(0x7f0000000100)='sysfs\x00') 03:41:41 executing program 0: unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='O'], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001380)={0x0, ""/115}, 0x319abb17, 0x0, 0x4800) [ 1041.327002][T16767] x_tables: duplicate underflow at hook 1 03:41:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x54}}, 0x0) 03:41:41 executing program 4: io_setup(0xab2, &(0x7f00000000c0)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) io_submit(r0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 03:41:41 executing program 5: sysfs$1(0x1, &(0x7f0000000100)='sysfs\x00') 03:41:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) write(r2, &(0x7f0000000100), 0xfffffe5d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r3, 0x3a, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 03:41:41 executing program 0: syz_clone(0x60089000, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)="3ab503000a0fa1d5f87be11ae0cbb01b286ee427f596b9258734edf02c1f38b5ac") syz_clone(0x40000000, &(0x7f0000000000)="0f0c8aa4e29c1ad4b18882b5f604323c99a3911688ef1721b2b8ace8459e7e6247b74bff9eb5b82c364092716c7b99de6795e95486092886a2b6669fcfd91f7d8f17cd2142dfe9f805a3917154270a0db82389cd1834feb34f999408cb700d424092596b02a587395cfe30f2991933881219710b1abf9af983a203606934e4aeb489884fab0448fe31cc9835565ca51efa515b5a786471a425042360b27e5e3e772152ae1acf16b181a0004201a5e64f449c5c9806567058c1ff0bf8204e68475e740790b7608ec73dbe51f6e0e34b276c42cdad4f5070d74dcb52a667dc9263eb9c05c88a483a5c221e22ed", 0xec, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2042e153655ddc0e84008790c393c996fa742ac5ea0eefce6985046df0d5eb94ed52edbffa86b876a97a935c") 03:41:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x54}}, 0x0) 03:41:42 executing program 4: io_setup(0xab2, &(0x7f00000000c0)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) io_submit(r0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 03:41:42 executing program 5: sysfs$1(0x1, &(0x7f0000000100)='sysfs\x00') 03:41:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x54}}, 0x0) 03:41:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:42 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x54}}, 0x0) 03:41:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) write(r2, &(0x7f0000000100), 0xfffffe5d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r3, 0x3a, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 03:41:43 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:44 executing program 0: syz_clone(0x60089000, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)="3ab503000a0fa1d5f87be11ae0cbb01b286ee427f596b9258734edf02c1f38b5ac") syz_clone(0x40000000, &(0x7f0000000000)="0f0c8aa4e29c1ad4b18882b5f604323c99a3911688ef1721b2b8ace8459e7e6247b74bff9eb5b82c364092716c7b99de6795e95486092886a2b6669fcfd91f7d8f17cd2142dfe9f805a3917154270a0db82389cd1834feb34f999408cb700d424092596b02a587395cfe30f2991933881219710b1abf9af983a203606934e4aeb489884fab0448fe31cc9835565ca51efa515b5a786471a425042360b27e5e3e772152ae1acf16b181a0004201a5e64f449c5c9806567058c1ff0bf8204e68475e740790b7608ec73dbe51f6e0e34b276c42cdad4f5070d74dcb52a667dc9263eb9c05c88a483a5c221e22ed", 0xec, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2042e153655ddc0e84008790c393c996fa742ac5ea0eefce6985046df0d5eb94ed52edbffa86b876a97a935c") 03:41:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:44 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 03:41:44 executing program 1: r0 = epoll_create(0xffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0) 03:41:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) write(r2, &(0x7f0000000100), 0xfffffe5d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r3, 0x3a, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 03:41:44 executing program 1: mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x140173, 0xffffffffffffffff, 0x0) 03:41:44 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 03:41:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r3}, 0x10) close_range(r1, r3, 0x0) 03:41:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f000000bd80)={&(0x7f0000000440)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=@raw=[@generic={0xe9, 0x4, 0x9, 0x5, 0x7}], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 03:41:46 executing program 1: mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x140173, 0xffffffffffffffff, 0x0) 03:41:47 executing program 0: syz_clone(0x60089000, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)="3ab503000a0fa1d5f87be11ae0cbb01b286ee427f596b9258734edf02c1f38b5ac") syz_clone(0x40000000, &(0x7f0000000000)="0f0c8aa4e29c1ad4b18882b5f604323c99a3911688ef1721b2b8ace8459e7e6247b74bff9eb5b82c364092716c7b99de6795e95486092886a2b6669fcfd91f7d8f17cd2142dfe9f805a3917154270a0db82389cd1834feb34f999408cb700d424092596b02a587395cfe30f2991933881219710b1abf9af983a203606934e4aeb489884fab0448fe31cc9835565ca51efa515b5a786471a425042360b27e5e3e772152ae1acf16b181a0004201a5e64f449c5c9806567058c1ff0bf8204e68475e740790b7608ec73dbe51f6e0e34b276c42cdad4f5070d74dcb52a667dc9263eb9c05c88a483a5c221e22ed", 0xec, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2042e153655ddc0e84008790c393c996fa742ac5ea0eefce6985046df0d5eb94ed52edbffa86b876a97a935c") 03:41:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) write(r2, &(0x7f0000000100), 0xfffffe5d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r3, 0x3a, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 03:41:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) write(r0, &(0x7f0000000440), 0x0) poll(&(0x7f0000000000)=[{r0, 0x404}], 0x1, 0x1000) 03:41:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 03:41:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f000000bd80)={&(0x7f0000000440)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=@raw=[@generic={0xe9, 0x4, 0x9, 0x5, 0x7}], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 03:41:47 executing program 1: mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x140173, 0xffffffffffffffff, 0x0) 03:41:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 03:41:48 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f000000bd80)={&(0x7f0000000440)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=@raw=[@generic={0xe9, 0x4, 0x9, 0x5, 0x7}], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 03:41:48 executing program 1: mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x140173, 0xffffffffffffffff, 0x0) 03:41:48 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f000000bd80)={&(0x7f0000000440)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=@raw=[@generic={0xe9, 0x4, 0x9, 0x5, 0x7}], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 03:41:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) write(r0, &(0x7f0000000440), 0x0) poll(&(0x7f0000000000)=[{r0, 0x404}], 0x1, 0x1000) 03:41:49 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) write(r0, &(0x7f0000000440), 0x0) poll(&(0x7f0000000000)=[{r0, 0x404}], 0x1, 0x1000) 03:41:50 executing program 0: syz_clone(0x60089000, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)="3ab503000a0fa1d5f87be11ae0cbb01b286ee427f596b9258734edf02c1f38b5ac") syz_clone(0x40000000, &(0x7f0000000000)="0f0c8aa4e29c1ad4b18882b5f604323c99a3911688ef1721b2b8ace8459e7e6247b74bff9eb5b82c364092716c7b99de6795e95486092886a2b6669fcfd91f7d8f17cd2142dfe9f805a3917154270a0db82389cd1834feb34f999408cb700d424092596b02a587395cfe30f2991933881219710b1abf9af983a203606934e4aeb489884fab0448fe31cc9835565ca51efa515b5a786471a425042360b27e5e3e772152ae1acf16b181a0004201a5e64f449c5c9806567058c1ff0bf8204e68475e740790b7608ec73dbe51f6e0e34b276c42cdad4f5070d74dcb52a667dc9263eb9c05c88a483a5c221e22ed", 0xec, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2042e153655ddc0e84008790c393c996fa742ac5ea0eefce6985046df0d5eb94ed52edbffa86b876a97a935c") 03:41:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002240)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4101, 0x1005}], 0x1, 0x2, 0x0) 03:41:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f000000bd80)={&(0x7f0000000440)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=@raw=[@generic={0xe9, 0x4, 0x9, 0x5, 0x7}], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 03:41:50 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) write(r0, &(0x7f0000000440), 0x0) poll(&(0x7f0000000000)=[{r0, 0x404}], 0x1, 0x1000) 03:41:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) write(r0, &(0x7f0000000440), 0x0) poll(&(0x7f0000000000)=[{r0, 0x404}], 0x1, 0x1000) 03:41:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) connect$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000010300000000", @ANYRES32=r1], 0xa8}}, {{&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{0x0}, {&(0x7f00000019c0)="e9bb31c9b782a8431343c21a98eb29fc8c7d528c4b3b5a1742d1dd1186e57325dac7aafc6f90be0ac73deb65b64e708fc333eacc2266f0f9773fe68ae999948670bd815c8d9f661c129fc73eef0ed0f928fce4856ead86ddea186e4c7fb750617aa9c07e8a86eba2a0de47403b2121e5d41172a3018a35eee92bdbe0330ce083f10adfa046c31fa684a0c5e00da363239dce367bc6c8b648951b52ceeea4b7fd16e25250602cc56e1cc3c5cc2b0fd77ad16c8e323cd19e027b07e3", 0xbb}, {0x0}, {0x0}, {&(0x7f0000001cc0)="6430a554b676172171e00461a9ba59ec9b42c834599c7b284e9ef75fabb471c4810ab97a7a52b8d464075c66f8908b7137f9176eb3ca594012aac4edddb9ab80014b190e4815ef35f2df9c940393f0a266317db8c98511b203247bf1fbf018c326aad7381d54bdaab8483237e4935b7fc0534c2ffb19faf042a17f9d8f554e18b2acf89cd9d246a0ab50340fa143b794f2ed28c3d4f3081e66f10f4a5faaa760a9caaa3f5ac9baa38dae71cd3b6816f3f767e6fc3f3bfa9d2e18017c8f5e3eb42715e4e74bc18aa34fc585ddbef04ad0", 0xd0}, {0x0}, {&(0x7f0000001e40)="d00c197c7c14168099897dd03b7ad99c2013a6fa8ea69c2d730665e3118feca77be495942cf3", 0x26}, {&(0x7f0000001f00)="60e14ff60cfbad91043277ebdd060602b7cdf0b0681d75a5fb3ded37a019847c9ce65d6f4f54c54e2edf659e3449a4ca24aa22ffe4d0d7819a96ab80221025f2cd022960046a08d1f8185c16894c02abd257056a6216653beaee23b744914138f0a906589ceb33c6f7eefa4602bb48333ab81afb444655c2bb698e9f0fe2424d09c40cdf094174c91c12af177d32d4af1f3dfd2a2f6fb03d3110544140", 0x9d}], 0x8, 0x0, 0x0, 0x40}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002140)="9d2d075f91004d5da7c4a643a00f7cf10d8537b6859cea2645f0583b5d041f78f560ca61117db4f9bba4eeb51c9d", 0x2e}], 0x1, &(0x7f0000002340), 0x0, 0x34}}], 0x3, 0x4040010) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 03:41:50 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) write(r0, &(0x7f0000000440), 0x0) poll(&(0x7f0000000000)=[{r0, 0x404}], 0x1, 0x1000) 03:41:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f000000bd80)={&(0x7f0000000440)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=@raw=[@generic={0xe9, 0x4, 0x9, 0x5, 0x7}], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 03:41:51 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) write(r0, &(0x7f0000000440), 0x0) poll(&(0x7f0000000000)=[{r0, 0x404}], 0x1, 0x1000) 03:41:51 executing program 3: syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000020c0)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000002140)) 03:41:51 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r1, 0x0, 0x2, 0x0}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f000000bd80)={&(0x7f0000000440)='./file0\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000bf80)={0x18, 0x1, &(0x7f000000bdc0)=@raw=[@generic={0xe9, 0x4, 0x9, 0x5, 0x7}], &(0x7f000000be00)='GPL\x00', 0xe553, 0x42, &(0x7f000000be40)=""/66, 0x40f00, 0x4, '\x00', r7, 0x0, r3, 0x8, &(0x7f000000bec0)={0x2, 0x5}, 0x8, 0x10, &(0x7f000000bf00)={0x1, 0x9, 0x5, 0x3982}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000bf40)=[r3]}, 0x80) r8 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000340)={@local, 0x44, r5}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xc4, 0x10, 0x401, 0x5f837, 0x8000007, {0xa, 0x0, 0x0, 0x0, 0x22020, 0x52a08}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0xc4}}, 0x0) 03:41:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000b0000000b41db"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1051.951029][T16909] loop3: detected capacity change from 0 to 8 [ 1051.994817][T16909] VFS: unable to find oldfs superblock on device loop3 [ 1052.432141][T16898] not chained 1540000 origins [ 1052.437048][T16898] CPU: 1 PID: 16898 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1052.448641][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.458739][T16898] Call Trace: [ 1052.462047][T16898] [ 1052.465015][T16898] dump_stack_lvl+0x200/0x28c [ 1052.469754][T16898] dump_stack+0x29/0x2c [ 1052.473961][T16898] kmsan_internal_chain_origin+0x78/0x120 [ 1052.479749][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1052.485886][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1052.491061][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1052.496946][T16898] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1052.502558][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1052.507729][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1052.513602][T16898] ? should_fail+0x79/0x9c0 [ 1052.518139][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1052.523307][T16898] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1052.529612][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1052.535749][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1052.540914][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1052.546783][T16898] __msan_chain_origin+0xbd/0x140 [ 1052.551871][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1052.557053][T16898] get_compat_msghdr+0x10c/0x280 [ 1052.562044][T16898] ? do_recvmmsg+0x7c9/0x1200 [ 1052.566778][T16898] ___sys_recvmsg+0x289/0xb40 [ 1052.571519][T16898] ? __schedule+0x176c/0x21c0 [ 1052.576249][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1052.581420][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1052.587286][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1052.592466][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1052.598334][T16898] do_recvmmsg+0x7c9/0x1200 [ 1052.602901][T16898] ? filter_irq_stacks+0xb9/0x230 [ 1052.607988][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1052.613136][T16898] ? __sys_recvmmsg+0xb9/0x6f0 [ 1052.617958][T16898] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1052.624529][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1052.629283][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1052.635682][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1052.640749][T16898] do_fast_syscall_32+0x33/0x70 [ 1052.645652][T16898] do_SYSENTER_32+0x1b/0x20 [ 1052.650199][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1052.653424][T10296] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1052.656572][T16898] RIP: 0023:0xf7f83549 [ 1052.656607][T16898] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1052.656654][T16898] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1052.656701][T16898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1052.656736][T16898] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1052.656766][T16898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1052.720346][T16898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1052.728351][T16898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1052.736367][T16898] [ 1052.744283][T16898] Uninit was stored to memory at: [ 1052.749400][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1052.762622][T16898] get_compat_msghdr+0x10c/0x280 [ 1052.767645][T16898] ___sys_recvmsg+0x289/0xb40 [ 1052.772520][T16898] do_recvmmsg+0x7c9/0x1200 [ 1052.777077][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1052.781931][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1052.788326][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1052.793537][T16898] do_fast_syscall_32+0x33/0x70 [ 1052.798437][T16898] do_SYSENTER_32+0x1b/0x20 [ 1052.803116][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1052.809499][T16898] [ 1052.811965][T16898] Uninit was stored to memory at: [ 1052.817061][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1052.822359][T16898] get_compat_msghdr+0x10c/0x280 [ 1052.827355][T16898] ___sys_recvmsg+0x289/0xb40 [ 1052.832225][T16898] do_recvmmsg+0x7c9/0x1200 [ 1052.836810][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1052.841543][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1052.848077][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1052.853292][T16898] do_fast_syscall_32+0x33/0x70 [ 1052.858199][T16898] do_SYSENTER_32+0x1b/0x20 [ 1052.862890][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1052.869277][T16898] [ 1052.871763][T16898] Uninit was stored to memory at: [ 1052.876878][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1052.882177][T16898] get_compat_msghdr+0x10c/0x280 [ 1052.887173][T16898] ___sys_recvmsg+0x289/0xb40 [ 1052.892043][T16898] do_recvmmsg+0x7c9/0x1200 [ 1052.896604][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1052.901426][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1052.907968][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1052.913149][T16898] do_fast_syscall_32+0x33/0x70 [ 1052.918052][T16898] do_SYSENTER_32+0x1b/0x20 [ 1052.922742][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1052.929130][T16898] [ 1052.931466][T16898] Uninit was stored to memory at: [ 1052.936701][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1052.942085][T16898] get_compat_msghdr+0x10c/0x280 [ 1052.947081][T16898] ___sys_recvmsg+0x289/0xb40 [ 1052.951948][T16898] do_recvmmsg+0x7c9/0x1200 [ 1052.956509][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1052.961234][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1052.967759][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1052.972939][T16898] do_fast_syscall_32+0x33/0x70 [ 1052.977831][T16898] do_SYSENTER_32+0x1b/0x20 [ 1052.982517][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1052.988901][T16898] [ 1052.991235][T16898] Uninit was stored to memory at: [ 1052.996569][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1053.001837][T16898] get_compat_msghdr+0x10c/0x280 [ 1053.006831][T16898] ___sys_recvmsg+0x289/0xb40 [ 1053.011563][T16898] do_recvmmsg+0x7c9/0x1200 [ 1053.016408][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1053.021145][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1053.027768][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1053.032959][T16898] do_fast_syscall_32+0x33/0x70 [ 1053.037879][T16898] do_SYSENTER_32+0x1b/0x20 [ 1053.042610][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1053.049022][T16898] [ 1053.051359][T16898] Uninit was stored to memory at: [ 1053.056700][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1053.061978][T16898] get_compat_msghdr+0x10c/0x280 [ 1053.066973][T16898] ___sys_recvmsg+0x289/0xb40 [ 1053.071911][T16898] do_recvmmsg+0x7c9/0x1200 [ 1053.076475][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1053.081206][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1053.087850][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1053.093064][T16898] do_fast_syscall_32+0x33/0x70 [ 1053.097967][T16898] do_SYSENTER_32+0x1b/0x20 [ 1053.102708][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1053.109092][T16898] [ 1053.111449][T16898] Uninit was stored to memory at: [ 1053.116777][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1053.122045][T16898] get_compat_msghdr+0x10c/0x280 [ 1053.127041][T16898] ___sys_recvmsg+0x289/0xb40 [ 1053.131952][T16898] do_recvmmsg+0x7c9/0x1200 [ 1053.133059][T10296] usb 6-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1053.136506][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1053.147112][T10296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.150387][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1053.164959][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1053.170036][T16898] do_fast_syscall_32+0x33/0x70 [ 1053.175148][T16898] do_SYSENTER_32+0x1b/0x20 [ 1053.179702][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1053.186283][T16898] [ 1053.188626][T16898] Local variable msg_sys created at: [ 1053.194135][T16898] do_recvmmsg+0xc9/0x1200 [ 1053.198612][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1053.333009][T10296] usb 6-1: config 0 descriptor?? [ 1053.390212][T10296] gspca_main: se401-2.14.0 probing 047d:5001 [ 1053.898269][T16898] not chained 1550000 origins [ 1053.903409][T16898] CPU: 0 PID: 16898 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1053.915003][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.925092][T16898] Call Trace: [ 1053.928398][T16898] [ 1053.931342][T16898] dump_stack_lvl+0x200/0x28c [ 1053.936076][T16898] dump_stack+0x29/0x2c [ 1053.940275][T16898] kmsan_internal_chain_origin+0x78/0x120 [ 1053.946054][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1053.952176][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1053.957362][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1053.963235][T16898] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1053.968847][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1053.974015][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1053.979881][T16898] ? should_fail+0x79/0x9c0 [ 1053.984423][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1053.989585][T16898] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1053.995883][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1054.002009][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1054.007171][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1054.013042][T16898] __msan_chain_origin+0xbd/0x140 [ 1054.018120][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1054.023306][T16898] get_compat_msghdr+0x10c/0x280 [ 1054.028302][T16898] ? do_recvmmsg+0x7c9/0x1200 [ 1054.033036][T16898] ___sys_recvmsg+0x289/0xb40 [ 1054.037776][T16898] ? __schedule+0x176c/0x21c0 [ 1054.042510][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1054.047676][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1054.053545][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1054.058713][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1054.064580][T16898] do_recvmmsg+0x7c9/0x1200 [ 1054.069135][T16898] ? filter_irq_stacks+0xb9/0x230 [ 1054.074232][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1054.079408][T16898] ? __sys_recvmmsg+0xb9/0x6f0 [ 1054.084230][T16898] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.090797][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.095549][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.101946][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1054.107027][T16898] do_fast_syscall_32+0x33/0x70 [ 1054.111927][T16898] do_SYSENTER_32+0x1b/0x20 [ 1054.116477][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1054.122860][T16898] RIP: 0023:0xf7f83549 [ 1054.126951][T16898] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1054.146609][T16898] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1054.155074][T16898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1054.163080][T16898] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1054.171084][T16898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1054.179086][T16898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1054.187090][T16898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1054.195105][T16898] [ 1054.200650][T16898] Uninit was stored to memory at: [ 1054.206094][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1054.211259][T16898] get_compat_msghdr+0x10c/0x280 [ 1054.216352][T16898] ___sys_recvmsg+0x289/0xb40 [ 1054.221106][T16898] do_recvmmsg+0x7c9/0x1200 [ 1054.225756][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.230484][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.236985][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1054.242155][T16898] do_fast_syscall_32+0x33/0x70 [ 1054.247052][T16898] do_SYSENTER_32+0x1b/0x20 [ 1054.251599][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1054.258148][T16898] [ 1054.260477][T16898] Uninit was stored to memory at: [ 1054.265679][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1054.270866][T16898] get_compat_msghdr+0x10c/0x280 [ 1054.275954][T16898] ___sys_recvmsg+0x289/0xb40 [ 1054.280682][T16898] do_recvmmsg+0x7c9/0x1200 [ 1054.285335][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.290073][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.296556][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1054.301722][T16898] do_fast_syscall_32+0x33/0x70 [ 1054.306617][T16898] do_SYSENTER_32+0x1b/0x20 [ 1054.311160][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1054.317638][T16898] [ 1054.319982][T16898] Uninit was stored to memory at: [ 1054.325165][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1054.330326][T16898] get_compat_msghdr+0x10c/0x280 [ 1054.335414][T16898] ___sys_recvmsg+0x289/0xb40 [ 1054.340144][T16898] do_recvmmsg+0x7c9/0x1200 [ 1054.344799][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.349532][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.356053][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1054.361132][T16898] do_fast_syscall_32+0x33/0x70 [ 1054.366155][T16898] do_SYSENTER_32+0x1b/0x20 [ 1054.370700][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1054.377183][T16898] [ 1054.379516][T16898] Uninit was stored to memory at: [ 1054.384709][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1054.389868][T16898] get_compat_msghdr+0x10c/0x280 [ 1054.394965][T16898] ___sys_recvmsg+0x289/0xb40 [ 1054.399695][T16898] do_recvmmsg+0x7c9/0x1200 [ 1054.404354][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.409125][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.415657][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1054.420754][T16898] do_fast_syscall_32+0x33/0x70 [ 1054.425761][T16898] do_SYSENTER_32+0x1b/0x20 [ 1054.430329][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1054.436834][T16898] [ 1054.439175][T16898] Uninit was stored to memory at: [ 1054.444432][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1054.449596][T16898] get_compat_msghdr+0x10c/0x280 [ 1054.454748][T16898] ___sys_recvmsg+0x289/0xb40 [ 1054.459483][T16898] do_recvmmsg+0x7c9/0x1200 [ 1054.464190][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.468925][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.475486][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1054.480571][T16898] do_fast_syscall_32+0x33/0x70 [ 1054.485637][T16898] do_SYSENTER_32+0x1b/0x20 [ 1054.490195][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1054.496749][T16898] [ 1054.499086][T16898] Uninit was stored to memory at: [ 1054.504347][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1054.509517][T16898] get_compat_msghdr+0x10c/0x280 [ 1054.514672][T16898] ___sys_recvmsg+0x289/0xb40 [ 1054.519407][T16898] do_recvmmsg+0x7c9/0x1200 [ 1054.524112][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.528836][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.535333][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1054.540414][T16898] do_fast_syscall_32+0x33/0x70 [ 1054.545478][T16898] do_SYSENTER_32+0x1b/0x20 [ 1054.550023][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1054.556564][T16898] [ 1054.558899][T16898] Uninit was stored to memory at: [ 1054.564153][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1054.569315][T16898] get_compat_msghdr+0x10c/0x280 [ 1054.574458][T16898] ___sys_recvmsg+0x289/0xb40 [ 1054.579182][T16898] do_recvmmsg+0x7c9/0x1200 [ 1054.583905][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.588637][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1054.595188][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1054.600260][T16898] do_fast_syscall_32+0x33/0x70 [ 1054.605304][T16898] do_SYSENTER_32+0x1b/0x20 [ 1054.609852][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1054.616397][T16898] [ 1054.618739][T16898] Local variable msg_sys created at: [ 1054.624204][T16898] do_recvmmsg+0xc9/0x1200 [ 1054.628678][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1054.636291][T10296] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 1054.667649][T10296] usb 6-1: USB disconnect, device number 25 [ 1055.271493][T16898] not chained 1560000 origins [ 1055.276848][T16898] CPU: 0 PID: 16898 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1055.288442][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1055.298529][T16898] Call Trace: [ 1055.301827][T16898] [ 1055.304774][T16898] dump_stack_lvl+0x200/0x28c [ 1055.309503][T16898] dump_stack+0x29/0x2c [ 1055.313695][T16898] kmsan_internal_chain_origin+0x78/0x120 [ 1055.319470][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1055.325586][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1055.330757][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1055.336622][T16898] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1055.342219][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1055.347399][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1055.353265][T16898] ? should_fail+0x79/0x9c0 [ 1055.357802][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1055.362963][T16898] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1055.369257][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1055.375376][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1055.380541][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1055.386402][T16898] __msan_chain_origin+0xbd/0x140 [ 1055.391481][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1055.396665][T16898] get_compat_msghdr+0x10c/0x280 [ 1055.401662][T16898] ? do_recvmmsg+0x7c9/0x1200 [ 1055.406401][T16898] ___sys_recvmsg+0x289/0xb40 [ 1055.411139][T16898] ? __schedule+0x176c/0x21c0 [ 1055.415867][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1055.421031][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1055.426892][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1055.432055][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1055.437924][T16898] do_recvmmsg+0x7c9/0x1200 [ 1055.442482][T16898] ? filter_irq_stacks+0xb9/0x230 [ 1055.447572][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1055.452745][T16898] ? __sys_recvmmsg+0xb9/0x6f0 [ 1055.457571][T16898] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.464135][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1055.468879][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.475378][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1055.480454][T16898] do_fast_syscall_32+0x33/0x70 [ 1055.485349][T16898] do_SYSENTER_32+0x1b/0x20 [ 1055.489893][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1055.496270][T16898] RIP: 0023:0xf7f83549 [ 1055.500359][T16898] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1055.520015][T16898] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1055.528480][T16898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1055.536484][T16898] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1055.544486][T16898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1055.552483][T16898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1055.560483][T16898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1055.568495][T16898] [ 1055.571848][T16898] Uninit was stored to memory at: [ 1055.576944][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1055.582288][T16898] get_compat_msghdr+0x10c/0x280 [ 1055.587275][T16898] ___sys_recvmsg+0x289/0xb40 [ 1055.592131][T16898] do_recvmmsg+0x7c9/0x1200 [ 1055.596683][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1055.601425][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.607927][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1055.613107][T16898] do_fast_syscall_32+0x33/0x70 [ 1055.618006][T16898] do_SYSENTER_32+0x1b/0x20 [ 1055.622648][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1055.629024][T16898] [ 1055.631352][T16898] Uninit was stored to memory at: [ 1055.636555][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1055.641803][T16898] get_compat_msghdr+0x10c/0x280 [ 1055.646790][T16898] ___sys_recvmsg+0x289/0xb40 [ 1055.651518][T16898] do_recvmmsg+0x7c9/0x1200 [ 1055.656183][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1055.660911][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.667478][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1055.672653][T16898] do_fast_syscall_32+0x33/0x70 [ 1055.677552][T16898] do_SYSENTER_32+0x1b/0x20 [ 1055.682244][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1055.688707][T16898] [ 1055.691036][T16898] Uninit was stored to memory at: [ 1055.696290][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1055.701456][T16898] get_compat_msghdr+0x10c/0x280 [ 1055.706607][T16898] ___sys_recvmsg+0x289/0xb40 [ 1055.711339][T16898] do_recvmmsg+0x7c9/0x1200 [ 1055.716064][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1055.720788][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.727356][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1055.732536][T16898] do_fast_syscall_32+0x33/0x70 [ 1055.737435][T16898] do_SYSENTER_32+0x1b/0x20 [ 1055.742121][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1055.748501][T16898] [ 1055.750829][T16898] Uninit was stored to memory at: [ 1055.756085][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1055.761242][T16898] get_compat_msghdr+0x10c/0x280 [ 1055.766403][T16898] ___sys_recvmsg+0x289/0xb40 [ 1055.771135][T16898] do_recvmmsg+0x7c9/0x1200 [ 1055.775865][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1055.780597][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.787153][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1055.792320][T16898] do_fast_syscall_32+0x33/0x70 [ 1055.797221][T16898] do_SYSENTER_32+0x1b/0x20 [ 1055.801897][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1055.808273][T16898] [ 1055.810605][T16898] Uninit was stored to memory at: [ 1055.815876][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1055.821038][T16898] get_compat_msghdr+0x10c/0x280 [ 1055.826196][T16898] ___sys_recvmsg+0x289/0xb40 [ 1055.830920][T16898] do_recvmmsg+0x7c9/0x1200 [ 1055.835644][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1055.840366][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.846914][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1055.852084][T16898] do_fast_syscall_32+0x33/0x70 [ 1055.856974][T16898] do_SYSENTER_32+0x1b/0x20 [ 1055.861511][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1055.868060][T16898] [ 1055.870395][T16898] Uninit was stored to memory at: [ 1055.875643][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1055.880795][T16898] get_compat_msghdr+0x10c/0x280 [ 1055.885947][T16898] ___sys_recvmsg+0x289/0xb40 [ 1055.890678][T16898] do_recvmmsg+0x7c9/0x1200 [ 1055.895402][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1055.900126][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.906674][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1055.911864][T16898] do_fast_syscall_32+0x33/0x70 [ 1055.916761][T16898] do_SYSENTER_32+0x1b/0x20 [ 1055.921305][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1055.927853][T16898] [ 1055.930183][T16898] Uninit was stored to memory at: [ 1055.935453][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1055.940610][T16898] get_compat_msghdr+0x10c/0x280 [ 1055.945759][T16898] ___sys_recvmsg+0x289/0xb40 [ 1055.950489][T16898] do_recvmmsg+0x7c9/0x1200 [ 1055.955212][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1055.959939][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1055.966502][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1055.971578][T16898] do_fast_syscall_32+0x33/0x70 [ 1055.976658][T16898] do_SYSENTER_32+0x1b/0x20 [ 1055.981205][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1055.987748][T16898] [ 1055.990081][T16898] Local variable msg_sys created at: [ 1055.995540][T16898] do_recvmmsg+0xc9/0x1200 [ 1056.000006][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.140634][T16898] not chained 1570000 origins [ 1057.145712][T16898] CPU: 0 PID: 16898 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1057.157305][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.167390][T16898] Call Trace: [ 1057.170692][T16898] [ 1057.173636][T16898] dump_stack_lvl+0x200/0x28c [ 1057.178363][T16898] dump_stack+0x29/0x2c [ 1057.182559][T16898] kmsan_internal_chain_origin+0x78/0x120 [ 1057.188333][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1057.194458][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1057.199620][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1057.205485][T16898] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1057.211083][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1057.216242][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1057.222106][T16898] ? should_fail+0x79/0x9c0 [ 1057.226645][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1057.231804][T16898] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1057.238095][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1057.244216][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1057.249383][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1057.255250][T16898] __msan_chain_origin+0xbd/0x140 [ 1057.260326][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1057.265510][T16898] get_compat_msghdr+0x10c/0x280 [ 1057.270498][T16898] ? do_recvmmsg+0x7c9/0x1200 [ 1057.275230][T16898] ___sys_recvmsg+0x289/0xb40 [ 1057.279965][T16898] ? __schedule+0x176c/0x21c0 [ 1057.284727][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1057.289892][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1057.295752][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1057.300911][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1057.306776][T16898] do_recvmmsg+0x7c9/0x1200 [ 1057.311332][T16898] ? filter_irq_stacks+0xb9/0x230 [ 1057.316431][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1057.321603][T16898] ? __sys_recvmmsg+0xb9/0x6f0 [ 1057.326419][T16898] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.332979][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.337721][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.344118][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1057.349194][T16898] do_fast_syscall_32+0x33/0x70 [ 1057.354095][T16898] do_SYSENTER_32+0x1b/0x20 [ 1057.358637][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1057.365037][T16898] RIP: 0023:0xf7f83549 [ 1057.369130][T16898] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1057.388785][T16898] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1057.397246][T16898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1057.405350][T16898] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1057.413357][T16898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1057.421366][T16898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1057.429375][T16898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1057.437400][T16898] [ 1057.442452][T16898] Uninit was stored to memory at: [ 1057.447560][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1057.453210][T16898] get_compat_msghdr+0x10c/0x280 [ 1057.458210][T16898] ___sys_recvmsg+0x289/0xb40 [ 1057.463050][T16898] do_recvmmsg+0x7c9/0x1200 [ 1057.467607][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.472437][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.478820][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1057.483998][T16898] do_fast_syscall_32+0x33/0x70 [ 1057.488891][T16898] do_SYSENTER_32+0x1b/0x20 [ 1057.493599][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1057.499977][T16898] [ 1057.502475][T16898] Uninit was stored to memory at: [ 1057.507571][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1057.512891][T16898] get_compat_msghdr+0x10c/0x280 [ 1057.517879][T16898] ___sys_recvmsg+0x289/0xb40 [ 1057.522765][T16898] do_recvmmsg+0x7c9/0x1200 [ 1057.527334][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.532221][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.538607][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1057.543823][T16898] do_fast_syscall_32+0x33/0x70 [ 1057.548712][T16898] do_SYSENTER_32+0x1b/0x20 [ 1057.553352][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1057.559739][T16898] [ 1057.562213][T16898] Uninit was stored to memory at: [ 1057.567309][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1057.572667][T16898] get_compat_msghdr+0x10c/0x280 [ 1057.577650][T16898] ___sys_recvmsg+0x289/0xb40 [ 1057.582530][T16898] do_recvmmsg+0x7c9/0x1200 [ 1057.587084][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.591952][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.598335][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1057.603505][T16898] do_fast_syscall_32+0x33/0x70 [ 1057.608400][T16898] do_SYSENTER_32+0x1b/0x20 [ 1057.613101][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1057.619479][T16898] [ 1057.621950][T16898] Uninit was stored to memory at: [ 1057.627049][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1057.632511][T16898] get_compat_msghdr+0x10c/0x280 [ 1057.637504][T16898] ___sys_recvmsg+0x289/0xb40 [ 1057.642336][T16898] do_recvmmsg+0x7c9/0x1200 [ 1057.646897][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.651618][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.658200][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1057.663369][T16898] do_fast_syscall_32+0x33/0x70 [ 1057.668265][T16898] do_SYSENTER_32+0x1b/0x20 [ 1057.672971][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1057.679349][T16898] [ 1057.681768][T16898] Uninit was stored to memory at: [ 1057.687207][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1057.692519][T16898] get_compat_msghdr+0x10c/0x280 [ 1057.697503][T16898] ___sys_recvmsg+0x289/0xb40 [ 1057.702327][T16898] do_recvmmsg+0x7c9/0x1200 [ 1057.706880][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.711602][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.718127][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1057.723361][T16898] do_fast_syscall_32+0x33/0x70 [ 1057.728256][T16898] do_SYSENTER_32+0x1b/0x20 [ 1057.732978][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1057.739357][T16898] [ 1057.741839][T16898] Uninit was stored to memory at: [ 1057.746935][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1057.752239][T16898] get_compat_msghdr+0x10c/0x280 [ 1057.757226][T16898] ___sys_recvmsg+0x289/0xb40 [ 1057.762107][T16898] do_recvmmsg+0x7c9/0x1200 [ 1057.766661][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.771384][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.777944][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1057.783116][T16898] do_fast_syscall_32+0x33/0x70 [ 1057.788007][T16898] do_SYSENTER_32+0x1b/0x20 [ 1057.792716][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1057.799097][T16898] [ 1057.801422][T16898] Uninit was stored to memory at: [ 1057.806682][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1057.811944][T16898] get_compat_msghdr+0x10c/0x280 [ 1057.816933][T16898] ___sys_recvmsg+0x289/0xb40 [ 1057.821938][T16898] do_recvmmsg+0x7c9/0x1200 [ 1057.826526][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1057.831256][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1057.837821][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1057.842997][T16898] do_fast_syscall_32+0x33/0x70 [ 1057.847894][T16898] do_SYSENTER_32+0x1b/0x20 [ 1057.852597][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1057.858984][T16898] [ 1057.861322][T16898] Local variable msg_sys created at: [ 1057.866791][T16898] do_recvmmsg+0xc9/0x1200 [ 1057.871260][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.209183][T16898] not chained 1580000 origins [ 1058.214193][T16898] CPU: 0 PID: 16898 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1058.226145][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1058.236249][T16898] Call Trace: [ 1058.239544][T16898] [ 1058.242487][T16898] dump_stack_lvl+0x200/0x28c [ 1058.247221][T16898] dump_stack+0x29/0x2c [ 1058.251417][T16898] kmsan_internal_chain_origin+0x78/0x120 [ 1058.257204][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1058.263324][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1058.268494][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1058.274367][T16898] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1058.279968][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1058.285128][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1058.290994][T16898] ? should_fail+0x79/0x9c0 [ 1058.295536][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1058.300703][T16898] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1058.307003][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1058.313131][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1058.318292][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1058.324151][T16898] __msan_chain_origin+0xbd/0x140 [ 1058.329222][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1058.334399][T16898] get_compat_msghdr+0x10c/0x280 [ 1058.339395][T16898] ? do_recvmmsg+0x7c9/0x1200 [ 1058.344130][T16898] ___sys_recvmsg+0x289/0xb40 [ 1058.348863][T16898] ? __schedule+0x176c/0x21c0 [ 1058.353595][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1058.358780][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1058.364648][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1058.369810][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1058.375683][T16898] do_recvmmsg+0x7c9/0x1200 [ 1058.380241][T16898] ? filter_irq_stacks+0xb9/0x230 [ 1058.385331][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1058.390507][T16898] ? __sys_recvmmsg+0xb9/0x6f0 [ 1058.395323][T16898] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.401887][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.406634][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.413030][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1058.418128][T16898] do_fast_syscall_32+0x33/0x70 [ 1058.423046][T16898] do_SYSENTER_32+0x1b/0x20 [ 1058.427593][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1058.433970][T16898] RIP: 0023:0xf7f83549 [ 1058.438059][T16898] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1058.457710][T16898] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1058.466172][T16898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1058.474183][T16898] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1058.482192][T16898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1058.490201][T16898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1058.498208][T16898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1058.506228][T16898] [ 1058.511134][T16898] Uninit was stored to memory at: [ 1058.516642][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1058.521925][T16898] get_compat_msghdr+0x10c/0x280 [ 1058.526933][T16898] ___sys_recvmsg+0x289/0xb40 [ 1058.531768][T16898] do_recvmmsg+0x7c9/0x1200 [ 1058.536321][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.541044][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.547538][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1058.552708][T16898] do_fast_syscall_32+0x33/0x70 [ 1058.557601][T16898] do_SYSENTER_32+0x1b/0x20 [ 1058.562335][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1058.568735][T16898] [ 1058.571064][T16898] Uninit was stored to memory at: [ 1058.576252][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1058.581407][T16898] get_compat_msghdr+0x10c/0x280 [ 1058.586486][T16898] ___sys_recvmsg+0x289/0xb40 [ 1058.591212][T16898] do_recvmmsg+0x7c9/0x1200 [ 1058.595848][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.600575][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.607062][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1058.612220][T16898] do_fast_syscall_32+0x33/0x70 [ 1058.617131][T16898] do_SYSENTER_32+0x1b/0x20 [ 1058.621757][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1058.628127][T16898] [ 1058.630466][T16898] Uninit was stored to memory at: [ 1058.635662][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1058.640818][T16898] get_compat_msghdr+0x10c/0x280 [ 1058.645893][T16898] ___sys_recvmsg+0x289/0xb40 [ 1058.650627][T16898] do_recvmmsg+0x7c9/0x1200 [ 1058.655282][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.660003][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.666490][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1058.671560][T16898] do_fast_syscall_32+0x33/0x70 [ 1058.676548][T16898] do_SYSENTER_32+0x1b/0x20 [ 1058.681095][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1058.687644][T16898] [ 1058.689977][T16898] Uninit was stored to memory at: [ 1058.695224][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1058.700389][T16898] get_compat_msghdr+0x10c/0x280 [ 1058.705540][T16898] ___sys_recvmsg+0x289/0xb40 [ 1058.710265][T16898] do_recvmmsg+0x7c9/0x1200 [ 1058.714920][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.719676][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.726237][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1058.731319][T16898] do_fast_syscall_32+0x33/0x70 [ 1058.736390][T16898] do_SYSENTER_32+0x1b/0x20 [ 1058.740936][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1058.747498][T16898] [ 1058.749833][T16898] Uninit was stored to memory at: [ 1058.755082][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1058.760241][T16898] get_compat_msghdr+0x10c/0x280 [ 1058.765398][T16898] ___sys_recvmsg+0x289/0xb40 [ 1058.770127][T16898] do_recvmmsg+0x7c9/0x1200 [ 1058.774829][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.779552][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.786164][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1058.791247][T16898] do_fast_syscall_32+0x33/0x70 [ 1058.796312][T16898] do_SYSENTER_32+0x1b/0x20 [ 1058.800866][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1058.807449][T16898] [ 1058.809784][T16898] Uninit was stored to memory at: [ 1058.815063][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1058.820223][T16898] get_compat_msghdr+0x10c/0x280 [ 1058.825374][T16898] ___sys_recvmsg+0x289/0xb40 [ 1058.830104][T16898] do_recvmmsg+0x7c9/0x1200 [ 1058.834822][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.839554][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.846112][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1058.851188][T16898] do_fast_syscall_32+0x33/0x70 [ 1058.856256][T16898] do_SYSENTER_32+0x1b/0x20 [ 1058.860820][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1058.867378][T16898] [ 1058.869712][T16898] Uninit was stored to memory at: [ 1058.874967][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1058.880128][T16898] get_compat_msghdr+0x10c/0x280 [ 1058.885288][T16898] ___sys_recvmsg+0x289/0xb40 [ 1058.890020][T16898] do_recvmmsg+0x7c9/0x1200 [ 1058.894727][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1058.899447][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1058.905999][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1058.911072][T16898] do_fast_syscall_32+0x33/0x70 [ 1058.916134][T16898] do_SYSENTER_32+0x1b/0x20 [ 1058.920681][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1058.927211][T16898] [ 1058.929542][T16898] Local variable msg_sys created at: [ 1058.934998][T16898] do_recvmmsg+0xc9/0x1200 [ 1058.939464][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1059.338059][T16898] not chained 1590000 origins [ 1059.342962][T16898] CPU: 0 PID: 16898 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1059.354554][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1059.364642][T16898] Call Trace: [ 1059.367948][T16898] [ 1059.370893][T16898] dump_stack_lvl+0x200/0x28c [ 1059.375622][T16898] dump_stack+0x29/0x2c [ 1059.379817][T16898] kmsan_internal_chain_origin+0x78/0x120 03:41:59 executing program 4: setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc) 03:41:59 executing program 3: syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000020c0)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000002140)) 03:41:59 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x1c, 0x84, 0x2, {[@noop, @generic={0x0, 0xc, "fa4659cfd05c9711a0f3"}]}}}], 0x1c}}], 0x2, 0x0) 03:41:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000b0000000b41db"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1059.385593][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1059.391905][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1059.397074][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1059.402946][T16898] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1059.408545][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1059.413716][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1059.419588][T16898] ? should_fail+0x79/0x9c0 [ 1059.424133][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1059.429296][T16898] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1059.435603][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1059.441731][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1059.446897][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1059.452760][T16898] __msan_chain_origin+0xbd/0x140 [ 1059.457841][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1059.463028][T16898] get_compat_msghdr+0x10c/0x280 [ 1059.468017][T16898] ? do_recvmmsg+0x7c9/0x1200 [ 1059.472753][T16898] ___sys_recvmsg+0x289/0xb40 [ 1059.477706][T16898] ? __schedule+0x176c/0x21c0 [ 1059.482439][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1059.487608][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1059.493489][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1059.498658][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1059.504531][T16898] do_recvmmsg+0x7c9/0x1200 [ 1059.509094][T16898] ? filter_irq_stacks+0xb9/0x230 [ 1059.514189][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1059.519365][T16898] ? __sys_recvmmsg+0xb9/0x6f0 [ 1059.524191][T16898] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1059.530755][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1059.535498][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1059.541891][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1059.546962][T16898] do_fast_syscall_32+0x33/0x70 [ 1059.551850][T16898] do_SYSENTER_32+0x1b/0x20 [ 1059.556391][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1059.562765][T16898] RIP: 0023:0xf7f83549 [ 1059.566854][T16898] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1059.586498][T16898] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1059.594942][T16898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1059.602937][T16898] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1059.610948][T16898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1059.618936][T16898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1059.626925][T16898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1059.634930][T16898] [ 1059.640491][T16898] Uninit was stored to memory at: [ 1059.646826][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1059.652081][T16898] get_compat_msghdr+0x10c/0x280 [ 1059.657067][T16898] ___sys_recvmsg+0x289/0xb40 [ 1059.661893][T16898] do_recvmmsg+0x7c9/0x1200 [ 1059.666450][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1059.671168][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1059.677659][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1059.682833][T16898] do_fast_syscall_32+0x33/0x70 [ 1059.687735][T16898] do_SYSENTER_32+0x1b/0x20 [ 1059.692384][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1059.698824][T16898] [ 1059.701152][T16898] Uninit was stored to memory at: [ 1059.706347][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1059.711508][T16898] get_compat_msghdr+0x10c/0x280 [ 1059.716595][T16898] ___sys_recvmsg+0x289/0xb40 [ 1059.721324][T16898] do_recvmmsg+0x7c9/0x1200 [ 1059.725984][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1059.730714][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1059.737193][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1059.742386][T16898] do_fast_syscall_32+0x33/0x70 [ 1059.747296][T16898] do_SYSENTER_32+0x1b/0x20 [ 1059.751958][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1059.758340][T16898] [ 1059.760678][T16898] Uninit was stored to memory at: [ 1059.765874][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1059.771033][T16898] get_compat_msghdr+0x10c/0x280 [ 1059.776123][T16898] ___sys_recvmsg+0x289/0xb40 [ 1059.780850][T16898] do_recvmmsg+0x7c9/0x1200 [ 1059.785500][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1059.790229][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1059.796705][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1059.801872][T16898] do_fast_syscall_32+0x33/0x70 [ 1059.806769][T16898] do_SYSENTER_32+0x1b/0x20 [ 1059.811323][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1059.817886][T16898] [ 1059.820230][T16898] Uninit was stored to memory at: [ 1059.825503][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1059.830662][T16898] get_compat_msghdr+0x10c/0x280 [ 1059.835818][T16898] ___sys_recvmsg+0x289/0xb40 [ 1059.840570][T16898] do_recvmmsg+0x7c9/0x1200 [ 1059.845302][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1059.850048][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1059.856609][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1059.861780][T16898] do_fast_syscall_32+0x33/0x70 [ 1059.866683][T16898] do_SYSENTER_32+0x1b/0x20 [ 1059.871317][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1059.877879][T16898] [ 1059.879053][T16919] loop3: detected capacity change from 0 to 8 [ 1059.880204][T16898] Uninit was stored to memory at: [ 1059.880281][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1059.896616][T16898] get_compat_msghdr+0x10c/0x280 [ 1059.901610][T16898] ___sys_recvmsg+0x289/0xb40 [ 1059.906491][T16898] do_recvmmsg+0x7c9/0x1200 [ 1059.911039][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1059.915939][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1059.922436][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1059.927510][T16898] do_fast_syscall_32+0x33/0x70 [ 1059.932590][T16898] do_SYSENTER_32+0x1b/0x20 [ 1059.937147][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1059.943741][T16898] [ 1059.946076][T16898] Uninit was stored to memory at: [ 1059.951166][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1059.956484][T16898] get_compat_msghdr+0x10c/0x280 [ 1059.961478][T16898] ___sys_recvmsg+0x289/0xb40 [ 1059.966385][T16898] do_recvmmsg+0x7c9/0x1200 [ 1059.970941][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1059.975834][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1059.982324][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1059.987405][T16898] do_fast_syscall_32+0x33/0x70 [ 1059.992464][T16898] do_SYSENTER_32+0x1b/0x20 [ 1059.997016][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1060.003556][T16898] [ 1060.005884][T16898] Uninit was stored to memory at: [ 1060.010971][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1060.016298][T16898] get_compat_msghdr+0x10c/0x280 [ 1060.021296][T16898] ___sys_recvmsg+0x289/0xb40 [ 1060.026210][T16898] do_recvmmsg+0x7c9/0x1200 [ 1060.030770][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1060.035666][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1060.042174][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1060.047251][T16898] do_fast_syscall_32+0x33/0x70 [ 1060.052320][T16898] do_SYSENTER_32+0x1b/0x20 [ 1060.056875][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1060.063423][T16898] [ 1060.065760][T16898] Local variable msg_sys created at: [ 1060.071046][T16898] do_recvmmsg+0xc9/0x1200 [ 1060.075691][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1060.089255][T16919] VFS: unable to find oldfs superblock on device loop3 [ 1060.141955][ T3547] usb 6-1: new high-speed USB device number 26 using dummy_hcd 03:42:00 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x1c, 0x84, 0x2, {[@noop, @generic={0x0, 0xc, "fa4659cfd05c9711a0f3"}]}}}], 0x1c}}], 0x2, 0x0) [ 1060.517262][ T3547] usb 6-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1060.526946][ T3547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.574671][ T3547] usb 6-1: config 0 descriptor?? [ 1060.600741][T16898] not chained 1600000 origins [ 1060.605705][T16898] CPU: 0 PID: 16898 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1060.617297][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.626086][ T3547] gspca_main: se401-2.14.0 probing 047d:5001 [ 1060.627388][T16898] Call Trace: [ 1060.627405][T16898] [ 1060.627422][T16898] dump_stack_lvl+0x200/0x28c [ 1060.644449][T16898] dump_stack+0x29/0x2c [ 1060.648664][T16898] kmsan_internal_chain_origin+0x78/0x120 [ 1060.654446][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1060.660594][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1060.665778][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1060.671662][T16898] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1060.677266][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1060.682439][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1060.688335][T16898] ? should_fail+0x79/0x9c0 [ 1060.692883][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1060.698065][T16898] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1060.704375][T16898] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1060.710512][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1060.715690][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1060.721564][T16898] __msan_chain_origin+0xbd/0x140 [ 1060.726653][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1060.731856][T16898] get_compat_msghdr+0x10c/0x280 [ 1060.736881][T16898] ? do_recvmmsg+0x7c9/0x1200 [ 1060.741621][T16898] ___sys_recvmsg+0x289/0xb40 [ 1060.746359][T16898] ? __schedule+0x176c/0x21c0 [ 1060.751091][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1060.756264][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1060.762136][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1060.767306][T16898] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1060.773192][T16898] do_recvmmsg+0x7c9/0x1200 [ 1060.777757][T16898] ? filter_irq_stacks+0xb9/0x230 [ 1060.782858][T16898] ? kmsan_get_metadata+0x33/0x220 [ 1060.788046][T16898] ? __sys_recvmmsg+0xb9/0x6f0 [ 1060.792867][T16898] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1060.799443][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1060.804197][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1060.810601][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1060.815681][T16898] do_fast_syscall_32+0x33/0x70 [ 1060.820585][T16898] do_SYSENTER_32+0x1b/0x20 [ 1060.825134][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1060.831528][T16898] RIP: 0023:0xf7f83549 [ 1060.835637][T16898] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1060.855331][T16898] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1060.863794][T16898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1060.871829][T16898] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1060.879833][T16898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1060.887837][T16898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1060.895841][T16898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1060.903860][T16898] [ 1060.909041][T16898] Uninit was stored to memory at: [ 1060.914704][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1060.919873][T16898] get_compat_msghdr+0x10c/0x280 [ 1060.924953][T16898] ___sys_recvmsg+0x289/0xb40 [ 1060.929682][T16898] do_recvmmsg+0x7c9/0x1200 [ 1060.934342][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1060.939070][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1060.945552][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1060.950622][T16898] do_fast_syscall_32+0x33/0x70 [ 1060.955614][T16898] do_SYSENTER_32+0x1b/0x20 [ 1060.960158][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1060.966628][T16898] [ 1060.968956][T16898] Uninit was stored to memory at: [ 1060.974148][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1060.979302][T16898] get_compat_msghdr+0x10c/0x280 [ 1060.984380][T16898] ___sys_recvmsg+0x289/0xb40 [ 1060.989103][T16898] do_recvmmsg+0x7c9/0x1200 [ 1060.993738][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1060.998468][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1061.004943][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1061.010019][T16898] do_fast_syscall_32+0x33/0x70 [ 1061.015021][T16898] do_SYSENTER_32+0x1b/0x20 [ 1061.019583][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1061.026059][T16898] [ 1061.028387][T16898] Uninit was stored to memory at: [ 1061.033573][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1061.038728][T16898] get_compat_msghdr+0x10c/0x280 [ 1061.043810][T16898] ___sys_recvmsg+0x289/0xb40 [ 1061.048542][T16898] do_recvmmsg+0x7c9/0x1200 [ 1061.053190][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1061.057916][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1061.064477][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1061.069547][T16898] do_fast_syscall_32+0x33/0x70 [ 1061.074538][T16898] do_SYSENTER_32+0x1b/0x20 [ 1061.079085][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1061.085566][T16898] [ 1061.087897][T16898] Uninit was stored to memory at: [ 1061.093083][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1061.098235][T16898] get_compat_msghdr+0x10c/0x280 [ 1061.103315][T16898] ___sys_recvmsg+0x289/0xb40 [ 1061.108049][T16898] do_recvmmsg+0x7c9/0x1200 [ 1061.112685][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1061.117411][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1061.123894][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1061.128965][T16898] do_fast_syscall_32+0x33/0x70 [ 1061.133959][T16898] do_SYSENTER_32+0x1b/0x20 [ 1061.138508][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1061.144986][T16898] [ 1061.147335][T16898] Uninit was stored to memory at: [ 1061.152533][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1061.157696][T16898] get_compat_msghdr+0x10c/0x280 [ 1061.162779][T16898] ___sys_recvmsg+0x289/0xb40 [ 1061.167507][T16898] do_recvmmsg+0x7c9/0x1200 [ 1061.172147][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1061.176875][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1061.183363][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1061.188436][T16898] do_fast_syscall_32+0x33/0x70 [ 1061.193439][T16898] do_SYSENTER_32+0x1b/0x20 [ 1061.197987][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1061.204470][T16898] [ 1061.206799][T16898] Uninit was stored to memory at: [ 1061.212088][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1061.217250][T16898] get_compat_msghdr+0x10c/0x280 [ 1061.222334][T16898] ___sys_recvmsg+0x289/0xb40 [ 1061.227073][T16898] do_recvmmsg+0x7c9/0x1200 [ 1061.231738][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1061.236470][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1061.242954][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1061.248038][T16898] do_fast_syscall_32+0x33/0x70 [ 1061.253040][T16898] do_SYSENTER_32+0x1b/0x20 [ 1061.257589][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1061.264086][T16898] [ 1061.266420][T16898] Uninit was stored to memory at: [ 1061.271514][T16898] __get_compat_msghdr+0x6ea/0x9e0 [ 1061.274600][ T3547] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25 [ 1061.276847][T16898] get_compat_msghdr+0x10c/0x280 [ 1061.289963][T16898] ___sys_recvmsg+0x289/0xb40 [ 1061.294806][T16898] do_recvmmsg+0x7c9/0x1200 [ 1061.299354][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1061.304198][T16898] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1061.310606][T16898] __do_fast_syscall_32+0x95/0xf0 [ 1061.315781][T16898] do_fast_syscall_32+0x33/0x70 [ 1061.320716][T16898] do_SYSENTER_32+0x1b/0x20 [ 1061.325378][T16898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1061.331859][T16898] [ 1061.334192][T16898] Local variable msg_sys created at: [ 1061.339508][T16898] do_recvmmsg+0xc9/0x1200 [ 1061.344083][T16898] __sys_recvmmsg+0x520/0x6f0 [ 1061.508906][ T3547] usb 6-1: USB disconnect, device number 26 03:42:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) connect$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000010300000000", @ANYRES32=r1], 0xa8}}, {{&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{0x0}, {&(0x7f00000019c0)="e9bb31c9b782a8431343c21a98eb29fc8c7d528c4b3b5a1742d1dd1186e57325dac7aafc6f90be0ac73deb65b64e708fc333eacc2266f0f9773fe68ae999948670bd815c8d9f661c129fc73eef0ed0f928fce4856ead86ddea186e4c7fb750617aa9c07e8a86eba2a0de47403b2121e5d41172a3018a35eee92bdbe0330ce083f10adfa046c31fa684a0c5e00da363239dce367bc6c8b648951b52ceeea4b7fd16e25250602cc56e1cc3c5cc2b0fd77ad16c8e323cd19e027b07e3", 0xbb}, {0x0}, {0x0}, {&(0x7f0000001cc0)="6430a554b676172171e00461a9ba59ec9b42c834599c7b284e9ef75fabb471c4810ab97a7a52b8d464075c66f8908b7137f9176eb3ca594012aac4edddb9ab80014b190e4815ef35f2df9c940393f0a266317db8c98511b203247bf1fbf018c326aad7381d54bdaab8483237e4935b7fc0534c2ffb19faf042a17f9d8f554e18b2acf89cd9d246a0ab50340fa143b794f2ed28c3d4f3081e66f10f4a5faaa760a9caaa3f5ac9baa38dae71cd3b6816f3f767e6fc3f3bfa9d2e18017c8f5e3eb42715e4e74bc18aa34fc585ddbef04ad0", 0xd0}, {0x0}, {&(0x7f0000001e40)="d00c197c7c14168099897dd03b7ad99c2013a6fa8ea69c2d730665e3118feca77be495942cf3", 0x26}, {&(0x7f0000001f00)="60e14ff60cfbad91043277ebdd060602b7cdf0b0681d75a5fb3ded37a019847c9ce65d6f4f54c54e2edf659e3449a4ca24aa22ffe4d0d7819a96ab80221025f2cd022960046a08d1f8185c16894c02abd257056a6216653beaee23b744914138f0a906589ceb33c6f7eefa4602bb48333ab81afb444655c2bb698e9f0fe2424d09c40cdf094174c91c12af177d32d4af1f3dfd2a2f6fb03d3110544140", 0x9d}], 0x8, 0x0, 0x0, 0x40}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002140)="9d2d075f91004d5da7c4a643a00f7cf10d8537b6859cea2645f0583b5d041f78f560ca61117db4f9bba4eeb51c9d", 0x2e}], 0x1, &(0x7f0000002340), 0x0, 0x34}}], 0x3, 0x4040010) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 03:42:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x618, 0x46c, 0x59000000, 0x294, 0x0, 0x294, 0x550, 0x378, 0x378, 0x550, 0x378, 0xd802, 0x0, {[{{@uncond, 0x0, 0x424, 0x46c, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv_slave_1\x00', {0xe2, 0x0, 0x63, 0x0, 0x0, 0x1, 0x401}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x3, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4e899bcb6521be210e163fb1aa9943496247275b584f1597981189c633c9"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x674) 03:42:01 executing program 4: setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc) 03:42:01 executing program 3: syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000020c0)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000002140)) 03:42:01 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x1c, 0x84, 0x2, {[@noop, @generic={0x0, 0xc, "fa4659cfd05c9711a0f3"}]}}}], 0x1c}}], 0x2, 0x0) [ 1061.790649][T16936] loop3: detected capacity change from 0 to 8 03:42:01 executing program 4: setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc) [ 1061.892189][T16936] VFS: unable to find oldfs superblock on device loop3 03:42:01 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x1c, 0x84, 0x2, {[@noop, @generic={0x0, 0xc, "fa4659cfd05c9711a0f3"}]}}}], 0x1c}}], 0x2, 0x0) 03:42:01 executing program 3: syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000020c0)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000002140)) 03:42:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x618, 0x46c, 0x59000000, 0x294, 0x0, 0x294, 0x550, 0x378, 0x378, 0x550, 0x378, 0xd802, 0x0, {[{{@uncond, 0x0, 0x424, 0x46c, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv_slave_1\x00', {0xe2, 0x0, 0x63, 0x0, 0x0, 0x1, 0x401}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x3, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4e899bcb6521be210e163fb1aa9943496247275b584f1597981189c633c9"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x674) 03:42:01 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000b0000000b41db"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:42:02 executing program 4: setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc) [ 1062.443948][T16948] loop3: detected capacity change from 0 to 8 [ 1062.537898][T16948] VFS: unable to find oldfs superblock on device loop3 03:42:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x618, 0x46c, 0x59000000, 0x294, 0x0, 0x294, 0x550, 0x378, 0x378, 0x550, 0x378, 0xd802, 0x0, {[{{@uncond, 0x0, 0x424, 0x46c, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv_slave_1\x00', {0xe2, 0x0, 0x63, 0x0, 0x0, 0x1, 0x401}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x3, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4e899bcb6521be210e163fb1aa9943496247275b584f1597981189c633c9"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x674) [ 1062.762075][ T25] usb 6-1: new high-speed USB device number 27 using dummy_hcd 03:42:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) connect$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000010300000000", @ANYRES32=r1], 0xa8}}, {{&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{0x0}, {&(0x7f00000019c0)="e9bb31c9b782a8431343c21a98eb29fc8c7d528c4b3b5a1742d1dd1186e57325dac7aafc6f90be0ac73deb65b64e708fc333eacc2266f0f9773fe68ae999948670bd815c8d9f661c129fc73eef0ed0f928fce4856ead86ddea186e4c7fb750617aa9c07e8a86eba2a0de47403b2121e5d41172a3018a35eee92bdbe0330ce083f10adfa046c31fa684a0c5e00da363239dce367bc6c8b648951b52ceeea4b7fd16e25250602cc56e1cc3c5cc2b0fd77ad16c8e323cd19e027b07e3", 0xbb}, {0x0}, {0x0}, {&(0x7f0000001cc0)="6430a554b676172171e00461a9ba59ec9b42c834599c7b284e9ef75fabb471c4810ab97a7a52b8d464075c66f8908b7137f9176eb3ca594012aac4edddb9ab80014b190e4815ef35f2df9c940393f0a266317db8c98511b203247bf1fbf018c326aad7381d54bdaab8483237e4935b7fc0534c2ffb19faf042a17f9d8f554e18b2acf89cd9d246a0ab50340fa143b794f2ed28c3d4f3081e66f10f4a5faaa760a9caaa3f5ac9baa38dae71cd3b6816f3f767e6fc3f3bfa9d2e18017c8f5e3eb42715e4e74bc18aa34fc585ddbef04ad0", 0xd0}, {0x0}, {&(0x7f0000001e40)="d00c197c7c14168099897dd03b7ad99c2013a6fa8ea69c2d730665e3118feca77be495942cf3", 0x26}, {&(0x7f0000001f00)="60e14ff60cfbad91043277ebdd060602b7cdf0b0681d75a5fb3ded37a019847c9ce65d6f4f54c54e2edf659e3449a4ca24aa22ffe4d0d7819a96ab80221025f2cd022960046a08d1f8185c16894c02abd257056a6216653beaee23b744914138f0a906589ceb33c6f7eefa4602bb48333ab81afb444655c2bb698e9f0fe2424d09c40cdf094174c91c12af177d32d4af1f3dfd2a2f6fb03d3110544140", 0x9d}], 0x8, 0x0, 0x0, 0x40}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002140)="9d2d075f91004d5da7c4a643a00f7cf10d8537b6859cea2645f0583b5d041f78f560ca61117db4f9bba4eeb51c9d", 0x2e}], 0x1, &(0x7f0000002340), 0x0, 0x34}}], 0x3, 0x4040010) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 03:42:02 executing program 2: r0 = openat$vimc1(0xffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)) 03:42:03 executing program 4: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) [ 1063.132655][ T25] usb 6-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1063.142166][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:42:03 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000ec010000130200001200000000000000000200000001000073564d38e10000001e000000000000000010cc030200010052654973457233467300000001000000020001000200010200000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003bc1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x11000}, {&(0x7f0000011200)="0000000000000000000000001200000000000000000200000001000073564d38e10000001e00"/64, 0x40, 0x212000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f00"/96, 0x60, 0x213000}, {&(0x7f0000011400)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003bc1655f3bc1655f3bc1655f0100000000000000", 0x60, 0x213fa0}], 0x0, &(0x7f0000011500)) [ 1063.254796][ T25] usb 6-1: config 0 descriptor?? 03:42:03 executing program 2: r0 = openat$vimc1(0xffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)) [ 1063.309763][ T25] gspca_main: se401-2.14.0 probing 047d:5001 03:42:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x618, 0x46c, 0x59000000, 0x294, 0x0, 0x294, 0x550, 0x378, 0x378, 0x550, 0x378, 0xd802, 0x0, {[{{@uncond, 0x0, 0x424, 0x46c, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv_slave_1\x00', {0xe2, 0x0, 0x63, 0x0, 0x0, 0x1, 0x401}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x3, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4e899bcb6521be210e163fb1aa9943496247275b584f1597981189c633c9"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x674) [ 1063.472188][T16961] loop3: detected capacity change from 0 to 8511 [ 1063.529255][T16961] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1063.542804][T16961] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1063.670418][T16961] REISERFS (device loop3): using ordered data mode [ 1063.678204][T16961] reiserfs: using flush barriers [ 1063.768085][T16965] not chained 1610000 origins [ 1063.772921][T16965] CPU: 0 PID: 16965 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1063.784517][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1063.794605][T16965] Call Trace: [ 1063.797904][T16965] [ 1063.800848][T16965] dump_stack_lvl+0x200/0x28c [ 1063.805578][T16965] dump_stack+0x29/0x2c [ 1063.809766][T16965] kmsan_internal_chain_origin+0x78/0x120 [ 1063.815536][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1063.821649][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1063.826817][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1063.832674][T16965] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1063.838262][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1063.843424][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1063.849295][T16965] ? should_fail+0x79/0x9c0 [ 1063.853837][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1063.859006][T16965] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1063.865313][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1063.871437][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1063.876600][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1063.882492][T16965] __msan_chain_origin+0xbd/0x140 [ 1063.887570][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1063.892754][T16965] get_compat_msghdr+0x10c/0x280 [ 1063.897761][T16965] ? do_recvmmsg+0x7c9/0x1200 [ 1063.902493][T16965] ___sys_recvmsg+0x289/0xb40 [ 1063.907240][T16965] ? __schedule+0x176c/0x21c0 [ 1063.911989][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1063.917148][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1063.923017][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1063.928279][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1063.934148][T16965] do_recvmmsg+0x7c9/0x1200 [ 1063.938700][T16965] ? filter_irq_stacks+0xb9/0x230 [ 1063.943788][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1063.948965][T16965] ? __sys_recvmmsg+0xb9/0x6f0 [ 1063.953794][T16965] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1063.960370][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1063.965134][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1063.971524][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1063.976602][T16965] do_fast_syscall_32+0x33/0x70 [ 1063.981497][T16965] do_SYSENTER_32+0x1b/0x20 [ 1063.986040][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1063.992411][T16965] RIP: 0023:0xf7f11549 [ 1063.996498][T16965] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1064.016154][T16965] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1064.024598][T16965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1064.032607][T16965] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1064.040595][T16965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1064.048687][T16965] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1064.056676][T16965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1064.064684][T16965] [ 1064.069730][T16965] Uninit was stored to memory at: [ 1064.074901][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1064.080066][T16965] get_compat_msghdr+0x10c/0x280 [ 1064.085164][T16965] ___sys_recvmsg+0x289/0xb40 [ 1064.089907][T16965] do_recvmmsg+0x7c9/0x1200 [ 1064.094556][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.100655][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.105072][ T25] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 1064.107310][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1064.120399][T16965] do_fast_syscall_32+0x33/0x70 [ 1064.125378][T16965] do_SYSENTER_32+0x1b/0x20 [ 1064.129934][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1064.136387][T16965] [ 1064.138726][T16965] Uninit was stored to memory at: [ 1064.143896][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1064.149058][T16965] get_compat_msghdr+0x10c/0x280 [ 1064.154121][T16965] ___sys_recvmsg+0x289/0xb40 [ 1064.158852][T16965] do_recvmmsg+0x7c9/0x1200 [ 1064.163485][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.168209][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.174666][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1064.179743][T16965] do_fast_syscall_32+0x33/0x70 [ 1064.184713][T16965] do_SYSENTER_32+0x1b/0x20 [ 1064.189265][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1064.195715][T16965] [ 1064.198050][T16965] Uninit was stored to memory at: [ 1064.203213][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1064.208371][T16965] get_compat_msghdr+0x10c/0x280 [ 1064.213441][T16965] ___sys_recvmsg+0x289/0xb40 [ 1064.218178][T16965] do_recvmmsg+0x7c9/0x1200 [ 1064.222802][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.227525][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.233987][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1064.239058][T16965] do_fast_syscall_32+0x33/0x70 [ 1064.244027][T16965] do_SYSENTER_32+0x1b/0x20 [ 1064.248575][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1064.255025][T16965] [ 1064.257358][T16965] Uninit was stored to memory at: [ 1064.262518][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1064.267679][T16965] get_compat_msghdr+0x10c/0x280 [ 1064.272737][T16965] ___sys_recvmsg+0x289/0xb40 [ 1064.277463][T16965] do_recvmmsg+0x7c9/0x1200 [ 1064.282086][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.286814][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.293274][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1064.298346][T16965] do_fast_syscall_32+0x33/0x70 [ 1064.303312][T16965] do_SYSENTER_32+0x1b/0x20 [ 1064.307859][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1064.314313][T16965] [ 1064.316646][T16965] Uninit was stored to memory at: [ 1064.321802][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1064.326972][T16965] get_compat_msghdr+0x10c/0x280 [ 1064.332046][T16965] ___sys_recvmsg+0x289/0xb40 [ 1064.336779][T16965] do_recvmmsg+0x7c9/0x1200 [ 1064.339911][ T25] usb 6-1: USB disconnect, device number 27 [ 1064.341329][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.341392][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.341464][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1064.363569][T16965] do_fast_syscall_32+0x33/0x70 [ 1064.368473][T16965] do_SYSENTER_32+0x1b/0x20 [ 1064.373102][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1064.379486][T16965] [ 1064.381889][T16965] Uninit was stored to memory at: [ 1064.387068][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1064.392301][T16965] get_compat_msghdr+0x10c/0x280 [ 1064.397289][T16965] ___sys_recvmsg+0x289/0xb40 [ 1064.402092][T16965] do_recvmmsg+0x7c9/0x1200 [ 1064.406646][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.411373][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.417840][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1064.422991][T16965] do_fast_syscall_32+0x33/0x70 [ 1064.427913][T16965] do_SYSENTER_32+0x1b/0x20 [ 1064.432608][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1064.438988][T16965] [ 1064.441313][T16965] Uninit was stored to memory at: [ 1064.446545][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1064.451776][T16965] get_compat_msghdr+0x10c/0x280 [ 1064.456766][T16965] ___sys_recvmsg+0x289/0xb40 [ 1064.461488][T16965] do_recvmmsg+0x7c9/0x1200 [ 1064.466109][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.470849][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.477324][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1064.482473][T16965] do_fast_syscall_32+0x33/0x70 [ 1064.487368][T16965] do_SYSENTER_32+0x1b/0x20 [ 1064.491989][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1064.498368][T16965] [ 1064.500705][T16965] Local variable msg_sys created at: [ 1064.506125][T16965] do_recvmmsg+0xc9/0x1200 [ 1064.510594][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.676822][T16961] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1064.697705][T16965] not chained 1620000 origins [ 1064.702515][T16965] CPU: 0 PID: 16965 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1064.714098][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1064.724183][T16965] Call Trace: [ 1064.727478][T16965] [ 1064.730419][T16965] dump_stack_lvl+0x200/0x28c [ 1064.735164][T16965] dump_stack+0x29/0x2c [ 1064.739352][T16965] kmsan_internal_chain_origin+0x78/0x120 [ 1064.745125][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1064.751237][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1064.756393][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1064.762257][T16965] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1064.767843][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1064.772999][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1064.778854][T16965] ? should_fail+0x79/0x9c0 [ 1064.783384][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1064.788544][T16965] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1064.794832][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1064.800983][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1064.806141][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1064.811995][T16965] __msan_chain_origin+0xbd/0x140 [ 1064.817062][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1064.822235][T16965] get_compat_msghdr+0x10c/0x280 [ 1064.827222][T16965] ? do_recvmmsg+0x7c9/0x1200 [ 1064.831961][T16965] ___sys_recvmsg+0x289/0xb40 [ 1064.836711][T16965] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1064.842117][T16965] ? __schedule+0x1980/0x21c0 [ 1064.846837][T16965] ? do_recvmmsg+0x87d/0x1200 [ 1064.851559][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1064.856713][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1064.862568][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1064.867722][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1064.873577][T16965] do_recvmmsg+0x7c9/0x1200 [ 1064.878132][T16965] ? filter_irq_stacks+0xb9/0x230 [ 1064.883216][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1064.888380][T16965] ? __sys_recvmmsg+0xb9/0x6f0 [ 1064.893185][T16965] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.899746][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1064.904479][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1064.910864][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1064.915941][T16965] do_fast_syscall_32+0x33/0x70 [ 1064.920826][T16965] do_SYSENTER_32+0x1b/0x20 [ 1064.925362][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1064.931733][T16965] RIP: 0023:0xf7f11549 [ 1064.935817][T16965] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1064.955457][T16965] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1064.963897][T16965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1064.971892][T16965] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1064.979885][T16965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1064.987875][T16965] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1064.995870][T16965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1065.003875][T16965] [ 1065.007078][T16965] Uninit was stored to memory at: [ 1065.012241][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1065.017394][T16965] get_compat_msghdr+0x10c/0x280 [ 1065.022456][T16965] ___sys_recvmsg+0x289/0xb40 03:42:04 executing program 2: r0 = openat$vimc1(0xffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)) [ 1065.027188][T16965] do_recvmmsg+0x7c9/0x1200 [ 1065.031815][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.036542][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.043010][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1065.048083][T16965] do_fast_syscall_32+0x33/0x70 [ 1065.053055][T16965] do_SYSENTER_32+0x1b/0x20 [ 1065.057604][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1065.064057][T16965] [ 1065.066389][T16965] Uninit was stored to memory at: [ 1065.071509][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1065.076815][T16965] get_compat_msghdr+0x10c/0x280 [ 1065.081965][T16965] ___sys_recvmsg+0x289/0xb40 [ 1065.086691][T16965] do_recvmmsg+0x7c9/0x1200 [ 1065.091244][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.096051][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.102512][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1065.107586][T16965] do_fast_syscall_32+0x33/0x70 [ 1065.112615][T16965] do_SYSENTER_32+0x1b/0x20 [ 1065.117165][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1065.123677][T16965] [ 1065.126011][T16965] Uninit was stored to memory at: [ 1065.131109][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1065.136337][T16965] get_compat_msghdr+0x10c/0x280 [ 1065.141317][T16965] ___sys_recvmsg+0x289/0xb40 [ 1065.146112][T16965] do_recvmmsg+0x7c9/0x1200 [ 1065.150665][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.155462][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.161927][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1065.167003][T16965] do_fast_syscall_32+0x33/0x70 [ 1065.172033][T16965] do_SYSENTER_32+0x1b/0x20 [ 1065.176575][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1065.183018][T16965] [ 1065.185348][T16965] Uninit was stored to memory at: [ 1065.190438][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1065.195744][T16965] get_compat_msghdr+0x10c/0x280 [ 1065.200736][T16965] ___sys_recvmsg+0x289/0xb40 [ 1065.205604][T16965] do_recvmmsg+0x7c9/0x1200 [ 1065.210158][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.214960][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.221346][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1065.226551][T16965] do_fast_syscall_32+0x33/0x70 [ 1065.231447][T16965] do_SYSENTER_32+0x1b/0x20 [ 1065.236139][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1065.242584][T16965] [ 1065.244914][T16965] Uninit was stored to memory at: [ 1065.250013][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1065.255328][T16965] get_compat_msghdr+0x10c/0x280 [ 1065.260328][T16965] ___sys_recvmsg+0x289/0xb40 [ 1065.265207][T16965] do_recvmmsg+0x7c9/0x1200 [ 1065.269763][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.274635][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.281022][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1065.286244][T16965] do_fast_syscall_32+0x33/0x70 [ 1065.291177][T16965] do_SYSENTER_32+0x1b/0x20 [ 1065.291494][T16961] REISERFS (device loop3): checking transaction log (loop3) [ 1065.295850][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1065.295914][T16965] [ 1065.295928][T16965] Uninit was stored to memory at: [ 1065.296001][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1065.296055][T16965] get_compat_msghdr+0x10c/0x280 [ 1065.296108][T16965] ___sys_recvmsg+0x289/0xb40 [ 1065.296162][T16965] do_recvmmsg+0x7c9/0x1200 [ 1065.296215][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.296269][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.296329][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1065.296379][T16965] do_fast_syscall_32+0x33/0x70 [ 1065.296427][T16965] do_SYSENTER_32+0x1b/0x20 [ 1065.296473][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1065.296528][T16965] [ 1065.296535][T16965] Uninit was stored to memory at: 03:42:05 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000b0000000b41db"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1065.296601][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1065.296654][T16965] get_compat_msghdr+0x10c/0x280 [ 1065.296707][T16965] ___sys_recvmsg+0x289/0xb40 [ 1065.296763][T16965] do_recvmmsg+0x7c9/0x1200 [ 1065.395765][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.400500][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.407055][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1065.412198][T16965] do_fast_syscall_32+0x33/0x70 [ 1065.417106][T16965] do_SYSENTER_32+0x1b/0x20 [ 1065.421815][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1065.428207][T16965] [ 1065.430538][T16965] Local variable msg_sys created at: [ 1065.435971][T16965] do_recvmmsg+0xc9/0x1200 [ 1065.440441][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.451675][ C0] sched: RT throttling activated [ 1065.687879][T16965] not chained 1630000 origins [ 1065.692760][T16965] CPU: 0 PID: 16965 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1065.704356][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.714444][T16965] Call Trace: [ 1065.717744][T16965] [ 1065.720690][T16965] dump_stack_lvl+0x200/0x28c [ 1065.725419][T16965] dump_stack+0x29/0x2c [ 1065.729634][T16965] kmsan_internal_chain_origin+0x78/0x120 [ 1065.735411][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1065.741539][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1065.746703][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1065.752578][T16965] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1065.758189][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1065.763402][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1065.769283][T16965] ? should_fail+0x79/0x9c0 [ 1065.773827][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1065.779001][T16965] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1065.785305][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1065.791438][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1065.796605][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1065.802482][T16965] __msan_chain_origin+0xbd/0x140 [ 1065.807576][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1065.812766][T16965] get_compat_msghdr+0x10c/0x280 [ 1065.817791][T16965] ? do_recvmmsg+0x7c9/0x1200 [ 1065.822529][T16965] ___sys_recvmsg+0x289/0xb40 [ 1065.827271][T16965] ? __schedule+0x176c/0x21c0 [ 1065.832013][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1065.837182][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1065.843045][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1065.848213][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1065.854083][T16965] do_recvmmsg+0x7c9/0x1200 [ 1065.858645][T16965] ? filter_irq_stacks+0xb9/0x230 [ 1065.863737][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1065.868913][T16965] ? __sys_recvmmsg+0xb9/0x6f0 [ 1065.873754][T16965] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.880322][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1065.885069][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1065.891472][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1065.896550][T16965] do_fast_syscall_32+0x33/0x70 [ 1065.901448][T16965] do_SYSENTER_32+0x1b/0x20 [ 1065.905997][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1065.912377][T16965] RIP: 0023:0xf7f11549 [ 1065.916470][T16965] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1065.936126][T16965] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1065.944583][T16965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1065.952594][T16965] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1065.960597][T16965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1065.968594][T16965] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1065.976596][T16965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1065.984614][T16965] [ 1065.989420][T16965] Uninit was stored to memory at: [ 1065.994940][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.000108][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.005172][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.009911][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.014555][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.019288][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.025745][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1066.030817][T16965] do_fast_syscall_32+0x33/0x70 [ 1066.035794][T16965] do_SYSENTER_32+0x1b/0x20 [ 1066.040368][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1066.046854][T16965] [ 1066.049191][T16965] Uninit was stored to memory at: [ 1066.054351][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.059603][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.064665][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.069391][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.074031][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.078768][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.085243][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1066.090322][T16965] do_fast_syscall_32+0x33/0x70 [ 1066.095291][T16965] do_SYSENTER_32+0x1b/0x20 [ 1066.099841][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1066.106382][T16965] [ 1066.108722][T16965] Uninit was stored to memory at: [ 1066.113958][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.119126][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.124252][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.128998][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.133637][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.138374][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.144914][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1066.149992][T16965] do_fast_syscall_32+0x33/0x70 [ 1066.154972][T16965] do_SYSENTER_32+0x1b/0x20 [ 1066.159529][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1066.166010][T16965] [ 1066.168348][T16965] Uninit was stored to memory at: [ 1066.173523][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.178686][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.183836][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.188583][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.193298][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.198050][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.204589][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1066.209666][T16965] do_fast_syscall_32+0x33/0x70 [ 1066.214743][T16965] do_SYSENTER_32+0x1b/0x20 [ 1066.219297][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1066.225832][T16965] [ 1066.228201][T16965] Uninit was stored to memory at: [ 1066.233448][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.238612][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.243727][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.248455][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.253154][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.257888][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.264433][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1066.269513][T16965] do_fast_syscall_32+0x33/0x70 [ 1066.274558][T16965] do_SYSENTER_32+0x1b/0x20 [ 1066.279112][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1066.285655][T16965] [ 1066.287991][T16965] Uninit was stored to memory at: [ 1066.293225][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.298404][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.303532][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.308268][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.312992][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.317739][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.320514][T16961] REISERFS (device loop3): Using tea hash to sort names [ 1066.324302][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1066.324362][T16965] do_fast_syscall_32+0x33/0x70 [ 1066.324413][T16965] do_SYSENTER_32+0x1b/0x20 [ 1066.324462][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1066.324519][T16965] [ 1066.324527][T16965] Uninit was stored to memory at: [ 1066.324599][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.324655][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.369951][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.374860][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.379428][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.384332][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.390733][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1066.395958][T16965] do_fast_syscall_32+0x33/0x70 [ 1066.399673][T16961] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1066.400862][T16965] do_SYSENTER_32+0x1b/0x20 [ 1066.400925][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1066.400985][T16965] [ 1066.400995][T16965] Local variable msg_sys created at: [ 1066.401010][T16965] do_recvmmsg+0xc9/0x1200 [ 1066.401066][T16965] __sys_recvmmsg+0x520/0x6f0 03:42:06 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000ec010000130200001200000000000000000200000001000073564d38e10000001e000000000000000010cc030200010052654973457233467300000001000000020001000200010200000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003bc1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x11000}, {&(0x7f0000011200)="0000000000000000000000001200000000000000000200000001000073564d38e10000001e00"/64, 0x40, 0x212000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f00"/96, 0x60, 0x213000}, {&(0x7f0000011400)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003bc1655f3bc1655f3bc1655f0100000000000000", 0x60, 0x213fa0}], 0x0, &(0x7f0000011500)) [ 1066.663650][T16965] not chained 1640000 origins [ 1066.668375][T16965] CPU: 0 PID: 16965 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1066.679972][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.690060][T16965] Call Trace: [ 1066.693389][T16965] [ 1066.696356][T16965] dump_stack_lvl+0x200/0x28c [ 1066.701095][T16965] dump_stack+0x29/0x2c [ 1066.705291][T16965] kmsan_internal_chain_origin+0x78/0x120 [ 1066.711081][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1066.717215][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1066.722391][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1066.728263][T16965] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1066.733866][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1066.739044][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1066.744928][T16965] ? should_fail+0x79/0x9c0 [ 1066.749482][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1066.754667][T16965] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1066.760979][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1066.767112][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1066.772310][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1066.778178][T16965] __msan_chain_origin+0xbd/0x140 [ 1066.783286][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.788569][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.793578][T16965] ? do_recvmmsg+0x7c9/0x1200 [ 1066.798322][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.803079][T16965] ? do_recvmmsg+0x87d/0x1200 [ 1066.807814][T16965] ? kmsan_get_metadata+0x15f/0x220 [ 1066.813068][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1066.818233][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1066.824105][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.828662][T16965] ? filter_irq_stacks+0xb9/0x230 [ 1066.833748][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1066.838918][T16965] ? __sys_recvmmsg+0xb9/0x6f0 [ 1066.843737][T16965] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.850301][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.855039][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.861432][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1066.866504][T16965] do_fast_syscall_32+0x33/0x70 [ 1066.871398][T16965] do_SYSENTER_32+0x1b/0x20 [ 1066.875948][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1066.882323][T16965] RIP: 0023:0xf7f11549 [ 1066.886413][T16965] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1066.906060][T16965] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1066.914509][T16965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1066.922509][T16965] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1066.930506][T16965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1066.938500][T16965] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1066.946490][T16965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1066.954496][T16965] [ 1066.959214][T16965] Uninit was stored to memory at: [ 1066.965932][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1066.971096][T16965] get_compat_msghdr+0x10c/0x280 [ 1066.976383][T16965] ___sys_recvmsg+0x289/0xb40 [ 1066.981212][T16965] do_recvmmsg+0x7c9/0x1200 [ 1066.985844][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1066.990574][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1066.997036][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.002184][T16965] do_fast_syscall_32+0x33/0x70 [ 1067.007082][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.011711][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.018093][T16965] [ 1067.020430][T16965] Uninit was stored to memory at: [ 1067.025675][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.030840][T16965] get_compat_msghdr+0x10c/0x280 [ 1067.035974][T16965] ___sys_recvmsg+0x289/0xb40 [ 1067.040706][T16965] do_recvmmsg+0x7c9/0x1200 [ 1067.045402][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.050139][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.056674][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.061826][T16965] do_fast_syscall_32+0x33/0x70 03:42:06 executing program 2: r0 = openat$vimc1(0xffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)) [ 1067.066768][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.071329][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.077878][T16965] [ 1067.080216][T16965] Uninit was stored to memory at: [ 1067.085404][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.090769][T16965] get_compat_msghdr+0x10c/0x280 [ 1067.095913][T16965] ___sys_recvmsg+0x289/0xb40 [ 1067.100650][T16965] do_recvmmsg+0x7c9/0x1200 [ 1067.105360][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.110096][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.116613][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.121770][T16965] do_fast_syscall_32+0x33/0x70 [ 1067.126673][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.131223][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.133257][T14037] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1067.137741][T16965] [ 1067.147565][T16965] Uninit was stored to memory at: [ 1067.152786][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.157952][T16965] get_compat_msghdr+0x10c/0x280 [ 1067.163011][T16965] ___sys_recvmsg+0x289/0xb40 [ 1067.167762][T16965] do_recvmmsg+0x7c9/0x1200 [ 1067.172468][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.177200][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.184114][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.189187][T16965] do_fast_syscall_32+0x33/0x70 [ 1067.194217][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.198766][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.205295][T16965] [ 1067.207627][T16965] Uninit was stored to memory at: [ 1067.212845][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.218012][T16965] get_compat_msghdr+0x10c/0x280 [ 1067.223145][T16965] ___sys_recvmsg+0x289/0xb40 [ 1067.227879][T16965] do_recvmmsg+0x7c9/0x1200 [ 1067.232563][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.237299][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.243820][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.248923][T16965] do_fast_syscall_32+0x33/0x70 [ 1067.253943][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.258513][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.265041][T16965] [ 1067.267376][T16965] Uninit was stored to memory at: [ 1067.272603][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.277765][T16965] get_compat_msghdr+0x10c/0x280 [ 1067.282823][T16965] ___sys_recvmsg+0x289/0xb40 [ 1067.287585][T16965] do_recvmmsg+0x7c9/0x1200 [ 1067.292270][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.297007][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.303557][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.308633][T16965] do_fast_syscall_32+0x33/0x70 [ 1067.313665][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.318216][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.324747][T16965] [ 1067.327084][T16965] Uninit was stored to memory at: [ 1067.332360][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.337808][T16965] get_compat_msghdr+0x10c/0x280 [ 1067.342953][T16965] ___sys_recvmsg+0x289/0xb40 [ 1067.347703][T16965] do_recvmmsg+0x7c9/0x1200 [ 1067.352403][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.357133][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.363668][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.368743][T16965] do_fast_syscall_32+0x33/0x70 [ 1067.373801][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.378354][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.384840][T16965] [ 1067.387184][T16965] Local variable msg_sys created at: [ 1067.392606][T16965] do_recvmmsg+0xc9/0x1200 [ 1067.397074][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.572530][T14037] usb 6-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1067.585714][T14037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.614754][T16965] not chained 1650000 origins [ 1067.619478][T16965] CPU: 0 PID: 16965 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1067.631097][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.641196][T16965] Call Trace: [ 1067.644504][T16965] [ 1067.647454][T16965] dump_stack_lvl+0x200/0x28c [ 1067.652190][T16965] dump_stack+0x29/0x2c [ 1067.656390][T16965] kmsan_internal_chain_origin+0x78/0x120 [ 1067.662168][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1067.668299][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1067.673474][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1067.679351][T16965] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1067.684960][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1067.690133][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1067.693298][T14037] usb 6-1: config 0 descriptor?? [ 1067.695999][T16965] ? should_fail+0x79/0x9c0 [ 1067.696050][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1067.710559][T16965] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1067.716869][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1067.723003][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1067.728177][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1067.734050][T16965] __msan_chain_origin+0xbd/0x140 [ 1067.739133][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.742262][T14037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1067.744319][T16965] get_compat_msghdr+0x10c/0x280 [ 1067.755271][T16965] ? do_recvmmsg+0x7c9/0x1200 [ 1067.760012][T16965] ___sys_recvmsg+0x289/0xb40 [ 1067.764755][T16965] ? __schedule+0x176c/0x21c0 [ 1067.769497][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1067.774668][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1067.780538][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1067.785703][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1067.791570][T16965] do_recvmmsg+0x7c9/0x1200 [ 1067.796130][T16965] ? filter_irq_stacks+0xb9/0x230 [ 1067.801229][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1067.806429][T16965] ? __sys_recvmmsg+0xb9/0x6f0 [ 1067.811251][T16965] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.817822][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.822577][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.828979][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.834091][T16965] do_fast_syscall_32+0x33/0x70 [ 1067.838999][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.843552][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.849942][T16965] RIP: 0023:0xf7f11549 [ 1067.854039][T16965] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1067.873699][T16965] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1067.882155][T16965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1067.890165][T16965] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1067.898166][T16965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.906174][T16965] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1067.914211][T16965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.922261][T16965] [ 1067.927101][T16965] Uninit was stored to memory at: [ 1067.932694][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.937867][T16965] get_compat_msghdr+0x10c/0x280 [ 1067.942944][T16965] ___sys_recvmsg+0x289/0xb40 [ 1067.947680][T16965] do_recvmmsg+0x7c9/0x1200 [ 1067.952311][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1067.957045][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1067.963580][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1067.968656][T16965] do_fast_syscall_32+0x33/0x70 [ 1067.973692][T16965] do_SYSENTER_32+0x1b/0x20 [ 1067.978244][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.984774][T16965] [ 1067.987136][T16965] Uninit was stored to memory at: [ 1067.992349][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1067.993782][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 1067.997505][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.004246][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.008794][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.019798][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.024432][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.029189][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.035706][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.040803][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.045856][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.050403][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.056865][T16965] [ 1068.059197][T16965] Uninit was stored to memory at: [ 1068.064428][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1068.069592][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.074748][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.079487][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.084186][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.088930][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.095455][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.100530][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.105525][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.110071][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.116602][T16965] [ 1068.118938][T16965] Uninit was stored to memory at: [ 1068.124159][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1068.129324][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.134404][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.139145][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.143843][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.148576][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.155112][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.160192][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.165163][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.169714][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.176271][T16965] [ 1068.178640][T16965] Uninit was stored to memory at: [ 1068.183904][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1068.189067][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.194199][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.198929][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.203557][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.208285][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.214814][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.219904][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.224959][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.229519][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.236052][T16965] [ 1068.238392][T16965] Uninit was stored to memory at: [ 1068.243639][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1068.248811][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.253952][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.258698][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.263397][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.268128][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.274662][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.279750][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.284772][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.289353][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.295865][T16965] [ 1068.298195][T16965] Uninit was stored to memory at: [ 1068.303354][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1068.308519][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.313655][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.318386][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.323014][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.327737][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.334219][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.339302][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.344298][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.348842][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.355365][T16965] [ 1068.357700][T16965] Local variable msg_sys created at: [ 1068.363065][T16965] do_recvmmsg+0xc9/0x1200 [ 1068.367538][T16965] __sys_recvmmsg+0x520/0x6f0 03:42:08 executing program 2: setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r1 = memfd_create(&(0x7f00000020c0)='(^&\x00', 0x4) fchown(r1, r0, 0x0) 03:42:08 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xf44e, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x243029, &(0x7f0000000340)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40106614, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) [ 1068.424767][T14037] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 1068.572055][T16965] not chained 1660000 origins [ 1068.576921][T16965] CPU: 0 PID: 16965 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1068.588536][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.598617][T16965] Call Trace: [ 1068.601912][T16965] [ 1068.604854][T16965] dump_stack_lvl+0x200/0x28c [ 1068.609584][T16965] dump_stack+0x29/0x2c [ 1068.613779][T16965] kmsan_internal_chain_origin+0x78/0x120 [ 1068.619555][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1068.625698][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1068.630855][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1068.636718][T16965] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1068.642328][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1068.647488][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1068.653349][T16965] ? should_fail+0x79/0x9c0 [ 1068.657881][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1068.663041][T16965] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1068.669331][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1068.675451][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1068.680609][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1068.686465][T16965] __msan_chain_origin+0xbd/0x140 [ 1068.691541][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1068.696716][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.701703][T16965] ? do_recvmmsg+0x7c9/0x1200 [ 1068.706431][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.711168][T16965] ? __this_cpu_preempt_check+0x13/0x20 [ 1068.716764][T16965] ? sysvec_call_function_single+0x52/0xb0 [ 1068.722622][T16965] ? asm_sysvec_call_function_single+0x12/0x20 [ 1068.728840][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1068.734001][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1068.739861][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.744415][T16965] ? filter_irq_stacks+0xb9/0x230 [ 1068.749502][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1068.754667][T16965] ? __sys_recvmmsg+0xb9/0x6f0 [ 1068.759498][T16965] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.766066][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.770829][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.777254][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.782329][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.787219][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.791783][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.798160][T16965] RIP: 0023:0xf7f11549 [ 1068.802246][T16965] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1068.821891][T16965] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1068.830355][T16965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1068.838369][T16965] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1068.846375][T16965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1068.854376][T16965] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1068.862372][T16965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1068.870398][T16965] [ 1068.875765][T16965] Uninit was stored to memory at: [ 1068.880883][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1068.886453][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.891477][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.896326][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.900904][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.905740][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.913875][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.918965][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.923973][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.928524][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.935112][T16965] [ 1068.937445][T16965] Uninit was stored to memory at: [ 1068.942622][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1068.947866][T16965] get_compat_msghdr+0x10c/0x280 [ 1068.952959][T16965] ___sys_recvmsg+0x289/0xb40 [ 1068.957686][T16965] do_recvmmsg+0x7c9/0x1200 [ 1068.962327][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1068.967053][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1068.973563][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1068.978638][T16965] do_fast_syscall_32+0x33/0x70 [ 1068.983642][T16965] do_SYSENTER_32+0x1b/0x20 [ 1068.988191][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.994730][T16965] [ 1068.997060][T16965] Uninit was stored to memory at: [ 1069.002207][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.007368][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.014164][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.018916][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.023579][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.028393][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.034897][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.039990][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.045156][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.049714][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.056283][T16965] [ 1069.058621][T16965] Uninit was stored to memory at: [ 1069.063896][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.069065][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.074243][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.078976][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.083677][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.088409][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.094106][T14037] usb 6-1: USB disconnect, device number 28 [ 1069.094998][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.105818][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.110731][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.116849][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.123685][T16965] [ 1069.126023][T16965] Uninit was stored to memory at: [ 1069.131118][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.136427][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.141427][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.146303][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.150861][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.155741][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.162217][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.167303][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.172371][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.176934][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.183459][T16965] [ 1069.185796][T16965] Uninit was stored to memory at: [ 1069.190889][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.196209][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.201232][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.206117][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.210705][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.215582][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.222042][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.227126][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.232149][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.236700][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.243213][T16965] [ 1069.245547][T16965] Uninit was stored to memory at: [ 1069.250635][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.255934][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.260931][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.265845][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.270432][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.275290][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.281750][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.286825][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.291844][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.296401][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.302854][T16965] [ 1069.305189][T16965] Local variable msg_sys created at: [ 1069.310484][T16965] do_recvmmsg+0xc9/0x1200 [ 1069.315101][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.460092][T16965] not chained 1670000 origins [ 1069.464905][T16965] CPU: 0 PID: 16965 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1069.476499][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.486589][T16965] Call Trace: [ 1069.489897][T16965] [ 1069.492849][T16965] dump_stack_lvl+0x200/0x28c [ 1069.497597][T16965] dump_stack+0x29/0x2c [ 1069.501797][T16965] kmsan_internal_chain_origin+0x78/0x120 [ 1069.507588][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1069.513739][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1069.518912][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1069.524787][T16965] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1069.530394][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1069.535575][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1069.541458][T16965] ? should_fail+0x79/0x9c0 [ 1069.546010][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1069.551205][T16965] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1069.557510][T16965] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1069.563644][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1069.568818][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1069.574691][T16965] __msan_chain_origin+0xbd/0x140 [ 1069.579787][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.584995][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.589997][T16965] ? do_recvmmsg+0x7c9/0x1200 [ 1069.594735][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.599483][T16965] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1069.604917][T16965] ? __schedule+0x1980/0x21c0 [ 1069.609653][T16965] ? sysvec_call_function_single+0x52/0xb0 [ 1069.615529][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1069.620708][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1069.626585][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1069.631763][T16965] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1069.637640][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.642204][T16965] ? filter_irq_stacks+0xb9/0x230 [ 1069.647383][T16965] ? kmsan_get_metadata+0x33/0x220 [ 1069.652564][T16965] ? __sys_recvmmsg+0xb9/0x6f0 [ 1069.657383][T16965] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.663953][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.668699][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.675095][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.680176][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.685070][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.689618][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.695999][T16965] RIP: 0023:0xf7f11549 [ 1069.700090][T16965] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1069.719744][T16965] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1069.728223][T16965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1069.736241][T16965] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1069.744252][T16965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1069.752260][T16965] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1069.760313][T16965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1069.768336][T16965] [ 1069.771534][T16965] Uninit was stored to memory at: [ 1069.776707][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.781947][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.787030][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.791842][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.796404][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.801140][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.807613][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.812938][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.817852][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.822491][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.828885][T16965] [ 1069.831221][T16965] Uninit was stored to memory at: [ 1069.836421][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.841588][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.846722][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.851456][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.856085][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.860824][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.867290][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.872509][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.877406][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.882025][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.888412][T16965] [ 1069.890747][T16965] Uninit was stored to memory at: [ 1069.895984][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.901152][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.906282][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.911018][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.915657][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.920396][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.926957][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.932112][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.937019][T16965] do_SYSENTER_32+0x1b/0x20 [ 1069.941575][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.948117][T16965] [ 1069.950465][T16965] Uninit was stored to memory at: [ 1069.955716][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1069.960882][T16965] get_compat_msghdr+0x10c/0x280 [ 1069.966038][T16965] ___sys_recvmsg+0x289/0xb40 [ 1069.970774][T16965] do_recvmmsg+0x7c9/0x1200 [ 1069.975489][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1069.980224][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1069.986757][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1069.991907][T16965] do_fast_syscall_32+0x33/0x70 [ 1069.996828][T16965] do_SYSENTER_32+0x1b/0x20 [ 1070.001387][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1070.007924][T16965] [ 1070.010260][T16965] Uninit was stored to memory at: [ 1070.015494][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1070.020659][T16965] get_compat_msghdr+0x10c/0x280 [ 1070.025799][T16965] ___sys_recvmsg+0x289/0xb40 [ 1070.030540][T16965] do_recvmmsg+0x7c9/0x1200 [ 1070.035255][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1070.039995][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1070.046467][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1070.051548][T16965] do_fast_syscall_32+0x33/0x70 [ 1070.056588][T16965] do_SYSENTER_32+0x1b/0x20 [ 1070.061141][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1070.067689][T16965] [ 1070.070054][T16965] Uninit was stored to memory at: [ 1070.075306][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1070.080513][T16965] get_compat_msghdr+0x10c/0x280 [ 1070.085663][T16965] ___sys_recvmsg+0x289/0xb40 [ 1070.090441][T16965] do_recvmmsg+0x7c9/0x1200 [ 1070.095227][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1070.099955][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1070.106575][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1070.111736][T16965] do_fast_syscall_32+0x33/0x70 [ 1070.116649][T16965] do_SYSENTER_32+0x1b/0x20 [ 1070.121206][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1070.127752][T16965] [ 1070.130096][T16965] Uninit was stored to memory at: [ 1070.135334][T16965] __get_compat_msghdr+0x6ea/0x9e0 [ 1070.140501][T16965] get_compat_msghdr+0x10c/0x280 [ 1070.145641][T16965] ___sys_recvmsg+0x289/0xb40 [ 1070.150730][T16965] do_recvmmsg+0x7c9/0x1200 [ 1070.155452][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1070.160188][T16965] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1070.166730][T16965] __do_fast_syscall_32+0x95/0xf0 [ 1070.171894][T16965] do_fast_syscall_32+0x33/0x70 [ 1070.176799][T16965] do_SYSENTER_32+0x1b/0x20 [ 1070.181356][T16965] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1070.187908][T16965] [ 1070.190244][T16965] Local variable msg_sys created at: [ 1070.195687][T16965] do_recvmmsg+0xc9/0x1200 [ 1070.200154][T16965] __sys_recvmmsg+0x520/0x6f0 [ 1070.422474][T16984] ======================================================= [ 1070.422474][T16984] WARNING: The mand mount option has been deprecated and [ 1070.422474][T16984] and is ignored by this kernel. Remove the mand [ 1070.422474][T16984] option from the mount to silence this warning. [ 1070.422474][T16984] ======================================================= [ 1070.608847][T16967] not chained 1680000 origins [ 1070.613767][T16967] CPU: 1 PID: 16967 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1070.625382][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1070.635472][T16967] Call Trace: [ 1070.638765][T16967] [ 1070.641711][T16967] dump_stack_lvl+0x200/0x28c [ 1070.646442][T16967] dump_stack+0x29/0x2c [ 1070.650633][T16967] kmsan_internal_chain_origin+0x78/0x120 [ 1070.656406][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1070.662537][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1070.667697][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1070.673566][T16967] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1070.679158][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1070.684325][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1070.690194][T16967] ? should_fail+0x79/0x9c0 [ 1070.694730][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1070.699904][T16967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1070.706194][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1070.712315][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1070.717486][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1070.723360][T16967] __msan_chain_origin+0xbd/0x140 [ 1070.728443][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1070.733658][T16967] get_compat_msghdr+0x10c/0x280 [ 1070.738653][T16967] ? do_recvmmsg+0x7c9/0x1200 [ 1070.743388][T16967] ___sys_recvmsg+0x289/0xb40 [ 1070.748131][T16967] ? __schedule+0x176c/0x21c0 [ 1070.752866][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1070.758031][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1070.763907][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1070.769080][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1070.774946][T16967] do_recvmmsg+0x7c9/0x1200 [ 1070.779500][T16967] ? filter_irq_stacks+0xb9/0x230 [ 1070.784586][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1070.789755][T16967] ? __sys_recvmmsg+0xb9/0x6f0 [ 1070.794574][T16967] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1070.801132][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1070.805894][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1070.812316][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1070.817401][T16967] do_fast_syscall_32+0x33/0x70 [ 1070.822303][T16967] do_SYSENTER_32+0x1b/0x20 [ 1070.826861][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1070.833246][T16967] RIP: 0023:0xf7f83549 [ 1070.837341][T16967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1070.856990][T16967] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1070.865438][T16967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1070.873431][T16967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1070.881421][T16967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1070.889415][T16967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1070.897424][T16967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1070.905432][T16967] [ 1070.913191][T16967] Uninit was stored to memory at: [ 1070.918302][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1070.924506][T16967] get_compat_msghdr+0x10c/0x280 [ 1070.929499][T16967] ___sys_recvmsg+0x289/0xb40 [ 1070.934360][T16967] do_recvmmsg+0x7c9/0x1200 [ 1070.938913][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1070.943777][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1070.950200][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1070.955410][T16967] do_fast_syscall_32+0x33/0x70 [ 1070.960348][T16967] do_SYSENTER_32+0x1b/0x20 [ 1070.965038][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1070.971420][T16967] [ 1070.973894][T16967] Uninit was stored to memory at: [ 1070.978992][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1070.984369][T16967] get_compat_msghdr+0x10c/0x280 [ 1070.989358][T16967] ___sys_recvmsg+0x289/0xb40 [ 1070.994302][T16967] do_recvmmsg+0x7c9/0x1200 [ 1070.998866][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1071.003787][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1071.010187][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1071.015506][T16967] do_fast_syscall_32+0x33/0x70 [ 1071.020413][T16967] do_SYSENTER_32+0x1b/0x20 [ 1071.025215][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1071.031601][T16967] [ 1071.034145][T16967] Uninit was stored to memory at: [ 1071.039234][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1071.044585][T16967] get_compat_msghdr+0x10c/0x280 [ 1071.049570][T16967] ___sys_recvmsg+0x289/0xb40 [ 1071.054571][T16967] do_recvmmsg+0x7c9/0x1200 [ 1071.059161][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1071.064098][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1071.070485][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1071.075681][T16967] do_fast_syscall_32+0x33/0x70 [ 1071.079261][T16988] loop3: detected capacity change from 0 to 8511 [ 1071.080568][T16967] do_SYSENTER_32+0x1b/0x20 [ 1071.080623][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1071.098004][T16967] [ 1071.100335][T16967] Uninit was stored to memory at: [ 1071.105531][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1071.110697][T16967] get_compat_msghdr+0x10c/0x280 [ 1071.115820][T16967] ___sys_recvmsg+0x289/0xb40 [ 1071.120566][T16967] do_recvmmsg+0x7c9/0x1200 [ 1071.125221][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1071.129948][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1071.136480][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1071.141566][T16967] do_fast_syscall_32+0x33/0x70 [ 1071.146571][T16967] do_SYSENTER_32+0x1b/0x20 [ 1071.151122][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1071.157653][T16967] [ 1071.160018][T16967] Uninit was stored to memory at: [ 1071.165231][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1071.170074][T16988] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1071.170390][T16967] get_compat_msghdr+0x10c/0x280 [ 1071.170455][T16967] ___sys_recvmsg+0x289/0xb40 [ 1071.183755][T16988] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1071.188418][T16967] do_recvmmsg+0x7c9/0x1200 [ 1071.207083][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1071.211964][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1071.218386][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1071.223613][T16967] do_fast_syscall_32+0x33/0x70 [ 1071.228511][T16967] do_SYSENTER_32+0x1b/0x20 [ 1071.233208][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1071.239777][T16967] [ 1071.242257][T16967] Uninit was stored to memory at: [ 1071.247383][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1071.252802][T16967] get_compat_msghdr+0x10c/0x280 [ 1071.257801][T16967] ___sys_recvmsg+0x289/0xb40 [ 1071.262668][T16967] do_recvmmsg+0x7c9/0x1200 [ 1071.267234][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1071.272102][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1071.278491][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1071.283708][T16967] do_fast_syscall_32+0x33/0x70 [ 1071.288612][T16967] do_SYSENTER_32+0x1b/0x20 [ 1071.293291][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1071.299667][T16967] [ 1071.302132][T16967] Uninit was stored to memory at: [ 1071.307231][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1071.312558][T16967] get_compat_msghdr+0x10c/0x280 [ 1071.317552][T16967] ___sys_recvmsg+0x289/0xb40 [ 1071.322411][T16967] do_recvmmsg+0x7c9/0x1200 [ 1071.326969][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1071.331841][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1071.338233][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1071.343438][T16967] do_fast_syscall_32+0x33/0x70 [ 1071.348347][T16967] do_SYSENTER_32+0x1b/0x20 [ 1071.353050][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1071.359444][T16967] [ 1071.359561][T16988] REISERFS (device loop3): using ordered data mode [ 1071.361901][T16967] Local variable msg_sys created at: [ 1071.361917][T16967] do_recvmmsg+0xc9/0x1200 [ 1071.361975][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1071.387387][T16988] reiserfs: using flush barriers [ 1071.455658][T16988] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1071.522449][T16988] REISERFS (device loop3): checking transaction log (loop3) [ 1071.839029][T16967] not chained 1690000 origins [ 1071.844210][T16967] CPU: 1 PID: 16967 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1071.855983][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.866073][T16967] Call Trace: [ 1071.869387][T16967] [ 1071.872336][T16967] dump_stack_lvl+0x200/0x28c [ 1071.877089][T16967] dump_stack+0x29/0x2c [ 1071.881303][T16967] kmsan_internal_chain_origin+0x78/0x120 [ 1071.887093][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1071.890915][T16988] REISERFS (device loop3): Using tea hash to sort names [ 1071.893224][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1071.893292][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1071.893367][T16967] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1071.901393][T16988] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1071.905408][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1071.905471][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1071.905537][T16967] ? should_fail+0x79/0x9c0 [ 1071.905584][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1071.905643][T16967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1071.905709][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1071.905783][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1071.905844][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1071.905911][T16967] __msan_chain_origin+0xbd/0x140 [ 1071.905971][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1071.906050][T16967] get_compat_msghdr+0x10c/0x280 [ 1071.906114][T16967] ? do_recvmmsg+0x7c9/0x1200 [ 1071.906178][T16967] ___sys_recvmsg+0x289/0xb40 [ 1071.994643][T16967] ? __schedule+0x176c/0x21c0 [ 1071.999386][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.004560][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1072.010434][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.015601][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1072.021469][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.026037][T16967] ? filter_irq_stacks+0xb9/0x230 [ 1072.031136][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.036318][T16967] ? __sys_recvmmsg+0xb9/0x6f0 [ 1072.041146][T16967] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.047721][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.052472][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.058874][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1072.063946][T16967] do_fast_syscall_32+0x33/0x70 [ 1072.068840][T16967] do_SYSENTER_32+0x1b/0x20 [ 1072.073393][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1072.079862][T16967] RIP: 0023:0xf7f83549 [ 1072.083939][T16967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1072.103611][T16967] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1072.112073][T16967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1072.120069][T16967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1072.128071][T16967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.136068][T16967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1072.144052][T16967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.152057][T16967] [ 1072.159554][T16967] Uninit was stored to memory at: [ 1072.165364][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1072.170535][T16967] get_compat_msghdr+0x10c/0x280 [ 1072.175734][T16967] ___sys_recvmsg+0x289/0xb40 [ 1072.180473][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.185199][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.189955][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.196562][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1072.201730][T16967] do_fast_syscall_32+0x33/0x70 [ 1072.206627][T16967] do_SYSENTER_32+0x1b/0x20 [ 1072.211175][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1072.217743][T16967] [ 1072.220083][T16967] Uninit was stored to memory at: [ 1072.225360][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1072.230530][T16967] get_compat_msghdr+0x10c/0x280 [ 1072.235732][T16967] ___sys_recvmsg+0x289/0xb40 [ 1072.240465][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.245185][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.249942][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.256597][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1072.261770][T16967] do_fast_syscall_32+0x33/0x70 [ 1072.266663][T16967] do_SYSENTER_32+0x1b/0x20 [ 1072.271206][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1072.277790][T16967] [ 1072.280119][T16967] Uninit was stored to memory at: [ 1072.285317][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1072.290478][T16967] get_compat_msghdr+0x10c/0x280 [ 1072.295661][T16967] ___sys_recvmsg+0x289/0xb40 [ 1072.300390][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.305048][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.309775][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.316340][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1072.321418][T16967] do_fast_syscall_32+0x33/0x70 [ 1072.326520][T16967] do_SYSENTER_32+0x1b/0x20 [ 1072.331069][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1072.337634][T16967] [ 1072.340768][T16967] Uninit was stored to memory at: [ 1072.346046][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1072.351203][T16967] get_compat_msghdr+0x10c/0x280 [ 1072.356393][T16967] ___sys_recvmsg+0x289/0xb40 [ 1072.361127][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.365891][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.370629][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.377210][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1072.382404][T16967] do_fast_syscall_32+0x33/0x70 [ 1072.387314][T16967] do_SYSENTER_32+0x1b/0x20 [ 1072.392029][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1072.398408][T16967] [ 1072.400740][T16967] Uninit was stored to memory at: [ 1072.405996][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1072.411156][T16967] get_compat_msghdr+0x10c/0x280 [ 1072.416797][T16967] ___sys_recvmsg+0x289/0xb40 [ 1072.421554][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.426298][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.431033][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.437622][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1072.442793][T16967] do_fast_syscall_32+0x33/0x70 [ 1072.447672][T16967] do_SYSENTER_32+0x1b/0x20 [ 1072.452399][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1072.458775][T16967] [ 1072.461091][T16967] Uninit was stored to memory at: [ 1072.466318][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1072.471485][T16967] get_compat_msghdr+0x10c/0x280 [ 1072.476601][T16967] ___sys_recvmsg+0x289/0xb40 [ 1072.481329][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.486074][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.490805][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.497375][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1072.502567][T16967] do_fast_syscall_32+0x33/0x70 [ 1072.507462][T16967] do_SYSENTER_32+0x1b/0x20 [ 1072.512165][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1072.518547][T16967] [ 1072.520875][T16967] Uninit was stored to memory at: [ 1072.526105][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1072.531286][T16967] get_compat_msghdr+0x10c/0x280 [ 1072.536459][T16967] ___sys_recvmsg+0x289/0xb40 [ 1072.541191][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.545938][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.550670][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1072.557205][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1072.562391][T16967] do_fast_syscall_32+0x33/0x70 [ 1072.567289][T16967] do_SYSENTER_32+0x1b/0x20 [ 1072.571990][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1072.578371][T16967] [ 1072.580707][T16967] Local variable msg_sys created at: [ 1072.586198][T16967] do_recvmmsg+0xc9/0x1200 [ 1072.590659][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1072.816535][T16967] not chained 1700000 origins [ 1072.821264][T16967] CPU: 0 PID: 16967 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1072.832827][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.842915][T16967] Call Trace: [ 1072.846200][T16967] [ 1072.849129][T16967] dump_stack_lvl+0x200/0x28c [ 1072.853835][T16967] dump_stack+0x29/0x2c [ 1072.858010][T16967] kmsan_internal_chain_origin+0x78/0x120 [ 1072.863779][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1072.869872][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.875014][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1072.880853][T16967] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1072.886433][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.891577][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1072.897418][T16967] ? should_fail+0x79/0x9c0 [ 1072.901937][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.907080][T16967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1072.913377][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1072.919484][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.924625][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1072.930482][T16967] __msan_chain_origin+0xbd/0x140 [ 1072.935536][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1072.940690][T16967] get_compat_msghdr+0x10c/0x280 [ 1072.945656][T16967] ? do_recvmmsg+0x7c9/0x1200 [ 1072.950364][T16967] ___sys_recvmsg+0x289/0xb40 [ 1072.955075][T16967] ? __schedule+0x176c/0x21c0 [ 1072.959787][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.964934][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1072.970788][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.975948][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1072.982519][T16967] do_recvmmsg+0x7c9/0x1200 [ 1072.987082][T16967] ? filter_irq_stacks+0xb9/0x230 [ 1072.992167][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1072.997325][T16967] ? __sys_recvmmsg+0xb9/0x6f0 [ 1073.002123][T16967] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.008672][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.013434][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.019819][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.024892][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.029775][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.034308][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.040690][T16967] RIP: 0023:0xf7f83549 [ 1073.044775][T16967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1073.064404][T16967] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1073.072835][T16967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1073.080816][T16967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1073.088796][T16967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1073.096774][T16967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1073.104751][T16967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1073.112751][T16967] [ 1073.118169][T16967] Uninit was stored to memory at: [ 1073.124023][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1073.129207][T16967] get_compat_msghdr+0x10c/0x280 [ 1073.134310][T16967] ___sys_recvmsg+0x289/0xb40 [ 1073.139050][T16967] do_recvmmsg+0x7c9/0x1200 [ 1073.143704][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.148430][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.155460][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.160545][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.165686][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.170238][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.176866][T16967] [ 1073.179205][T16967] Uninit was stored to memory at: [ 1073.184579][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1073.189735][T16967] get_compat_msghdr+0x10c/0x280 [ 1073.194866][T16967] ___sys_recvmsg+0x289/0xb40 [ 1073.199599][T16967] do_recvmmsg+0x7c9/0x1200 [ 1073.204290][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.209041][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.215595][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.220674][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.225743][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.230291][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.236807][T16967] [ 1073.239137][T16967] Uninit was stored to memory at: [ 1073.244394][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1073.249553][T16967] get_compat_msghdr+0x10c/0x280 [ 1073.254713][T16967] ___sys_recvmsg+0x289/0xb40 [ 1073.259460][T16967] do_recvmmsg+0x7c9/0x1200 [ 1073.264195][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.268926][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.275412][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.280490][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.285538][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.290105][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.296616][T16967] [ 1073.298953][T16967] Uninit was stored to memory at: [ 1073.304212][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1073.309440][T16967] get_compat_msghdr+0x10c/0x280 [ 1073.314586][T16967] ___sys_recvmsg+0x289/0xb40 [ 1073.319319][T16967] do_recvmmsg+0x7c9/0x1200 [ 1073.324049][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.328783][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.335302][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.340376][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.345430][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.349978][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.356466][T16967] [ 1073.358797][T16967] Uninit was stored to memory at: [ 1073.364040][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1073.369199][T16967] get_compat_msghdr+0x10c/0x280 [ 1073.374350][T16967] ___sys_recvmsg+0x289/0xb40 [ 1073.379106][T16967] do_recvmmsg+0x7c9/0x1200 [ 1073.383802][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.388529][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.395065][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.400158][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.405164][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.409710][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.416225][T16967] [ 1073.418556][T16967] Uninit was stored to memory at: [ 1073.423740][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1073.428898][T16967] get_compat_msghdr+0x10c/0x280 [ 1073.434030][T16967] ___sys_recvmsg+0x289/0xb40 [ 1073.438753][T16967] do_recvmmsg+0x7c9/0x1200 [ 1073.443459][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.448312][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.454858][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.459964][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.464967][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.469521][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.476074][T16967] [ 1073.478413][T16967] Uninit was stored to memory at: [ 1073.483667][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1073.488831][T16967] get_compat_msghdr+0x10c/0x280 [ 1073.494015][T16967] ___sys_recvmsg+0x289/0xb40 [ 1073.498769][T16967] do_recvmmsg+0x7c9/0x1200 [ 1073.503511][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.508424][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.514958][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.520068][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.525134][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.529685][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.536175][T16967] [ 1073.538506][T16967] Local variable msg_sys created at: [ 1073.544499][T16967] do_recvmmsg+0xc9/0x1200 [ 1073.548963][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.736397][T16967] not chained 1710000 origins [ 1073.741117][T16967] CPU: 0 PID: 16967 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1073.752792][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.762867][T16967] Call Trace: [ 1073.766145][T16967] [ 1073.769075][T16967] dump_stack_lvl+0x200/0x28c [ 1073.773778][T16967] dump_stack+0x29/0x2c [ 1073.777950][T16967] kmsan_internal_chain_origin+0x78/0x120 [ 1073.783712][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1073.789825][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1073.794967][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1073.800833][T16967] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1073.806405][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1073.811560][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1073.817404][T16967] ? should_fail+0x79/0x9c0 [ 1073.821928][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1073.827100][T16967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1073.833588][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1073.839695][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1073.844837][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1073.850702][T16967] __msan_chain_origin+0xbd/0x140 [ 1073.855774][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1073.860929][T16967] get_compat_msghdr+0x10c/0x280 [ 1073.865893][T16967] ? do_recvmmsg+0x7c9/0x1200 [ 1073.870596][T16967] ___sys_recvmsg+0x289/0xb40 [ 1073.875304][T16967] ? __schedule+0x176c/0x21c0 [ 1073.880045][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1073.885183][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1073.891282][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1073.896420][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1073.902301][T16967] do_recvmmsg+0x7c9/0x1200 [ 1073.906834][T16967] ? filter_irq_stacks+0xb9/0x230 [ 1073.911891][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1073.917042][T16967] ? __sys_recvmmsg+0xb9/0x6f0 [ 1073.921835][T16967] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.928370][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1073.933111][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1073.939507][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1073.944569][T16967] do_fast_syscall_32+0x33/0x70 [ 1073.949483][T16967] do_SYSENTER_32+0x1b/0x20 [ 1073.954036][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1073.960397][T16967] RIP: 0023:0xf7f83549 [ 1073.964470][T16967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1073.984206][T16967] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1073.992645][T16967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1074.000742][T16967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1074.008748][T16967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1074.016735][T16967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1074.024721][T16967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1074.032753][T16967] [ 1074.037889][T16967] Uninit was stored to memory at: [ 1074.043526][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.048689][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.053815][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.058546][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.063230][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.067956][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.074526][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.079590][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.084652][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.089196][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1074.095754][T16967] [ 1074.098095][T16967] Uninit was stored to memory at: [ 1074.103355][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.108512][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.113670][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.118397][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.123140][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.127863][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.134398][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.139466][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.144558][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.149104][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1074.155661][T16967] [ 1074.157991][T16967] Uninit was stored to memory at: [ 1074.163245][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.168410][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.173589][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.178316][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.183049][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.187790][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.194367][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.199457][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.204540][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.209087][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1074.215682][T16967] [ 1074.218010][T16967] Uninit was stored to memory at: [ 1074.223260][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.228427][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.233587][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.238312][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.242998][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.247727][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.254312][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.259390][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.264426][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.268969][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1074.275545][T16967] [ 1074.277875][T16967] Uninit was stored to memory at: [ 1074.283160][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.288355][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.293527][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.298252][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.302998][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.307732][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.314306][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.319391][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.324421][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.328965][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1074.335535][T16967] [ 1074.337866][T16967] Uninit was stored to memory at: [ 1074.343139][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.348317][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.353507][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.358235][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.362978][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.367709][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.374270][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.379346][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.384432][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.388977][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1074.395491][T16967] [ 1074.397838][T16967] Uninit was stored to memory at: [ 1074.403113][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.408277][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.413451][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.418201][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.422894][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.427622][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.434183][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.439255][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.444352][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.448904][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1074.455439][T16967] [ 1074.457772][T16967] Local variable msg_sys created at: [ 1074.463240][T16967] do_recvmmsg+0xc9/0x1200 [ 1074.467706][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.639587][T16967] not chained 1720000 origins [ 1074.647799][T16967] CPU: 0 PID: 16967 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1074.659405][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.669502][T16967] Call Trace: [ 1074.672803][T16967] [ 1074.675746][T16967] dump_stack_lvl+0x200/0x28c [ 1074.680491][T16967] dump_stack+0x29/0x2c [ 1074.684679][T16967] kmsan_internal_chain_origin+0x78/0x120 [ 1074.690426][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1074.696522][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1074.701661][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1074.707526][T16967] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1074.713125][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1074.718285][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1074.724124][T16967] ? should_fail+0x79/0x9c0 [ 1074.728680][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1074.733815][T16967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1074.740081][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1074.746177][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1074.751334][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1074.757198][T16967] __msan_chain_origin+0xbd/0x140 [ 1074.762273][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.767426][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.772395][T16967] ? do_recvmmsg+0x7c9/0x1200 [ 1074.777101][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.781817][T16967] ? __schedule+0x176c/0x21c0 [ 1074.786532][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1074.791684][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1074.797540][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1074.802691][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1074.808565][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.813125][T16967] ? filter_irq_stacks+0xb9/0x230 [ 1074.818187][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1074.823329][T16967] ? __sys_recvmmsg+0xb9/0x6f0 [ 1074.828115][T16967] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.834648][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.839363][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.845747][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.850800][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.855695][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.860246][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1074.866623][T16967] RIP: 0023:0xf7f83549 [ 1074.870707][T16967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1074.890332][T16967] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1074.898759][T16967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1074.906744][T16967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1074.914742][T16967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1074.922722][T16967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1074.930696][T16967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1074.938682][T16967] [ 1074.944011][T16967] Uninit was stored to memory at: [ 1074.949116][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1074.956022][T16967] get_compat_msghdr+0x10c/0x280 [ 1074.961104][T16967] ___sys_recvmsg+0x289/0xb40 [ 1074.966406][T16967] do_recvmmsg+0x7c9/0x1200 [ 1074.970972][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1074.975836][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1074.982333][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1074.987413][T16967] do_fast_syscall_32+0x33/0x70 [ 1074.992460][T16967] do_SYSENTER_32+0x1b/0x20 [ 1074.997009][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.003530][T16967] [ 1075.005859][T16967] Uninit was stored to memory at: [ 1075.010921][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.016209][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.021215][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.026078][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.030630][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.035514][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.042030][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.047102][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.052158][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.056716][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.063225][T16967] [ 1075.065554][T16967] Uninit was stored to memory at: [ 1075.070627][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.075902][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.080885][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.085739][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.090306][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.095186][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.101572][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.106836][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.111883][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.116430][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.122961][T16967] [ 1075.125292][T16967] Uninit was stored to memory at: [ 1075.130372][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.135720][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.140708][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.145622][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.150173][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.155007][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.161390][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.166676][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.171570][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.176252][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.182777][T16967] [ 1075.185102][T16967] Uninit was stored to memory at: [ 1075.190162][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.195494][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.200478][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.205375][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.209932][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.214805][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.221209][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.226409][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.231327][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.236051][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.242538][T16967] [ 1075.244865][T16967] Uninit was stored to memory at: [ 1075.249924][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.255249][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.260236][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.265145][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.269696][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.274599][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.281002][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.286187][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.291077][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.295756][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.302290][T16967] [ 1075.304622][T16967] Uninit was stored to memory at: [ 1075.309713][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.315065][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.320074][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.324932][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.329498][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.334433][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.340825][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.346035][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.350930][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.355606][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.362087][T16967] [ 1075.364416][T16967] Local variable msg_sys created at: [ 1075.369700][T16967] do_recvmmsg+0xc9/0x1200 [ 1075.374457][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.543299][T16967] not chained 1730000 origins [ 1075.548024][T16967] CPU: 1 PID: 16967 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1075.559719][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.569796][T16967] Call Trace: [ 1075.573120][T16967] [ 1075.576056][T16967] dump_stack_lvl+0x200/0x28c [ 1075.580781][T16967] dump_stack+0x29/0x2c [ 1075.584957][T16967] kmsan_internal_chain_origin+0x78/0x120 [ 1075.590728][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1075.596825][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1075.602058][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1075.607930][T16967] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1075.613540][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1075.618715][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1075.624590][T16967] ? should_fail+0x79/0x9c0 [ 1075.629143][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1075.634309][T16967] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1075.640616][T16967] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1075.646767][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1075.651935][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1075.657798][T16967] __msan_chain_origin+0xbd/0x140 [ 1075.662878][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.668064][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.673052][T16967] ? do_recvmmsg+0x7c9/0x1200 [ 1075.677788][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.682536][T16967] ? __schedule+0x176c/0x21c0 [ 1075.687266][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1075.692448][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1075.698310][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1075.703562][T16967] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1075.709431][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.713999][T16967] ? filter_irq_stacks+0xb9/0x230 [ 1075.719189][T16967] ? kmsan_get_metadata+0x33/0x220 [ 1075.724388][T16967] ? __sys_recvmmsg+0xb9/0x6f0 [ 1075.729223][T16967] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.735789][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.740508][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.746881][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.751958][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.756851][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.761373][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.767733][T16967] RIP: 0023:0xf7f83549 [ 1075.771826][T16967] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1075.791473][T16967] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1075.799916][T16967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1075.807933][T16967] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1075.815948][T16967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1075.823952][T16967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1075.831953][T16967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1075.839964][T16967] [ 1075.847440][T16967] Uninit was stored to memory at: [ 1075.853215][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.858381][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.863474][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.868215][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.872858][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.877578][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.884075][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.889147][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.894151][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.898693][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.905164][T16967] [ 1075.907498][T16967] Uninit was stored to memory at: [ 1075.912673][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.917825][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.922905][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.927632][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.932271][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.936994][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1075.943490][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1075.948559][T16967] do_fast_syscall_32+0x33/0x70 [ 1075.953555][T16967] do_SYSENTER_32+0x1b/0x20 [ 1075.958125][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1075.964596][T16967] [ 1075.966928][T16967] Uninit was stored to memory at: [ 1075.972154][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1075.977311][T16967] get_compat_msghdr+0x10c/0x280 [ 1075.982385][T16967] ___sys_recvmsg+0x289/0xb40 [ 1075.987111][T16967] do_recvmmsg+0x7c9/0x1200 [ 1075.991758][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1075.996487][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1076.002980][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1076.008053][T16967] do_fast_syscall_32+0x33/0x70 [ 1076.013112][T16967] do_SYSENTER_32+0x1b/0x20 [ 1076.017659][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1076.024207][T16967] [ 1076.026534][T16967] Uninit was stored to memory at: [ 1076.031597][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1076.036901][T16967] get_compat_msghdr+0x10c/0x280 [ 1076.042045][T16967] ___sys_recvmsg+0x289/0xb40 [ 1076.046776][T16967] do_recvmmsg+0x7c9/0x1200 [ 1076.051325][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1076.056218][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1076.062672][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1076.067719][T16967] do_fast_syscall_32+0x33/0x70 [ 1076.072747][T16967] do_SYSENTER_32+0x1b/0x20 [ 1076.077290][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1076.083782][T16967] [ 1076.086112][T16967] Uninit was stored to memory at: [ 1076.091185][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1076.096499][T16967] get_compat_msghdr+0x10c/0x280 [ 1076.101491][T16967] ___sys_recvmsg+0x289/0xb40 [ 1076.106362][T16967] do_recvmmsg+0x7c9/0x1200 [ 1076.110910][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1076.115784][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1076.122268][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1076.127345][T16967] do_fast_syscall_32+0x33/0x70 [ 1076.132379][T16967] do_SYSENTER_32+0x1b/0x20 [ 1076.136923][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1076.143469][T16967] [ 1076.145801][T16967] Uninit was stored to memory at: [ 1076.150871][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1076.156197][T16967] get_compat_msghdr+0x10c/0x280 [ 1076.161183][T16967] ___sys_recvmsg+0x289/0xb40 [ 1076.166081][T16967] do_recvmmsg+0x7c9/0x1200 [ 1076.170634][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1076.175494][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1076.181972][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1076.187049][T16967] do_fast_syscall_32+0x33/0x70 [ 1076.192071][T16967] do_SYSENTER_32+0x1b/0x20 [ 1076.196613][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1076.203146][T16967] [ 1076.205474][T16967] Uninit was stored to memory at: [ 1076.210551][T16967] __get_compat_msghdr+0x6ea/0x9e0 [ 1076.215812][T16967] get_compat_msghdr+0x10c/0x280 [ 1076.220815][T16967] ___sys_recvmsg+0x289/0xb40 [ 1076.225690][T16967] do_recvmmsg+0x7c9/0x1200 [ 1076.230243][T16967] __sys_recvmmsg+0x520/0x6f0 [ 1076.235098][T16967] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1076.241504][T16967] __do_fast_syscall_32+0x95/0xf0 [ 1076.246743][T16967] do_fast_syscall_32+0x33/0x70 [ 1076.251821][T16967] do_SYSENTER_32+0x1b/0x20 [ 1076.256366][T16967] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1076.262909][T16967] [ 1076.265290][T16967] Local variable msg_sys created at: [ 1076.270575][T16967] do_recvmmsg+0xc9/0x1200 [ 1076.275190][T16967] __sys_recvmmsg+0x520/0x6f0 03:42:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) connect$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000010300000000", @ANYRES32=r1], 0xa8}}, {{&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{0x0}, {&(0x7f00000019c0)="e9bb31c9b782a8431343c21a98eb29fc8c7d528c4b3b5a1742d1dd1186e57325dac7aafc6f90be0ac73deb65b64e708fc333eacc2266f0f9773fe68ae999948670bd815c8d9f661c129fc73eef0ed0f928fce4856ead86ddea186e4c7fb750617aa9c07e8a86eba2a0de47403b2121e5d41172a3018a35eee92bdbe0330ce083f10adfa046c31fa684a0c5e00da363239dce367bc6c8b648951b52ceeea4b7fd16e25250602cc56e1cc3c5cc2b0fd77ad16c8e323cd19e027b07e3", 0xbb}, {0x0}, {0x0}, {&(0x7f0000001cc0)="6430a554b676172171e00461a9ba59ec9b42c834599c7b284e9ef75fabb471c4810ab97a7a52b8d464075c66f8908b7137f9176eb3ca594012aac4edddb9ab80014b190e4815ef35f2df9c940393f0a266317db8c98511b203247bf1fbf018c326aad7381d54bdaab8483237e4935b7fc0534c2ffb19faf042a17f9d8f554e18b2acf89cd9d246a0ab50340fa143b794f2ed28c3d4f3081e66f10f4a5faaa760a9caaa3f5ac9baa38dae71cd3b6816f3f767e6fc3f3bfa9d2e18017c8f5e3eb42715e4e74bc18aa34fc585ddbef04ad0", 0xd0}, {0x0}, {&(0x7f0000001e40)="d00c197c7c14168099897dd03b7ad99c2013a6fa8ea69c2d730665e3118feca77be495942cf3", 0x26}, {&(0x7f0000001f00)="60e14ff60cfbad91043277ebdd060602b7cdf0b0681d75a5fb3ded37a019847c9ce65d6f4f54c54e2edf659e3449a4ca24aa22ffe4d0d7819a96ab80221025f2cd022960046a08d1f8185c16894c02abd257056a6216653beaee23b744914138f0a906589ceb33c6f7eefa4602bb48333ab81afb444655c2bb698e9f0fe2424d09c40cdf094174c91c12af177d32d4af1f3dfd2a2f6fb03d3110544140", 0x9d}], 0x8, 0x0, 0x0, 0x40}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002140)="9d2d075f91004d5da7c4a643a00f7cf10d8537b6859cea2645f0583b5d041f78f560ca61117db4f9bba4eeb51c9d", 0x2e}], 0x1, &(0x7f0000002340), 0x0, 0x34}}], 0x3, 0x4040010) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 03:42:16 executing program 5: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) 03:42:16 executing program 4: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) 03:42:16 executing program 2: setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r1 = memfd_create(&(0x7f00000020c0)='(^&\x00', 0x4) fchown(r1, r0, 0x0) 03:42:16 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000ec010000130200001200000000000000000200000001000073564d38e10000001e000000000000000010cc030200010052654973457233467300000001000000020001000200010200000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003bc1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x11000}, {&(0x7f0000011200)="0000000000000000000000001200000000000000000200000001000073564d38e10000001e00"/64, 0x40, 0x212000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f00"/96, 0x60, 0x213000}, {&(0x7f0000011400)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003bc1655f3bc1655f3bc1655f0100000000000000", 0x60, 0x213fa0}], 0x0, &(0x7f0000011500)) 03:42:16 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xf44e, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x243029, &(0x7f0000000340)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40106614, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) [ 1076.521277][T16996] loop3: detected capacity change from 0 to 8511 [ 1076.614924][T16996] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1076.628812][T16996] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1077.195259][T17003] not chained 1740000 origins [ 1077.199980][T17003] CPU: 1 PID: 17003 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1077.211658][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.221734][T17003] Call Trace: [ 1077.225029][T17003] [ 1077.228000][T17003] dump_stack_lvl+0x200/0x28c [ 1077.232730][T17003] dump_stack+0x29/0x2c [ 1077.236921][T17003] kmsan_internal_chain_origin+0x78/0x120 [ 1077.242698][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1077.247856][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1077.253723][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1077.258893][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1077.264764][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1077.269926][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1077.275793][T17003] ? should_fail+0x79/0x9c0 [ 1077.280328][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1077.285488][T17003] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1077.291781][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1077.297905][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1077.303072][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1077.308931][T17003] __msan_chain_origin+0xbd/0x140 [ 1077.314018][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1077.319200][T17003] get_compat_msghdr+0x10c/0x280 [ 1077.324190][T17003] ? do_recvmmsg+0x7c9/0x1200 [ 1077.328920][T17003] ___sys_recvmsg+0x289/0xb40 [ 1077.333666][T17003] ? __schedule+0x176c/0x21c0 [ 1077.338416][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1077.343582][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1077.349441][T17003] ? __cond_resched+0x23/0x40 [ 1077.354161][T17003] ? preempt_schedule_common+0x130/0x190 [ 1077.359842][T17003] do_recvmmsg+0x7c9/0x1200 [ 1077.364398][T17003] ? filter_irq_stacks+0xb9/0x230 [ 1077.369493][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1077.374666][T17003] ? __sys_recvmmsg+0xb9/0x6f0 [ 1077.379480][T17003] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.386160][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1077.390904][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.397300][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1077.402377][T17003] do_fast_syscall_32+0x33/0x70 [ 1077.407270][T17003] do_SYSENTER_32+0x1b/0x20 [ 1077.411829][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1077.418205][T17003] RIP: 0023:0xf7f7e549 [ 1077.422319][T17003] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1077.442057][T17003] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1077.450514][T17003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1077.458516][T17003] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1077.466516][T17003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1077.474516][T17003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1077.482514][T17003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1077.490526][T17003] [ 1077.493725][T17003] Uninit was stored to memory at: [ 1077.498824][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1077.504074][T17003] get_compat_msghdr+0x10c/0x280 [ 1077.509058][T17003] ___sys_recvmsg+0x289/0xb40 [ 1077.513844][T17003] do_recvmmsg+0x7c9/0x1200 [ 1077.518394][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1077.523183][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.529567][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1077.534706][T17003] do_fast_syscall_32+0x33/0x70 [ 1077.539600][T17003] do_SYSENTER_32+0x1b/0x20 [ 1077.544214][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1077.550592][T17003] [ 1077.552983][T17003] Uninit was stored to memory at: [ 1077.558083][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1077.563302][T17003] get_compat_msghdr+0x10c/0x280 [ 1077.568345][T17003] ___sys_recvmsg+0x289/0xb40 [ 1077.573130][T17003] do_recvmmsg+0x7c9/0x1200 [ 1077.577679][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1077.582461][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.588846][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1077.593975][T17003] do_fast_syscall_32+0x33/0x70 [ 1077.598878][T17003] do_SYSENTER_32+0x1b/0x20 [ 1077.603514][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1077.609905][T17003] [ 1077.612310][T17003] Uninit was stored to memory at: [ 1077.617406][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1077.622631][T17003] get_compat_msghdr+0x10c/0x280 [ 1077.627623][T17003] ___sys_recvmsg+0x289/0xb40 [ 1077.632439][T17003] do_recvmmsg+0x7c9/0x1200 [ 1077.636993][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1077.641783][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.648179][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1077.653315][T17003] do_fast_syscall_32+0x33/0x70 [ 1077.658207][T17003] do_SYSENTER_32+0x1b/0x20 [ 1077.662807][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1077.669187][T17003] [ 1077.671515][T17003] Uninit was stored to memory at: [ 1077.676666][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1077.681879][T17003] get_compat_msghdr+0x10c/0x280 [ 1077.686867][T17003] ___sys_recvmsg+0x289/0xb40 [ 1077.691694][T17003] do_recvmmsg+0x7c9/0x1200 [ 1077.696248][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1077.700969][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.707419][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1077.712550][T17003] do_fast_syscall_32+0x33/0x70 [ 1077.717442][T17003] do_SYSENTER_32+0x1b/0x20 [ 1077.722042][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1077.728416][T17003] [ 1077.730917][T17003] Uninit was stored to memory at: [ 1077.736069][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1077.741224][T17003] get_compat_msghdr+0x10c/0x280 [ 1077.746267][T17003] ___sys_recvmsg+0x289/0xb40 [ 1077.750992][T17003] do_recvmmsg+0x7c9/0x1200 [ 1077.755606][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1077.760335][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.766784][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1077.771919][T17003] do_fast_syscall_32+0x33/0x70 [ 1077.776809][T17003] do_SYSENTER_32+0x1b/0x20 [ 1077.781363][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1077.787968][T17003] [ 1077.790307][T17003] Uninit was stored to memory at: [ 1077.795472][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1077.800633][T17003] get_compat_msghdr+0x10c/0x280 [ 1077.805683][T17003] ___sys_recvmsg+0x289/0xb40 [ 1077.810412][T17003] do_recvmmsg+0x7c9/0x1200 [ 1077.815032][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1077.819757][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.826200][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1077.831268][T17003] do_fast_syscall_32+0x33/0x70 [ 1077.836221][T17003] do_SYSENTER_32+0x1b/0x20 [ 1077.840762][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1077.847201][T17003] [ 1077.849536][T17003] Uninit was stored to memory at: [ 1077.854688][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1077.859845][T17003] get_compat_msghdr+0x10c/0x280 [ 1077.864887][T17003] ___sys_recvmsg+0x289/0xb40 [ 1077.869615][T17003] do_recvmmsg+0x7c9/0x1200 [ 1077.874230][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1077.878953][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1077.885399][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1077.890487][T17003] do_fast_syscall_32+0x33/0x70 [ 1077.895445][T17003] do_SYSENTER_32+0x1b/0x20 [ 1077.899986][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1077.906425][T17003] [ 1077.908753][T17003] Local variable msg_sys created at: [ 1077.914104][T17003] do_recvmmsg+0xc9/0x1200 [ 1077.918571][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1078.443517][T17004] not chained 1750000 origins [ 1078.448279][T17004] CPU: 0 PID: 17004 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1078.459865][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.469942][T17004] Call Trace: [ 1078.473236][T17004] [ 1078.476179][T17004] dump_stack_lvl+0x200/0x28c [ 1078.480905][T17004] dump_stack+0x29/0x2c [ 1078.485101][T17004] kmsan_internal_chain_origin+0x78/0x120 [ 1078.490875][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1078.496034][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1078.501897][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1078.507058][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1078.512240][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1078.518102][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1078.523262][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1078.529126][T17004] ? should_fail+0x79/0x9c0 [ 1078.533665][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1078.538829][T17004] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1078.545126][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1078.551261][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1078.556433][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1078.562303][T17004] __msan_chain_origin+0xbd/0x140 [ 1078.567387][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1078.572573][T17004] get_compat_msghdr+0x10c/0x280 [ 1078.577574][T17004] ? do_recvmmsg+0x7c9/0x1200 [ 1078.582314][T17004] ___sys_recvmsg+0x289/0xb40 [ 1078.587060][T17004] ? __schedule+0x176c/0x21c0 [ 1078.591795][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1078.596962][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1078.602825][T17004] ? __cond_resched+0x23/0x40 [ 1078.607577][T17004] ? preempt_schedule_common+0x130/0x190 [ 1078.613277][T17004] do_recvmmsg+0x7c9/0x1200 [ 1078.617863][T17004] ? filter_irq_stacks+0xb9/0x230 [ 1078.622967][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1078.628154][T17004] ? __sys_recvmmsg+0xb9/0x6f0 [ 1078.632973][T17004] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1078.639546][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1078.644308][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1078.650713][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1078.655793][T17004] do_fast_syscall_32+0x33/0x70 [ 1078.660700][T17004] do_SYSENTER_32+0x1b/0x20 [ 1078.665245][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1078.671624][T17004] RIP: 0023:0xf7f11549 [ 1078.675716][T17004] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1078.695366][T17004] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1078.703818][T17004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1078.711825][T17004] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1078.720087][T17004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1078.728082][T17004] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1078.736080][T17004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1078.744115][T17004] [ 1078.747353][T17004] Uninit was stored to memory at: [ 1078.752585][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1078.757796][T17004] get_compat_msghdr+0x10c/0x280 [ 1078.762930][T17004] ___sys_recvmsg+0x289/0xb40 [ 1078.767745][T17004] do_recvmmsg+0x7c9/0x1200 [ 1078.772440][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1078.777272][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1078.784001][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1078.789143][T17004] do_fast_syscall_32+0x33/0x70 [ 1078.794159][T17004] do_SYSENTER_32+0x1b/0x20 [ 1078.798755][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1078.805276][T17004] [ 1078.807671][T17004] Uninit was stored to memory at: [ 1078.812964][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1078.818193][T17004] get_compat_msghdr+0x10c/0x280 [ 1078.823391][T17004] ___sys_recvmsg+0x289/0xb40 [ 1078.828167][T17004] do_recvmmsg+0x7c9/0x1200 [ 1078.832884][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1078.837680][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1078.844247][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1078.849363][T17004] do_fast_syscall_32+0x33/0x70 [ 1078.854385][T17004] do_SYSENTER_32+0x1b/0x20 [ 1078.858986][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1078.865508][T17004] [ 1078.867908][T17004] Uninit was stored to memory at: [ 1078.873116][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1078.878333][T17004] get_compat_msghdr+0x10c/0x280 [ 1078.883490][T17004] ___sys_recvmsg+0x289/0xb40 [ 1078.888256][T17004] do_recvmmsg+0x7c9/0x1200 [ 1078.892955][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1078.897703][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1078.904236][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1078.909330][T17004] do_fast_syscall_32+0x33/0x70 [ 1078.914434][T17004] do_SYSENTER_32+0x1b/0x20 [ 1078.918999][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1078.925548][T17004] [ 1078.927897][T17004] Uninit was stored to memory at: [ 1078.933118][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1078.938329][T17004] get_compat_msghdr+0x10c/0x280 [ 1078.943505][T17004] ___sys_recvmsg+0x289/0xb40 [ 1078.948284][T17004] do_recvmmsg+0x7c9/0x1200 [ 1078.953000][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1078.957800][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1078.964343][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1078.969491][T17004] do_fast_syscall_32+0x33/0x70 [ 1078.974529][T17004] do_SYSENTER_32+0x1b/0x20 [ 1078.979117][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1078.985645][T17004] [ 1078.987997][T17004] Uninit was stored to memory at: [ 1078.993226][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1078.998449][T17004] get_compat_msghdr+0x10c/0x280 [ 1079.003631][T17004] ___sys_recvmsg+0x289/0xb40 [ 1079.008387][T17004] do_recvmmsg+0x7c9/0x1200 [ 1079.013077][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1079.017874][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1079.024447][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1079.029539][T17004] do_fast_syscall_32+0x33/0x70 [ 1079.034600][T17004] do_SYSENTER_32+0x1b/0x20 [ 1079.039170][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1079.045689][T17004] [ 1079.048041][T17004] Uninit was stored to memory at: [ 1079.053247][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1079.058460][T17004] get_compat_msghdr+0x10c/0x280 [ 1079.063598][T17004] ___sys_recvmsg+0x289/0xb40 [ 1079.068390][T17004] do_recvmmsg+0x7c9/0x1200 [ 1079.073136][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1079.077893][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1079.084447][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1079.089560][T17004] do_fast_syscall_32+0x33/0x70 [ 1079.094582][T17004] do_SYSENTER_32+0x1b/0x20 [ 1079.099164][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1079.105689][T17004] [ 1079.108095][T17004] Uninit was stored to memory at: [ 1079.113296][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1079.118528][T17004] get_compat_msghdr+0x10c/0x280 [ 1079.123654][T17004] ___sys_recvmsg+0x289/0xb40 [ 1079.128401][T17004] do_recvmmsg+0x7c9/0x1200 [ 1079.133122][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1079.137907][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1079.144448][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1079.149576][T17004] do_fast_syscall_32+0x33/0x70 [ 1079.154590][T17004] do_SYSENTER_32+0x1b/0x20 [ 1079.159193][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1079.165779][T17004] [ 1079.168141][T17004] Local variable msg_sys created at: [ 1079.173551][T17004] do_recvmmsg+0xc9/0x1200 [ 1079.178046][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1079.532971][T16996] REISERFS (device loop3): using ordered data mode [ 1079.539705][T16996] reiserfs: using flush barriers [ 1079.585296][T17004] not chained 1760000 origins [ 1079.590113][T17004] CPU: 0 PID: 17004 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1079.601714][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.611798][T17004] Call Trace: [ 1079.615095][T17004] [ 1079.618038][T17004] dump_stack_lvl+0x200/0x28c [ 1079.622774][T17004] dump_stack+0x29/0x2c [ 1079.626985][T17004] kmsan_internal_chain_origin+0x78/0x120 [ 1079.632763][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1079.638903][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1079.644197][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1079.650079][T17004] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1079.655687][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1079.660857][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1079.666726][T17004] ? should_fail+0x79/0x9c0 [ 1079.671270][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1079.676433][T17004] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1079.682731][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1079.688851][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1079.694043][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1079.699923][T17004] __msan_chain_origin+0xbd/0x140 [ 1079.705026][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1079.710227][T17004] get_compat_msghdr+0x10c/0x280 [ 1079.715222][T17004] ? do_recvmmsg+0x7c9/0x1200 [ 1079.719970][T17004] ___sys_recvmsg+0x289/0xb40 [ 1079.724711][T17004] ? __schedule+0x176c/0x21c0 [ 1079.729447][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1079.734616][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1079.740487][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1079.745652][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1079.751517][T17004] do_recvmmsg+0x7c9/0x1200 [ 1079.756072][T17004] ? filter_irq_stacks+0xb9/0x230 [ 1079.761163][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1079.766335][T17004] ? __sys_recvmmsg+0xb9/0x6f0 [ 1079.771159][T17004] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1079.771342][T17003] not chained 1770000 origins [ 1079.777736][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1079.777839][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1079.793465][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1079.798528][T17004] do_fast_syscall_32+0x33/0x70 [ 1079.803407][T17004] do_SYSENTER_32+0x1b/0x20 [ 1079.807940][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1079.814303][T17004] RIP: 0023:0xf7f11549 [ 1079.818383][T17004] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1079.838020][T17004] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1079.846474][T17004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1079.854464][T17004] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1079.862451][T17004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1079.870448][T17004] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1079.878436][T17004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1079.886434][T17004] [ 1079.889459][T17003] CPU: 1 PID: 17003 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1079.889563][T17004] Uninit was stored to memory at: [ 1079.901038][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.901066][T17003] Call Trace: [ 1079.901082][T17003] [ 1079.901098][T17003] dump_stack_lvl+0x200/0x28c [ 1079.906274][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1079.916185][T17003] dump_stack+0x29/0x2c [ 1079.916235][T17003] kmsan_internal_chain_origin+0x78/0x120 [ 1079.919538][T17004] get_compat_msghdr+0x10c/0x280 [ 1079.922463][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1079.922529][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1079.927178][T17004] ___sys_recvmsg+0x289/0xb40 [ 1079.932274][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1079.932345][T17003] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1079.936496][T17004] do_recvmmsg+0x7c9/0x1200 [ 1079.942203][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1079.942266][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1079.947198][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1079.954209][T17003] ? should_fail+0x79/0x9c0 [ 1079.954257][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1079.959377][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1079.964052][T17003] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1079.964121][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1079.969917][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1079.975451][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1079.975514][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1079.980026][T17004] do_fast_syscall_32+0x33/0x70 [ 1079.985129][T17003] __msan_chain_origin+0xbd/0x140 [ 1079.985192][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1079.990981][T17004] do_SYSENTER_32+0x1b/0x20 [ 1079.995660][T17003] get_compat_msghdr+0x10c/0x280 [ 1079.995726][T17003] ? do_recvmmsg+0x7c9/0x1200 [ 1080.000209][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.005310][T17003] ___sys_recvmsg+0x289/0xb40 [ 1080.005387][T17003] ? __schedule+0x176c/0x21c0 [ 1080.011757][T17004] [ 1080.017910][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1080.024032][T17004] Uninit was stored to memory at: [ 1080.028966][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1080.034200][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.039849][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1080.044762][T17004] get_compat_msghdr+0x10c/0x280 [ 1080.049690][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1080.054871][T17004] ___sys_recvmsg+0x289/0xb40 [ 1080.059283][T17003] do_recvmmsg+0x7c9/0x1200 [ 1080.064277][T17004] do_recvmmsg+0x7c9/0x1200 [ 1080.068864][T17003] ? filter_irq_stacks+0xb9/0x230 [ 1080.075256][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1080.079848][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1080.084593][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.086838][T17003] ? __sys_recvmmsg+0xb9/0x6f0 [ 1080.092002][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1080.096933][T17003] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.102799][T17004] do_fast_syscall_32+0x33/0x70 [ 1080.107819][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1080.112988][T17004] do_SYSENTER_32+0x1b/0x20 [ 1080.117843][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.123707][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.128300][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1080.132858][T17004] [ 1080.137277][T17003] do_fast_syscall_32+0x33/0x70 [ 1080.142359][T17004] Uninit was stored to memory at: [ 1080.146957][T17003] do_SYSENTER_32+0x1b/0x20 [ 1080.152199][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.158368][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.163194][T17004] get_compat_msghdr+0x10c/0x280 [ 1080.168124][T17003] RIP: 0023:0xf7f7e549 [ 1080.174693][T17004] ___sys_recvmsg+0x289/0xb40 [ 1080.179460][T17003] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1080.184201][T17004] do_recvmmsg+0x7c9/0x1200 [ 1080.188606][T17003] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1080.194999][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1080.201228][T17003] ORIG_RAX: 0000000000000151 [ 1080.201246][T17003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1080.206322][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.208557][T17003] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1080.213449][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1080.218399][T17003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1080.222966][T17004] do_fast_syscall_32+0x33/0x70 [ 1080.227979][T17003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1080.234370][T17004] do_SYSENTER_32+0x1b/0x20 [ 1080.239213][T17003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1080.243345][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.247940][T17003] [ 1080.267611][T17004] [ 1080.272100][T17003] Uninit was stored to memory at: [ 1080.278134][T17004] Uninit was stored to memory at: [ 1080.278215][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.282908][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.287537][T17004] get_compat_msghdr+0x10c/0x280 [ 1080.295570][T17003] get_compat_msghdr+0x10c/0x280 [ 1080.301968][T17004] ___sys_recvmsg+0x289/0xb40 [ 1080.309925][T17003] ___sys_recvmsg+0x289/0xb40 [ 1080.315013][T17004] do_recvmmsg+0x7c9/0x1200 [ 1080.323006][T17003] do_recvmmsg+0x7c9/0x1200 [ 1080.327864][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1080.335872][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1080.340385][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.348420][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.354807][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1080.357813][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1080.360127][T17004] do_fast_syscall_32+0x33/0x70 [ 1080.365189][T17003] do_fast_syscall_32+0x33/0x70 [ 1080.370217][T17004] do_SYSENTER_32+0x1b/0x20 [ 1080.375372][T17003] do_SYSENTER_32+0x1b/0x20 [ 1080.380484][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.385472][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.390417][T17004] [ 1080.390427][T17004] Uninit was stored to memory at: [ 1080.395145][T17003] [ 1080.395154][T17003] Uninit was stored to memory at: [ 1080.395230][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.399898][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.404407][T17003] get_compat_msghdr+0x10c/0x280 [ 1080.408914][T17004] get_compat_msghdr+0x10c/0x280 [ 1080.413649][T17003] ___sys_recvmsg+0x289/0xb40 [ 1080.418332][T17004] ___sys_recvmsg+0x289/0xb40 [ 1080.424700][T17003] do_recvmmsg+0x7c9/0x1200 [ 1080.431118][T17004] do_recvmmsg+0x7c9/0x1200 [ 1080.436181][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1080.441210][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1080.446099][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.450954][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.455491][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1080.459996][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1080.466367][T17003] do_fast_syscall_32+0x33/0x70 [ 1080.472755][T17004] do_fast_syscall_32+0x33/0x70 [ 1080.475062][T17003] do_SYSENTER_32+0x1b/0x20 [ 1080.480084][T17004] do_SYSENTER_32+0x1b/0x20 [ 1080.482456][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.487484][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.492637][T17003] [ 1080.492647][T17003] Uninit was stored to memory at: [ 1080.492719][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.497753][T17004] [ 1080.497762][T17004] Uninit was stored to memory at: [ 1080.502815][T17003] get_compat_msghdr+0x10c/0x280 [ 1080.507819][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.512473][T17003] ___sys_recvmsg+0x289/0xb40 [ 1080.517163][T17004] get_compat_msghdr+0x10c/0x280 [ 1080.521705][T17003] do_recvmmsg+0x7c9/0x1200 [ 1080.526212][T17004] ___sys_recvmsg+0x289/0xb40 [ 1080.530872][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1080.535610][T17004] do_recvmmsg+0x7c9/0x1200 [ 1080.542082][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.548273][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1080.553337][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1080.558371][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.563286][T17003] do_fast_syscall_32+0x33/0x70 [ 1080.568140][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1080.568194][T17004] do_fast_syscall_32+0x33/0x70 [ 1080.572735][T17003] do_SYSENTER_32+0x1b/0x20 [ 1080.577241][T17004] do_SYSENTER_32+0x1b/0x20 [ 1080.583606][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.589938][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.592304][T17003] [ 1080.592313][T17003] Uninit was stored to memory at: [ 1080.592391][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.597336][T17004] [ 1080.597344][T17004] Uninit was stored to memory at: [ 1080.602485][T17003] get_compat_msghdr+0x10c/0x280 [ 1080.604884][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.609824][T17003] ___sys_recvmsg+0x289/0xb40 [ 1080.614843][T17004] get_compat_msghdr+0x10c/0x280 [ 1080.619916][T17003] do_recvmmsg+0x7c9/0x1200 [ 1080.624653][T17004] ___sys_recvmsg+0x289/0xb40 [ 1080.629551][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1080.634119][T17004] do_recvmmsg+0x7c9/0x1200 [ 1080.638766][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.643507][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1080.647973][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1080.654360][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.658999][T17003] do_fast_syscall_32+0x33/0x70 [ 1080.664082][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1080.670374][T17003] do_SYSENTER_32+0x1b/0x20 [ 1080.675286][T17004] do_fast_syscall_32+0x33/0x70 [ 1080.680271][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.685182][T17004] do_SYSENTER_32+0x1b/0x20 [ 1080.689654][T17003] [ 1080.689663][T17003] Uninit was stored to memory at: [ 1080.694220][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.700571][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.706923][T17004] [ 1080.709210][T17003] get_compat_msghdr+0x10c/0x280 [ 1080.714285][T17004] Local variable msg_sys created at: [ 1080.719372][T17003] ___sys_recvmsg+0x289/0xb40 [ 1080.721763][T17004] do_recvmmsg+0xc9/0x1200 [ 1080.726744][T17003] do_recvmmsg+0x7c9/0x1200 [ 1080.731752][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1080.737432][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1080.872705][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.879096][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1080.884227][T17003] do_fast_syscall_32+0x33/0x70 [ 1080.889115][T17003] do_SYSENTER_32+0x1b/0x20 [ 1080.893732][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.900113][T17003] [ 1080.902494][T17003] Uninit was stored to memory at: [ 1080.907589][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1080.912802][T17003] get_compat_msghdr+0x10c/0x280 [ 1080.917780][T17003] ___sys_recvmsg+0x289/0xb40 [ 1080.922564][T17003] do_recvmmsg+0x7c9/0x1200 [ 1080.927111][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1080.928668][T17004] not chained 1780000 origins [ 1080.931883][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1080.936582][T17004] CPU: 0 PID: 17004 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1080.942947][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1080.954413][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.954441][T17004] Call Trace: [ 1080.954458][T17004] [ 1080.954475][T17004] dump_stack_lvl+0x200/0x28c [ 1080.959473][T17003] do_fast_syscall_32+0x33/0x70 [ 1080.969529][T17004] dump_stack+0x29/0x2c [ 1080.969579][T17004] kmsan_internal_chain_origin+0x78/0x120 [ 1080.972900][T17003] do_SYSENTER_32+0x1b/0x20 [ 1080.975777][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1080.980434][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1080.985282][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1080.985345][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1080.989476][T17003] [ 1080.989485][T17003] Uninit was stored to memory at: [ 1080.995184][T17004] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1080.995249][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1080.999816][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.005807][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.005883][T17004] ? should_fail+0x79/0x9c0 [ 1081.012240][T17003] get_compat_msghdr+0x10c/0x280 [ 1081.017282][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1081.023139][T17003] ___sys_recvmsg+0x289/0xb40 [ 1081.025406][T17004] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1081.030410][T17003] do_recvmmsg+0x7c9/0x1200 [ 1081.035944][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1081.036012][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1081.041088][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1081.046185][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.046252][T17004] __msan_chain_origin+0xbd/0x140 [ 1081.052112][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.056548][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.061466][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1081.066583][T17004] get_compat_msghdr+0x10c/0x280 [ 1081.071280][T17003] do_fast_syscall_32+0x33/0x70 [ 1081.077510][T17004] ? do_recvmmsg+0x7c9/0x1200 [ 1081.077574][T17004] ___sys_recvmsg+0x289/0xb40 [ 1081.082091][T17003] do_SYSENTER_32+0x1b/0x20 [ 1081.088095][T17004] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1081.093264][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.097848][T17004] ? __schedule+0x1980/0x21c0 [ 1081.103688][T17003] [ 1081.108655][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1081.115017][T17003] Local variable msg_sys created at: [ 1081.120055][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.125114][T17003] do_recvmmsg+0xc9/0x1200 [ 1081.129981][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1081.134866][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1081.139477][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.203449][T17004] do_recvmmsg+0x7c9/0x1200 [ 1081.208013][T17004] ? filter_irq_stacks+0xb9/0x230 [ 1081.213102][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1081.218275][T17004] ? __sys_recvmmsg+0xb9/0x6f0 [ 1081.223087][T17004] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.229645][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1081.234390][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.240782][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1081.245865][T17004] do_fast_syscall_32+0x33/0x70 [ 1081.250850][T17004] do_SYSENTER_32+0x1b/0x20 [ 1081.255403][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.261782][T17004] RIP: 0023:0xf7f11549 [ 1081.265874][T17004] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1081.285523][T17004] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1081.293975][T17004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1081.301977][T17004] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1081.309983][T17004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1081.317978][T17004] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1081.325972][T17004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1081.329493][T17003] not chained 1790000 origins [ 1081.333978][T17004] [ 1081.334096][T17004] Uninit was stored to memory at: [ 1081.338693][T17003] CPU: 1 PID: 17003 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1081.341850][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.346710][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.358319][T17004] get_compat_msghdr+0x10c/0x280 [ 1081.363343][T17003] Call Trace: [ 1081.363364][T17003] [ 1081.363381][T17003] dump_stack_lvl+0x200/0x28c [ 1081.373540][T17004] ___sys_recvmsg+0x289/0xb40 [ 1081.378391][T17003] dump_stack+0x29/0x2c [ 1081.381730][T17004] do_recvmmsg+0x7c9/0x1200 [ 1081.384577][T17003] kmsan_internal_chain_origin+0x78/0x120 [ 1081.389233][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1081.393915][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1081.393980][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1081.398138][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.402627][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.402698][T17003] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1081.408422][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1081.413089][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1081.413152][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.419220][T17004] do_fast_syscall_32+0x33/0x70 [ 1081.424324][T17003] ? should_fail+0x79/0x9c0 [ 1081.424379][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1081.430712][T17004] do_SYSENTER_32+0x1b/0x20 [ 1081.436502][T17003] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1081.436573][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1081.442164][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.447118][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1081.452287][T17004] [ 1081.457997][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.462930][T17004] Uninit was stored to memory at: [ 1081.467345][T17003] __msan_chain_origin+0xbd/0x140 [ 1081.472607][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.476964][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.483261][T17004] get_compat_msghdr+0x10c/0x280 [ 1081.489252][T17003] get_compat_msghdr+0x10c/0x280 [ 1081.495623][T17004] ___sys_recvmsg+0x289/0xb40 [ 1081.500646][T17003] ? do_recvmmsg+0x7c9/0x1200 [ 1081.503017][T17004] do_recvmmsg+0x7c9/0x1200 [ 1081.508747][T17003] ___sys_recvmsg+0x289/0xb40 [ 1081.513838][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1081.518770][T17003] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1081.523939][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.528956][T17003] ? __schedule+0x1980/0x21c0 [ 1081.533955][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1081.538805][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1081.543533][T17004] do_fast_syscall_32+0x33/0x70 [ 1081.548116][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.552679][T17004] do_SYSENTER_32+0x1b/0x20 [ 1081.557262][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1081.561996][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.567276][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1081.573663][T17004] [ 1081.578248][T17003] do_recvmmsg+0x7c9/0x1200 [ 1081.583342][T17004] Uninit was stored to memory at: [ 1081.588370][T17003] ? filter_irq_stacks+0xb9/0x230 [ 1081.593343][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.598996][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1081.603548][T17004] get_compat_msghdr+0x10c/0x280 [ 1081.608573][T17003] ? __sys_recvmmsg+0xb9/0x6f0 [ 1081.614953][T17004] ___sys_recvmsg+0x289/0xb40 [ 1081.620661][T17003] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.623056][T17004] do_recvmmsg+0x7c9/0x1200 [ 1081.627478][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1081.632621][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1081.637550][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.642751][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.647750][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1081.652763][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1081.657422][T17003] do_fast_syscall_32+0x33/0x70 [ 1081.662169][T17004] do_fast_syscall_32+0x33/0x70 [ 1081.668566][T17003] do_SYSENTER_32+0x1b/0x20 [ 1081.673141][T17004] do_SYSENTER_32+0x1b/0x20 [ 1081.677730][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.682486][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.688713][T17003] RIP: 0023:0xf7f7e549 [ 1081.695102][T17004] [ 1081.700029][T17003] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1081.705114][T17004] Uninit was stored to memory at: [ 1081.709881][T17003] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1081.714876][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.719204][T17003] ORIG_RAX: 0000000000000151 [ 1081.719222][T17003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1081.723806][T17004] get_compat_msghdr+0x10c/0x280 [ 1081.730017][T17003] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1081.736464][T17004] ___sys_recvmsg+0x289/0xb40 [ 1081.740405][T17003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1081.742790][T17004] do_recvmmsg+0x7c9/0x1200 [ 1081.762328][T17003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1081.762371][T17003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1081.762415][T17003] [ 1081.762540][T17003] Uninit was stored to memory at: [ 1081.767474][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1081.773646][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.778704][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.783423][T17003] get_compat_msghdr+0x10c/0x280 [ 1081.791401][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1081.796384][T17003] ___sys_recvmsg+0x289/0xb40 [ 1081.804421][T17004] do_fast_syscall_32+0x33/0x70 [ 1081.809078][T17003] do_recvmmsg+0x7c9/0x1200 [ 1081.817119][T17004] do_SYSENTER_32+0x1b/0x20 [ 1081.821594][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1081.829671][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.837590][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.840619][T17004] [ 1081.840628][T17004] Uninit was stored to memory at: [ 1081.845683][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1081.850426][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.855522][T17003] do_fast_syscall_32+0x33/0x70 [ 1081.861914][T17004] get_compat_msghdr+0x10c/0x280 [ 1081.866842][T17003] do_SYSENTER_32+0x1b/0x20 [ 1081.871936][T17004] ___sys_recvmsg+0x289/0xb40 [ 1081.876576][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.881408][T17004] do_recvmmsg+0x7c9/0x1200 [ 1081.885950][T17003] [ 1081.885958][T17003] Uninit was stored to memory at: [ 1081.886030][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.890457][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1081.895168][T17003] get_compat_msghdr+0x10c/0x280 [ 1081.901482][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.907845][T17003] ___sys_recvmsg+0x289/0xb40 [ 1081.910190][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1081.915256][T17003] do_recvmmsg+0x7c9/0x1200 [ 1081.920270][T17004] do_fast_syscall_32+0x33/0x70 [ 1081.925422][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1081.930285][T17004] do_SYSENTER_32+0x1b/0x20 [ 1081.935303][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1081.939806][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.944531][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1081.950866][T17004] [ 1081.950876][T17004] Uninit was stored to memory at: [ 1081.955417][T17003] do_fast_syscall_32+0x33/0x70 [ 1081.957920][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.962916][T17003] do_SYSENTER_32+0x1b/0x20 [ 1081.968039][T17004] get_compat_msghdr+0x10c/0x280 [ 1081.972754][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1081.977699][T17004] ___sys_recvmsg+0x289/0xb40 [ 1081.984064][T17003] [ 1081.984074][T17003] Uninit was stored to memory at: [ 1081.984145][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1081.988744][T17004] do_recvmmsg+0x7c9/0x1200 [ 1081.993805][T17003] get_compat_msghdr+0x10c/0x280 [ 1081.998319][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1082.003208][T17003] ___sys_recvmsg+0x289/0xb40 [ 1082.007892][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.012438][T17003] do_recvmmsg+0x7c9/0x1200 [ 1082.018769][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1082.025158][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1082.030189][T17004] do_fast_syscall_32+0x33/0x70 [ 1082.032560][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.037603][T17004] do_SYSENTER_32+0x1b/0x20 [ 1082.042489][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1082.047602][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.052141][T17003] do_fast_syscall_32+0x33/0x70 [ 1082.057083][T17004] [ 1082.057092][T17004] Uninit was stored to memory at: [ 1082.063448][T17003] do_SYSENTER_32+0x1b/0x20 [ 1082.068193][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.070443][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.075532][T17004] get_compat_msghdr+0x10c/0x280 [ 1082.080618][T17003] [ 1082.080627][T17003] Uninit was stored to memory at: [ 1082.085169][T17004] ___sys_recvmsg+0x289/0xb40 [ 1082.090147][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.094843][T17004] do_recvmmsg+0x7c9/0x1200 [ 1082.099482][T17003] get_compat_msghdr+0x10c/0x280 [ 1082.105878][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1082.110337][T17003] ___sys_recvmsg+0x289/0xb40 [ 1082.115426][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.120086][T17003] do_recvmmsg+0x7c9/0x1200 [ 1082.124999][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1082.131284][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1082.135851][T17004] do_fast_syscall_32+0x33/0x70 [ 1082.140836][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.147243][T17004] do_SYSENTER_32+0x1b/0x20 [ 1082.152126][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1082.154448][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.159547][T17003] do_fast_syscall_32+0x33/0x70 [ 1082.164112][T17004] [ 1082.169186][T17003] do_SYSENTER_32+0x1b/0x20 [ 1082.175592][T17004] Local variable msg_sys created at: [ 1082.180490][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.182871][T17004] do_recvmmsg+0xc9/0x1200 [ 1082.187868][T17003] [ 1082.187877][T17003] Uninit was stored to memory at: [ 1082.192604][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1082.197740][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.309223][T17003] get_compat_msghdr+0x10c/0x280 [ 1082.314277][T17003] ___sys_recvmsg+0x289/0xb40 [ 1082.319007][T17003] do_recvmmsg+0x7c9/0x1200 [ 1082.323613][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1082.328335][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.334778][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1082.339846][T17003] do_fast_syscall_32+0x33/0x70 [ 1082.344795][T17003] do_SYSENTER_32+0x1b/0x20 [ 1082.349337][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.355775][T17003] [ 1082.358104][T17003] Uninit was stored to memory at: [ 1082.363245][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.368401][T17003] get_compat_msghdr+0x10c/0x280 [ 1082.373446][T17003] ___sys_recvmsg+0x289/0xb40 [ 1082.378193][T17003] do_recvmmsg+0x7c9/0x1200 [ 1082.382800][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1082.387522][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.388111][T17004] not chained 1800000 origins [ 1082.393958][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1082.398652][T17004] CPU: 0 PID: 17004 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1082.403732][T17003] do_fast_syscall_32+0x33/0x70 [ 1082.415194][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.415221][T17004] Call Trace: [ 1082.415238][T17004] [ 1082.415254][T17004] dump_stack_lvl+0x200/0x28c [ 1082.420081][T17003] do_SYSENTER_32+0x1b/0x20 [ 1082.430132][T17004] dump_stack+0x29/0x2c [ 1082.430183][T17004] kmsan_internal_chain_origin+0x78/0x120 [ 1082.433536][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.436410][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1082.441069][T17003] [ 1082.441078][T17003] Uninit was stored to memory at: [ 1082.445555][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1082.445618][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.449815][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.455469][T17004] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1082.455531][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1082.461914][T17003] get_compat_msghdr+0x10c/0x280 [ 1082.467919][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.470237][T17003] ___sys_recvmsg+0x289/0xb40 [ 1082.475264][T17004] ? should_fail+0x79/0x9c0 [ 1082.475312][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1082.480408][T17003] do_recvmmsg+0x7c9/0x1200 [ 1082.486285][T17004] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1082.486353][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1082.491437][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1082.496969][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1082.497033][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.502195][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.507040][T17004] __msan_chain_origin+0xbd/0x140 [ 1082.512882][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1082.517499][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.522040][T17003] do_fast_syscall_32+0x33/0x70 [ 1082.527097][T17004] get_compat_msghdr+0x10c/0x280 [ 1082.531565][T17003] do_SYSENTER_32+0x1b/0x20 [ 1082.537796][T17004] ? do_recvmmsg+0x7c9/0x1200 [ 1082.537866][T17004] ___sys_recvmsg+0x289/0xb40 [ 1082.543948][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.548562][T17004] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1082.553737][T17003] [ 1082.559448][T17004] ? __schedule+0x1980/0x21c0 [ 1082.565813][T17003] Local variable msg_sys created at: [ 1082.570770][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1082.570833][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.575879][T17003] do_recvmmsg+0xc9/0x1200 [ 1082.580928][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1082.585812][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1082.590684][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.659313][T17004] do_recvmmsg+0x7c9/0x1200 [ 1082.663884][T17004] ? filter_irq_stacks+0xb9/0x230 [ 1082.668976][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1082.674145][T17004] ? __sys_recvmmsg+0xb9/0x6f0 [ 1082.678958][T17004] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.685520][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1082.690261][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.696659][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1082.701733][T17004] do_fast_syscall_32+0x33/0x70 [ 1082.706627][T17004] do_SYSENTER_32+0x1b/0x20 [ 1082.711173][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.717551][T17004] RIP: 0023:0xf7f11549 [ 1082.721641][T17004] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1082.741287][T17004] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1082.749742][T17004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1082.757742][T17004] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1082.765778][T17004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1082.773773][T17004] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1082.780472][T17003] not chained 1810000 origins [ 1082.781898][T17004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1082.781948][T17004] [ 1082.782074][T17004] Uninit was stored to memory at: [ 1082.786655][T17003] CPU: 1 PID: 17003 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1082.794775][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.797629][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.802719][T17004] get_compat_msghdr+0x10c/0x280 [ 1082.814176][T17003] Call Trace: [ 1082.814196][T17003] [ 1082.814212][T17003] dump_stack_lvl+0x200/0x28c [ 1082.814273][T17003] dump_stack+0x29/0x2c [ 1082.819353][T17004] ___sys_recvmsg+0x289/0xb40 [ 1082.829402][T17003] kmsan_internal_chain_origin+0x78/0x120 [ 1082.829466][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1082.834465][T17004] do_recvmmsg+0x7c9/0x1200 [ 1082.837683][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1082.840609][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1082.845272][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.845343][T17003] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1082.849504][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.854172][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1082.854235][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.859952][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1082.866023][T17003] ? should_fail+0x79/0x9c0 [ 1082.866071][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1082.870588][T17004] do_fast_syscall_32+0x33/0x70 [ 1082.875684][T17003] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1082.875752][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1082.880421][T17004] do_SYSENTER_32+0x1b/0x20 [ 1082.886213][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1082.886277][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.891877][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1082.898130][T17003] __msan_chain_origin+0xbd/0x140 [ 1082.903305][T17004] [ 1082.909013][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.914107][T17004] Uninit was stored to memory at: [ 1082.918538][T17003] get_compat_msghdr+0x10c/0x280 [ 1082.923747][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1082.928466][T17003] ? do_recvmmsg+0x7c9/0x1200 [ 1082.934852][T17004] get_compat_msghdr+0x10c/0x280 [ 1082.941000][T17003] ___sys_recvmsg+0x289/0xb40 [ 1082.945569][T17004] ___sys_recvmsg+0x289/0xb40 [ 1082.950587][T17003] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1082.956452][T17004] do_recvmmsg+0x7c9/0x1200 [ 1082.963030][T17003] ? __schedule+0x1980/0x21c0 [ 1082.963094][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1082.968092][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1082.970408][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.975579][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1082.980512][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1082.985508][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1082.990532][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1082.995260][T17004] do_fast_syscall_32+0x33/0x70 [ 1083.000122][T17003] do_recvmmsg+0x7c9/0x1200 [ 1083.004866][T17004] do_SYSENTER_32+0x1b/0x20 [ 1083.009447][T17003] ? filter_irq_stacks+0xb9/0x230 [ 1083.014878][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.019309][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1083.024046][T17004] [ 1083.029067][T17003] ? __sys_recvmmsg+0xb9/0x6f0 [ 1083.033805][T17004] Uninit was stored to memory at: [ 1083.039519][T17003] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.045974][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.050927][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1083.056010][T17004] get_compat_msghdr+0x10c/0x280 [ 1083.061735][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.066615][T17004] ___sys_recvmsg+0x289/0xb40 [ 1083.071111][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1083.075666][T17004] do_recvmmsg+0x7c9/0x1200 [ 1083.080598][T17003] do_fast_syscall_32+0x33/0x70 [ 1083.086979][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1083.092000][T17003] do_SYSENTER_32+0x1b/0x20 [ 1083.092055][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.094374][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.099121][T17003] RIP: 0023:0xf7f7e549 [ 1083.104205][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1083.110626][T17003] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1083.115802][T17004] do_fast_syscall_32+0x33/0x70 [ 1083.120392][T17003] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1083.125371][T17004] do_SYSENTER_32+0x1b/0x20 [ 1083.131622][T17003] ORIG_RAX: 0000000000000151 [ 1083.131640][T17003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1083.131675][T17003] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1083.131706][T17003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1083.136363][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.141369][T17003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1083.145939][T17004] [ 1083.150701][T17003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1083.155461][T17004] Uninit was stored to memory at: [ 1083.159878][T17003] [ 1083.166323][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.172580][T17003] Uninit was stored to memory at: [ 1083.176617][T17004] get_compat_msghdr+0x10c/0x280 [ 1083.181757][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.201402][T17004] ___sys_recvmsg+0x289/0xb40 [ 1083.206287][T17003] get_compat_msghdr+0x10c/0x280 [ 1083.212414][T17004] do_recvmmsg+0x7c9/0x1200 [ 1083.216894][T17003] ___sys_recvmsg+0x289/0xb40 [ 1083.221552][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1083.229573][T17003] do_recvmmsg+0x7c9/0x1200 [ 1083.237629][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.245623][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1083.252012][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1083.259970][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.262363][T17004] do_fast_syscall_32+0x33/0x70 [ 1083.270301][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1083.275389][T17004] do_SYSENTER_32+0x1b/0x20 [ 1083.278380][T17003] do_fast_syscall_32+0x33/0x70 [ 1083.283561][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.288545][T17003] do_SYSENTER_32+0x1b/0x20 [ 1083.293543][T17004] [ 1083.298629][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.303368][T17004] Uninit was stored to memory at: [ 1083.308266][T17003] [ 1083.308274][T17003] Uninit was stored to memory at: [ 1083.312894][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.317544][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.322219][T17004] get_compat_msghdr+0x10c/0x280 [ 1083.326688][T17003] get_compat_msghdr+0x10c/0x280 [ 1083.333080][T17004] ___sys_recvmsg+0x289/0xb40 [ 1083.337711][T17003] ___sys_recvmsg+0x289/0xb40 [ 1083.342795][T17004] do_recvmmsg+0x7c9/0x1200 [ 1083.349081][T17003] do_recvmmsg+0x7c9/0x1200 [ 1083.353993][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1083.358973][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1083.363535][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.368364][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.374753][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1083.379217][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1083.381539][T17004] do_fast_syscall_32+0x33/0x70 [ 1083.387906][T17003] do_fast_syscall_32+0x33/0x70 [ 1083.392995][T17004] do_SYSENTER_32+0x1b/0x20 [ 1083.395309][T17003] do_SYSENTER_32+0x1b/0x20 [ 1083.400313][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.405462][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.410580][T17004] [ 1083.410590][T17004] Uninit was stored to memory at: [ 1083.415580][T17003] [ 1083.415588][T17003] Uninit was stored to memory at: [ 1083.415662][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.420593][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.425251][T17003] get_compat_msghdr+0x10c/0x280 [ 1083.429921][T17004] get_compat_msghdr+0x10c/0x280 [ 1083.434489][T17003] ___sys_recvmsg+0x289/0xb40 [ 1083.438997][T17004] ___sys_recvmsg+0x289/0xb40 [ 1083.443715][T17003] do_recvmmsg+0x7c9/0x1200 [ 1083.448396][T17004] do_recvmmsg+0x7c9/0x1200 [ 1083.454761][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1083.461096][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1083.466161][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.471192][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.476082][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1083.480940][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1083.485482][T17003] do_fast_syscall_32+0x33/0x70 [ 1083.490004][T17004] do_fast_syscall_32+0x33/0x70 [ 1083.496373][T17003] do_SYSENTER_32+0x1b/0x20 [ 1083.502764][T17004] do_SYSENTER_32+0x1b/0x20 [ 1083.505096][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.510102][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.512473][T17003] [ 1083.512481][T17003] Uninit was stored to memory at: [ 1083.512558][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.517504][T17004] [ 1083.517513][T17004] Uninit was stored to memory at: [ 1083.517583][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.522659][T17003] get_compat_msghdr+0x10c/0x280 [ 1083.527774][T17004] get_compat_msghdr+0x10c/0x280 [ 1083.532756][T17003] ___sys_recvmsg+0x289/0xb40 [ 1083.537701][T17004] ___sys_recvmsg+0x289/0xb40 [ 1083.542415][T17003] do_recvmmsg+0x7c9/0x1200 [ 1083.547097][T17004] do_recvmmsg+0x7c9/0x1200 [ 1083.551587][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1083.556193][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1083.560753][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.565505][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.571899][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1083.578178][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1083.583240][T17003] do_fast_syscall_32+0x33/0x70 [ 1083.588271][T17004] do_fast_syscall_32+0x33/0x70 [ 1083.593157][T17003] do_SYSENTER_32+0x1b/0x20 [ 1083.598011][T17004] do_SYSENTER_32+0x1b/0x20 [ 1083.602552][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.607060][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.613453][T17003] [ 1083.613466][T17003] Uninit was stored to memory at: [ 1083.613543][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.619791][T17004] [ 1083.619802][T17004] Local variable msg_sys created at: [ 1083.622172][T17003] get_compat_msghdr+0x10c/0x280 [ 1083.627205][T17004] do_recvmmsg+0xc9/0x1200 [ 1083.632371][T17003] ___sys_recvmsg+0x289/0xb40 [ 1083.634701][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1083.639708][T17003] do_recvmmsg+0x7c9/0x1200 [ 1083.780240][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1083.785036][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.791422][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1083.796561][T17003] do_fast_syscall_32+0x33/0x70 [ 1083.801453][T17003] do_SYSENTER_32+0x1b/0x20 [ 1083.806218][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.812676][T17003] [ 1083.815017][T17003] Uninit was stored to memory at: [ 1083.820133][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.825355][T17003] get_compat_msghdr+0x10c/0x280 [ 1083.830340][T17003] ___sys_recvmsg+0x289/0xb40 [ 1083.830949][T17004] not chained 1820000 origins [ 1083.835138][T17003] do_recvmmsg+0x7c9/0x1200 [ 1083.839836][T17004] CPU: 0 PID: 17004 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1083.844377][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1083.855842][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.855871][T17004] Call Trace: [ 1083.855888][T17004] [ 1083.855905][T17004] dump_stack_lvl+0x200/0x28c [ 1083.860579][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.870635][T17004] dump_stack+0x29/0x2c [ 1083.870685][T17004] kmsan_internal_chain_origin+0x78/0x120 [ 1083.874018][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1083.876891][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1083.881545][T17003] do_fast_syscall_32+0x33/0x70 [ 1083.887854][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1083.887917][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1083.892130][T17003] do_SYSENTER_32+0x1b/0x20 [ 1083.897752][T17004] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1083.902807][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1083.908820][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1083.913702][T17003] [ 1083.918745][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1083.924588][T17003] Uninit was stored to memory at: [ 1083.929040][T17004] ? should_fail+0x79/0x9c0 [ 1083.934698][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1083.940908][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1083.946091][T17003] get_compat_msghdr+0x10c/0x280 [ 1083.948319][T17004] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1083.954159][T17003] ___sys_recvmsg+0x289/0xb40 [ 1083.959117][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1083.963652][T17003] do_recvmmsg+0x7c9/0x1200 [ 1083.968695][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1083.973843][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1083.978709][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1083.984980][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1083.989590][T17004] __msan_chain_origin+0xbd/0x140 [ 1083.995719][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1084.000139][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.005290][T17003] do_fast_syscall_32+0x33/0x70 [ 1084.009916][T17004] get_compat_msghdr+0x10c/0x280 [ 1084.015735][T17003] do_SYSENTER_32+0x1b/0x20 [ 1084.021999][T17004] ? do_recvmmsg+0x7c9/0x1200 [ 1084.022065][T17004] ___sys_recvmsg+0x289/0xb40 [ 1084.027064][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.032076][T17004] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1084.032132][T17004] ? __schedule+0x1980/0x21c0 [ 1084.037215][T17003] [ 1084.037225][T17003] Local variable msg_sys created at: [ 1084.042077][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1084.042140][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1084.047070][T17003] do_recvmmsg+0xc9/0x1200 [ 1084.051559][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1084.056274][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1084.060875][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1084.115626][T17004] do_recvmmsg+0x7c9/0x1200 [ 1084.120192][T17004] ? filter_irq_stacks+0xb9/0x230 [ 1084.125281][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1084.130452][T17004] ? __sys_recvmmsg+0xb9/0x6f0 [ 1084.135267][T17004] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.141832][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1084.146575][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.152972][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1084.158045][T17004] do_fast_syscall_32+0x33/0x70 [ 1084.162938][T17004] do_SYSENTER_32+0x1b/0x20 [ 1084.167484][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.173863][T17004] RIP: 0023:0xf7f11549 [ 1084.177950][T17004] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1084.197598][T17004] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1084.206053][T17004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1084.214053][T17004] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1084.222046][T17004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1084.230034][T17004] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1084.238023][T17004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1084.246032][T17004] [ 1084.249133][T17004] Uninit was stored to memory at: [ 1084.253297][T17003] not chained 1830000 origins [ 1084.254304][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.258858][T17003] CPU: 1 PID: 17003 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1084.264031][T17004] get_compat_msghdr+0x10c/0x280 [ 1084.275464][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.275492][T17003] Call Trace: [ 1084.275508][T17003] [ 1084.275525][T17003] dump_stack_lvl+0x200/0x28c [ 1084.280554][T17004] ___sys_recvmsg+0x289/0xb40 [ 1084.290606][T17003] dump_stack+0x29/0x2c [ 1084.290657][T17003] kmsan_internal_chain_origin+0x78/0x120 [ 1084.294006][T17004] do_recvmmsg+0x7c9/0x1200 [ 1084.296875][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1084.301710][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1084.306288][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1084.310423][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.316125][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1084.316197][T17003] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1084.320693][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1084.326742][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1084.326805][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1084.331473][T17004] do_fast_syscall_32+0x33/0x70 [ 1084.336571][T17003] ? should_fail+0x79/0x9c0 [ 1084.336619][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1084.343010][T17004] do_SYSENTER_32+0x1b/0x20 [ 1084.348742][T17003] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1084.354342][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.359273][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1084.364442][T17004] [ 1084.370156][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1084.375061][T17004] Uninit was stored to memory at: [ 1084.379472][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1084.384711][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.389054][T17003] __msan_chain_origin+0xbd/0x140 [ 1084.395353][T17004] get_compat_msghdr+0x10c/0x280 [ 1084.401590][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.407714][T17004] ___sys_recvmsg+0x289/0xb40 [ 1084.409968][T17003] get_compat_msghdr+0x10c/0x280 [ 1084.415099][T17004] do_recvmmsg+0x7c9/0x1200 [ 1084.420054][T17003] ? do_recvmmsg+0x7c9/0x1200 [ 1084.425918][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1084.430933][T17003] ___sys_recvmsg+0x289/0xb40 [ 1084.436012][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.440858][T17003] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1084.446040][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1084.450627][T17003] ? __schedule+0x1980/0x21c0 [ 1084.455618][T17004] do_fast_syscall_32+0x33/0x70 [ 1084.460033][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1084.464752][T17004] do_SYSENTER_32+0x1b/0x20 [ 1084.469961][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1084.474696][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.480932][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1084.486366][T17004] [ 1084.491294][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1084.496032][T17004] Uninit was stored to memory at: [ 1084.500793][T17003] do_recvmmsg+0x7c9/0x1200 [ 1084.506039][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.510388][T17003] ? filter_irq_stacks+0xb9/0x230 [ 1084.516255][T17004] get_compat_msghdr+0x10c/0x280 [ 1084.522495][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1084.522566][T17003] ? __sys_recvmmsg+0xb9/0x6f0 [ 1084.527636][T17004] ___sys_recvmsg+0x289/0xb40 [ 1084.529953][T17003] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.535822][T17004] do_recvmmsg+0x7c9/0x1200 [ 1084.540767][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1084.545308][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1084.550358][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.555427][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.560280][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1084.565450][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1084.570125][T17003] do_fast_syscall_32+0x33/0x70 [ 1084.574842][T17004] do_fast_syscall_32+0x33/0x70 [ 1084.581367][T17003] do_SYSENTER_32+0x1b/0x20 [ 1084.585928][T17004] do_SYSENTER_32+0x1b/0x20 [ 1084.590513][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.595230][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.601480][T17003] RIP: 0023:0xf7f7e549 [ 1084.607883][T17004] [ 1084.612808][T17003] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1084.612856][T17003] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1084.617891][T17004] Uninit was stored to memory at: [ 1084.617967][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.622737][T17003] ORIG_RAX: 0000000000000151 [ 1084.622756][T17003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1084.622790][T17003] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1084.622820][T17003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1084.627657][T17004] get_compat_msghdr+0x10c/0x280 [ 1084.632143][T17003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1084.632173][T17003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1084.632217][T17003] [ 1084.632343][T17003] Uninit was stored to memory at: [ 1084.636708][T17004] ___sys_recvmsg+0x289/0xb40 [ 1084.643137][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.649406][T17004] do_recvmmsg+0x7c9/0x1200 [ 1084.653514][T17003] get_compat_msghdr+0x10c/0x280 [ 1084.655854][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1084.675608][T17003] ___sys_recvmsg+0x289/0xb40 [ 1084.681739][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.686745][T17003] do_recvmmsg+0x7c9/0x1200 [ 1084.691915][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1084.696552][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1084.704603][T17004] do_fast_syscall_32+0x33/0x70 [ 1084.712594][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.720575][T17004] do_SYSENTER_32+0x1b/0x20 [ 1084.725554][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1084.733593][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.741548][T17003] do_fast_syscall_32+0x33/0x70 [ 1084.744633][T17004] [ 1084.749621][T17003] do_SYSENTER_32+0x1b/0x20 [ 1084.754356][T17004] Uninit was stored to memory at: [ 1084.759424][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.764085][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.768948][T17003] [ 1084.768965][T17003] Uninit was stored to memory at: [ 1084.773713][T17004] get_compat_msghdr+0x10c/0x280 [ 1084.778421][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.784758][T17004] ___sys_recvmsg+0x289/0xb40 [ 1084.789227][T17003] get_compat_msghdr+0x10c/0x280 [ 1084.794324][T17004] do_recvmmsg+0x7c9/0x1200 [ 1084.798971][T17003] ___sys_recvmsg+0x289/0xb40 [ 1084.803883][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1084.810192][T17003] do_recvmmsg+0x7c9/0x1200 [ 1084.814758][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.819744][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1084.826132][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1084.830951][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.833352][T17004] do_fast_syscall_32+0x33/0x70 [ 1084.837844][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1084.842954][T17004] do_SYSENTER_32+0x1b/0x20 [ 1084.849249][T17003] do_fast_syscall_32+0x33/0x70 [ 1084.854437][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.856731][T17003] do_SYSENTER_32+0x1b/0x20 [ 1084.861824][T17004] [ 1084.866722][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.871900][T17004] Uninit was stored to memory at: [ 1084.876551][T17003] [ 1084.876559][T17003] Uninit was stored to memory at: [ 1084.881540][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.886076][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.890703][T17004] get_compat_msghdr+0x10c/0x280 [ 1084.895428][T17003] get_compat_msghdr+0x10c/0x280 [ 1084.900020][T17004] ___sys_recvmsg+0x289/0xb40 [ 1084.906387][T17003] ___sys_recvmsg+0x289/0xb40 [ 1084.911063][T17004] do_recvmmsg+0x7c9/0x1200 [ 1084.916125][T17003] do_recvmmsg+0x7c9/0x1200 [ 1084.922531][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1084.927366][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1084.932447][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.936913][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1084.941851][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1084.948140][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1084.952702][T17004] do_fast_syscall_32+0x33/0x70 [ 1084.954992][T17003] do_fast_syscall_32+0x33/0x70 [ 1084.961302][T17004] do_SYSENTER_32+0x1b/0x20 [ 1084.966374][T17003] do_SYSENTER_32+0x1b/0x20 [ 1084.968725][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.973791][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1084.978898][T17004] [ 1084.978907][T17004] Uninit was stored to memory at: [ 1084.984045][T17003] [ 1084.984053][T17003] Uninit was stored to memory at: [ 1084.984129][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.989066][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1084.993982][T17003] get_compat_msghdr+0x10c/0x280 [ 1084.998666][T17004] get_compat_msghdr+0x10c/0x280 [ 1085.003385][T17003] ___sys_recvmsg+0x289/0xb40 [ 1085.007888][T17004] ___sys_recvmsg+0x289/0xb40 [ 1085.012442][T17003] do_recvmmsg+0x7c9/0x1200 [ 1085.017125][T17004] do_recvmmsg+0x7c9/0x1200 [ 1085.021841][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1085.028176][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1085.034542][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1085.039575][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1085.044638][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1085.049490][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1085.054383][T17003] do_fast_syscall_32+0x33/0x70 [ 1085.058886][T17004] do_fast_syscall_32+0x33/0x70 [ 1085.063434][T17003] do_SYSENTER_32+0x1b/0x20 [ 1085.069765][T17004] do_SYSENTER_32+0x1b/0x20 [ 1085.076127][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1085.078470][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1085.083532][T17003] [ 1085.083541][T17003] Uninit was stored to memory at: [ 1085.085852][T17004] [ 1085.085867][T17004] Local variable msg_sys created at: [ 1085.090927][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1085.096048][T17004] do_recvmmsg+0xc9/0x1200 [ 1085.101115][T17003] get_compat_msghdr+0x10c/0x280 [ 1085.106117][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1085.111011][T17003] ___sys_recvmsg+0x289/0xb40 [ 1085.232035][T17003] do_recvmmsg+0x7c9/0x1200 [ 1085.236594][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1085.241320][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1085.247767][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1085.252889][T17003] do_fast_syscall_32+0x33/0x70 [ 1085.257776][T17003] do_SYSENTER_32+0x1b/0x20 [ 1085.262387][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1085.268767][T17003] [ 1085.271097][T17003] Uninit was stored to memory at: [ 1085.276265][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1085.281428][T17003] get_compat_msghdr+0x10c/0x280 [ 1085.286547][T17003] ___sys_recvmsg+0x289/0xb40 [ 1085.291275][T17003] do_recvmmsg+0x7c9/0x1200 [ 1085.295911][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1085.300669][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 03:42:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xf44e, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x243029, &(0x7f0000000340)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40106614, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) [ 1085.307157][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1085.312288][T17003] do_fast_syscall_32+0x33/0x70 [ 1085.317183][T17003] do_SYSENTER_32+0x1b/0x20 [ 1085.321816][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1085.328223][T17003] [ 1085.330554][T17003] Uninit was stored to memory at: [ 1085.335721][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1085.340883][T17003] get_compat_msghdr+0x10c/0x280 [ 1085.345948][T17003] ___sys_recvmsg+0x289/0xb40 [ 1085.350681][T17003] do_recvmmsg+0x7c9/0x1200 [ 1085.355335][T17003] __sys_recvmmsg+0x520/0x6f0 03:42:25 executing program 2: setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r1 = memfd_create(&(0x7f00000020c0)='(^&\x00', 0x4) fchown(r1, r0, 0x0) [ 1085.360089][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1085.366579][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1085.371728][T17003] do_fast_syscall_32+0x33/0x70 [ 1085.376652][T17003] do_SYSENTER_32+0x1b/0x20 [ 1085.381224][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1085.387707][T17003] [ 1085.390051][T17003] Local variable msg_sys created at: [ 1085.395440][T17003] do_recvmmsg+0xc9/0x1200 [ 1085.399918][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1085.476569][T16996] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1085.556021][T16996] REISERFS (device loop3): checking transaction log (loop3) [ 1085.587553][T17003] not chained 1840000 origins [ 1085.592453][T17003] CPU: 1 PID: 17003 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1085.604043][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.614121][T17003] Call Trace: [ 1085.617417][T17003] [ 1085.620364][T17003] dump_stack_lvl+0x200/0x28c [ 1085.625093][T17003] dump_stack+0x29/0x2c [ 1085.629720][T17003] kmsan_internal_chain_origin+0x78/0x120 [ 1085.635842][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1085.641963][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1085.647122][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1085.652984][T17003] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1085.658579][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1085.663762][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1085.669645][T17003] ? should_fail+0x79/0x9c0 [ 1085.674183][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1085.679350][T17003] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1085.685647][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1085.691768][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1085.696933][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1085.702794][T17003] __msan_chain_origin+0xbd/0x140 [ 1085.707873][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1085.713066][T17003] get_compat_msghdr+0x10c/0x280 [ 1085.718070][T17003] ? do_recvmmsg+0x7c9/0x1200 [ 1085.722800][T17003] ___sys_recvmsg+0x289/0xb40 [ 1085.727538][T17003] ? __schedule+0x176c/0x21c0 [ 1085.732265][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1085.737432][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1085.743292][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1085.748457][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1085.754319][T17003] do_recvmmsg+0x7c9/0x1200 [ 1085.758883][T17003] ? filter_irq_stacks+0xb9/0x230 [ 1085.763972][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1085.769142][T17003] ? __sys_recvmmsg+0xb9/0x6f0 [ 1085.773319][T17004] not chained 1850000 origins [ 1085.773981][T17003] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1085.785135][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1085.789871][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1085.796266][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1085.801342][T17003] do_fast_syscall_32+0x33/0x70 [ 1085.806250][T17003] do_SYSENTER_32+0x1b/0x20 [ 1085.810800][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1085.817172][T17003] RIP: 0023:0xf7f7e549 [ 1085.821261][T17003] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1085.840904][T17003] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1085.849345][T17003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1085.857336][T17003] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1085.865321][T17003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1085.873303][T17003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1085.881285][T17003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1085.889280][T17003] [ 1085.892311][T17004] CPU: 0 PID: 17004 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1085.897299][T17003] Uninit was stored to memory at: [ 1085.903980][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.904009][T17004] Call Trace: [ 1085.904024][T17004] [ 1085.904040][T17004] dump_stack_lvl+0x200/0x28c [ 1085.913669][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1085.919117][T17004] dump_stack+0x29/0x2c [ 1085.922459][T17003] get_compat_msghdr+0x10c/0x280 [ 1085.925306][T17004] kmsan_internal_chain_origin+0x78/0x120 [ 1085.929959][T17003] ___sys_recvmsg+0x289/0xb40 [ 1085.935055][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1085.935121][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1085.939245][T17003] do_recvmmsg+0x7c9/0x1200 [ 1085.944166][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1085.944237][T17004] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1085.949953][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1085.954619][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1085.954681][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1085.960714][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1085.965812][T17004] ? should_fail+0x79/0x9c0 [ 1085.965861][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1085.970342][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1085.976132][T17004] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1085.976200][T17004] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1085.981762][T17003] do_fast_syscall_32+0x33/0x70 [ 1085.986376][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1085.991471][T17003] do_SYSENTER_32+0x1b/0x20 [ 1085.997278][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1085.997346][T17004] __msan_chain_origin+0xbd/0x140 [ 1085.997406][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1085.997483][T17004] get_compat_msghdr+0x10c/0x280 [ 1086.003881][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.008336][T17004] ? do_recvmmsg+0x7c9/0x1200 [ 1086.018183][T17003] [ 1086.018439][T17004] ___sys_recvmsg+0x289/0xb40 [ 1086.024725][T17003] Uninit was stored to memory at: [ 1086.030720][T17004] ? __schedule+0x176c/0x21c0 [ 1086.035664][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.040647][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1086.045236][T17003] get_compat_msghdr+0x10c/0x280 [ 1086.050917][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1086.055976][T17003] ___sys_recvmsg+0x289/0xb40 [ 1086.061017][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1086.065985][T17003] do_recvmmsg+0x7c9/0x1200 [ 1086.072246][T17004] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1086.072319][T17004] do_recvmmsg+0x7c9/0x1200 [ 1086.076958][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1086.079294][T17004] ? filter_irq_stacks+0xb9/0x230 [ 1086.083999][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.088964][T17004] ? kmsan_get_metadata+0x33/0x220 [ 1086.093845][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1086.098735][T17004] ? __sys_recvmmsg+0xb9/0x6f0 [ 1086.103885][T17003] do_fast_syscall_32+0x33/0x70 [ 1086.108753][T17004] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.119200][T17003] do_SYSENTER_32+0x1b/0x20 [ 1086.124303][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.124380][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.128851][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.134653][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1086.134712][T17004] do_fast_syscall_32+0x33/0x70 [ 1086.139185][T17003] [ 1086.139195][T17003] Uninit was stored to memory at: [ 1086.143845][T17004] do_SYSENTER_32+0x1b/0x20 [ 1086.143899][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.148999][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.155249][T17004] RIP: 0023:0xf7f11549 [ 1086.155283][T17004] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1086.160396][T17003] get_compat_msghdr+0x10c/0x280 [ 1086.165417][T17004] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1086.165464][T17004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1086.170216][T17003] ___sys_recvmsg+0x289/0xb40 [ 1086.175050][T17004] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1086.175081][T17004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.175110][T17004] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1086.181588][T17003] do_recvmmsg+0x7c9/0x1200 [ 1086.186076][T17004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1086.190732][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1086.197055][T17004] [ 1086.197148][T17004] Uninit was stored to memory at: [ 1086.197218][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.197273][T17004] get_compat_msghdr+0x10c/0x280 03:42:26 executing program 4: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) [ 1086.203620][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.208635][T17004] ___sys_recvmsg+0x289/0xb40 [ 1086.213525][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1086.215875][T17004] do_recvmmsg+0x7c9/0x1200 [ 1086.215935][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.215988][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.216050][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1086.216098][T17004] do_fast_syscall_32+0x33/0x70 [ 1086.216145][T17004] do_SYSENTER_32+0x1b/0x20 [ 1086.216192][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.216248][T17004] [ 1086.216255][T17004] Uninit was stored to memory at: [ 1086.216322][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.216375][T17004] get_compat_msghdr+0x10c/0x280 [ 1086.216427][T17004] ___sys_recvmsg+0x289/0xb40 [ 1086.216481][T17004] do_recvmmsg+0x7c9/0x1200 [ 1086.216535][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.216590][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.216650][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1086.216699][T17004] do_fast_syscall_32+0x33/0x70 [ 1086.216747][T17004] do_SYSENTER_32+0x1b/0x20 [ 1086.216794][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.216848][T17004] [ 1086.216855][T17004] Uninit was stored to memory at: [ 1086.216927][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.216980][T17004] get_compat_msghdr+0x10c/0x280 [ 1086.217031][T17004] ___sys_recvmsg+0x289/0xb40 [ 1086.217086][T17004] do_recvmmsg+0x7c9/0x1200 [ 1086.217140][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.217194][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.217255][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1086.217304][T17004] do_fast_syscall_32+0x33/0x70 [ 1086.217353][T17004] do_SYSENTER_32+0x1b/0x20 [ 1086.217400][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.217454][T17004] [ 1086.217461][T17004] Uninit was stored to memory at: [ 1086.217528][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.217580][T17004] get_compat_msghdr+0x10c/0x280 [ 1086.217632][T17004] ___sys_recvmsg+0x289/0xb40 [ 1086.217686][T17004] do_recvmmsg+0x7c9/0x1200 [ 1086.217739][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.217794][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.217854][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1086.217903][T17004] do_fast_syscall_32+0x33/0x70 [ 1086.217956][T17004] do_SYSENTER_32+0x1b/0x20 [ 1086.218003][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.218058][T17004] [ 1086.218065][T17004] Uninit was stored to memory at: [ 1086.218129][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.218183][T17004] get_compat_msghdr+0x10c/0x280 [ 1086.218235][T17004] ___sys_recvmsg+0x289/0xb40 [ 1086.218289][T17004] do_recvmmsg+0x7c9/0x1200 [ 1086.218343][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.218397][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.218459][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1086.218507][T17004] do_fast_syscall_32+0x33/0x70 [ 1086.218554][T17004] do_SYSENTER_32+0x1b/0x20 [ 1086.218602][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.218655][T17004] [ 1086.218662][T17004] Uninit was stored to memory at: [ 1086.218727][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.218784][T17004] get_compat_msghdr+0x10c/0x280 [ 1086.218836][T17004] ___sys_recvmsg+0x289/0xb40 [ 1086.218890][T17004] do_recvmmsg+0x7c9/0x1200 [ 1086.218948][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.219002][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.219063][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1086.219111][T17004] do_fast_syscall_32+0x33/0x70 [ 1086.219159][T17004] do_SYSENTER_32+0x1b/0x20 [ 1086.219206][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.219261][T17004] [ 1086.219268][T17004] Uninit was stored to memory at: [ 1086.219334][T17004] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.219386][T17004] get_compat_msghdr+0x10c/0x280 [ 1086.219439][T17004] ___sys_recvmsg+0x289/0xb40 [ 1086.219493][T17004] do_recvmmsg+0x7c9/0x1200 [ 1086.219546][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.219601][T17004] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.219662][T17004] __do_fast_syscall_32+0x95/0xf0 [ 1086.219711][T17004] do_fast_syscall_32+0x33/0x70 [ 1086.219760][T17004] do_SYSENTER_32+0x1b/0x20 [ 1086.219808][T17004] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.219864][T17004] [ 1086.219873][T17004] Local variable msg_sys created at: [ 1086.219889][T17004] do_recvmmsg+0xc9/0x1200 [ 1086.219946][T17004] __sys_recvmmsg+0x520/0x6f0 [ 1086.776889][T17003] do_fast_syscall_32+0x33/0x70 [ 1086.781888][T17003] do_SYSENTER_32+0x1b/0x20 [ 1086.786457][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.792922][T17003] [ 1086.795270][T17003] Uninit was stored to memory at: [ 1086.800382][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.805620][T17003] get_compat_msghdr+0x10c/0x280 [ 1086.810614][T17003] ___sys_recvmsg+0x289/0xb40 [ 1086.815432][T17003] do_recvmmsg+0x7c9/0x1200 [ 1086.819986][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1086.824788][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.831177][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1086.836336][T17003] do_fast_syscall_32+0x33/0x70 [ 1086.841238][T17003] do_SYSENTER_32+0x1b/0x20 [ 1086.845867][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.852324][T17003] [ 1086.854655][T17003] Uninit was stored to memory at: [ 1086.859743][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.865010][T17003] get_compat_msghdr+0x10c/0x280 [ 1086.869998][T17003] ___sys_recvmsg+0x289/0xb40 [ 1086.874803][T17003] do_recvmmsg+0x7c9/0x1200 [ 1086.879358][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1086.884166][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.890549][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1086.895695][T17003] do_fast_syscall_32+0x33/0x70 [ 1086.900591][T17003] do_SYSENTER_32+0x1b/0x20 [ 1086.905378][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.911833][T17003] [ 1086.914168][T17003] Uninit was stored to memory at: [ 1086.919258][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.924493][T17003] get_compat_msghdr+0x10c/0x280 [ 1086.929476][T17003] ___sys_recvmsg+0x289/0xb40 [ 1086.934281][T17003] do_recvmmsg+0x7c9/0x1200 [ 1086.938839][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1086.943643][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1086.950034][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1086.955182][T17003] do_fast_syscall_32+0x33/0x70 [ 1086.960078][T17003] do_SYSENTER_32+0x1b/0x20 [ 1086.964708][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.971094][T17003] [ 1086.973502][T17003] Uninit was stored to memory at: [ 1086.978597][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1086.983847][T17003] get_compat_msghdr+0x10c/0x280 [ 1086.988827][T17003] ___sys_recvmsg+0x289/0xb40 [ 1086.993628][T17003] do_recvmmsg+0x7c9/0x1200 [ 1086.998180][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.003005][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.009407][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.014563][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.019455][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.024086][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.030471][T17003] [ 1087.032874][T17003] Local variable msg_sys created at: [ 1087.038168][T17003] do_recvmmsg+0xc9/0x1200 [ 1087.042703][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.126825][T17003] not chained 1860000 origins [ 1087.131548][T17003] CPU: 1 PID: 17003 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1087.143140][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.153222][T17003] Call Trace: [ 1087.156532][T17003] [ 1087.159473][T17003] dump_stack_lvl+0x200/0x28c [ 1087.164205][T17003] dump_stack+0x29/0x2c [ 1087.168412][T17003] kmsan_internal_chain_origin+0x78/0x120 [ 1087.174179][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1087.180290][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1087.185443][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1087.191303][T17003] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1087.196891][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1087.202050][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1087.207907][T17003] ? should_fail+0x79/0x9c0 [ 1087.212441][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1087.217596][T17003] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1087.223883][T17003] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1087.230004][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1087.235157][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1087.241010][T17003] __msan_chain_origin+0xbd/0x140 [ 1087.246137][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1087.251312][T17003] get_compat_msghdr+0x10c/0x280 [ 1087.256296][T17003] ? do_recvmmsg+0x7c9/0x1200 [ 1087.261018][T17003] ___sys_recvmsg+0x289/0xb40 [ 1087.265743][T17003] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1087.271153][T17003] ? __schedule+0x1980/0x21c0 [ 1087.275873][T17003] ? asm_sysvec_call_function_single+0x12/0x20 [ 1087.282069][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1087.287224][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1087.293078][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1087.298292][T17003] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1087.304152][T17003] do_recvmmsg+0x7c9/0x1200 [ 1087.308702][T17003] ? filter_irq_stacks+0xb9/0x230 [ 1087.313781][T17003] ? kmsan_get_metadata+0x33/0x220 [ 1087.318945][T17003] ? __sys_recvmmsg+0xb9/0x6f0 [ 1087.323753][T17003] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.330306][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.335037][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.341426][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.346491][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.351391][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.355929][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.362304][T17003] RIP: 0023:0xf7f7e549 [ 1087.366400][T17003] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1087.386042][T17003] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1087.394482][T17003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1087.402489][T17003] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1087.410481][T17003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1087.418468][T17003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1087.426471][T17003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1087.434477][T17003] [ 1087.437596][T17003] Uninit was stored to memory at: [ 1087.442754][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1087.447912][T17003] get_compat_msghdr+0x10c/0x280 [ 1087.452995][T17003] ___sys_recvmsg+0x289/0xb40 [ 1087.457728][T17003] do_recvmmsg+0x7c9/0x1200 [ 1087.462348][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.467080][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.473980][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.479053][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.484038][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.488585][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.495044][T17003] [ 1087.497377][T17003] Uninit was stored to memory at: [ 1087.502546][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1087.507702][T17003] get_compat_msghdr+0x10c/0x280 [ 1087.512766][T17003] ___sys_recvmsg+0x289/0xb40 [ 1087.517499][T17003] do_recvmmsg+0x7c9/0x1200 [ 1087.522150][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.526873][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.533343][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.538413][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.543383][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.547934][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.554656][T17003] [ 1087.556985][T17003] Uninit was stored to memory at: [ 1087.562141][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1087.567374][T17003] get_compat_msghdr+0x10c/0x280 [ 1087.572434][T17003] ___sys_recvmsg+0x289/0xb40 [ 1087.577161][T17003] do_recvmmsg+0x7c9/0x1200 [ 1087.581791][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.586522][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.592988][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.598062][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.603038][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.607586][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.614038][T17003] [ 1087.616375][T17003] Uninit was stored to memory at: [ 1087.621473][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1087.626712][T17003] get_compat_msghdr+0x10c/0x280 [ 1087.631756][T17003] ___sys_recvmsg+0x289/0xb40 [ 1087.636486][T17003] do_recvmmsg+0x7c9/0x1200 [ 1087.641049][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.645875][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.652336][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.657414][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.662375][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.666925][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.673387][T17003] [ 1087.675727][T17003] Uninit was stored to memory at: [ 1087.680818][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1087.686058][T17003] get_compat_msghdr+0x10c/0x280 [ 1087.691042][T17003] ___sys_recvmsg+0x289/0xb40 [ 1087.695843][T17003] do_recvmmsg+0x7c9/0x1200 [ 1087.700394][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.705201][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.711584][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.716737][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.721707][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.726249][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.732694][T17003] [ 1087.735023][T17003] Uninit was stored to memory at: [ 1087.740116][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1087.745348][T17003] get_compat_msghdr+0x10c/0x280 [ 1087.750339][T17003] ___sys_recvmsg+0x289/0xb40 [ 1087.755139][T17003] do_recvmmsg+0x7c9/0x1200 [ 1087.759693][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.764497][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.770887][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.776103][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.781006][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.785637][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.792612][T17003] [ 1087.794946][T17003] Uninit was stored to memory at: [ 1087.800036][T17003] __get_compat_msghdr+0x6ea/0x9e0 [ 1087.805267][T17003] get_compat_msghdr+0x10c/0x280 [ 1087.810254][T17003] ___sys_recvmsg+0x289/0xb40 [ 1087.815057][T17003] do_recvmmsg+0x7c9/0x1200 [ 1087.819619][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.823433][T16996] REISERFS (device loop3): Using tea hash to sort names [ 1087.824424][T17003] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1087.824497][T17003] __do_fast_syscall_32+0x95/0xf0 [ 1087.824551][T17003] do_fast_syscall_32+0x33/0x70 [ 1087.824602][T17003] do_SYSENTER_32+0x1b/0x20 [ 1087.852709][T17003] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1087.859096][T17003] [ 1087.861439][T17003] Local variable msg_sys created at: [ 1087.866841][T17003] do_recvmmsg+0xc9/0x1200 [ 1087.871341][T17003] __sys_recvmmsg+0x520/0x6f0 [ 1087.902534][T16996] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. 03:42:27 executing program 5: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) 03:42:27 executing program 1: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) 03:42:28 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000ec010000130200001200000000000000000200000001000073564d38e10000001e000000000000000010cc030200010052654973457233467300000001000000020001000200010200000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003bc1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x11000}, {&(0x7f0000011200)="0000000000000000000000001200000000000000000200000001000073564d38e10000001e00"/64, 0x40, 0x212000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f00"/96, 0x60, 0x213000}, {&(0x7f0000011400)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003bc1655f3bc1655f3bc1655f0100000000000000", 0x60, 0x213fa0}], 0x0, &(0x7f0000011500)) [ 1088.536300][T17021] not chained 1870000 origins [ 1088.541021][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1088.552608][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1088.562694][T17021] Call Trace: [ 1088.565986][T17021] [ 1088.568931][T17021] dump_stack_lvl+0x200/0x28c [ 1088.573666][T17021] dump_stack+0x29/0x2c [ 1088.577864][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1088.583642][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1088.589760][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1088.594921][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1088.600788][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1088.606399][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1088.611580][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1088.617456][T17021] ? should_fail+0x79/0x9c0 [ 1088.622028][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1088.627192][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1088.633490][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1088.639618][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1088.644785][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1088.650650][T17021] __msan_chain_origin+0xbd/0x140 [ 1088.655725][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1088.660908][T17021] get_compat_msghdr+0x10c/0x280 [ 1088.665897][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1088.670628][T17021] ___sys_recvmsg+0x289/0xb40 [ 1088.675387][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1088.680549][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1088.686412][T17021] do_recvmmsg+0x7c9/0x1200 [ 1088.690972][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1088.696058][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1088.701324][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1088.706139][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1088.712703][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1088.717444][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1088.723843][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1088.728920][T17021] do_fast_syscall_32+0x33/0x70 [ 1088.733829][T17021] do_SYSENTER_32+0x1b/0x20 [ 1088.738377][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1088.744751][T17021] RIP: 0023:0xf7f83549 [ 1088.748838][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1088.769094][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1088.777550][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1088.785558][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1088.793653][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1088.801654][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1088.809667][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1088.817706][T17021] [ 1088.820953][T17021] Uninit was stored to memory at: [ 1088.826116][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1088.831273][T17021] get_compat_msghdr+0x10c/0x280 [ 1088.836327][T17021] ___sys_recvmsg+0x289/0xb40 [ 1088.841053][T17021] do_recvmmsg+0x7c9/0x1200 [ 1088.845684][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1088.850409][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1088.856860][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1088.861986][T17021] do_fast_syscall_32+0x33/0x70 [ 1088.866878][T17021] do_SYSENTER_32+0x1b/0x20 [ 1088.871421][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1088.877870][T17021] [ 1088.880197][T17021] Uninit was stored to memory at: [ 1088.885342][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1088.890502][T17021] get_compat_msghdr+0x10c/0x280 [ 1088.895550][T17021] ___sys_recvmsg+0x289/0xb40 [ 1088.900273][T17021] do_recvmmsg+0x7c9/0x1200 [ 1088.904877][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1088.909600][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1088.916046][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1088.921115][T17021] do_fast_syscall_32+0x33/0x70 [ 1088.926066][T17021] do_SYSENTER_32+0x1b/0x20 [ 1088.930608][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1088.937044][T17021] [ 1088.939373][T17021] Uninit was stored to memory at: [ 1088.944520][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1088.949675][T17021] get_compat_msghdr+0x10c/0x280 [ 1088.954721][T17021] ___sys_recvmsg+0x289/0xb40 [ 1088.959453][T17021] do_recvmmsg+0x7c9/0x1200 [ 1088.964064][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1088.968874][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1088.975324][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1088.980394][T17021] do_fast_syscall_32+0x33/0x70 [ 1088.985347][T17021] do_SYSENTER_32+0x1b/0x20 [ 1088.989891][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1088.996337][T17021] [ 1088.998665][T17021] Uninit was stored to memory at: [ 1089.003808][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.008964][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.014015][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.018740][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.023349][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.028076][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.034520][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.039587][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.044622][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.049167][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.055613][T17021] [ 1089.057941][T17021] Uninit was stored to memory at: [ 1089.063117][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.068283][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.073329][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.078059][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.082664][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.087390][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.093868][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.098937][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.103888][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.108430][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.114875][T17021] [ 1089.117207][T17021] Uninit was stored to memory at: [ 1089.122351][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.127510][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.132555][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.137282][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.141894][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.146616][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.153064][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.158157][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.163126][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.167666][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.174099][T17021] [ 1089.176431][T17021] Uninit was stored to memory at: [ 1089.181524][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.186739][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.191779][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.196503][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.201047][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.205829][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.212268][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.217335][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.222283][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.226826][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.233256][T17021] [ 1089.235585][T17021] Local variable msg_sys created at: [ 1089.240873][T17021] do_recvmmsg+0xc9/0x1200 [ 1089.245394][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.343916][T17021] not chained 1880000 origins [ 1089.348633][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1089.360214][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.370293][T17021] Call Trace: [ 1089.373591][T17021] [ 1089.376533][T17021] dump_stack_lvl+0x200/0x28c [ 1089.381261][T17021] dump_stack+0x29/0x2c [ 1089.385456][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1089.391230][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1089.397349][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1089.402519][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1089.408386][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1089.413988][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1089.419148][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1089.425036][T17021] ? should_fail+0x79/0x9c0 [ 1089.429583][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1089.434746][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1089.441041][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1089.447161][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1089.452323][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1089.458188][T17021] __msan_chain_origin+0xbd/0x140 [ 1089.463263][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.468448][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.473442][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1089.478320][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.483049][T17021] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1089.488466][T17021] ? __schedule+0x1980/0x21c0 [ 1089.493193][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1089.498355][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1089.504221][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1089.509382][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1089.515249][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.519809][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1089.524898][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1089.530069][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1089.534881][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.541448][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.546191][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.552582][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.557658][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.562551][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.567097][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.573473][T17021] RIP: 0023:0xf7f83549 [ 1089.577560][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1089.597208][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1089.605657][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1089.613655][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1089.621649][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1089.629664][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1089.637671][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1089.645690][T17021] [ 1089.648832][T17021] Uninit was stored to memory at: [ 1089.653989][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.659151][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.664197][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.668928][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.673568][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.678312][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.684783][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.689857][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.694816][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.699360][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.705801][T17021] [ 1089.708130][T17021] Uninit was stored to memory at: [ 1089.713276][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.718435][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.723478][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.728203][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.732821][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.737543][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.743989][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.749058][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.754020][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.758568][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.765061][T17021] [ 1089.767392][T17021] Uninit was stored to memory at: [ 1089.772560][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.777722][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.782773][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.787498][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.792111][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.796837][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.803277][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.808348][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.813337][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.817884][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.824326][T17021] [ 1089.826680][T17021] Uninit was stored to memory at: [ 1089.831837][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.836997][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.842041][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.846765][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.851312][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.856106][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.862552][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.867621][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.872577][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.877126][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.883565][T17021] [ 1089.885893][T17021] Uninit was stored to memory at: [ 1089.890978][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.896202][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.901182][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.906052][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.910610][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.915402][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.921853][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.926921][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.931957][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.936501][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1089.942955][T17021] [ 1089.945287][T17021] Uninit was stored to memory at: [ 1089.950389][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1089.955614][T17021] get_compat_msghdr+0x10c/0x280 [ 1089.960594][T17021] ___sys_recvmsg+0x289/0xb40 [ 1089.965383][T17021] do_recvmmsg+0x7c9/0x1200 [ 1089.969936][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1089.974723][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1089.981101][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1089.986227][T17021] do_fast_syscall_32+0x33/0x70 [ 1089.991139][T17021] do_SYSENTER_32+0x1b/0x20 [ 1089.995742][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.002175][T17021] [ 1090.004505][T17021] Uninit was stored to memory at: [ 1090.009591][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.014815][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.019799][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.024585][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.029134][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.033920][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.040303][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.045441][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.050330][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.054931][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.061308][T17021] [ 1090.063711][T17021] Local variable msg_sys created at: [ 1090.069000][T17021] do_recvmmsg+0xc9/0x1200 [ 1090.073525][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.169253][T17021] not chained 1890000 origins [ 1090.174033][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1090.185619][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.195696][T17021] Call Trace: [ 1090.198988][T17021] [ 1090.201933][T17021] dump_stack_lvl+0x200/0x28c [ 1090.206663][T17021] dump_stack+0x29/0x2c [ 1090.210854][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1090.216628][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1090.222746][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1090.227907][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1090.233795][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1090.239390][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1090.244557][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1090.250430][T17021] ? should_fail+0x79/0x9c0 [ 1090.254969][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1090.260130][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1090.266473][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1090.272598][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1090.277759][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1090.283623][T17021] __msan_chain_origin+0xbd/0x140 [ 1090.288699][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.293884][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.298877][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1090.303608][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.308340][T17021] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1090.313761][T17021] ? __schedule+0x1980/0x21c0 [ 1090.318490][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1090.323650][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1090.329513][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1090.334671][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1090.340533][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.345088][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1090.350177][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1090.355347][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1090.360179][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.366742][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.371490][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.377880][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.382948][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.387842][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.392388][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.398769][T17021] RIP: 0023:0xf7f83549 [ 1090.402862][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1090.422510][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1090.430961][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1090.438958][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1090.446951][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1090.454944][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1090.462971][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1090.470984][T17021] [ 1090.474090][T17021] Uninit was stored to memory at: [ 1090.479187][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.484410][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.489398][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.494215][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.498763][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.503552][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.509936][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.515063][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.519952][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.524560][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.530936][T17021] [ 1090.533324][T17021] Uninit was stored to memory at: [ 1090.538409][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.543631][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.548618][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.553455][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.558027][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.562831][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.569309][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.574448][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.579342][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.583953][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.590329][T17021] [ 1090.592721][T17021] Uninit was stored to memory at: [ 1090.597810][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.603018][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.607999][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.612784][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.617333][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.622122][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.628512][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.633642][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.638531][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.643128][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.649505][T17021] [ 1090.651897][T17021] Uninit was stored to memory at: [ 1090.656985][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.662200][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.667182][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.671967][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.676702][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.681425][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.687873][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.693000][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.697894][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.702494][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.708892][T17021] [ 1090.711238][T17021] Uninit was stored to memory at: [ 1090.716418][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.721579][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.726627][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.731356][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.735971][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.740693][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.747138][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.752269][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.757162][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.761765][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.768142][T17021] [ 1090.770473][T17021] Uninit was stored to memory at: [ 1090.775626][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.780787][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.785859][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.790591][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.795227][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.799987][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.806472][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.811557][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.816526][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.821070][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.827512][T17021] [ 1090.829841][T17021] Uninit was stored to memory at: [ 1090.835001][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1090.840156][T17021] get_compat_msghdr+0x10c/0x280 [ 1090.845196][T17021] ___sys_recvmsg+0x289/0xb40 [ 1090.849919][T17021] do_recvmmsg+0x7c9/0x1200 [ 1090.854531][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.859279][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1090.865722][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1090.870789][T17021] do_fast_syscall_32+0x33/0x70 [ 1090.875749][T17021] do_SYSENTER_32+0x1b/0x20 [ 1090.880295][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1090.886782][T17021] [ 1090.889122][T17021] Local variable msg_sys created at: [ 1090.894487][T17021] do_recvmmsg+0xc9/0x1200 [ 1090.898958][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1090.995054][T17021] not chained 1900000 origins [ 1090.999777][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1091.011363][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.021445][T17021] Call Trace: [ 1091.024735][T17021] [ 1091.027674][T17021] dump_stack_lvl+0x200/0x28c [ 1091.032399][T17021] dump_stack+0x29/0x2c [ 1091.036589][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1091.042362][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1091.048485][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.053646][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.059523][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1091.065116][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.070276][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.076145][T17021] ? should_fail+0x79/0x9c0 [ 1091.080682][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.085844][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1091.092139][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1091.098267][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.103434][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.109295][T17021] __msan_chain_origin+0xbd/0x140 [ 1091.114400][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.119576][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.124564][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1091.129294][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.134027][T17021] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1091.139450][T17021] ? __schedule+0x1980/0x21c0 [ 1091.144176][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.149334][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.155197][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.160357][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.166223][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.171128][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1091.176218][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.181388][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1091.186196][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.192777][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.197515][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.203903][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1091.208972][T17021] do_fast_syscall_32+0x33/0x70 [ 1091.213861][T17021] do_SYSENTER_32+0x1b/0x20 [ 1091.218404][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1091.224779][T17021] RIP: 0023:0xf7f83549 [ 1091.228866][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1091.248511][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1091.256962][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1091.264956][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1091.272947][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1091.280939][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1091.288937][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1091.296942][T17021] [ 1091.300048][T17021] Uninit was stored to memory at: [ 1091.305204][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.310359][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.315411][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.320132][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.324741][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.329461][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.335899][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1091.340962][T17021] do_fast_syscall_32+0x33/0x70 [ 1091.345977][T17021] do_SYSENTER_32+0x1b/0x20 [ 1091.350515][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1091.356950][T17021] [ 1091.359373][T17021] Uninit was stored to memory at: [ 1091.364521][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.369674][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.374715][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.379435][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.384041][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.388760][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.395199][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1091.400264][T17021] do_fast_syscall_32+0x33/0x70 [ 1091.405218][T17021] do_SYSENTER_32+0x1b/0x20 [ 1091.409767][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1091.416218][T17021] [ 1091.418544][T17021] Uninit was stored to memory at: [ 1091.423692][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.428847][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.433886][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.438608][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.443395][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.448119][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.454563][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1091.459645][T17021] do_fast_syscall_32+0x33/0x70 [ 1091.464605][T17021] do_SYSENTER_32+0x1b/0x20 [ 1091.469146][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1091.475579][T17021] [ 1091.477905][T17021] Uninit was stored to memory at: [ 1091.483100][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.488257][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.493319][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.498051][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.502662][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.507388][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.513827][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1091.518893][T17021] do_fast_syscall_32+0x33/0x70 [ 1091.523844][T17021] do_SYSENTER_32+0x1b/0x20 [ 1091.528394][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1091.534933][T17021] [ 1091.537268][T17021] Uninit was stored to memory at: [ 1091.542510][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.547731][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.552790][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.557602][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.562221][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.567011][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.573472][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1091.578546][T17021] do_fast_syscall_32+0x33/0x70 [ 1091.583509][T17021] do_SYSENTER_32+0x1b/0x20 [ 1091.588075][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1091.594516][T17021] [ 1091.596843][T17021] Uninit was stored to memory at: [ 1091.601984][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.607135][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.612195][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.616948][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.621498][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.626296][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.632749][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1091.637817][T17021] do_fast_syscall_32+0x33/0x70 [ 1091.642775][T17021] do_SYSENTER_32+0x1b/0x20 [ 1091.647316][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1091.653759][T17021] [ 1091.656089][T17021] Uninit was stored to memory at: [ 1091.661171][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.666416][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.671486][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.676277][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.680830][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.685645][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1091.692089][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1091.697158][T17021] do_fast_syscall_32+0x33/0x70 [ 1091.702110][T17021] do_SYSENTER_32+0x1b/0x20 [ 1091.706651][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1091.713092][T17021] [ 1091.715422][T17021] Local variable msg_sys created at: [ 1091.720707][T17021] do_recvmmsg+0xc9/0x1200 [ 1091.725230][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1091.826798][T17021] not chained 1910000 origins [ 1091.831524][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1091.843114][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.853219][T17021] Call Trace: [ 1091.856520][T17021] [ 1091.859464][T17021] dump_stack_lvl+0x200/0x28c [ 1091.864192][T17021] dump_stack+0x29/0x2c [ 1091.868385][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1091.874175][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1091.880293][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.885453][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.891318][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1091.896911][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.902082][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.907954][T17021] ? should_fail+0x79/0x9c0 [ 1091.912509][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.917672][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1091.923968][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1091.930093][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.935253][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.941122][T17021] __msan_chain_origin+0xbd/0x140 [ 1091.946204][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1091.951382][T17021] get_compat_msghdr+0x10c/0x280 [ 1091.956372][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1091.961101][T17021] ___sys_recvmsg+0x289/0xb40 [ 1091.965844][T17021] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1091.972140][T17021] ? do_recvmmsg+0xbb8/0x1200 [ 1091.976866][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1091.982032][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1091.987897][T17021] do_recvmmsg+0x7c9/0x1200 [ 1091.992463][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1091.997552][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1092.002720][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1092.007534][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.014119][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.018878][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.025277][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.030361][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.035255][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.039804][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.046179][T17021] RIP: 0023:0xf7f83549 [ 1092.050266][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1092.069915][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1092.078371][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1092.086372][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1092.094368][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1092.102368][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1092.110447][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1092.118461][T17021] [ 1092.121569][T17021] Uninit was stored to memory at: [ 1092.126720][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.131954][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.136937][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.141725][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.146274][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.151181][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.157631][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.162774][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.167662][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.172266][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.178643][T17021] [ 1092.180971][T17021] Uninit was stored to memory at: [ 1092.186122][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.191278][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.196323][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.201160][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.205771][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.210504][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.216954][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.222082][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.226971][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.231512][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.238037][T17021] [ 1092.240369][T17021] Uninit was stored to memory at: [ 1092.245534][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.250700][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.255752][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.260581][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.265210][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.269932][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.276403][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.281472][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.286449][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.290999][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.297526][T17021] [ 1092.299857][T17021] Uninit was stored to memory at: [ 1092.305009][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.310162][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.315203][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.319928][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.324543][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.329353][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.335801][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.340868][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.345933][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.350478][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.356909][T17021] [ 1092.359244][T17021] Uninit was stored to memory at: [ 1092.364393][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.369548][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.374591][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.379315][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.383926][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.388653][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.395102][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.400170][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.405124][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.409664][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.416095][T17021] [ 1092.418427][T17021] Uninit was stored to memory at: [ 1092.423574][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.428731][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.433773][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.438498][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.443108][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.447830][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.454266][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.459331][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.464285][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.468827][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.475263][T17021] [ 1092.477590][T17021] Uninit was stored to memory at: [ 1092.482739][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.487895][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.492940][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.497672][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.502281][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.507008][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.513450][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.518526][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.523478][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.528023][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.534473][T17021] [ 1092.536803][T17021] Local variable msg_sys created at: [ 1092.542162][T17021] do_recvmmsg+0xc9/0x1200 [ 1092.546652][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.668518][T17021] not chained 1920000 origins [ 1092.673320][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1092.684913][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.694993][T17021] Call Trace: [ 1092.698292][T17021] [ 1092.701249][T17021] dump_stack_lvl+0x200/0x28c [ 1092.705980][T17021] dump_stack+0x29/0x2c [ 1092.710171][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1092.715941][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1092.722065][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1092.727225][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1092.733089][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1092.738685][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1092.743848][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1092.749711][T17021] ? should_fail+0x79/0x9c0 [ 1092.754251][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1092.759414][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1092.765805][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1092.772205][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1092.777374][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1092.783251][T17021] __msan_chain_origin+0xbd/0x140 [ 1092.788335][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.793520][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.798519][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1092.803248][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.807983][T17021] ? __schedule+0x176c/0x21c0 [ 1092.812714][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1092.817877][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1092.823745][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1092.828929][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1092.834823][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.839393][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1092.844495][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1092.849666][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1092.854481][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.861055][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.865818][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1092.872218][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1092.877294][T17021] do_fast_syscall_32+0x33/0x70 [ 1092.882193][T17021] do_SYSENTER_32+0x1b/0x20 [ 1092.886746][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.893126][T17021] RIP: 0023:0xf7f83549 [ 1092.897217][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1092.916866][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1092.925315][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1092.933315][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1092.941311][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1092.949302][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1092.957296][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1092.965306][T17021] [ 1092.968409][T17021] Uninit was stored to memory at: [ 1092.973565][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1092.978722][T17021] get_compat_msghdr+0x10c/0x280 [ 1092.983763][T17021] ___sys_recvmsg+0x289/0xb40 [ 1092.988490][T17021] do_recvmmsg+0x7c9/0x1200 [ 1092.993106][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1092.997832][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.004271][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.009339][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.014295][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.018837][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.025274][T17021] [ 1093.027608][T17021] Uninit was stored to memory at: [ 1093.032760][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.037917][T17021] get_compat_msghdr+0x10c/0x280 [ 1093.042956][T17021] ___sys_recvmsg+0x289/0xb40 [ 1093.047704][T17021] do_recvmmsg+0x7c9/0x1200 [ 1093.052375][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1093.057097][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.063543][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.068612][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.073570][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.078113][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.084556][T17021] [ 1093.086883][T17021] Uninit was stored to memory at: [ 1093.092028][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.097184][T17021] get_compat_msghdr+0x10c/0x280 [ 1093.102225][T17021] ___sys_recvmsg+0x289/0xb40 [ 1093.106949][T17021] do_recvmmsg+0x7c9/0x1200 [ 1093.111505][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1093.116290][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.122726][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.127790][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.132740][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.137281][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.143714][T17021] [ 1093.146066][T17021] Uninit was stored to memory at: [ 1093.151152][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.156369][T17021] get_compat_msghdr+0x10c/0x280 [ 1093.161349][T17021] ___sys_recvmsg+0x289/0xb40 [ 1093.166133][T17021] do_recvmmsg+0x7c9/0x1200 [ 1093.170680][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1093.175466][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.181935][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.187001][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.191951][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.196495][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.202927][T17021] [ 1093.205283][T17021] Uninit was stored to memory at: [ 1093.210365][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.215583][T17021] get_compat_msghdr+0x10c/0x280 [ 1093.220571][T17021] ___sys_recvmsg+0x289/0xb40 [ 1093.225352][T17021] do_recvmmsg+0x7c9/0x1200 [ 1093.229900][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1093.234686][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.241071][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.246194][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.251085][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.255686][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.262118][T17021] [ 1093.264449][T17021] Uninit was stored to memory at: [ 1093.269541][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.274762][T17021] get_compat_msghdr+0x10c/0x280 [ 1093.279745][T17021] ___sys_recvmsg+0x289/0xb40 [ 1093.284539][T17021] do_recvmmsg+0x7c9/0x1200 [ 1093.289090][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1093.293872][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.300251][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.305387][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.310284][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.314888][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.321269][T17021] [ 1093.323664][T17021] Uninit was stored to memory at: [ 1093.328751][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.333967][T17021] get_compat_msghdr+0x10c/0x280 [ 1093.338951][T17021] ___sys_recvmsg+0x289/0xb40 [ 1093.343736][T17021] do_recvmmsg+0x7c9/0x1200 [ 1093.348283][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1093.353074][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.359454][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.364588][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.369480][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.374084][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.380460][T17021] [ 1093.382849][T17021] Local variable msg_sys created at: [ 1093.388137][T17021] do_recvmmsg+0xc9/0x1200 [ 1093.392656][T17021] __sys_recvmmsg+0x520/0x6f0 03:42:33 executing program 2: setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r1 = memfd_create(&(0x7f00000020c0)='(^&\x00', 0x4) fchown(r1, r0, 0x0) [ 1093.577187][T17021] not chained 1930000 origins [ 1093.581972][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1093.593557][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.603752][T17021] Call Trace: [ 1093.607057][T17021] [ 1093.610000][T17021] dump_stack_lvl+0x200/0x28c [ 1093.614758][T17021] dump_stack+0x29/0x2c [ 1093.618962][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1093.624742][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1093.630860][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1093.636019][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1093.641884][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1093.647483][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1093.652643][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1093.658512][T17021] ? should_fail+0x79/0x9c0 [ 1093.663051][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1093.668211][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1093.674509][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1093.680648][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1093.685807][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1093.691668][T17021] __msan_chain_origin+0xbd/0x140 [ 1093.696747][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.701928][T17021] get_compat_msghdr+0x10c/0x280 [ 1093.706917][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1093.711661][T17021] ___sys_recvmsg+0x289/0xb40 [ 1093.716397][T17021] ? __schedule+0x176c/0x21c0 [ 1093.721132][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1093.726293][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1093.732151][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1093.737309][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1093.743175][T17021] do_recvmmsg+0x7c9/0x1200 [ 1093.747734][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1093.752821][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1093.757991][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1093.762801][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.769359][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1093.770170][T17026] not chained 1940000 origins [ 1093.774103][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.774182][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.790208][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.795111][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.799650][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.806020][T17021] RIP: 0023:0xf7f83549 [ 1093.810107][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1093.829750][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1093.838206][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1093.846193][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1093.854180][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1093.862163][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1093.870148][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1093.878143][T17021] [ 1093.881166][T17026] CPU: 0 PID: 17026 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1093.886602][T17021] Uninit was stored to memory at: [ 1093.892749][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.892778][T17026] Call Trace: [ 1093.892793][T17026] [ 1093.892809][T17026] dump_stack_lvl+0x200/0x28c [ 1093.902422][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.907900][T17026] dump_stack+0x29/0x2c [ 1093.911163][T17021] get_compat_msghdr+0x10c/0x280 [ 1093.914086][T17026] kmsan_internal_chain_origin+0x78/0x120 [ 1093.914150][T17026] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1093.918810][T17021] ___sys_recvmsg+0x289/0xb40 [ 1093.923908][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1093.923970][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1093.924038][T17026] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1093.928158][T17021] do_recvmmsg+0x7c9/0x1200 [ 1093.933085][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1093.933148][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1093.938835][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1093.944894][T17026] ? should_fail+0x79/0x9c0 [ 1093.944941][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1093.949616][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1093.954711][T17026] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1093.954779][T17026] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1093.960553][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1093.966085][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1093.966148][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1093.970794][T17021] do_fast_syscall_32+0x33/0x70 [ 1093.975891][T17026] __msan_chain_origin+0xbd/0x140 [ 1093.975954][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1093.976032][T17026] get_compat_msghdr+0x10c/0x280 [ 1093.976093][T17026] ? do_recvmmsg+0x7c9/0x1200 [ 1093.976155][T17026] ___sys_recvmsg+0x289/0xb40 [ 1093.981974][T17021] do_SYSENTER_32+0x1b/0x20 [ 1093.986607][T17026] ? __schedule+0x176c/0x21c0 [ 1093.991078][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.996180][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1093.996242][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1094.007177][T17021] [ 1094.008779][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1094.014897][T17021] Uninit was stored to memory at: [ 1094.019842][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1094.025181][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.030738][T17026] do_recvmmsg+0x7c9/0x1200 [ 1094.035624][T17021] get_compat_msghdr+0x10c/0x280 [ 1094.040582][T17026] ? filter_irq_stacks+0xb9/0x230 [ 1094.045719][T17021] ___sys_recvmsg+0x289/0xb40 [ 1094.050602][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1094.055304][T17021] do_recvmmsg+0x7c9/0x1200 [ 1094.059928][T17026] ? __sys_recvmmsg+0xb9/0x6f0 [ 1094.064457][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1094.069082][T17026] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.075700][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.080492][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.086446][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1094.088717][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.093849][T17021] do_fast_syscall_32+0x33/0x70 [ 1094.098813][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1094.109316][T17021] do_SYSENTER_32+0x1b/0x20 [ 1094.109713][T17026] do_fast_syscall_32+0x33/0x70 [ 1094.114267][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.119117][T17026] do_SYSENTER_32+0x1b/0x20 [ 1094.124242][T17021] [ 1094.128794][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.133940][T17021] Uninit was stored to memory at: [ 1094.138374][T17026] RIP: 0023:0xf7f7e549 [ 1094.143234][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.147781][T17026] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1094.154332][T17021] get_compat_msghdr+0x10c/0x280 [ 1094.160604][T17026] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1094.165317][T17021] ___sys_recvmsg+0x289/0xb40 [ 1094.170271][T17026] ORIG_RAX: 0000000000000151 [ 1094.170289][T17026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1094.176817][T17021] do_recvmmsg+0x7c9/0x1200 [ 1094.181420][T17026] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1094.186481][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1094.190911][T17026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1094.195799][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.202051][T17026] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1094.202081][T17026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1094.202125][T17026] [ 1094.204242][T17026] Uninit was stored to memory at: [ 1094.204315][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.204371][T17026] get_compat_msghdr+0x10c/0x280 [ 1094.204424][T17026] ___sys_recvmsg+0x289/0xb40 [ 1094.204480][T17026] do_recvmmsg+0x7c9/0x1200 [ 1094.204535][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.204590][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.204652][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1094.204703][T17026] do_fast_syscall_32+0x33/0x70 [ 1094.204751][T17026] do_SYSENTER_32+0x1b/0x20 [ 1094.204799][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.204855][T17026] [ 1094.204867][T17026] Uninit was stored to memory at: [ 1094.204934][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.204987][T17026] get_compat_msghdr+0x10c/0x280 [ 1094.205039][T17026] ___sys_recvmsg+0x289/0xb40 [ 1094.205095][T17026] do_recvmmsg+0x7c9/0x1200 [ 1094.205148][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.205203][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.205265][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1094.205314][T17026] do_fast_syscall_32+0x33/0x70 [ 1094.205363][T17026] do_SYSENTER_32+0x1b/0x20 [ 1094.205411][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.205466][T17026] [ 1094.205473][T17026] Uninit was stored to memory at: [ 1094.205539][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.205591][T17026] get_compat_msghdr+0x10c/0x280 [ 1094.205645][T17026] ___sys_recvmsg+0x289/0xb40 [ 1094.205699][T17026] do_recvmmsg+0x7c9/0x1200 [ 1094.205754][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.205808][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.205874][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1094.205925][T17026] do_fast_syscall_32+0x33/0x70 [ 1094.205973][T17026] do_SYSENTER_32+0x1b/0x20 [ 1094.206030][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.206086][T17026] [ 1094.210566][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1094.212997][T17026] Uninit was stored to memory at: [ 1094.213067][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.213123][T17026] get_compat_msghdr+0x10c/0x280 [ 1094.213177][T17026] ___sys_recvmsg+0x289/0xb40 [ 1094.213233][T17026] do_recvmmsg+0x7c9/0x1200 [ 1094.213288][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.213344][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.213408][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1094.219737][T17021] do_fast_syscall_32+0x33/0x70 [ 1094.224873][T17026] do_fast_syscall_32+0x33/0x70 [ 1094.228859][T17021] do_SYSENTER_32+0x1b/0x20 [ 1094.234124][T17026] do_SYSENTER_32+0x1b/0x20 [ 1094.253671][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.253731][T17021] [ 1094.253739][T17021] Uninit was stored to memory at: [ 1094.253811][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.258668][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.264776][T17021] get_compat_msghdr+0x10c/0x280 [ 1094.264832][T17021] ___sys_recvmsg+0x289/0xb40 [ 1094.269476][T17026] [ 1094.269484][T17026] Uninit was stored to memory at: [ 1094.274196][T17021] do_recvmmsg+0x7c9/0x1200 [ 1094.274253][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1094.282385][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.286756][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.294883][T17026] get_compat_msghdr+0x10c/0x280 [ 1094.299432][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1094.309075][T17026] ___sys_recvmsg+0x289/0xb40 [ 1094.313820][T17021] do_fast_syscall_32+0x33/0x70 [ 1094.313872][T17021] do_SYSENTER_32+0x1b/0x20 [ 1094.313920][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.321989][T17026] do_recvmmsg+0x7c9/0x1200 [ 1094.329903][T17021] [ 1094.329913][T17021] Uninit was stored to memory at: [ 1094.333032][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.338039][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.343176][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.348045][T17021] get_compat_msghdr+0x10c/0x280 [ 1094.352886][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1094.357257][T17021] ___sys_recvmsg+0x289/0xb40 [ 1094.362013][T17026] do_fast_syscall_32+0x33/0x70 [ 1094.368298][T17021] do_recvmmsg+0x7c9/0x1200 [ 1094.373403][T17026] do_SYSENTER_32+0x1b/0x20 [ 1094.378196][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1094.382779][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.389073][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.391394][T17026] [ 1094.391402][T17026] Uninit was stored to memory at: [ 1094.396452][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1094.396506][T17021] do_fast_syscall_32+0x33/0x70 [ 1094.401750][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.406588][T17021] do_SYSENTER_32+0x1b/0x20 [ 1094.412897][T17026] get_compat_msghdr+0x10c/0x280 [ 1094.415798][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.420398][T17026] ___sys_recvmsg+0x289/0xb40 [ 1094.426762][T17021] [ 1094.426771][T17021] Uninit was stored to memory at: [ 1094.426841][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.426895][T17021] get_compat_msghdr+0x10c/0x280 [ 1094.426948][T17021] ___sys_recvmsg+0x289/0xb40 [ 1094.427003][T17021] do_recvmmsg+0x7c9/0x1200 [ 1094.427058][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1094.427115][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.432217][T17026] do_recvmmsg+0x7c9/0x1200 [ 1094.437049][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1094.441535][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.447898][T17021] do_fast_syscall_32+0x33/0x70 [ 1094.450246][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.455308][T17021] do_SYSENTER_32+0x1b/0x20 [ 1094.460404][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1094.465405][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.470082][T17026] do_fast_syscall_32+0x33/0x70 [ 1094.474619][T17021] [ 1094.474628][T17021] Uninit was stored to memory at: [ 1094.474701][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.479299][T17026] do_SYSENTER_32+0x1b/0x20 [ 1094.485661][T17021] get_compat_msghdr+0x10c/0x280 [ 1094.490692][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.495580][T17021] ___sys_recvmsg+0x289/0xb40 [ 1094.500086][T17026] [ 1094.500094][T17026] Uninit was stored to memory at: [ 1094.500165][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1094.506451][T17021] do_recvmmsg+0x7c9/0x1200 [ 1094.508786][T17026] get_compat_msghdr+0x10c/0x280 [ 1094.513844][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1094.518863][T17026] ___sys_recvmsg+0x289/0xb40 [ 1094.524023][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.528967][T17026] do_recvmmsg+0x7c9/0x1200 [ 1094.533682][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1094.538188][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.542934][T17021] do_fast_syscall_32+0x33/0x70 [ 1094.549274][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1094.554484][T17021] do_SYSENTER_32+0x1b/0x20 [ 1094.559227][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1094.564148][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.568666][T17026] do_fast_syscall_32+0x33/0x70 [ 1094.568721][T17026] do_SYSENTER_32+0x1b/0x20 [ 1094.573273][T17021] [ 1094.573284][T17021] Local variable msg_sys created at: [ 1094.573299][T17021] do_recvmmsg+0xc9/0x1200 [ 1094.579613][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.581985][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1094.587051][T17026] [ 1094.587060][T17026] Local variable msg_sys created at: [ 1094.778351][T17021] not chained 1950000 origins [ 1094.779477][T17026] do_recvmmsg+0xc9/0x1200 [ 1094.784208][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1094.786540][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1094.791546][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.982918][T17026] not chained 1960000 origins [ 1094.984066][T17021] Call Trace: [ 1094.984085][T17021] [ 1095.065198][T17021] dump_stack_lvl+0x200/0x28c [ 1095.069917][T17021] dump_stack+0x29/0x2c [ 1095.074099][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1095.079872][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1095.085979][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1095.091128][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.096978][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1095.102577][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1095.107828][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.113764][T17021] ? should_fail+0x79/0x9c0 [ 1095.118304][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1095.123451][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1095.129738][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1095.135930][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1095.141081][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.146935][T17021] __msan_chain_origin+0xbd/0x140 [ 1095.151997][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.157160][T17021] get_compat_msghdr+0x10c/0x280 [ 1095.162149][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1095.166870][T17021] ___sys_recvmsg+0x289/0xb40 [ 1095.171592][T17021] ? __this_cpu_preempt_check+0x13/0x20 [ 1095.177186][T17021] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1095.183376][T17021] ? do_recvmmsg+0x87d/0x1200 [ 1095.188087][T17021] ? do_recvmmsg+0xb81/0x1200 [ 1095.192802][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1095.197970][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.203823][T17021] do_recvmmsg+0x7c9/0x1200 [ 1095.208367][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1095.213442][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1095.218602][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1095.223420][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.229972][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1095.234699][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.241081][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1095.246141][T17021] do_fast_syscall_32+0x33/0x70 [ 1095.251022][T17021] do_SYSENTER_32+0x1b/0x20 [ 1095.255551][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.261913][T17021] RIP: 0023:0xf7f83549 [ 1095.265994][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1095.285630][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1095.294080][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1095.302068][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1095.310066][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1095.318049][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1095.326032][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.334026][T17021] [ 1095.337051][T17026] CPU: 0 PID: 17026 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1095.337119][T17021] Uninit was stored to memory at: [ 1095.348630][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.348656][T17026] Call Trace: [ 1095.348672][T17026] [ 1095.348689][T17026] dump_stack_lvl+0x200/0x28c [ 1095.353812][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.363747][T17026] dump_stack+0x29/0x2c [ 1095.363797][T17026] kmsan_internal_chain_origin+0x78/0x120 [ 1095.367063][T17021] get_compat_msghdr+0x10c/0x280 [ 1095.369988][T17026] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1095.374700][T17021] ___sys_recvmsg+0x289/0xb40 [ 1095.379741][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1095.383963][T17021] do_recvmmsg+0x7c9/0x1200 [ 1095.389580][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.394561][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1095.400556][T17026] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1095.405261][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.410304][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1095.414836][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1095.420574][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.425284][T17021] do_fast_syscall_32+0x33/0x70 [ 1095.430763][T17026] ? should_fail+0x79/0x9c0 [ 1095.437148][T17021] do_SYSENTER_32+0x1b/0x20 [ 1095.442182][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1095.442246][T17026] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1095.447241][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.453035][T17026] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1095.453103][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1095.457918][T17021] [ 1095.457928][T17021] Uninit was stored to memory at: [ 1095.462408][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.462475][T17026] __msan_chain_origin+0xbd/0x140 [ 1095.467010][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.472049][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.472129][T17026] get_compat_msghdr+0x10c/0x280 [ 1095.478320][T17021] get_compat_msghdr+0x10c/0x280 [ 1095.484653][T17026] ? do_recvmmsg+0x7c9/0x1200 [ 1095.484718][T17026] ___sys_recvmsg+0x289/0xb40 [ 1095.490775][T17021] ___sys_recvmsg+0x289/0xb40 [ 1095.496050][T17026] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1095.496106][T17026] ? __schedule+0x1980/0x21c0 [ 1095.498421][T17021] do_recvmmsg+0x7c9/0x1200 [ 1095.503439][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1095.503503][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.509279][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1095.514289][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1095.514351][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1095.519433][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.524547][T17026] do_recvmmsg+0x7c9/0x1200 [ 1095.524612][T17026] ? filter_irq_stacks+0xb9/0x230 [ 1095.529511][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1095.534442][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1095.534534][T17026] ? __sys_recvmmsg+0xb9/0x6f0 [ 1095.539178][T17021] do_fast_syscall_32+0x33/0x70 [ 1095.543840][T17026] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.543912][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1095.548555][T17021] do_SYSENTER_32+0x1b/0x20 [ 1095.553924][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.558624][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.563122][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1095.563182][T17026] do_fast_syscall_32+0x33/0x70 [ 1095.568309][T17021] [ 1095.574068][T17026] do_SYSENTER_32+0x1b/0x20 [ 1095.574124][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.578779][T17021] Uninit was stored to memory at: [ 1095.578852][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.583878][T17026] RIP: 0023:0xf7f7e549 [ 1095.583925][T17026] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1095.583971][T17026] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1095.589795][T17021] get_compat_msghdr+0x10c/0x280 [ 1095.596109][T17026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1095.596150][T17026] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1095.596179][T17026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1095.600684][T17021] ___sys_recvmsg+0x289/0xb40 [ 1095.605688][T17026] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1095.605719][T17026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.605764][T17026] [ 1095.610857][T17021] do_recvmmsg+0x7c9/0x1200 [ 1095.616053][T17026] Uninit was stored to memory at: [ 1095.620755][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1095.625730][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.632199][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.636863][T17026] get_compat_msghdr+0x10c/0x280 [ 1095.641348][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1095.647761][T17026] ___sys_recvmsg+0x289/0xb40 [ 1095.654152][T17021] do_fast_syscall_32+0x33/0x70 [ 1095.659162][T17026] do_recvmmsg+0x7c9/0x1200 [ 1095.664059][T17021] do_SYSENTER_32+0x1b/0x20 [ 1095.664114][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.666415][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1095.670901][T17021] [ 1095.670910][T17021] Uninit was stored to memory at: [ 1095.677291][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.682453][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.687467][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1095.691525][T17021] get_compat_msghdr+0x10c/0x280 [ 1095.711241][T17026] do_fast_syscall_32+0x33/0x70 [ 1095.719700][T17021] ___sys_recvmsg+0x289/0xb40 [ 1095.724701][T17026] do_SYSENTER_32+0x1b/0x20 [ 1095.732763][T17021] do_recvmmsg+0x7c9/0x1200 [ 1095.740746][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.748938][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1095.753681][T17026] [ 1095.753690][T17026] Uninit was stored to memory at: [ 1095.761694][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.769742][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.772782][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1095.777295][T17026] get_compat_msghdr+0x10c/0x280 [ 1095.782378][T17021] do_fast_syscall_32+0x33/0x70 [ 1095.787059][T17026] ___sys_recvmsg+0x289/0xb40 [ 1095.792219][T17021] do_SYSENTER_32+0x1b/0x20 [ 1095.798557][T17026] do_recvmmsg+0x7c9/0x1200 [ 1095.803556][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.808591][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1095.813308][T17021] [ 1095.813318][T17021] Uninit was stored to memory at: [ 1095.813392][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.818170][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.822716][T17021] get_compat_msghdr+0x10c/0x280 [ 1095.827226][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1095.833603][T17021] ___sys_recvmsg+0x289/0xb40 [ 1095.838287][T17026] do_fast_syscall_32+0x33/0x70 [ 1095.840613][T17021] do_recvmmsg+0x7c9/0x1200 [ 1095.845744][T17026] do_SYSENTER_32+0x1b/0x20 [ 1095.852121][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1095.857214][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.862279][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.867225][T17026] [ 1095.867235][T17026] Uninit was stored to memory at: [ 1095.872124][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1095.876861][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.881293][T17021] do_fast_syscall_32+0x33/0x70 [ 1095.885863][T17026] get_compat_msghdr+0x10c/0x280 [ 1095.892207][T17021] do_SYSENTER_32+0x1b/0x20 [ 1095.896866][T17026] ___sys_recvmsg+0x289/0xb40 [ 1095.899201][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.904289][T17026] do_recvmmsg+0x7c9/0x1200 [ 1095.910574][T17021] [ 1095.910583][T17021] Uninit was stored to memory at: [ 1095.915747][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1095.920827][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.925763][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.930573][T17021] get_compat_msghdr+0x10c/0x280 [ 1095.935290][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1095.939775][T17021] ___sys_recvmsg+0x289/0xb40 [ 1095.944342][T17026] do_fast_syscall_32+0x33/0x70 [ 1095.950639][T17021] do_recvmmsg+0x7c9/0x1200 [ 1095.955386][T17026] do_SYSENTER_32+0x1b/0x20 [ 1095.957686][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1095.962774][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.967843][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1095.974233][T17026] [ 1095.979137][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1095.984223][T17026] Uninit was stored to memory at: [ 1095.988859][T17021] do_fast_syscall_32+0x33/0x70 [ 1095.993850][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1095.998256][T17021] do_SYSENTER_32+0x1b/0x20 [ 1096.002824][T17026] get_compat_msghdr+0x10c/0x280 [ 1096.007464][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.013855][T17026] ___sys_recvmsg+0x289/0xb40 [ 1096.020144][T17021] [ 1096.020153][T17021] Uninit was stored to memory at: [ 1096.022540][T17026] do_recvmmsg+0x7c9/0x1200 [ 1096.027596][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1096.032625][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1096.037698][T17021] get_compat_msghdr+0x10c/0x280 [ 1096.042623][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.047522][T17021] ___sys_recvmsg+0x289/0xb40 [ 1096.052085][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1096.056724][T17021] do_recvmmsg+0x7c9/0x1200 [ 1096.063128][T17026] do_fast_syscall_32+0x33/0x70 [ 1096.067595][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1096.069908][T17026] do_SYSENTER_32+0x1b/0x20 [ 1096.075079][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.079756][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.084908][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1096.091244][T17026] [ 1096.091253][T17026] Uninit was stored to memory at: [ 1096.096225][T17021] do_fast_syscall_32+0x33/0x70 [ 1096.101314][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1096.105970][T17021] do_SYSENTER_32+0x1b/0x20 [ 1096.110824][T17026] get_compat_msghdr+0x10c/0x280 [ 1096.115365][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.119854][T17026] ___sys_recvmsg+0x289/0xb40 [ 1096.124572][T17021] [ 1096.124582][T17021] Local variable msg_sys created at: [ 1096.124597][T17021] do_recvmmsg+0xc9/0x1200 [ 1096.130906][T17026] do_recvmmsg+0x7c9/0x1200 [ 1096.137276][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1096.139615][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1096.323804][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.330130][T17021] not chained 1970000 origins [ 1096.330190][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1096.334917][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1096.339940][T17026] do_fast_syscall_32+0x33/0x70 [ 1096.351460][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.351486][T17021] Call Trace: [ 1096.351503][T17021] [ 1096.351519][T17021] dump_stack_lvl+0x200/0x28c [ 1096.356465][T17026] do_SYSENTER_32+0x1b/0x20 [ 1096.366438][T17021] dump_stack+0x29/0x2c [ 1096.366488][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1096.369772][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.372698][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1096.372764][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1096.377421][T17026] [ 1096.377434][T17026] Uninit was stored to memory at: [ 1096.381907][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1096.381983][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1096.386181][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1096.391823][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1096.391887][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1096.398204][T17026] get_compat_msghdr+0x10c/0x280 [ 1096.404258][T17021] ? should_fail+0x79/0x9c0 [ 1096.404306][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1096.409421][T17026] ___sys_recvmsg+0x289/0xb40 [ 1096.411741][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1096.411810][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1096.416822][T17026] do_recvmmsg+0x7c9/0x1200 [ 1096.422621][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1096.422685][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1096.428217][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1096.433313][T17021] __msan_chain_origin+0xbd/0x140 [ 1096.433377][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1096.438489][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.444307][T17021] get_compat_msghdr+0x10c/0x280 [ 1096.444372][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1096.449291][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1096.453874][T17021] ___sys_recvmsg+0x289/0xb40 [ 1096.453947][T17021] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1096.459050][T17026] do_fast_syscall_32+0x33/0x70 [ 1096.463713][T17021] ? __schedule+0x1980/0x21c0 [ 1096.463777][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1096.470010][T17026] do_SYSENTER_32+0x1b/0x20 [ 1096.476061][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1096.476128][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1096.480622][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.485719][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1096.485791][T17021] do_recvmmsg+0x7c9/0x1200 [ 1096.491577][T17026] [ 1096.491586][T17026] Uninit was stored to memory at: [ 1096.496240][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1096.496320][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1096.501376][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1096.506418][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1096.506479][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.512859][T17026] get_compat_msghdr+0x10c/0x280 [ 1096.517725][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1096.522468][T17026] ___sys_recvmsg+0x289/0xb40 [ 1096.527406][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.532130][T17026] do_recvmmsg+0x7c9/0x1200 [ 1096.537416][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1096.542321][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1096.546910][T17021] do_fast_syscall_32+0x33/0x70 [ 1096.552076][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.556488][T17021] do_SYSENTER_32+0x1b/0x20 [ 1096.562427][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1096.567369][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.573754][T17026] do_fast_syscall_32+0x33/0x70 [ 1096.579463][T17021] RIP: 0023:0xf7f83549 [ 1096.584021][T17026] do_SYSENTER_32+0x1b/0x20 [ 1096.586260][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1096.591262][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.596267][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1096.596314][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1096.596349][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1096.601443][T17026] [ 1096.601453][T17026] Local variable msg_sys created at: [ 1096.606534][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1096.606565][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1096.606594][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1096.606637][T17021] [ 1096.611446][T17026] do_recvmmsg+0xc9/0x1200 [ 1096.618041][T17021] Uninit was stored to memory at: [ 1096.622986][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1096.627706][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1096.798065][T17021] get_compat_msghdr+0x10c/0x280 [ 1096.803153][T17021] ___sys_recvmsg+0x289/0xb40 [ 1096.807887][T17021] do_recvmmsg+0x7c9/0x1200 [ 1096.812501][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1096.817228][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.818073][T17026] not chained 1980000 origins [ 1096.823663][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1096.828357][T17026] CPU: 0 PID: 17026 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1096.833423][T17021] do_fast_syscall_32+0x33/0x70 [ 1096.844894][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.844920][T17026] Call Trace: [ 1096.844937][T17026] [ 1096.844954][T17026] dump_stack_lvl+0x200/0x28c [ 1096.849785][T17021] do_SYSENTER_32+0x1b/0x20 [ 1096.859841][T17026] dump_stack+0x29/0x2c [ 1096.859890][T17026] kmsan_internal_chain_origin+0x78/0x120 [ 1096.863219][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.866093][T17026] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1096.870748][T17021] [ 1096.870757][T17021] Uninit was stored to memory at: [ 1096.875241][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1096.875304][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1096.879494][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1096.885137][T17026] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1096.885199][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1096.891529][T17021] get_compat_msghdr+0x10c/0x280 [ 1096.897579][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1096.897650][T17026] ? should_fail+0x79/0x9c0 [ 1096.899947][T17021] ___sys_recvmsg+0x289/0xb40 [ 1096.904957][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1096.905019][T17026] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1096.910102][T17021] do_recvmmsg+0x7c9/0x1200 [ 1096.915893][T17026] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1096.915960][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1096.921037][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1096.926568][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1096.926635][T17026] __msan_chain_origin+0xbd/0x140 [ 1096.931883][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1096.936721][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1096.942558][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1096.947009][T17026] get_compat_msghdr+0x10c/0x280 [ 1096.951701][T17021] do_fast_syscall_32+0x33/0x70 [ 1096.956764][T17026] ? do_recvmmsg+0x7c9/0x1200 [ 1096.963037][T17021] do_SYSENTER_32+0x1b/0x20 [ 1096.967474][T17026] ___sys_recvmsg+0x289/0xb40 [ 1096.973572][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.978617][T17026] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1096.983356][T17021] [ 1096.989061][T17026] ? __schedule+0x1980/0x21c0 [ 1096.994116][T17021] Uninit was stored to memory at: [ 1097.000389][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1097.005588][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.010479][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1097.015454][T17021] get_compat_msghdr+0x10c/0x280 [ 1097.020234][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1097.024953][T17021] ___sys_recvmsg+0x289/0xb40 [ 1097.029391][T17026] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1097.034135][T17021] do_recvmmsg+0x7c9/0x1200 [ 1097.040366][T17026] do_recvmmsg+0x7c9/0x1200 [ 1097.045767][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1097.048033][T17026] ? filter_irq_stacks+0xb9/0x230 [ 1097.052740][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.057704][T17026] ? kmsan_get_metadata+0x33/0x220 [ 1097.062841][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1097.067891][T17026] ? __sys_recvmmsg+0xb9/0x6f0 [ 1097.073723][T17021] do_fast_syscall_32+0x33/0x70 [ 1097.078591][T17026] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.083767][T17021] do_SYSENTER_32+0x1b/0x20 [ 1097.088365][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1097.094203][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.098653][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.103177][T17021] [ 1097.107793][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1097.112840][T17021] Uninit was stored to memory at: [ 1097.119102][T17026] do_fast_syscall_32+0x33/0x70 [ 1097.124307][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.129208][T17026] do_SYSENTER_32+0x1b/0x20 [ 1097.134054][T17021] get_compat_msghdr+0x10c/0x280 [ 1097.138801][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.145334][T17021] ___sys_recvmsg+0x289/0xb40 [ 1097.149772][T17026] RIP: 0023:0xf7f7e549 [ 1097.154487][T17021] do_recvmmsg+0x7c9/0x1200 [ 1097.160743][T17026] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1097.167106][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1097.169385][T17026] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1097.174449][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.179411][T17026] ORIG_RAX: 0000000000000151 [ 1097.179429][T17026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1097.184341][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1097.189342][T17026] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1097.193887][T17021] do_fast_syscall_32+0x33/0x70 [ 1097.198749][T17026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1097.205132][T17021] do_SYSENTER_32+0x1b/0x20 [ 1097.209739][T17026] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1097.213846][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.218277][T17026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1097.237933][T17021] [ 1097.242552][T17026] [ 1097.242647][T17026] Uninit was stored to memory at: [ 1097.248668][T17021] Uninit was stored to memory at: [ 1097.248743][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.255122][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.259696][T17021] get_compat_msghdr+0x10c/0x280 [ 1097.267738][T17026] get_compat_msghdr+0x10c/0x280 [ 1097.272774][T17021] ___sys_recvmsg+0x289/0xb40 [ 1097.280740][T17026] ___sys_recvmsg+0x289/0xb40 [ 1097.285628][T17021] do_recvmmsg+0x7c9/0x1200 [ 1097.293676][T17026] do_recvmmsg+0x7c9/0x1200 [ 1097.298169][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1097.306210][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1097.312548][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.320528][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.322905][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1097.325932][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1097.330952][T17021] do_fast_syscall_32+0x33/0x70 [ 1097.336056][T17026] do_fast_syscall_32+0x33/0x70 [ 1097.341127][T17021] do_SYSENTER_32+0x1b/0x20 [ 1097.346305][T17026] do_SYSENTER_32+0x1b/0x20 [ 1097.351205][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.356200][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.360834][T17021] [ 1097.360843][T17021] Uninit was stored to memory at: [ 1097.365574][T17026] [ 1097.370100][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.374586][T17026] Uninit was stored to memory at: [ 1097.374657][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.379245][T17021] get_compat_msghdr+0x10c/0x280 [ 1097.383990][T17026] get_compat_msghdr+0x10c/0x280 [ 1097.390276][T17021] ___sys_recvmsg+0x289/0xb40 [ 1097.396667][T17026] ___sys_recvmsg+0x289/0xb40 [ 1097.401716][T17021] do_recvmmsg+0x7c9/0x1200 [ 1097.406723][T17026] do_recvmmsg+0x7c9/0x1200 [ 1097.411554][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1097.416463][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1097.420925][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.425485][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.431828][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1097.438314][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1097.440639][T17021] do_fast_syscall_32+0x33/0x70 [ 1097.445721][T17026] do_fast_syscall_32+0x33/0x70 [ 1097.448015][T17021] do_SYSENTER_32+0x1b/0x20 [ 1097.453169][T17026] do_SYSENTER_32+0x1b/0x20 [ 1097.458210][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.463388][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.468282][T17021] [ 1097.468290][T17021] Uninit was stored to memory at: [ 1097.473279][T17026] [ 1097.477976][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.482653][T17026] Uninit was stored to memory at: [ 1097.487124][T17021] get_compat_msghdr+0x10c/0x280 [ 1097.491778][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.496367][T17021] ___sys_recvmsg+0x289/0xb40 [ 1097.501034][T17026] get_compat_msghdr+0x10c/0x280 [ 1097.507418][T17021] do_recvmmsg+0x7c9/0x1200 [ 1097.513812][T17026] ___sys_recvmsg+0x289/0xb40 [ 1097.518815][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1097.523902][T17026] do_recvmmsg+0x7c9/0x1200 [ 1097.528779][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.533688][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1097.538159][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1097.542719][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.549008][T17021] do_fast_syscall_32+0x33/0x70 [ 1097.555410][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1097.557701][T17021] do_SYSENTER_32+0x1b/0x20 [ 1097.562782][T17026] do_fast_syscall_32+0x33/0x70 [ 1097.565079][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.570172][T17026] do_SYSENTER_32+0x1b/0x20 [ 1097.570223][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.575292][T17021] [ 1097.575302][T17021] Local variable msg_sys created at: [ 1097.575317][T17021] do_recvmmsg+0xc9/0x1200 [ 1097.580232][T17026] [ 1097.580241][T17026] Uninit was stored to memory at: [ 1097.585381][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1097.590125][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.702125][T17026] get_compat_msghdr+0x10c/0x280 [ 1097.707118][T17026] ___sys_recvmsg+0x289/0xb40 [ 1097.711940][T17026] do_recvmmsg+0x7c9/0x1200 [ 1097.716492][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1097.721213][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.727682][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1097.732813][T17026] do_fast_syscall_32+0x33/0x70 [ 1097.737709][T17026] do_SYSENTER_32+0x1b/0x20 [ 1097.742337][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.748714][T17026] [ 1097.751044][T17026] Uninit was stored to memory at: [ 1097.756254][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.761420][T17026] get_compat_msghdr+0x10c/0x280 [ 1097.766501][T17026] ___sys_recvmsg+0x289/0xb40 [ 1097.771234][T17026] do_recvmmsg+0x7c9/0x1200 [ 1097.775909][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1097.780636][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.781181][T17021] not chained 1990000 origins [ 1097.787100][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1097.791837][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1097.796851][T17026] do_fast_syscall_32+0x33/0x70 [ 1097.808378][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.808409][T17021] Call Trace: [ 1097.808431][T17021] [ 1097.808447][T17021] dump_stack_lvl+0x200/0x28c [ 1097.808507][T17021] dump_stack+0x29/0x2c [ 1097.813374][T17026] do_SYSENTER_32+0x1b/0x20 [ 1097.823361][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1097.823433][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1097.826746][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.829673][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1097.834414][T17026] [ 1097.838474][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1097.843034][T17026] Uninit was stored to memory at: [ 1097.848664][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1097.854858][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.861030][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1097.866205][T17026] get_compat_msghdr+0x10c/0x280 [ 1097.868447][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1097.874291][T17026] ___sys_recvmsg+0x289/0xb40 [ 1097.879247][T17021] ? should_fail+0x79/0x9c0 [ 1097.884845][T17026] do_recvmmsg+0x7c9/0x1200 [ 1097.889864][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1097.895032][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1097.899876][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1097.905736][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1097.910322][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1097.914864][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1097.919312][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1097.924580][T17026] do_fast_syscall_32+0x33/0x70 [ 1097.929524][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1097.935843][T17026] do_SYSENTER_32+0x1b/0x20 [ 1097.942074][T17021] __msan_chain_origin+0xbd/0x140 [ 1097.942138][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.948176][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.953217][T17021] get_compat_msghdr+0x10c/0x280 [ 1097.953283][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1097.958388][T17026] [ 1097.958396][T17026] Uninit was stored to memory at: [ 1097.963225][T17021] ___sys_recvmsg+0x289/0xb40 [ 1097.963307][T17021] ? do_recvmmsg+0x87d/0x1200 [ 1097.969155][T17026] __get_compat_msghdr+0x6ea/0x9e0 [ 1097.973585][T17021] ? kmsan_get_metadata+0xc9/0x220 [ 1097.973649][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1097.978669][T17026] get_compat_msghdr+0x10c/0x280 [ 1097.983766][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1097.983837][T17021] do_recvmmsg+0x7c9/0x1200 [ 1097.990154][T17026] ___sys_recvmsg+0x289/0xb40 [ 1097.995084][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1097.995162][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1097.999820][T17026] do_recvmmsg+0x7c9/0x1200 [ 1098.002152][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1098.002213][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.007223][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1098.011895][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.011971][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.016632][T17026] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.021744][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.021806][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.026904][T17026] __do_fast_syscall_32+0x95/0xf0 [ 1098.032002][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.032057][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.036996][T17026] do_fast_syscall_32+0x33/0x70 [ 1098.042784][T17021] RIP: 0023:0xf7f83549 [ 1098.042818][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1098.042865][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 [ 1098.047359][T17026] do_SYSENTER_32+0x1b/0x20 [ 1098.052018][T17021] ORIG_RAX: 0000000000000151 [ 1098.052036][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1098.052071][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1098.052101][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1098.057104][T17026] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.062281][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1098.062311][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1098.062355][T17021] [ 1098.062449][T17021] Uninit was stored to memory at: [ 1098.066931][T17026] [ 1098.066940][T17026] Local variable msg_sys created at: [ 1098.071791][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1098.078234][T17026] do_recvmmsg+0xc9/0x1200 [ 1098.082953][T17021] get_compat_msghdr+0x10c/0x280 [ 1098.087722][T17026] __sys_recvmmsg+0x520/0x6f0 [ 1098.094112][T17021] ___sys_recvmsg+0x289/0xb40 [ 1098.256914][T17021] do_recvmmsg+0x7c9/0x1200 [ 1098.261475][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.266277][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.272740][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.277808][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.282759][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.287301][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.293761][T17021] [ 1098.296094][T17021] Uninit was stored to memory at: [ 1098.301189][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1098.306428][T17021] get_compat_msghdr+0x10c/0x280 [ 1098.311426][T17021] ___sys_recvmsg+0x289/0xb40 [ 1098.316231][T17021] do_recvmmsg+0x7c9/0x1200 [ 1098.320846][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.325649][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.332104][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.337181][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.342136][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.346687][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.353138][T17021] [ 1098.355499][T17021] Uninit was stored to memory at: [ 1098.360588][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1098.365817][T17021] get_compat_msghdr+0x10c/0x280 [ 1098.370804][T17021] ___sys_recvmsg+0x289/0xb40 [ 1098.375608][T17021] do_recvmmsg+0x7c9/0x1200 [ 1098.380163][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.384958][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.391344][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.396500][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.401412][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.406036][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.412493][T17021] [ 1098.414826][T17021] Uninit was stored to memory at: [ 1098.419916][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1098.425151][T17021] get_compat_msghdr+0x10c/0x280 [ 1098.430139][T17021] ___sys_recvmsg+0x289/0xb40 [ 1098.434945][T17021] do_recvmmsg+0x7c9/0x1200 [ 1098.439501][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.444303][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.450694][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.455836][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.460730][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.465341][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.471791][T17021] [ 1098.474122][T17021] Uninit was stored to memory at: [ 1098.479209][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1098.484446][T17021] get_compat_msghdr+0x10c/0x280 [ 1098.489438][T17021] ___sys_recvmsg+0x289/0xb40 [ 1098.494228][T17021] do_recvmmsg+0x7c9/0x1200 [ 1098.498783][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.503581][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.509967][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.515112][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.520031][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.524649][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.531403][T17021] [ 1098.533840][T17021] Uninit was stored to memory at: [ 1098.538931][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1098.544156][T17021] get_compat_msghdr+0x10c/0x280 03:42:38 executing program 5: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) [ 1098.549140][T17021] ___sys_recvmsg+0x289/0xb40 [ 1098.553940][T17021] do_recvmmsg+0x7c9/0x1200 [ 1098.558493][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.563315][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.569770][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.574910][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.579801][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.584404][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.590784][T17021] [ 1098.593188][T17021] Uninit was stored to memory at: [ 1098.598281][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1098.603508][T17021] get_compat_msghdr+0x10c/0x280 [ 1098.608497][T17021] ___sys_recvmsg+0x289/0xb40 [ 1098.613298][T17021] do_recvmmsg+0x7c9/0x1200 [ 1098.617858][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.622647][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.629041][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.634181][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.639078][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.643694][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.650075][T17021] [ 1098.652478][T17021] Local variable msg_sys created at: [ 1098.657769][T17021] do_recvmmsg+0xc9/0x1200 [ 1098.662315][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.702840][T17021] not chained 2000000 origins [ 1098.707584][T17021] CPU: 1 PID: 17021 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1098.719167][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.729273][T17021] Call Trace: [ 1098.732578][T17021] [ 1098.735536][T17021] dump_stack_lvl+0x200/0x28c [ 1098.740277][T17021] dump_stack+0x29/0x2c [ 1098.744498][T17021] kmsan_internal_chain_origin+0x78/0x120 [ 1098.750294][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1098.756422][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1098.761593][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1098.767462][T17021] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1098.773074][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1098.778240][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1098.784239][T17021] ? should_fail+0x79/0x9c0 [ 1098.788799][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1098.793968][T17021] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1098.800271][T17021] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1098.806404][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1098.811572][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1098.817437][T17021] __msan_chain_origin+0xbd/0x140 [ 1098.822512][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1098.827701][T17021] get_compat_msghdr+0x10c/0x280 [ 1098.832697][T17021] ? do_recvmmsg+0x7c9/0x1200 [ 1098.837434][T17021] ___sys_recvmsg+0x289/0xb40 [ 1098.842169][T17021] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1098.847593][T17021] ? __schedule+0x1980/0x21c0 [ 1098.852324][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1098.857498][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1098.863363][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1098.868632][T17021] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1098.874524][T17021] do_recvmmsg+0x7c9/0x1200 [ 1098.879086][T17021] ? filter_irq_stacks+0xb9/0x230 [ 1098.884270][T17021] ? kmsan_get_metadata+0x33/0x220 [ 1098.889449][T17021] ? __sys_recvmmsg+0xb9/0x6f0 [ 1098.894271][T17021] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.900840][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1098.905588][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1098.911986][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1098.917068][T17021] do_fast_syscall_32+0x33/0x70 [ 1098.921972][T17021] do_SYSENTER_32+0x1b/0x20 [ 1098.926519][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.932899][T17021] RIP: 0023:0xf7f83549 [ 1098.936986][T17021] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1098.956642][T17021] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1098.965102][T17021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1098.973103][T17021] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1098.981105][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1098.989106][T17021] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1098.997104][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1099.005122][T17021] [ 1099.008242][T17021] Uninit was stored to memory at: [ 1099.013414][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.018573][T17021] get_compat_msghdr+0x10c/0x280 [ 1099.023632][T17021] ___sys_recvmsg+0x289/0xb40 [ 1099.028363][T17021] do_recvmmsg+0x7c9/0x1200 [ 1099.032992][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1099.037717][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.044162][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1099.049234][T17021] do_fast_syscall_32+0x33/0x70 03:42:38 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xf44e, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x243029, &(0x7f0000000340)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40106614, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) [ 1099.054195][T17021] do_SYSENTER_32+0x1b/0x20 [ 1099.058740][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.065188][T17021] [ 1099.067518][T17021] Uninit was stored to memory at: [ 1099.072676][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.077838][T17021] get_compat_msghdr+0x10c/0x280 [ 1099.082895][T17021] ___sys_recvmsg+0x289/0xb40 [ 1099.087625][T17021] do_recvmmsg+0x7c9/0x1200 [ 1099.092257][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1099.096986][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.103454][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1099.108529][T17021] do_fast_syscall_32+0x33/0x70 [ 1099.113502][T17021] do_SYSENTER_32+0x1b/0x20 [ 1099.118046][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.124495][T17021] [ 1099.126826][T17021] Uninit was stored to memory at: [ 1099.131980][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.137137][T17021] get_compat_msghdr+0x10c/0x280 [ 1099.142189][T17021] ___sys_recvmsg+0x289/0xb40 [ 1099.146914][T17021] do_recvmmsg+0x7c9/0x1200 [ 1099.151459][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1099.156256][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.162750][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1099.167827][T17021] do_fast_syscall_32+0x33/0x70 [ 1099.172799][T17021] do_SYSENTER_32+0x1b/0x20 [ 1099.177349][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.183808][T17021] [ 1099.186137][T17021] Uninit was stored to memory at: [ 1099.191225][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.196463][T17021] get_compat_msghdr+0x10c/0x280 [ 1099.201469][T17021] ___sys_recvmsg+0x289/0xb40 [ 1099.206267][T17021] do_recvmmsg+0x7c9/0x1200 [ 1099.210821][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1099.215619][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.222073][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1099.227145][T17021] do_fast_syscall_32+0x33/0x70 [ 1099.232109][T17021] do_SYSENTER_32+0x1b/0x20 [ 1099.236652][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.243101][T17021] [ 1099.245433][T17021] Uninit was stored to memory at: [ 1099.250524][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.255749][T17021] get_compat_msghdr+0x10c/0x280 [ 1099.260732][T17021] ___sys_recvmsg+0x289/0xb40 [ 1099.265530][T17021] do_recvmmsg+0x7c9/0x1200 [ 1099.270083][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1099.274885][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.281270][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1099.286411][T17021] do_fast_syscall_32+0x33/0x70 [ 1099.291306][T17021] do_SYSENTER_32+0x1b/0x20 [ 1099.295927][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.302375][T17021] [ 1099.304710][T17021] Uninit was stored to memory at: [ 1099.309797][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.315027][T17021] get_compat_msghdr+0x10c/0x280 [ 1099.320012][T17021] ___sys_recvmsg+0x289/0xb40 [ 1099.324806][T17021] do_recvmmsg+0x7c9/0x1200 [ 1099.329357][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1099.334153][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.340541][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1099.345681][T17021] do_fast_syscall_32+0x33/0x70 [ 1099.350574][T17021] do_SYSENTER_32+0x1b/0x20 [ 1099.355190][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.361567][T17021] [ 1099.363969][T17021] Uninit was stored to memory at: [ 1099.369062][T17021] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.374290][T17021] get_compat_msghdr+0x10c/0x280 [ 1099.379279][T17021] ___sys_recvmsg+0x289/0xb40 [ 1099.384078][T17021] do_recvmmsg+0x7c9/0x1200 [ 1099.388629][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1099.393427][T17021] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.399812][T17021] __do_fast_syscall_32+0x95/0xf0 [ 1099.404958][T17021] do_fast_syscall_32+0x33/0x70 [ 1099.409851][T17021] do_SYSENTER_32+0x1b/0x20 [ 1099.414498][T17021] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.420877][T17021] [ 1099.423283][T17021] Local variable msg_sys created at: [ 1099.428573][T17021] do_recvmmsg+0xc9/0x1200 [ 1099.433107][T17021] __sys_recvmmsg+0x520/0x6f0 [ 1099.564331][T17018] not chained 2010000 origins [ 1099.569317][T17018] CPU: 1 PID: 17018 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1099.580919][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.591016][T17018] Call Trace: [ 1099.594333][T17018] [ 1099.597292][T17018] dump_stack_lvl+0x200/0x28c [ 1099.602035][T17018] dump_stack+0x29/0x2c [ 1099.606233][T17018] kmsan_internal_chain_origin+0x78/0x120 [ 1099.612013][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1099.618145][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1099.623318][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1099.629193][T17018] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1099.634804][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1099.639973][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1099.645844][T17018] ? should_fail+0x79/0x9c0 [ 1099.650391][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1099.655553][T17018] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1099.661858][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1099.667990][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1099.673149][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1099.679004][T17018] __msan_chain_origin+0xbd/0x140 [ 1099.684076][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.689248][T17018] get_compat_msghdr+0x10c/0x280 [ 1099.694234][T17018] ? do_recvmmsg+0x7c9/0x1200 [ 1099.698961][T17018] ___sys_recvmsg+0x289/0xb40 [ 1099.703694][T17018] ? __schedule+0x176c/0x21c0 [ 1099.708437][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1099.713595][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1099.719464][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1099.724624][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1099.730485][T17018] do_recvmmsg+0x7c9/0x1200 [ 1099.735039][T17018] ? filter_irq_stacks+0xb9/0x230 [ 1099.740324][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1099.745513][T17018] ? __sys_recvmmsg+0xb9/0x6f0 [ 1099.750342][T17018] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.756918][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1099.761669][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.768071][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1099.773159][T17018] do_fast_syscall_32+0x33/0x70 [ 1099.778052][T17018] do_SYSENTER_32+0x1b/0x20 [ 1099.782596][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.788969][T17018] RIP: 0023:0xf7f11549 [ 1099.793057][T17018] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1099.812724][T17018] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1099.821187][T17018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1099.829188][T17018] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1099.837181][T17018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1099.845173][T17018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1099.853160][T17018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1099.861164][T17018] [ 1099.868071][T17018] Uninit was stored to memory at: [ 1099.873906][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.879079][T17018] get_compat_msghdr+0x10c/0x280 [ 1099.884182][T17018] ___sys_recvmsg+0x289/0xb40 [ 1099.888918][T17018] do_recvmmsg+0x7c9/0x1200 [ 1099.893575][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1099.898308][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.904805][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1099.909884][T17018] do_fast_syscall_32+0x33/0x70 [ 1099.914880][T17018] do_SYSENTER_32+0x1b/0x20 [ 1099.919434][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.925920][T17018] [ 1099.928255][T17018] Uninit was stored to memory at: [ 1099.933467][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.938654][T17018] get_compat_msghdr+0x10c/0x280 [ 1099.943753][T17018] ___sys_recvmsg+0x289/0xb40 [ 1099.948497][T17018] do_recvmmsg+0x7c9/0x1200 [ 1099.953143][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1099.957871][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1099.964368][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1099.969444][T17018] do_fast_syscall_32+0x33/0x70 [ 1099.974447][T17018] do_SYSENTER_32+0x1b/0x20 [ 1099.978994][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.985475][T17018] [ 1099.987806][T17018] Uninit was stored to memory at: [ 1099.993029][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1099.998217][T17018] get_compat_msghdr+0x10c/0x280 [ 1100.003344][T17018] ___sys_recvmsg+0x289/0xb40 [ 1100.008077][T17018] do_recvmmsg+0x7c9/0x1200 [ 1100.012737][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1100.017467][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1100.023966][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1100.029042][T17018] do_fast_syscall_32+0x33/0x70 [ 1100.034051][T17018] do_SYSENTER_32+0x1b/0x20 [ 1100.038623][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.045108][T17018] [ 1100.047442][T17018] Uninit was stored to memory at: [ 1100.052633][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1100.057791][T17018] get_compat_msghdr+0x10c/0x280 [ 1100.062886][T17018] ___sys_recvmsg+0x289/0xb40 [ 1100.067630][T17018] do_recvmmsg+0x7c9/0x1200 [ 1100.072278][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1100.077010][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1100.083510][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1100.088585][T17018] do_fast_syscall_32+0x33/0x70 [ 1100.093585][T17018] do_SYSENTER_32+0x1b/0x20 [ 1100.098135][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.104611][T17018] [ 1100.106941][T17018] Uninit was stored to memory at: [ 1100.112136][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1100.117295][T17018] get_compat_msghdr+0x10c/0x280 [ 1100.122383][T17018] ___sys_recvmsg+0x289/0xb40 [ 1100.127114][T17018] do_recvmmsg+0x7c9/0x1200 [ 1100.131759][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1100.136490][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1100.142976][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1100.148056][T17018] do_fast_syscall_32+0x33/0x70 [ 1100.153072][T17018] do_SYSENTER_32+0x1b/0x20 [ 1100.157624][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.164102][T17018] [ 1100.166434][T17018] Uninit was stored to memory at: [ 1100.171522][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1100.176795][T17018] get_compat_msghdr+0x10c/0x280 [ 1100.181884][T17018] ___sys_recvmsg+0x289/0xb40 [ 1100.186627][T17018] do_recvmmsg+0x7c9/0x1200 [ 1100.191186][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1100.196020][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1100.202519][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1100.207597][T17018] do_fast_syscall_32+0x33/0x70 [ 1100.212631][T17018] do_SYSENTER_32+0x1b/0x20 [ 1100.217183][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.223665][T17018] [ 1100.226000][T17018] Uninit was stored to memory at: [ 1100.231094][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1100.236370][T17018] get_compat_msghdr+0x10c/0x280 [ 1100.241365][T17018] ___sys_recvmsg+0x289/0xb40 [ 1100.246199][T17018] do_recvmmsg+0x7c9/0x1200 [ 1100.250766][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1100.255607][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1100.262102][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1100.267180][T17018] do_fast_syscall_32+0x33/0x70 [ 1100.272178][T17018] do_SYSENTER_32+0x1b/0x20 [ 1100.276733][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.283225][T17018] [ 1100.285563][T17018] Local variable msg_sys created at: [ 1100.290857][T17018] do_recvmmsg+0xc9/0x1200 [ 1100.295446][T17018] __sys_recvmmsg+0x520/0x6f0 03:42:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000088000000840000000000000095000000000000007adda226418fb4c3c8bc138d840400000000000000cb2ea79f1b78006079cdde50381464ab51a66a84c35ae0f0c590b7f9b9bc60b49c14ec08d2cd4276456f90429c8477efb7c554aefb50794262df034c666f7ed374ddabc378829a1023cbd3964a8a6d715871dd8615478bed50ed169175f59dd9b78b04a90c8413791909f7513017710a4044ca6d1a98601c17d65ce1ae8dbd524a28120a008a69d42f82017abba378907b66776f42d3565b562cc03aaf36eef6febd066671010a84fe3bb0c5de3f7320162917"], &(0x7f0000000180)='GPL\x00'}, 0x48) 03:42:40 executing program 1: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) [ 1100.807119][T17040] loop3: detected capacity change from 0 to 8511 [ 1100.824831][T17018] not chained 2020000 origins [ 1100.829673][T17018] CPU: 1 PID: 17018 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1100.841264][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.851352][T17018] Call Trace: [ 1100.854663][T17018] [ 1100.857616][T17018] dump_stack_lvl+0x200/0x28c [ 1100.862356][T17018] dump_stack+0x29/0x2c [ 1100.866574][T17018] kmsan_internal_chain_origin+0x78/0x120 [ 1100.872419][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1100.878558][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1100.883736][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1100.889614][T17018] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1100.895219][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1100.900395][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1100.906258][T17018] ? should_fail+0x79/0x9c0 [ 1100.910806][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1100.915978][T17018] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1100.922290][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1100.928440][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1100.933618][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1100.939492][T17018] __msan_chain_origin+0xbd/0x140 [ 1100.944585][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1100.949776][T17018] get_compat_msghdr+0x10c/0x280 [ 1100.954781][T17018] ? do_recvmmsg+0x7c9/0x1200 [ 1100.959525][T17018] ___sys_recvmsg+0x289/0xb40 [ 1100.964274][T17018] ? __schedule+0x176c/0x21c0 [ 1100.969019][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1100.974189][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1100.980061][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1100.985237][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1100.991110][T17018] do_recvmmsg+0x7c9/0x1200 [ 1100.995668][T17018] ? filter_irq_stacks+0xb9/0x230 [ 1101.000762][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1101.005939][T17018] ? __sys_recvmmsg+0xb9/0x6f0 [ 1101.010762][T17018] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.017336][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.022098][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.028503][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1101.033589][T17018] do_fast_syscall_32+0x33/0x70 [ 1101.038493][T17018] do_SYSENTER_32+0x1b/0x20 [ 1101.043044][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.049425][T17018] RIP: 0023:0xf7f11549 [ 1101.053523][T17018] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1101.073179][T17018] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1101.081647][T17018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1101.089657][T17018] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1101.097669][T17018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 03:42:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r0, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000003c0)=r0, 0x4) [ 1101.105674][T17018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1101.113681][T17018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1101.121702][T17018] [ 1101.129176][T17018] Uninit was stored to memory at: [ 1101.137593][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1101.142907][T17018] get_compat_msghdr+0x10c/0x280 [ 1101.147911][T17018] ___sys_recvmsg+0x289/0xb40 [ 1101.152747][T17018] do_recvmmsg+0x7c9/0x1200 [ 1101.157299][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.162124][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.168534][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1101.173711][T17018] do_fast_syscall_32+0x33/0x70 [ 1101.178612][T17018] do_SYSENTER_32+0x1b/0x20 [ 1101.183265][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.189648][T17018] [ 1101.192078][T17018] Uninit was stored to memory at: [ 1101.197171][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1101.202427][T17018] get_compat_msghdr+0x10c/0x280 [ 1101.207446][T17018] ___sys_recvmsg+0x289/0xb40 [ 1101.212283][T17018] do_recvmmsg+0x7c9/0x1200 [ 1101.216865][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.221600][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.228089][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1101.233270][T17018] do_fast_syscall_32+0x33/0x70 [ 1101.238169][T17018] do_SYSENTER_32+0x1b/0x20 [ 1101.242818][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.249297][T17018] [ 1101.251748][T17018] Uninit was stored to memory at: [ 1101.256841][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1101.262094][T17018] get_compat_msghdr+0x10c/0x280 [ 1101.267087][T17018] ___sys_recvmsg+0x289/0xb40 [ 1101.271917][T17018] do_recvmmsg+0x7c9/0x1200 [ 1101.276479][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.281209][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.287707][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1101.292902][T17018] do_fast_syscall_32+0x33/0x70 [ 1101.297833][T17018] do_SYSENTER_32+0x1b/0x20 [ 1101.302499][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.308877][T17018] [ 1101.311209][T17018] Uninit was stored to memory at: [ 1101.316405][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1101.321571][T17018] get_compat_msghdr+0x10c/0x280 [ 1101.326654][T17018] ___sys_recvmsg+0x289/0xb40 [ 1101.331388][T17018] do_recvmmsg+0x7c9/0x1200 [ 1101.336050][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.340780][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.347281][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1101.352476][T17018] do_fast_syscall_32+0x33/0x70 [ 1101.357374][T17018] do_SYSENTER_32+0x1b/0x20 [ 1101.362007][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.368404][T17018] [ 1101.370759][T17018] Uninit was stored to memory at: [ 1101.375950][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1101.381113][T17018] get_compat_msghdr+0x10c/0x280 [ 1101.386209][T17018] ___sys_recvmsg+0x289/0xb40 [ 1101.390943][T17018] do_recvmmsg+0x7c9/0x1200 [ 1101.395602][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.400332][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.406823][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1101.411995][T17018] do_fast_syscall_32+0x33/0x70 [ 1101.416897][T17018] do_SYSENTER_32+0x1b/0x20 [ 1101.421448][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.427957][T17018] [ 1101.430296][T17018] Uninit was stored to memory at: [ 1101.435496][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1101.440658][T17018] get_compat_msghdr+0x10c/0x280 [ 1101.445758][T17018] ___sys_recvmsg+0x289/0xb40 [ 1101.450495][T17018] do_recvmmsg+0x7c9/0x1200 [ 1101.455155][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.459890][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.466476][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1101.471550][T17018] do_fast_syscall_32+0x33/0x70 [ 1101.476547][T17018] do_SYSENTER_32+0x1b/0x20 [ 1101.481102][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.487618][T17018] [ 1101.489966][T17018] Uninit was stored to memory at: [ 1101.495205][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1101.500372][T17018] get_compat_msghdr+0x10c/0x280 [ 1101.505474][T17018] ___sys_recvmsg+0x289/0xb40 03:42:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000088000000840000000000000095000000000000007adda226418fb4c3c8bc138d840400000000000000cb2ea79f1b78006079cdde50381464ab51a66a84c35ae0f0c590b7f9b9bc60b49c14ec08d2cd4276456f90429c8477efb7c554aefb50794262df034c666f7ed374ddabc378829a1023cbd3964a8a6d715871dd8615478bed50ed169175f59dd9b78b04a90c8413791909f7513017710a4044ca6d1a98601c17d65ce1ae8dbd524a28120a008a69d42f82017abba378907b66776f42d3565b562cc03aaf36eef6febd066671010a84fe3bb0c5de3f7320162917"], &(0x7f0000000180)='GPL\x00'}, 0x48) [ 1101.510215][T17018] do_recvmmsg+0x7c9/0x1200 [ 1101.514885][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.519623][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1101.526139][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1101.531229][T17018] do_fast_syscall_32+0x33/0x70 [ 1101.536251][T17018] do_SYSENTER_32+0x1b/0x20 [ 1101.540820][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.547329][T17018] [ 1101.549682][T17018] Local variable msg_sys created at: [ 1101.555083][T17018] do_recvmmsg+0xc9/0x1200 [ 1101.559561][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1101.560577][T17040] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1101.579542][T17040] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1101.632377][T17040] REISERFS (device loop3): using ordered data mode [ 1101.639241][T17040] reiserfs: using flush barriers [ 1101.742245][T17040] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1101.850090][T17040] REISERFS (device loop3): checking transaction log (loop3) [ 1101.966641][T17046] not chained 2030000 origins [ 1101.971541][T17046] CPU: 1 PID: 17046 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1101.983145][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.993240][T17046] Call Trace: [ 1101.996545][T17046] [ 1101.999496][T17046] dump_stack_lvl+0x200/0x28c [ 1102.004325][T17046] dump_stack+0x29/0x2c [ 1102.008528][T17046] kmsan_internal_chain_origin+0x78/0x120 [ 1102.014318][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1102.020455][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1102.025635][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.031518][T17046] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1102.037224][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1102.042395][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.048272][T17046] ? should_fail+0x79/0x9c0 [ 1102.052817][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1102.057988][T17046] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1102.064289][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1102.070421][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1102.075588][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.081461][T17046] __msan_chain_origin+0xbd/0x140 [ 1102.086556][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.091746][T17046] get_compat_msghdr+0x10c/0x280 [ 1102.096747][T17046] ? do_recvmmsg+0x7c9/0x1200 [ 1102.101487][T17046] ___sys_recvmsg+0x289/0xb40 [ 1102.106236][T17046] ? __schedule+0x176c/0x21c0 [ 1102.110971][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1102.116137][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.122008][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1102.127172][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.133041][T17046] do_recvmmsg+0x7c9/0x1200 [ 1102.137613][T17046] ? filter_irq_stacks+0xb9/0x230 [ 1102.142714][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1102.147891][T17046] ? __sys_recvmmsg+0xb9/0x6f0 [ 1102.152707][T17046] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1102.159277][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.164026][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1102.170435][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1102.175516][T17046] do_fast_syscall_32+0x33/0x70 [ 1102.180423][T17046] do_SYSENTER_32+0x1b/0x20 [ 1102.184972][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.191356][T17046] RIP: 0023:0xf7f83549 [ 1102.195451][T17046] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1102.215109][T17046] RSP: 002b:00000000f7f1b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1102.223573][T17046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1102.231582][T17046] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1102.239600][T17046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1102.247605][T17046] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1102.255606][T17046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1102.263626][T17046] [ 1102.270974][T17046] Uninit was stored to memory at: [ 1102.277038][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.282316][T17046] get_compat_msghdr+0x10c/0x280 [ 1102.287400][T17046] ___sys_recvmsg+0x289/0xb40 [ 1102.292237][T17046] do_recvmmsg+0x7c9/0x1200 [ 1102.296789][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.301521][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1102.308027][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1102.313193][T17046] do_fast_syscall_32+0x33/0x70 [ 1102.318089][T17046] do_SYSENTER_32+0x1b/0x20 [ 1102.322737][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.329113][T17046] [ 1102.331445][T17046] Uninit was stored to memory at: [ 1102.336648][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.341905][T17046] get_compat_msghdr+0x10c/0x280 [ 1102.346896][T17046] ___sys_recvmsg+0x289/0xb40 [ 1102.351727][T17046] do_recvmmsg+0x7c9/0x1200 [ 1102.356320][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.361046][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 03:42:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r0, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000003c0)=r0, 0x4) [ 1102.365614][T17040] REISERFS (device loop3): Using tea hash to sort names [ 1102.367538][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1102.367604][T17046] do_fast_syscall_32+0x33/0x70 [ 1102.384607][T17046] do_SYSENTER_32+0x1b/0x20 [ 1102.389161][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.395652][T17046] [ 1102.397987][T17046] Uninit was stored to memory at: [ 1102.403190][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.408352][T17046] get_compat_msghdr+0x10c/0x280 [ 1102.413447][T17046] ___sys_recvmsg+0x289/0xb40 [ 1102.418173][T17046] do_recvmmsg+0x7c9/0x1200 [ 1102.422822][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.427582][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1102.434067][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1102.439144][T17046] do_fast_syscall_32+0x33/0x70 [ 1102.444138][T17046] do_SYSENTER_32+0x1b/0x20 [ 1102.448684][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.450108][T17040] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1102.455150][T17046] [ 1102.455161][T17046] Uninit was stored to memory at: [ 1102.455236][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.455293][T17046] get_compat_msghdr+0x10c/0x280 [ 1102.455347][T17046] ___sys_recvmsg+0x289/0xb40 [ 1102.486764][T17046] do_recvmmsg+0x7c9/0x1200 [ 1102.491328][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.496182][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1102.502699][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1102.507782][T17046] do_fast_syscall_32+0x33/0x70 [ 1102.512794][T17046] do_SYSENTER_32+0x1b/0x20 [ 1102.517338][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.523830][T17046] [ 1102.526158][T17046] Uninit was stored to memory at: [ 1102.531261][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.536545][T17046] get_compat_msghdr+0x10c/0x280 [ 1102.541545][T17046] ___sys_recvmsg+0x289/0xb40 [ 1102.546388][T17046] do_recvmmsg+0x7c9/0x1200 [ 1102.550945][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.555808][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1102.562304][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1102.567429][T17046] do_fast_syscall_32+0x33/0x70 [ 1102.572430][T17046] do_SYSENTER_32+0x1b/0x20 [ 1102.577006][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.583513][T17046] [ 1102.585852][T17046] Uninit was stored to memory at: [ 1102.590953][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.596228][T17046] get_compat_msghdr+0x10c/0x280 [ 1102.601223][T17046] ___sys_recvmsg+0x289/0xb40 [ 1102.606067][T17046] do_recvmmsg+0x7c9/0x1200 [ 1102.610630][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.615458][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1102.621962][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1102.627057][T17046] do_fast_syscall_32+0x33/0x70 [ 1102.632076][T17046] do_SYSENTER_32+0x1b/0x20 [ 1102.636627][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.643109][T17046] [ 1102.645445][T17046] Uninit was stored to memory at: [ 1102.650538][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.655807][T17046] get_compat_msghdr+0x10c/0x280 [ 1102.660800][T17046] ___sys_recvmsg+0x289/0xb40 [ 1102.665648][T17046] do_recvmmsg+0x7c9/0x1200 [ 1102.670209][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.675049][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1102.681467][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1102.686676][T17046] do_fast_syscall_32+0x33/0x70 [ 1102.691583][T17046] do_SYSENTER_32+0x1b/0x20 [ 1102.696236][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.702705][T17046] [ 1102.705037][T17046] Local variable msg_sys created at: [ 1102.710331][T17046] do_recvmmsg+0xc9/0x1200 [ 1102.714970][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1102.869913][T17018] not chained 2040000 origins [ 1102.874919][T17018] CPU: 1 PID: 17018 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1102.886542][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.896632][T17018] Call Trace: [ 1102.899940][T17018] [ 1102.902895][T17018] dump_stack_lvl+0x200/0x28c [ 1102.907629][T17018] dump_stack+0x29/0x2c [ 1102.911832][T17018] kmsan_internal_chain_origin+0x78/0x120 [ 1102.917615][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1102.923745][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1102.928918][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.934795][T17018] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1102.940411][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1102.945602][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.951487][T17018] ? should_fail+0x79/0x9c0 [ 1102.956053][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1102.961239][T17018] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1102.967642][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1102.973799][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1102.978974][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.984850][T17018] __msan_chain_origin+0xbd/0x140 [ 1102.989949][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1102.995164][T17018] get_compat_msghdr+0x10c/0x280 [ 1103.000168][T17018] ? do_recvmmsg+0x7c9/0x1200 [ 1103.004904][T17018] ___sys_recvmsg+0x289/0xb40 [ 1103.009656][T17018] ? __schedule+0x176c/0x21c0 [ 1103.014423][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1103.019607][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.025485][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1103.030670][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.036547][T17018] do_recvmmsg+0x7c9/0x1200 [ 1103.041138][T17018] ? filter_irq_stacks+0xb9/0x230 [ 1103.046326][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1103.051508][T17018] ? __sys_recvmmsg+0xb9/0x6f0 [ 1103.056332][T17018] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.062903][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.067649][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.074048][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1103.079122][T17018] do_fast_syscall_32+0x33/0x70 [ 1103.084198][T17018] do_SYSENTER_32+0x1b/0x20 [ 1103.088756][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.095135][T17018] RIP: 0023:0xf7f11549 [ 1103.099221][T17018] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1103.118868][T17018] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1103.127320][T17018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1103.135337][T17018] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1103.143333][T17018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.151324][T17018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1103.159318][T17018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.167331][T17018] [ 1103.175043][T17018] Uninit was stored to memory at: [ 1103.180158][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1103.197787][T17018] get_compat_msghdr+0x10c/0x280 [ 1103.202899][T17018] ___sys_recvmsg+0x289/0xb40 [ 1103.207635][T17018] do_recvmmsg+0x7c9/0x1200 [ 1103.212299][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.217064][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.223566][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1103.228639][T17018] do_fast_syscall_32+0x33/0x70 [ 1103.233635][T17018] do_SYSENTER_32+0x1b/0x20 [ 1103.238187][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.244668][T17018] [ 1103.247001][T17018] Uninit was stored to memory at: [ 1103.252272][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1103.257433][T17018] get_compat_msghdr+0x10c/0x280 [ 1103.262586][T17018] ___sys_recvmsg+0x289/0xb40 [ 1103.267323][T17018] do_recvmmsg+0x7c9/0x1200 [ 1103.271985][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.276727][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.283278][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1103.288351][T17018] do_fast_syscall_32+0x33/0x70 [ 1103.293337][T17018] do_SYSENTER_32+0x1b/0x20 [ 1103.297886][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.304446][T17018] [ 1103.306801][T17018] Uninit was stored to memory at: [ 1103.312150][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1103.317309][T17018] get_compat_msghdr+0x10c/0x280 [ 1103.322468][T17018] ___sys_recvmsg+0x289/0xb40 [ 1103.327203][T17018] do_recvmmsg+0x7c9/0x1200 [ 1103.331965][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.336731][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.343309][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1103.348408][T17018] do_fast_syscall_32+0x33/0x70 [ 1103.353484][T17018] do_SYSENTER_32+0x1b/0x20 [ 1103.358048][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.364529][T17018] [ 1103.366858][T17018] Uninit was stored to memory at: [ 1103.372051][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1103.377213][T17018] get_compat_msghdr+0x10c/0x280 [ 1103.382298][T17018] ___sys_recvmsg+0x289/0xb40 [ 1103.387029][T17018] do_recvmmsg+0x7c9/0x1200 [ 1103.391595][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.396421][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.403093][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1103.408171][T17018] do_fast_syscall_32+0x33/0x70 [ 1103.413177][T17018] do_SYSENTER_32+0x1b/0x20 [ 1103.417732][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.424221][T17018] [ 1103.426556][T17018] Uninit was stored to memory at: [ 1103.431748][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1103.436908][T17018] get_compat_msghdr+0x10c/0x280 [ 1103.441999][T17018] ___sys_recvmsg+0x289/0xb40 [ 1103.446737][T17018] do_recvmmsg+0x7c9/0x1200 [ 1103.451308][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.456171][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.462723][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1103.467852][T17018] do_fast_syscall_32+0x33/0x70 [ 1103.472959][T17018] do_SYSENTER_32+0x1b/0x20 [ 1103.477517][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.484075][T17018] [ 1103.486407][T17018] Uninit was stored to memory at: [ 1103.491501][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1103.496842][T17018] get_compat_msghdr+0x10c/0x280 [ 1103.501925][T17018] ___sys_recvmsg+0x289/0xb40 [ 1103.506662][T17018] do_recvmmsg+0x7c9/0x1200 [ 1103.511209][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.516112][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.522600][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1103.527685][T17018] do_fast_syscall_32+0x33/0x70 [ 1103.532758][T17018] do_SYSENTER_32+0x1b/0x20 [ 1103.537319][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.543811][T17018] [ 1103.546155][T17018] Uninit was stored to memory at: [ 1103.551267][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1103.556533][T17018] get_compat_msghdr+0x10c/0x280 [ 1103.561515][T17018] ___sys_recvmsg+0x289/0xb40 [ 1103.566348][T17018] do_recvmmsg+0x7c9/0x1200 [ 1103.570917][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.575765][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.582265][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1103.587355][T17018] do_fast_syscall_32+0x33/0x70 [ 1103.592389][T17018] do_SYSENTER_32+0x1b/0x20 [ 1103.596963][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.603465][T17018] [ 1103.605800][T17018] Local variable msg_sys created at: [ 1103.611122][T17018] do_recvmmsg+0xc9/0x1200 [ 1103.615700][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1103.794256][T17046] not chained 2050000 origins [ 1103.799175][T17046] CPU: 0 PID: 17046 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1103.810760][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.820843][T17046] Call Trace: [ 1103.824138][T17046] [ 1103.827237][T17046] dump_stack_lvl+0x200/0x28c [ 1103.831969][T17046] dump_stack+0x29/0x2c [ 1103.836166][T17046] kmsan_internal_chain_origin+0x78/0x120 [ 1103.841943][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1103.848061][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1103.853223][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.859118][T17046] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1103.864721][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1103.869885][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.875750][T17046] ? should_fail+0x79/0x9c0 [ 1103.880297][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1103.885464][T17046] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1103.891764][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1103.897888][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1103.903052][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.908951][T17046] __msan_chain_origin+0xbd/0x140 [ 1103.914042][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1103.919227][T17046] get_compat_msghdr+0x10c/0x280 [ 1103.924217][T17046] ? do_recvmmsg+0x7c9/0x1200 [ 1103.928948][T17046] ___sys_recvmsg+0x289/0xb40 [ 1103.933684][T17046] ? __schedule+0x176c/0x21c0 [ 1103.938413][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1103.943583][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.949451][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1103.954614][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.960482][T17046] do_recvmmsg+0x7c9/0x1200 [ 1103.965048][T17046] ? filter_irq_stacks+0xb9/0x230 [ 1103.970140][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1103.975311][T17046] ? __sys_recvmmsg+0xb9/0x6f0 [ 1103.980127][T17046] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.986688][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1103.991433][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1103.997831][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1104.002908][T17046] do_fast_syscall_32+0x33/0x70 [ 1104.007808][T17046] do_SYSENTER_32+0x1b/0x20 [ 1104.012355][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.018739][T17046] RIP: 0023:0xf7f83549 [ 1104.022827][T17046] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1104.042478][T17046] RSP: 002b:00000000f7f1b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1104.050935][T17046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1104.058940][T17046] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1104.066947][T17046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1104.072546][T17031] not chained 2060000 origins [ 1104.074960][T17046] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1104.087587][T17046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1104.095607][T17046] [ 1104.098631][T17031] CPU: 1 PID: 17031 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1104.100816][T17046] Uninit was stored to memory at: [ 1104.110208][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.110236][T17031] Call Trace: [ 1104.110251][T17031] [ 1104.110266][T17031] dump_stack_lvl+0x200/0x28c [ 1104.110331][T17031] dump_stack+0x29/0x2c [ 1104.110378][T17031] kmsan_internal_chain_origin+0x78/0x120 [ 1104.110441][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1104.110511][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1104.115716][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.125593][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.125666][T17031] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1104.128970][T17046] get_compat_msghdr+0x10c/0x280 [ 1104.131899][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1104.131962][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.136665][T17046] ___sys_recvmsg+0x289/0xb40 [ 1104.140791][T17031] ? should_fail+0x79/0x9c0 [ 1104.146634][T17046] do_recvmmsg+0x7c9/0x1200 [ 1104.152575][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1104.152639][T17031] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1104.157746][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1104.162865][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1104.162938][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1104.168759][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.174291][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.174359][T17031] __msan_chain_origin+0xbd/0x140 [ 1104.179313][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1104.184416][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.184496][T17031] get_compat_msghdr+0x10c/0x280 [ 1104.190306][T17046] do_fast_syscall_32+0x33/0x70 [ 1104.194974][T17031] ? do_recvmmsg+0x7c9/0x1200 [ 1104.195040][T17031] ___sys_recvmsg+0x289/0xb40 [ 1104.199556][T17046] do_SYSENTER_32+0x1b/0x20 [ 1104.204055][T17031] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1104.204120][T17031] ? __schedule+0x1980/0x21c0 [ 1104.204182][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1104.209303][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.215540][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.215610][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1104.215671][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.220324][T17046] [ 1104.220334][T17046] Uninit was stored to memory at: [ 1104.226385][T17031] do_recvmmsg+0x7c9/0x1200 [ 1104.226462][T17031] ? filter_irq_stacks+0xb9/0x230 [ 1104.231740][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.237932][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1104.243816][T17046] get_compat_msghdr+0x10c/0x280 [ 1104.248729][T17031] ? __sys_recvmmsg+0xb9/0x6f0 [ 1104.253829][T17046] ___sys_recvmsg+0x289/0xb40 [ 1104.258816][T17031] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.263845][T17046] do_recvmmsg+0x7c9/0x1200 [ 1104.268581][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1104.273352][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1104.277939][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.282512][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.287949][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1104.292699][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1104.297695][T17031] do_fast_syscall_32+0x33/0x70 [ 1104.304099][T17046] do_fast_syscall_32+0x33/0x70 [ 1104.309791][T17031] do_SYSENTER_32+0x1b/0x20 [ 1104.314982][T17046] do_SYSENTER_32+0x1b/0x20 [ 1104.320671][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.323082][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.327990][T17031] RIP: 0023:0xf7f7e549 [ 1104.332577][T17046] [ 1104.337503][T17031] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1104.342696][T17046] Uninit was stored to memory at: [ 1104.347689][T17031] RSP: 002b:00000000f7f795cc EFLAGS: 00000296 [ 1104.352783][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.357354][T17031] ORIG_RAX: 0000000000000151 [ 1104.357372][T17031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1104.362128][T17046] get_compat_msghdr+0x10c/0x280 [ 1104.368509][T17031] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1104.373090][T17046] ___sys_recvmsg+0x289/0xb40 [ 1104.377665][T17031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1104.382430][T17046] do_recvmmsg+0x7c9/0x1200 [ 1104.388645][T17031] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1104.395056][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1104.399965][T17031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1104.405079][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.409843][T17031] [ 1104.414759][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1104.423946][T17031] Uninit was stored to memory at: [ 1104.430053][T17046] do_fast_syscall_32+0x33/0x70 [ 1104.437091][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.440538][T17046] do_SYSENTER_32+0x1b/0x20 [ 1104.442940][T17031] get_compat_msghdr+0x10c/0x280 [ 1104.462642][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.467727][T17031] ___sys_recvmsg+0x289/0xb40 [ 1104.473784][T17046] [ 1104.478855][T17031] do_recvmmsg+0x7c9/0x1200 [ 1104.483618][T17046] Uninit was stored to memory at: [ 1104.491558][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1104.496644][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.504598][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.509258][T17046] get_compat_msghdr+0x10c/0x280 [ 1104.517296][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1104.521886][T17046] ___sys_recvmsg+0x289/0xb40 [ 1104.529847][T17031] do_fast_syscall_32+0x33/0x70 [ 1104.534626][T17046] do_recvmmsg+0x7c9/0x1200 [ 1104.542638][T17031] do_SYSENTER_32+0x1b/0x20 [ 1104.548964][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1104.552048][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.557077][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.562161][T17031] [ 1104.562170][T17031] Uninit was stored to memory at: [ 1104.562242][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.567027][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1104.572202][T17031] get_compat_msghdr+0x10c/0x280 [ 1104.576712][T17046] do_fast_syscall_32+0x33/0x70 [ 1104.581714][T17031] ___sys_recvmsg+0x289/0xb40 [ 1104.588042][T17046] do_SYSENTER_32+0x1b/0x20 [ 1104.592779][T17031] do_recvmmsg+0x7c9/0x1200 [ 1104.595116][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.599601][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1104.604838][T17046] [ 1104.609498][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.614754][T17046] Uninit was stored to memory at: [ 1104.614830][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.621064][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1104.626107][T17046] get_compat_msghdr+0x10c/0x280 [ 1104.631092][T17031] do_fast_syscall_32+0x33/0x70 [ 1104.635876][T17046] ___sys_recvmsg+0x289/0xb40 [ 1104.640690][T17031] do_SYSENTER_32+0x1b/0x20 [ 1104.645256][T17046] do_recvmmsg+0x7c9/0x1200 [ 1104.649741][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.654503][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1104.660790][T17031] [ 1104.660799][T17031] Uninit was stored to memory at: [ 1104.667202][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.669558][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.674585][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1104.679674][T17031] get_compat_msghdr+0x10c/0x280 [ 1104.684781][T17046] do_fast_syscall_32+0x33/0x70 [ 1104.689784][T17031] ___sys_recvmsg+0x289/0xb40 [ 1104.694721][T17046] do_SYSENTER_32+0x1b/0x20 [ 1104.699360][T17031] do_recvmmsg+0x7c9/0x1200 [ 1104.703947][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.708404][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1104.714816][T17046] [ 1104.719455][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.721871][T17046] Uninit was stored to memory at: [ 1104.728160][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1104.733335][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.738344][T17031] do_fast_syscall_32+0x33/0x70 [ 1104.743455][T17046] get_compat_msghdr+0x10c/0x280 [ 1104.748362][T17031] do_SYSENTER_32+0x1b/0x20 [ 1104.753307][T17046] ___sys_recvmsg+0x289/0xb40 [ 1104.757952][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.762546][T17046] do_recvmmsg+0x7c9/0x1200 [ 1104.767002][T17031] [ 1104.767011][T17031] Uninit was stored to memory at: [ 1104.773408][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1104.778107][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.780356][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.785450][T17031] get_compat_msghdr+0x10c/0x280 [ 1104.791876][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1104.796948][T17031] ___sys_recvmsg+0x289/0xb40 [ 1104.802081][T17046] do_fast_syscall_32+0x33/0x70 [ 1104.806981][T17031] do_recvmmsg+0x7c9/0x1200 [ 1104.811932][T17046] do_SYSENTER_32+0x1b/0x20 [ 1104.816558][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1104.821039][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.825601][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.832013][T17046] [ 1104.832023][T17046] Uninit was stored to memory at: [ 1104.836676][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1104.839056][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.845388][T17031] do_fast_syscall_32+0x33/0x70 [ 1104.850417][T17046] get_compat_msghdr+0x10c/0x280 [ 1104.855500][T17031] do_SYSENTER_32+0x1b/0x20 [ 1104.860616][T17046] ___sys_recvmsg+0x289/0xb40 [ 1104.865555][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.870494][T17046] do_recvmmsg+0x7c9/0x1200 [ 1104.875057][T17031] [ 1104.875067][T17031] Uninit was stored to memory at: [ 1104.875140][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1104.879729][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1104.886114][T17031] get_compat_msghdr+0x10c/0x280 [ 1104.890633][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.893023][T17031] ___sys_recvmsg+0x289/0xb40 [ 1104.898031][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1104.902853][T17031] do_recvmmsg+0x7c9/0x1200 [ 1104.907973][T17046] do_fast_syscall_32+0x33/0x70 [ 1104.914356][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1104.919297][T17046] do_SYSENTER_32+0x1b/0x20 [ 1104.924379][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1104.929058][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.933984][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1104.938492][T17046] [ 1104.938502][T17046] Local variable msg_sys created at: [ 1104.943052][T17031] do_fast_syscall_32+0x33/0x70 [ 1104.947752][T17046] do_recvmmsg+0xc9/0x1200 [ 1104.957357][T17031] do_SYSENTER_32+0x1b/0x20 [ 1104.963772][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1104.966085][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.118980][T17031] [ 1105.121311][T17031] Uninit was stored to memory at: [ 1105.126503][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1105.131750][T17031] get_compat_msghdr+0x10c/0x280 [ 1105.136743][T17031] ___sys_recvmsg+0x289/0xb40 [ 1105.141467][T17031] do_recvmmsg+0x7c9/0x1200 [ 1105.146120][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.150858][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.157351][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1105.162536][T17031] do_fast_syscall_32+0x33/0x70 [ 1105.167472][T17031] do_SYSENTER_32+0x1b/0x20 [ 1105.172105][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.178488][T17031] [ 1105.180819][T17031] Uninit was stored to memory at: [ 1105.186015][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1105.191182][T17031] get_compat_msghdr+0x10c/0x280 [ 1105.196277][T17031] ___sys_recvmsg+0x289/0xb40 [ 1105.201012][T17031] do_recvmmsg+0x7c9/0x1200 [ 1105.205661][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.210387][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.216879][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1105.222042][T17031] do_fast_syscall_32+0x33/0x70 [ 1105.227021][T17031] do_SYSENTER_32+0x1b/0x20 [ 1105.231565][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.238040][T17031] [ 1105.240371][T17031] Local variable msg_sys created at: [ 1105.245770][T17031] do_recvmmsg+0xc9/0x1200 [ 1105.250249][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.392407][T17031] not chained 2070000 origins [ 1105.397131][T17031] CPU: 0 PID: 17031 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1105.408736][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.418813][T17031] Call Trace: [ 1105.422109][T17031] [ 1105.425057][T17031] dump_stack_lvl+0x200/0x28c [ 1105.429788][T17031] dump_stack+0x29/0x2c [ 1105.433983][T17031] kmsan_internal_chain_origin+0x78/0x120 [ 1105.439757][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1105.445878][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1105.451049][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.456916][T17031] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1105.462523][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1105.467689][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.473558][T17031] ? should_fail+0x79/0x9c0 [ 1105.478135][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1105.483299][T17031] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1105.489605][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1105.495730][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1105.500901][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.506938][T17031] __msan_chain_origin+0xbd/0x140 [ 1105.512012][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1105.517193][T17031] get_compat_msghdr+0x10c/0x280 [ 1105.522188][T17031] ? do_recvmmsg+0x7c9/0x1200 [ 1105.526930][T17031] ___sys_recvmsg+0x289/0xb40 [ 1105.531673][T17031] ? __schedule+0x176c/0x21c0 [ 1105.536405][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1105.541568][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.547523][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1105.552689][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.558556][T17031] do_recvmmsg+0x7c9/0x1200 [ 1105.563119][T17031] ? filter_irq_stacks+0xb9/0x230 [ 1105.568207][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1105.573376][T17031] ? __sys_recvmmsg+0xb9/0x6f0 [ 1105.578188][T17031] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.584751][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.589495][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.595913][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1105.600987][T17031] do_fast_syscall_32+0x33/0x70 [ 1105.605878][T17031] do_SYSENTER_32+0x1b/0x20 [ 1105.610424][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.616798][T17031] RIP: 0023:0xf7f7e549 [ 1105.620885][T17031] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1105.640540][T17031] RSP: 002b:00000000f7f795cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1105.648999][T17031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1105.656998][T17031] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1105.664994][T17031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1105.672993][T17031] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1105.681001][T17031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.689016][T17031] [ 1105.694508][T17031] Uninit was stored to memory at: [ 1105.699620][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1105.705486][T17031] get_compat_msghdr+0x10c/0x280 [ 1105.710486][T17031] ___sys_recvmsg+0x289/0xb40 [ 1105.715352][T17031] do_recvmmsg+0x7c9/0x1200 [ 1105.719931][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.724790][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.731176][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1105.736398][T17031] do_fast_syscall_32+0x33/0x70 [ 1105.741312][T17031] do_SYSENTER_32+0x1b/0x20 [ 1105.745980][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.752469][T17031] [ 1105.754801][T17031] Uninit was stored to memory at: [ 1105.759916][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1105.765215][T17031] get_compat_msghdr+0x10c/0x280 [ 1105.770203][T17031] ___sys_recvmsg+0x289/0xb40 [ 1105.775057][T17031] do_recvmmsg+0x7c9/0x1200 [ 1105.779612][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.784476][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.790864][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1105.796063][T17031] do_fast_syscall_32+0x33/0x70 [ 1105.800966][T17031] do_SYSENTER_32+0x1b/0x20 [ 1105.805648][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.812144][T17031] [ 1105.814479][T17031] Uninit was stored to memory at: [ 1105.819592][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1105.824890][T17031] get_compat_msghdr+0x10c/0x280 [ 1105.829876][T17031] ___sys_recvmsg+0x289/0xb40 [ 1105.834739][T17031] do_recvmmsg+0x7c9/0x1200 [ 1105.839307][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.844158][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.850555][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1105.855751][T17031] do_fast_syscall_32+0x33/0x70 [ 1105.860648][T17031] do_SYSENTER_32+0x1b/0x20 [ 1105.865301][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.871807][T17031] [ 1105.874151][T17031] Uninit was stored to memory at: [ 1105.879238][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1105.884532][T17031] get_compat_msghdr+0x10c/0x280 [ 1105.889525][T17031] ___sys_recvmsg+0x289/0xb40 [ 1105.894406][T17031] do_recvmmsg+0x7c9/0x1200 [ 1105.898971][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.903908][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.910324][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1105.915572][T17031] do_fast_syscall_32+0x33/0x70 [ 1105.920570][T17031] do_SYSENTER_32+0x1b/0x20 [ 1105.925313][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.931806][T17031] [ 1105.934151][T17031] Uninit was stored to memory at: [ 1105.939241][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1105.944534][T17031] get_compat_msghdr+0x10c/0x280 [ 1105.949524][T17031] ___sys_recvmsg+0x289/0xb40 [ 1105.954379][T17031] do_recvmmsg+0x7c9/0x1200 [ 1105.958945][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1105.963820][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1105.970204][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1105.975429][T17031] do_fast_syscall_32+0x33/0x70 [ 1105.980328][T17031] do_SYSENTER_32+0x1b/0x20 [ 1105.985001][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.991385][T17031] [ 1105.993850][T17031] Uninit was stored to memory at: [ 1105.998943][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.004244][T17031] get_compat_msghdr+0x10c/0x280 [ 1106.009241][T17031] ___sys_recvmsg+0x289/0xb40 [ 1106.014103][T17031] do_recvmmsg+0x7c9/0x1200 [ 1106.018681][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1106.023548][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.029940][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1106.035166][T17031] do_fast_syscall_32+0x33/0x70 [ 1106.040069][T17031] do_SYSENTER_32+0x1b/0x20 [ 1106.044764][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.049219][T17018] not chained 2080000 origins [ 1106.051149][T17031] [ 1106.051157][T17031] Uninit was stored to memory at: [ 1106.051232][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.056219][T17018] CPU: 1 PID: 17018 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1106.058243][T17031] get_compat_msghdr+0x10c/0x280 [ 1106.063252][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.063278][T17018] Call Trace: [ 1106.063295][T17018] [ 1106.063311][T17018] dump_stack_lvl+0x200/0x28c [ 1106.068432][T17031] ___sys_recvmsg+0x289/0xb40 [ 1106.079962][T17018] dump_stack+0x29/0x2c [ 1106.080011][T17018] kmsan_internal_chain_origin+0x78/0x120 [ 1106.080076][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1106.085087][T17031] do_recvmmsg+0x7c9/0x1200 [ 1106.095045][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1106.095109][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.098433][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1106.101363][T17018] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1106.106124][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.110679][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1106.114900][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1106.120525][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.126675][T17031] do_fast_syscall_32+0x33/0x70 [ 1106.131062][T17018] ? should_fail+0x79/0x9c0 [ 1106.136252][T17031] do_SYSENTER_32+0x1b/0x20 [ 1106.141941][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1106.142004][T17018] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1106.146683][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.152215][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1106.152283][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1106.152344][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.158634][T17031] [ 1106.158645][T17031] Local variable msg_sys created at: [ 1106.163729][T17018] __msan_chain_origin+0xbd/0x140 [ 1106.163792][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.168848][T17031] do_recvmmsg+0xc9/0x1200 [ 1106.174659][T17018] get_compat_msghdr+0x10c/0x280 [ 1106.174724][T17018] ? do_recvmmsg+0x7c9/0x1200 [ 1106.179578][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1106.184098][T17018] ___sys_recvmsg+0x289/0xb40 [ 1106.184170][T17018] ? __schedule+0x176c/0x21c0 [ 1106.268955][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1106.274125][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.279981][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1106.285139][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.291001][T17018] do_recvmmsg+0x7c9/0x1200 [ 1106.295558][T17018] ? filter_irq_stacks+0xb9/0x230 [ 1106.300656][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1106.305819][T17018] ? __sys_recvmmsg+0xb9/0x6f0 [ 1106.310673][T17018] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.317234][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1106.321970][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.328362][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1106.333434][T17018] do_fast_syscall_32+0x33/0x70 [ 1106.338328][T17018] do_SYSENTER_32+0x1b/0x20 [ 1106.342871][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.349242][T17018] RIP: 0023:0xf7f11549 [ 1106.353325][T17018] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1106.372969][T17018] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1106.381415][T17018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1106.389410][T17018] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1106.397408][T17018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1106.405397][T17018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1106.413387][T17018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1106.421394][T17018] [ 1106.429186][T17018] Uninit was stored to memory at: [ 1106.435356][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.440513][T17018] get_compat_msghdr+0x10c/0x280 [ 1106.445598][T17018] ___sys_recvmsg+0x289/0xb40 [ 1106.450461][T17018] do_recvmmsg+0x7c9/0x1200 [ 1106.455117][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1106.459844][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.466410][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1106.471486][T17018] do_fast_syscall_32+0x33/0x70 [ 1106.476488][T17018] do_SYSENTER_32+0x1b/0x20 [ 1106.481036][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.487538][T17018] [ 1106.489890][T17018] Uninit was stored to memory at: [ 1106.495078][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.500241][T17018] get_compat_msghdr+0x10c/0x280 [ 1106.505334][T17018] ___sys_recvmsg+0x289/0xb40 [ 1106.510066][T17018] do_recvmmsg+0x7c9/0x1200 [ 1106.514716][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1106.519445][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.525931][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1106.531001][T17018] do_fast_syscall_32+0x33/0x70 [ 1106.535992][T17018] do_SYSENTER_32+0x1b/0x20 [ 1106.540543][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.547018][T17018] [ 1106.549351][T17018] Uninit was stored to memory at: [ 1106.554551][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.559707][T17018] get_compat_msghdr+0x10c/0x280 [ 1106.564867][T17018] ___sys_recvmsg+0x289/0xb40 [ 1106.569599][T17018] do_recvmmsg+0x7c9/0x1200 [ 1106.574320][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1106.579046][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.585607][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1106.590683][T17018] do_fast_syscall_32+0x33/0x70 [ 1106.595764][T17018] do_SYSENTER_32+0x1b/0x20 [ 1106.600318][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.606879][T17018] [ 1106.609239][T17018] Uninit was stored to memory at: [ 1106.614505][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.619668][T17018] get_compat_msghdr+0x10c/0x280 [ 1106.624844][T17018] ___sys_recvmsg+0x289/0xb40 [ 1106.629576][T17018] do_recvmmsg+0x7c9/0x1200 [ 1106.634483][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1106.639218][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.645782][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1106.650863][T17018] do_fast_syscall_32+0x33/0x70 [ 1106.655975][T17018] do_SYSENTER_32+0x1b/0x20 [ 1106.660531][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.667087][T17018] [ 1106.669420][T17018] Uninit was stored to memory at: [ 1106.674694][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.679859][T17018] get_compat_msghdr+0x10c/0x280 [ 1106.685021][T17018] ___sys_recvmsg+0x289/0xb40 [ 1106.689752][T17018] do_recvmmsg+0x7c9/0x1200 [ 1106.694482][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1106.699215][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.705784][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1106.710861][T17018] do_fast_syscall_32+0x33/0x70 [ 1106.715971][T17018] do_SYSENTER_32+0x1b/0x20 [ 1106.720522][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.727250][T17018] [ 1106.729588][T17018] Uninit was stored to memory at: [ 1106.734858][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.740049][T17018] get_compat_msghdr+0x10c/0x280 [ 1106.745210][T17018] ___sys_recvmsg+0x289/0xb40 [ 1106.749939][T17018] do_recvmmsg+0x7c9/0x1200 [ 1106.754665][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1106.759398][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.765957][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1106.771065][T17018] do_fast_syscall_32+0x33/0x70 [ 1106.776138][T17018] do_SYSENTER_32+0x1b/0x20 [ 1106.780690][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.787258][T17018] [ 1106.789595][T17018] Uninit was stored to memory at: [ 1106.794870][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1106.800052][T17018] get_compat_msghdr+0x10c/0x280 [ 1106.805231][T17018] ___sys_recvmsg+0x289/0xb40 [ 1106.809965][T17018] do_recvmmsg+0x7c9/0x1200 [ 1106.814724][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1106.819485][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1106.826060][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1106.831225][T17018] do_fast_syscall_32+0x33/0x70 [ 1106.836317][T17018] do_SYSENTER_32+0x1b/0x20 [ 1106.840875][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1106.847478][T17018] [ 1106.849822][T17018] Local variable msg_sys created at: [ 1106.855302][T17018] do_recvmmsg+0xc9/0x1200 [ 1106.859778][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1107.054441][T17031] not chained 2090000 origins [ 1107.059168][T17031] CPU: 1 PID: 17031 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1107.070782][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.080866][T17031] Call Trace: [ 1107.084176][T17031] [ 1107.087121][T17031] dump_stack_lvl+0x200/0x28c [ 1107.091937][T17031] dump_stack+0x29/0x2c [ 1107.096142][T17031] kmsan_internal_chain_origin+0x78/0x120 [ 1107.101921][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1107.108051][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1107.113219][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.119089][T17031] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1107.124686][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1107.129852][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.135718][T17031] ? should_fail+0x79/0x9c0 [ 1107.140260][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1107.145421][T17031] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1107.151719][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1107.157845][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1107.163036][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.168991][T17031] __msan_chain_origin+0xbd/0x140 [ 1107.174242][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.179422][T17031] get_compat_msghdr+0x10c/0x280 [ 1107.184416][T17031] ? do_recvmmsg+0x7c9/0x1200 [ 1107.189148][T17031] ___sys_recvmsg+0x289/0xb40 [ 1107.193884][T17031] ? __schedule+0x176c/0x21c0 [ 1107.198634][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1107.203816][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.209772][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1107.214943][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.220817][T17031] do_recvmmsg+0x7c9/0x1200 [ 1107.225413][T17031] ? filter_irq_stacks+0xb9/0x230 [ 1107.230530][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1107.235705][T17031] ? __sys_recvmmsg+0xb9/0x6f0 [ 1107.240526][T17031] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.247093][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1107.251850][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.258250][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1107.263325][T17031] do_fast_syscall_32+0x33/0x70 [ 1107.268218][T17031] do_SYSENTER_32+0x1b/0x20 [ 1107.272762][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.279150][T17031] RIP: 0023:0xf7f7e549 [ 1107.283241][T17031] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1107.302989][T17031] RSP: 002b:00000000f7f795cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1107.311453][T17031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1107.319459][T17031] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1107.327458][T17031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.335458][T17031] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1107.343456][T17031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.351473][T17031] [ 1107.358666][T17031] Uninit was stored to memory at: [ 1107.364498][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.369661][T17031] get_compat_msghdr+0x10c/0x280 [ 1107.374751][T17031] ___sys_recvmsg+0x289/0xb40 [ 1107.379484][T17031] do_recvmmsg+0x7c9/0x1200 [ 1107.384142][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1107.388870][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.395371][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1107.400442][T17031] do_fast_syscall_32+0x33/0x70 [ 1107.405501][T17031] do_SYSENTER_32+0x1b/0x20 [ 1107.410044][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.416523][T17031] [ 1107.418857][T17031] Uninit was stored to memory at: [ 1107.424048][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.429206][T17031] get_compat_msghdr+0x10c/0x280 [ 1107.434311][T17031] ___sys_recvmsg+0x289/0xb40 [ 1107.439060][T17031] do_recvmmsg+0x7c9/0x1200 [ 1107.443702][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1107.448430][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.454907][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1107.459984][T17031] do_fast_syscall_32+0x33/0x70 [ 1107.465013][T17031] do_SYSENTER_32+0x1b/0x20 [ 1107.469557][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.476035][T17031] [ 1107.478364][T17031] Uninit was stored to memory at: [ 1107.483544][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.487612][T17018] not chained 2100000 origins [ 1107.488699][T17031] get_compat_msghdr+0x10c/0x280 [ 1107.493691][T17018] CPU: 0 PID: 17018 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1107.498382][T17031] ___sys_recvmsg+0x289/0xb40 [ 1107.510438][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.510465][T17018] Call Trace: [ 1107.510487][T17018] [ 1107.510504][T17018] dump_stack_lvl+0x200/0x28c [ 1107.515273][T17031] do_recvmmsg+0x7c9/0x1200 [ 1107.525264][T17018] dump_stack+0x29/0x2c [ 1107.525313][T17018] kmsan_internal_chain_origin+0x78/0x120 [ 1107.528609][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1107.531535][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1107.536275][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.540684][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1107.544899][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1107.550526][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.555293][T17031] do_fast_syscall_32+0x33/0x70 [ 1107.561240][T17018] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1107.567621][T17031] do_SYSENTER_32+0x1b/0x20 [ 1107.572643][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1107.572707][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.577719][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.583522][T17018] ? should_fail+0x79/0x9c0 [ 1107.583570][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1107.588424][T17031] [ 1107.588433][T17031] Uninit was stored to memory at: [ 1107.593955][T17018] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1107.594024][T17018] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1107.598593][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.603630][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1107.603692][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.609528][T17031] get_compat_msghdr+0x10c/0x280 [ 1107.615963][T17018] __msan_chain_origin+0xbd/0x140 [ 1107.616044][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.620580][T17031] ___sys_recvmsg+0x289/0xb40 [ 1107.625697][T17018] get_compat_msghdr+0x10c/0x280 [ 1107.625768][T17018] ? do_recvmmsg+0x7c9/0x1200 [ 1107.628087][T17031] do_recvmmsg+0x7c9/0x1200 [ 1107.633101][T17018] ___sys_recvmsg+0x289/0xb40 [ 1107.633175][T17018] ? __schedule+0x176c/0x21c0 [ 1107.639410][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1107.645470][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1107.645534][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.650646][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.655744][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1107.655810][T17018] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.655880][T17018] do_recvmmsg+0x7c9/0x1200 [ 1107.661735][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1107.666584][T17018] ? filter_irq_stacks+0xb9/0x230 [ 1107.671587][T17031] do_fast_syscall_32+0x33/0x70 [ 1107.676694][T17018] ? kmsan_get_metadata+0x33/0x220 [ 1107.681349][T17031] do_SYSENTER_32+0x1b/0x20 [ 1107.686279][T17018] ? __sys_recvmmsg+0xb9/0x6f0 [ 1107.686339][T17018] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.691027][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.695521][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1107.695607][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.700280][T17031] [ 1107.700289][T17031] Uninit was stored to memory at: [ 1107.704969][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1107.705039][T17018] do_fast_syscall_32+0x33/0x70 [ 1107.709806][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.714856][T17018] do_SYSENTER_32+0x1b/0x20 [ 1107.714910][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.720725][T17031] get_compat_msghdr+0x10c/0x280 [ 1107.727048][T17018] RIP: 0023:0xf7f11549 [ 1107.727081][T17018] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1107.727133][T17018] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 [ 1107.732295][T17031] ___sys_recvmsg+0x289/0xb40 [ 1107.738032][T17018] ORIG_RAX: 0000000000000151 [ 1107.738049][T17018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1107.742605][T17031] do_recvmmsg+0x7c9/0x1200 [ 1107.747533][T17018] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1107.752653][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1107.757388][T17018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.762566][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.766969][T17018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1107.771884][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1107.778287][T17018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.784689][T17031] do_fast_syscall_32+0x33/0x70 [ 1107.789290][T17018] [ 1107.795659][T17031] do_SYSENTER_32+0x1b/0x20 [ 1107.800338][T17018] Uninit was stored to memory at: [ 1107.802993][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.803110][T17031] [ 1107.803118][T17031] Uninit was stored to memory at: [ 1107.803188][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.803244][T17031] get_compat_msghdr+0x10c/0x280 [ 1107.803298][T17031] ___sys_recvmsg+0x289/0xb40 [ 1107.808389][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.813280][T17031] do_recvmmsg+0x7c9/0x1200 [ 1107.818393][T17018] get_compat_msghdr+0x10c/0x280 [ 1107.822997][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1107.829312][T17018] ___sys_recvmsg+0x289/0xb40 [ 1107.834417][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.838572][T17018] do_recvmmsg+0x7c9/0x1200 [ 1107.858251][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1107.864497][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1107.869150][T17031] do_fast_syscall_32+0x33/0x70 [ 1107.873916][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.881949][T17031] do_SYSENTER_32+0x1b/0x20 [ 1107.886458][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1107.894498][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.899183][T17018] do_fast_syscall_32+0x33/0x70 [ 1107.907223][T17031] [ 1107.907233][T17031] Uninit was stored to memory at: [ 1107.907306][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.913635][T17018] do_SYSENTER_32+0x1b/0x20 [ 1107.921596][T17031] get_compat_msghdr+0x10c/0x280 [ 1107.926707][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1107.934641][T17031] ___sys_recvmsg+0x289/0xb40 [ 1107.939476][T17018] [ 1107.939490][T17018] Uninit was stored to memory at: [ 1107.942599][T17031] do_recvmmsg+0x7c9/0x1200 [ 1107.947181][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1107.952223][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1107.958559][T17018] get_compat_msghdr+0x10c/0x280 [ 1107.960886][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1107.966035][T17018] ___sys_recvmsg+0x289/0xb40 [ 1107.971122][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1107.976154][T17018] do_recvmmsg+0x7c9/0x1200 [ 1107.980811][T17031] do_fast_syscall_32+0x33/0x70 [ 1107.986013][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1107.990480][T17031] do_SYSENTER_32+0x1b/0x20 [ 1107.995518][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.000169][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.004911][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1108.011224][T17031] [ 1108.011234][T17031] Local variable msg_sys created at: [ 1108.015904][T17018] do_fast_syscall_32+0x33/0x70 [ 1108.020915][T17031] do_recvmmsg+0xc9/0x1200 [ 1108.025685][T17018] do_SYSENTER_32+0x1b/0x20 [ 1108.030503][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1108.036915][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.203696][T17018] [ 1108.206047][T17018] Uninit was stored to memory at: [ 1108.211142][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.216512][T17018] get_compat_msghdr+0x10c/0x280 [ 1108.221500][T17018] ___sys_recvmsg+0x289/0xb40 [ 1108.226445][T17018] do_recvmmsg+0x7c9/0x1200 [ 1108.231024][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1108.235924][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.242421][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1108.247493][T17018] do_fast_syscall_32+0x33/0x70 [ 1108.252573][T17018] do_SYSENTER_32+0x1b/0x20 [ 1108.257119][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.263688][T17018] [ 1108.266020][T17018] Uninit was stored to memory at: [ 1108.271116][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.276609][T17018] get_compat_msghdr+0x10c/0x280 [ 1108.281608][T17018] ___sys_recvmsg+0x289/0xb40 [ 1108.286520][T17018] do_recvmmsg+0x7c9/0x1200 [ 1108.291097][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1108.296042][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.302637][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1108.307718][T17018] do_fast_syscall_32+0x33/0x70 [ 1108.312796][T17018] do_SYSENTER_32+0x1b/0x20 [ 1108.317341][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.323879][T17018] [ 1108.326208][T17018] Uninit was stored to memory at: [ 1108.331291][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.336632][T17018] get_compat_msghdr+0x10c/0x280 [ 1108.341732][T17018] ___sys_recvmsg+0x289/0xb40 [ 1108.346467][T17018] do_recvmmsg+0x7c9/0x1200 [ 1108.351017][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1108.356119][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.362676][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1108.367751][T17018] do_fast_syscall_32+0x33/0x70 [ 1108.372814][T17018] do_SYSENTER_32+0x1b/0x20 [ 1108.377359][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.383865][T17018] [ 1108.386194][T17018] Uninit was stored to memory at: [ 1108.391279][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.396625][T17018] get_compat_msghdr+0x10c/0x280 [ 1108.401615][T17018] ___sys_recvmsg+0x289/0xb40 [ 1108.406532][T17018] do_recvmmsg+0x7c9/0x1200 [ 1108.411099][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1108.416030][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.422600][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1108.427675][T17018] do_fast_syscall_32+0x33/0x70 [ 1108.432751][T17018] do_SYSENTER_32+0x1b/0x20 [ 1108.437295][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.443807][T17018] [ 1108.446140][T17018] Uninit was stored to memory at: [ 1108.451230][T17018] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.456598][T17018] get_compat_msghdr+0x10c/0x280 [ 1108.461584][T17018] ___sys_recvmsg+0x289/0xb40 [ 1108.466473][T17018] do_recvmmsg+0x7c9/0x1200 [ 1108.471023][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1108.475953][T17018] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.482525][T17018] __do_fast_syscall_32+0x95/0xf0 [ 1108.487608][T17018] do_fast_syscall_32+0x33/0x70 [ 1108.492727][T17018] do_SYSENTER_32+0x1b/0x20 [ 1108.497271][T17018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.503778][T17018] [ 1108.506115][T17018] Local variable msg_sys created at: [ 1108.511421][T17018] do_recvmmsg+0xc9/0x1200 [ 1108.512763][T17046] not chained 2110000 origins [ 1108.516098][T17018] __sys_recvmmsg+0x520/0x6f0 [ 1108.520555][T17046] CPU: 1 PID: 17046 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1108.536733][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.546904][T17046] Call Trace: [ 1108.550201][T17046] [ 1108.553142][T17046] dump_stack_lvl+0x200/0x28c [ 1108.557870][T17046] dump_stack+0x29/0x2c [ 1108.562061][T17046] kmsan_internal_chain_origin+0x78/0x120 [ 1108.567836][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1108.573961][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1108.579123][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1108.584987][T17046] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1108.590585][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1108.595744][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1108.601612][T17046] ? should_fail+0x79/0x9c0 [ 1108.606182][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1108.611344][T17046] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1108.617650][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1108.623796][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1108.628970][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1108.634852][T17046] __msan_chain_origin+0xbd/0x140 [ 1108.640033][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.645232][T17046] get_compat_msghdr+0x10c/0x280 [ 1108.650230][T17046] ? do_recvmmsg+0x7c9/0x1200 [ 1108.654967][T17046] ___sys_recvmsg+0x289/0xb40 [ 1108.659711][T17046] ? __schedule+0x176c/0x21c0 [ 1108.664443][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1108.669696][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1108.675555][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1108.680721][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1108.686582][T17046] do_recvmmsg+0x7c9/0x1200 [ 1108.691140][T17046] ? filter_irq_stacks+0xb9/0x230 [ 1108.696226][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1108.701400][T17046] ? __sys_recvmmsg+0xb9/0x6f0 [ 1108.706212][T17046] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.712774][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1108.717510][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.723898][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1108.729065][T17046] do_fast_syscall_32+0x33/0x70 [ 1108.733958][T17046] do_SYSENTER_32+0x1b/0x20 [ 1108.738504][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.744969][T17046] RIP: 0023:0xf7f83549 03:42:48 executing program 4: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) 03:42:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000088000000840000000000000095000000000000007adda226418fb4c3c8bc138d840400000000000000cb2ea79f1b78006079cdde50381464ab51a66a84c35ae0f0c590b7f9b9bc60b49c14ec08d2cd4276456f90429c8477efb7c554aefb50794262df034c666f7ed374ddabc378829a1023cbd3964a8a6d715871dd8615478bed50ed169175f59dd9b78b04a90c8413791909f7513017710a4044ca6d1a98601c17d65ce1ae8dbd524a28120a008a69d42f82017abba378907b66776f42d3565b562cc03aaf36eef6febd066671010a84fe3bb0c5de3f7320162917"], &(0x7f0000000180)='GPL\x00'}, 0x48) 03:42:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x5f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 03:42:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r0, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000003c0)=r0, 0x4) [ 1108.749057][T17046] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1108.768705][T17046] RSP: 002b:00000000f7f1b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1108.777166][T17046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1108.785169][T17046] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1108.793164][T17046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.801157][T17046] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1108.809155][T17046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1108.817171][T17046] [ 1108.825268][T17046] Uninit was stored to memory at: [ 1108.830386][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.836192][T17046] get_compat_msghdr+0x10c/0x280 [ 1108.841184][T17046] ___sys_recvmsg+0x289/0xb40 [ 1108.846103][T17046] do_recvmmsg+0x7c9/0x1200 [ 1108.850652][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1108.855495][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.861977][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1108.867050][T17046] do_fast_syscall_32+0x33/0x70 [ 1108.872035][T17046] do_SYSENTER_32+0x1b/0x20 [ 1108.876581][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.883046][T17046] [ 1108.885369][T17046] Uninit was stored to memory at: [ 1108.890473][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.895744][T17046] get_compat_msghdr+0x10c/0x280 [ 1108.900739][T17046] ___sys_recvmsg+0x289/0xb40 [ 1108.905643][T17046] do_recvmmsg+0x7c9/0x1200 [ 1108.910200][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1108.915102][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.921496][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1108.926732][T17046] do_fast_syscall_32+0x33/0x70 [ 1108.931722][T17046] do_SYSENTER_32+0x1b/0x20 [ 1108.936265][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1108.942743][T17046] [ 1108.945073][T17046] Uninit was stored to memory at: [ 1108.950171][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1108.955511][T17046] get_compat_msghdr+0x10c/0x280 [ 1108.960510][T17046] ___sys_recvmsg+0x289/0xb40 [ 1108.965429][T17046] do_recvmmsg+0x7c9/0x1200 [ 1108.969990][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1108.974892][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1108.981292][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1108.986538][T17046] do_fast_syscall_32+0x33/0x70 [ 1108.991448][T17046] do_SYSENTER_32+0x1b/0x20 [ 1108.996171][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.002661][T17046] [ 1109.004997][T17046] Uninit was stored to memory at: [ 1109.010099][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.015431][T17046] get_compat_msghdr+0x10c/0x280 [ 1109.020425][T17046] ___sys_recvmsg+0x289/0xb40 [ 1109.025322][T17046] do_recvmmsg+0x7c9/0x1200 [ 1109.029884][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1109.034777][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.041161][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1109.046404][T17046] do_fast_syscall_32+0x33/0x70 [ 1109.051303][T17046] do_SYSENTER_32+0x1b/0x20 [ 1109.056032][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.062515][T17046] [ 1109.064851][T17046] Uninit was stored to memory at: [ 1109.069942][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.075276][T17046] get_compat_msghdr+0x10c/0x280 [ 1109.080274][T17046] ___sys_recvmsg+0x289/0xb40 [ 1109.085178][T17046] do_recvmmsg+0x7c9/0x1200 [ 1109.089746][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1109.094695][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.101105][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1109.106372][T17046] do_fast_syscall_32+0x33/0x70 [ 1109.111289][T17046] do_SYSENTER_32+0x1b/0x20 [ 1109.115956][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.122444][T17046] [ 1109.124778][T17046] Uninit was stored to memory at: [ 1109.129863][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.135124][T17046] get_compat_msghdr+0x10c/0x280 [ 1109.140117][T17046] ___sys_recvmsg+0x289/0xb40 [ 1109.144959][T17046] do_recvmmsg+0x7c9/0x1200 [ 1109.149518][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1109.154354][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.160751][T17046] __do_fast_syscall_32+0x95/0xf0 03:42:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r0, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000003c0)=r0, 0x4) [ 1109.165934][T17046] do_fast_syscall_32+0x33/0x70 [ 1109.170836][T17046] do_SYSENTER_32+0x1b/0x20 [ 1109.175506][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.181997][T17046] [ 1109.184336][T17046] Uninit was stored to memory at: [ 1109.189438][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.194704][T17046] get_compat_msghdr+0x10c/0x280 [ 1109.199697][T17046] ___sys_recvmsg+0x289/0xb40 [ 1109.204594][T17046] do_recvmmsg+0x7c9/0x1200 [ 1109.209153][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1109.214061][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.220468][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1109.225718][T17046] do_fast_syscall_32+0x33/0x70 [ 1109.230622][T17046] do_SYSENTER_32+0x1b/0x20 [ 1109.235342][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.241817][T17046] [ 1109.244147][T17046] Local variable msg_sys created at: [ 1109.249431][T17046] do_recvmmsg+0xc9/0x1200 [ 1109.254075][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1109.384186][T17061] not chained 2120000 origins [ 1109.388910][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1109.400500][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.410587][T17061] Call Trace: [ 1109.413889][T17061] [ 1109.416838][T17061] dump_stack_lvl+0x200/0x28c [ 1109.421581][T17061] dump_stack+0x29/0x2c [ 1109.425785][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1109.431578][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1109.437714][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1109.442896][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1109.448777][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1109.454392][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1109.459573][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1109.465448][T17061] ? should_fail+0x79/0x9c0 [ 1109.469992][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1109.475175][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1109.481481][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1109.487617][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1109.492791][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1109.498700][T17061] __msan_chain_origin+0xbd/0x140 [ 1109.503785][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.508980][T17061] get_compat_msghdr+0x10c/0x280 [ 1109.513979][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1109.518719][T17061] ___sys_recvmsg+0x289/0xb40 [ 1109.523471][T17061] ? __schedule+0x176c/0x21c0 [ 1109.528210][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1109.533381][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1109.539251][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1109.544423][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1109.550299][T17061] do_recvmmsg+0x7c9/0x1200 [ 1109.554867][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1109.559973][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1109.565156][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1109.569973][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.576560][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1109.581344][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.587753][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1109.592850][T17061] do_fast_syscall_32+0x33/0x70 [ 1109.597762][T17061] do_SYSENTER_32+0x1b/0x20 [ 1109.602323][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.608713][T17061] RIP: 0023:0xf7f11549 [ 1109.612808][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1109.632468][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1109.641053][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1109.649079][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1109.657098][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1109.665136][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1109.673145][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1109.681176][T17061] [ 1109.687184][T17061] Uninit was stored to memory at: [ 1109.692835][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.698031][T17061] get_compat_msghdr+0x10c/0x280 [ 1109.703137][T17061] ___sys_recvmsg+0x289/0xb40 [ 1109.707873][T17061] do_recvmmsg+0x7c9/0x1200 [ 1109.712552][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1109.717291][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.723807][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1109.728890][T17061] do_fast_syscall_32+0x33/0x70 [ 1109.733904][T17061] do_SYSENTER_32+0x1b/0x20 [ 1109.738465][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.744983][T17061] [ 1109.747332][T17061] Uninit was stored to memory at: [ 1109.752581][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.757765][T17061] get_compat_msghdr+0x10c/0x280 [ 1109.762871][T17061] ___sys_recvmsg+0x289/0xb40 [ 1109.767629][T17061] do_recvmmsg+0x7c9/0x1200 [ 1109.772286][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1109.777048][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.783562][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1109.788650][T17061] do_fast_syscall_32+0x33/0x70 [ 1109.793692][T17061] do_SYSENTER_32+0x1b/0x20 [ 1109.798247][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.804754][T17061] [ 1109.807091][T17061] Uninit was stored to memory at: [ 1109.812296][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.817463][T17061] get_compat_msghdr+0x10c/0x280 [ 1109.822573][T17061] ___sys_recvmsg+0x289/0xb40 [ 1109.827307][T17061] do_recvmmsg+0x7c9/0x1200 [ 1109.832006][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1109.836765][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.843264][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1109.848342][T17061] do_fast_syscall_32+0x33/0x70 [ 1109.853341][T17061] do_SYSENTER_32+0x1b/0x20 [ 1109.857978][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.864477][T17061] [ 1109.866986][T17061] Uninit was stored to memory at: [ 1109.872175][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.877335][T17061] get_compat_msghdr+0x10c/0x280 [ 1109.882433][T17061] ___sys_recvmsg+0x289/0xb40 [ 1109.887166][T17061] do_recvmmsg+0x7c9/0x1200 [ 1109.891849][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1109.896578][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.903093][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1109.908170][T17061] do_fast_syscall_32+0x33/0x70 [ 1109.913176][T17061] do_SYSENTER_32+0x1b/0x20 [ 1109.917751][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.924261][T17061] [ 1109.926596][T17061] Uninit was stored to memory at: [ 1109.931792][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.936954][T17061] get_compat_msghdr+0x10c/0x280 [ 1109.942079][T17061] ___sys_recvmsg+0x289/0xb40 [ 1109.946817][T17061] do_recvmmsg+0x7c9/0x1200 [ 1109.951412][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1109.956258][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1109.962738][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1109.967918][T17061] do_fast_syscall_32+0x33/0x70 [ 1109.972930][T17061] do_SYSENTER_32+0x1b/0x20 [ 1109.977483][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1109.984076][T17061] [ 1109.986416][T17061] Uninit was stored to memory at: [ 1109.991534][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1109.996814][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.001906][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.006639][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.011204][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.016040][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.022532][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.027658][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.032668][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.037246][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.043752][T17061] [ 1110.046116][T17061] Uninit was stored to memory at: [ 1110.051221][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.056498][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.061509][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.066409][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.070993][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.075901][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.082463][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.087529][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.092621][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.097170][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.103674][T17061] [ 1110.106092][T17061] Local variable msg_sys created at: [ 1110.111385][T17061] do_recvmmsg+0xc9/0x1200 [ 1110.116647][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.267831][T17061] not chained 2130000 origins [ 1110.272665][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1110.284253][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.294336][T17061] Call Trace: [ 1110.297635][T17061] [ 1110.300577][T17061] dump_stack_lvl+0x200/0x28c [ 1110.305313][T17061] dump_stack+0x29/0x2c [ 1110.309499][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1110.315268][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1110.321384][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1110.326542][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1110.332398][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1110.337990][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1110.343143][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1110.349001][T17061] ? should_fail+0x79/0x9c0 [ 1110.353533][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1110.358696][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1110.364987][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1110.371109][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1110.376272][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1110.382128][T17061] __msan_chain_origin+0xbd/0x140 [ 1110.387201][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.392379][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.397367][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1110.402106][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.406831][T17061] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1110.412241][T17061] ? __schedule+0x1980/0x21c0 [ 1110.417063][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1110.422220][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1110.428161][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1110.433321][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1110.439180][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.443733][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1110.448816][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1110.453988][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1110.458797][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.465381][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.470115][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.476507][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.481578][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.486470][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.491137][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.497512][T17061] RIP: 0023:0xf7f11549 [ 1110.501597][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1110.521241][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1110.529689][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1110.537685][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1110.545682][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.553678][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1110.561684][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.569690][T17061] [ 1110.572905][T17061] Uninit was stored to memory at: [ 1110.578033][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.583323][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.588313][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.593146][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.597709][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.602546][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.608943][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.614164][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.619077][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.623763][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.630151][T17061] [ 1110.632591][T17061] Uninit was stored to memory at: [ 1110.637696][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.642966][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.647960][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.652796][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.657361][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.662199][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.668592][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.673781][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.678681][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.683336][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.689719][T17061] [ 1110.692178][T17061] Uninit was stored to memory at: [ 1110.697267][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.702536][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.707535][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.712374][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.716965][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.721796][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.728193][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.733386][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.738281][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.743018][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.749411][T17061] [ 1110.751934][T17061] Uninit was stored to memory at: [ 1110.757040][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.762308][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.767326][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.772265][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.776830][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.781576][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.788151][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.793410][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.798307][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.802967][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.809353][T17061] [ 1110.811975][T17061] Uninit was stored to memory at: [ 1110.817083][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.822421][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.827420][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.832374][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.836945][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.841843][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.848240][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.853506][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.858410][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.863137][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.869525][T17061] [ 1110.872016][T17061] Uninit was stored to memory at: [ 1110.877111][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.882372][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.887376][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.892284][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.896875][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.901604][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.908184][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.913529][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.918440][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.923151][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.929541][T17061] [ 1110.932033][T17061] Uninit was stored to memory at: [ 1110.937128][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1110.942450][T17061] get_compat_msghdr+0x10c/0x280 [ 1110.947446][T17061] ___sys_recvmsg+0x289/0xb40 [ 1110.952332][T17061] do_recvmmsg+0x7c9/0x1200 [ 1110.956891][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1110.961769][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1110.968163][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1110.973404][T17061] do_fast_syscall_32+0x33/0x70 [ 1110.978309][T17061] do_SYSENTER_32+0x1b/0x20 [ 1110.983040][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1110.989437][T17061] [ 1110.991926][T17061] Local variable msg_sys created at: [ 1110.997224][T17061] do_recvmmsg+0xc9/0x1200 [ 1111.001800][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1111.129424][T17061] not chained 2140000 origins [ 1111.134246][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1111.145836][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.155921][T17061] Call Trace: [ 1111.159225][T17061] [ 1111.162184][T17061] dump_stack_lvl+0x200/0x28c [ 1111.166919][T17061] dump_stack+0x29/0x2c [ 1111.171125][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1111.176912][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1111.183067][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1111.188336][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.194320][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1111.200016][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1111.205183][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.211054][T17061] ? should_fail+0x79/0x9c0 [ 1111.215606][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1111.220773][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1111.227075][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1111.233204][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1111.238370][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.244245][T17061] __msan_chain_origin+0xbd/0x140 [ 1111.249325][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.254510][T17061] get_compat_msghdr+0x10c/0x280 [ 1111.259504][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1111.264265][T17061] ___sys_recvmsg+0x289/0xb40 [ 1111.269003][T17061] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1111.274440][T17061] ? __schedule+0x1980/0x21c0 [ 1111.279168][T17061] ? sysvec_call_function_single+0x52/0xb0 [ 1111.285036][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1111.290210][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.296075][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1111.301242][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.307111][T17061] do_recvmmsg+0x7c9/0x1200 [ 1111.311673][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1111.316775][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1111.321993][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1111.326811][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.333379][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1111.338134][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.344533][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1111.349622][T17061] do_fast_syscall_32+0x33/0x70 [ 1111.354523][T17061] do_SYSENTER_32+0x1b/0x20 [ 1111.359072][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.365451][T17061] RIP: 0023:0xf7f11549 [ 1111.369542][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1111.389195][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1111.397655][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1111.405665][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1111.413668][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1111.421673][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1111.429679][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1111.437698][T17061] [ 1111.440915][T17061] Uninit was stored to memory at: [ 1111.446114][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.451274][T17061] get_compat_msghdr+0x10c/0x280 [ 1111.456367][T17061] ___sys_recvmsg+0x289/0xb40 [ 1111.461116][T17061] do_recvmmsg+0x7c9/0x1200 [ 1111.465777][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1111.470510][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.476999][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1111.482186][T17061] do_fast_syscall_32+0x33/0x70 [ 1111.487083][T17061] do_SYSENTER_32+0x1b/0x20 [ 1111.491777][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.498162][T17061] [ 1111.500492][T17061] Uninit was stored to memory at: [ 1111.505747][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.510904][T17061] get_compat_msghdr+0x10c/0x280 [ 1111.516059][T17061] ___sys_recvmsg+0x289/0xb40 [ 1111.520790][T17061] do_recvmmsg+0x7c9/0x1200 [ 1111.525476][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1111.528689][T17031] not chained 2150000 origins [ 1111.530377][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.535396][T17031] CPU: 1 PID: 17031 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1111.541568][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1111.553089][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.553117][T17031] Call Trace: [ 1111.553133][T17031] [ 1111.553150][T17031] dump_stack_lvl+0x200/0x28c [ 1111.558174][T17061] do_fast_syscall_32+0x33/0x70 [ 1111.568227][T17031] dump_stack+0x29/0x2c [ 1111.568276][T17031] kmsan_internal_chain_origin+0x78/0x120 [ 1111.571721][T17061] do_SYSENTER_32+0x1b/0x20 [ 1111.574590][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1111.579243][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.584073][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1111.584137][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.588290][T17061] [ 1111.588300][T17061] Uninit was stored to memory at: [ 1111.594007][T17031] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1111.594071][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1111.598628][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.604627][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.604698][T17031] ? should_fail+0x79/0x9c0 [ 1111.611018][T17061] get_compat_msghdr+0x10c/0x280 [ 1111.616807][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1111.616870][T17031] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1111.622735][T17061] ___sys_recvmsg+0x289/0xb40 [ 1111.624991][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1111.629989][T17061] do_recvmmsg+0x7c9/0x1200 [ 1111.635521][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1111.635584][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.640686][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1111.645800][T17031] __msan_chain_origin+0xbd/0x140 [ 1111.645878][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.651773][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.656215][T17031] get_compat_msghdr+0x10c/0x280 [ 1111.661117][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1111.666242][T17031] ? do_recvmmsg+0x7c9/0x1200 [ 1111.666309][T17031] ___sys_recvmsg+0x289/0xb40 [ 1111.672625][T17061] do_fast_syscall_32+0x33/0x70 [ 1111.677239][T17031] ? __schedule+0x176c/0x21c0 [ 1111.683419][T17061] do_SYSENTER_32+0x1b/0x20 [ 1111.687781][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1111.693648][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.699363][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.704119][T17061] [ 1111.709044][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1111.714215][T17061] Uninit was stored to memory at: [ 1111.720443][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1111.725508][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.730380][T17031] do_recvmmsg+0x7c9/0x1200 [ 1111.735113][T17061] get_compat_msghdr+0x10c/0x280 [ 1111.739699][T17031] ? filter_irq_stacks+0xb9/0x230 [ 1111.744607][T17061] ___sys_recvmsg+0x289/0xb40 [ 1111.749213][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1111.753768][T17061] do_recvmmsg+0x7c9/0x1200 [ 1111.758788][T17031] ? __sys_recvmmsg+0xb9/0x6f0 [ 1111.765168][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1111.770907][T17031] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.773363][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.778340][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1111.783521][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1111.789202][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.794370][T17061] do_fast_syscall_32+0x33/0x70 [ 1111.798782][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1111.803781][T17061] do_SYSENTER_32+0x1b/0x20 [ 1111.808703][T17031] do_fast_syscall_32+0x33/0x70 [ 1111.813438][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.818455][T17031] do_SYSENTER_32+0x1b/0x20 [ 1111.823016][T17061] [ 1111.827700][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.832453][T17061] Uninit was stored to memory at: [ 1111.838863][T17031] RIP: 0023:0xf7f7e549 [ 1111.845374][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.849861][T17031] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1111.855000][T17061] get_compat_msghdr+0x10c/0x280 [ 1111.861205][T17031] RSP: 002b:00000000f7f795cc EFLAGS: 00000296 [ 1111.866123][T17061] ___sys_recvmsg+0x289/0xb40 [ 1111.871045][T17031] ORIG_RAX: 0000000000000151 [ 1111.871063][T17031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1111.875611][T17061] do_recvmmsg+0x7c9/0x1200 [ 1111.880365][T17031] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1111.886768][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1111.891196][T17031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1111.893573][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1111.899823][T17031] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1111.904912][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1111.908884][T17031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1111.914064][T17061] do_fast_syscall_32+0x33/0x70 [ 1111.933598][T17031] [ 1111.938207][T17031] Uninit was stored to memory at: [ 1111.938591][T17061] do_SYSENTER_32+0x1b/0x20 [ 1111.945379][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.949401][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1111.954150][T17031] get_compat_msghdr+0x10c/0x280 [ 1111.962193][T17061] [ 1111.962203][T17061] Uninit was stored to memory at: [ 1111.966693][T17031] ___sys_recvmsg+0x289/0xb40 [ 1111.974811][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1111.979410][T17031] do_recvmmsg+0x7c9/0x1200 [ 1111.987454][T17061] get_compat_msghdr+0x10c/0x280 [ 1111.993844][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1112.001957][T17061] ___sys_recvmsg+0x289/0xb40 [ 1112.006965][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.015104][T17061] do_recvmmsg+0x7c9/0x1200 [ 1112.020047][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1112.023118][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1112.028123][T17031] do_fast_syscall_32+0x33/0x70 [ 1112.032690][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.037784][T17031] do_SYSENTER_32+0x1b/0x20 [ 1112.044187][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1112.049106][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.051418][T17061] do_fast_syscall_32+0x33/0x70 [ 1112.056502][T17031] [ 1112.056511][T17031] Uninit was stored to memory at: [ 1112.061158][T17061] do_SYSENTER_32+0x1b/0x20 [ 1112.066404][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.070836][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.075844][T17031] get_compat_msghdr+0x10c/0x280 [ 1112.080515][T17061] [ 1112.080524][T17061] Uninit was stored to memory at: [ 1112.085248][T17031] ___sys_recvmsg+0x289/0xb40 [ 1112.091605][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.096106][T17031] do_recvmmsg+0x7c9/0x1200 [ 1112.101032][T17061] get_compat_msghdr+0x10c/0x280 [ 1112.105768][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1112.110600][T17061] ___sys_recvmsg+0x289/0xb40 [ 1112.116984][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.121470][T17061] do_recvmmsg+0x7c9/0x1200 [ 1112.126553][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1112.132927][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1112.137778][T17031] do_fast_syscall_32+0x33/0x70 [ 1112.140088][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.145183][T17031] do_SYSENTER_32+0x1b/0x20 [ 1112.149668][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1112.154840][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.161150][T17061] do_fast_syscall_32+0x33/0x70 [ 1112.166152][T17031] [ 1112.166162][T17031] Uninit was stored to memory at: [ 1112.168464][T17061] do_SYSENTER_32+0x1b/0x20 [ 1112.173617][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.178213][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.183384][T17031] get_compat_msghdr+0x10c/0x280 [ 1112.187873][T17061] [ 1112.187884][T17061] Local variable msg_sys created at: [ 1112.193046][T17031] ___sys_recvmsg+0x289/0xb40 [ 1112.197711][T17061] do_recvmmsg+0xc9/0x1200 [ 1112.202447][T17031] do_recvmmsg+0x7c9/0x1200 [ 1112.208758][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1112.213321][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1112.314554][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.320941][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1112.326146][T17031] do_fast_syscall_32+0x33/0x70 [ 1112.331044][T17031] do_SYSENTER_32+0x1b/0x20 [ 1112.335681][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.342142][T17031] [ 1112.344472][T17031] Uninit was stored to memory at: [ 1112.349585][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.354834][T17031] get_compat_msghdr+0x10c/0x280 [ 1112.359826][T17031] ___sys_recvmsg+0x289/0xb40 [ 1112.364651][T17031] do_recvmmsg+0x7c9/0x1200 [ 1112.369285][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1112.374097][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.380475][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1112.385624][T17031] do_fast_syscall_32+0x33/0x70 [ 1112.390512][T17031] do_SYSENTER_32+0x1b/0x20 [ 1112.395135][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.401509][T17031] [ 1112.403929][T17031] Uninit was stored to memory at: [ 1112.409014][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.414273][T17031] get_compat_msghdr+0x10c/0x280 [ 1112.419256][T17031] ___sys_recvmsg+0x289/0xb40 [ 1112.424065][T17031] do_recvmmsg+0x7c9/0x1200 [ 1112.428613][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1112.433430][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.439810][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1112.444976][T17031] do_fast_syscall_32+0x33/0x70 [ 1112.449871][T17031] do_SYSENTER_32+0x1b/0x20 [ 1112.454504][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.460876][T17031] [ 1112.463309][T17031] Uninit was stored to memory at: [ 1112.468434][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.473676][T17031] get_compat_msghdr+0x10c/0x280 [ 1112.478663][T17031] ___sys_recvmsg+0x289/0xb40 [ 1112.483470][T17031] do_recvmmsg+0x7c9/0x1200 [ 1112.488018][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1112.492822][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.499208][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1112.504359][T17031] do_fast_syscall_32+0x33/0x70 [ 1112.509247][T17031] do_SYSENTER_32+0x1b/0x20 [ 1112.513869][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.517279][T17061] not chained 2160000 origins [ 1112.520287][T17031] [ 1112.520295][T17031] Uninit was stored to memory at: [ 1112.525084][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1112.527426][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.532389][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.532416][T17061] Call Trace: [ 1112.532432][T17061] [ 1112.532449][T17061] dump_stack_lvl+0x200/0x28c [ 1112.544078][T17031] get_compat_msghdr+0x10c/0x280 [ 1112.549095][T17061] dump_stack+0x29/0x2c [ 1112.559217][T17031] ___sys_recvmsg+0x289/0xb40 [ 1112.562583][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1112.562649][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1112.565676][T17031] do_recvmmsg+0x7c9/0x1200 [ 1112.570333][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1112.575326][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1112.579394][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1112.584159][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.589754][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1112.595871][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1112.600281][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1112.605444][T17031] do_fast_syscall_32+0x33/0x70 [ 1112.610034][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1112.616154][T17031] do_SYSENTER_32+0x1b/0x20 [ 1112.622396][T17061] ? should_fail+0x79/0x9c0 [ 1112.622443][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1112.627997][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.633003][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1112.633071][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1112.638195][T17031] [ 1112.638205][T17031] Local variable msg_sys created at: [ 1112.643029][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1112.643091][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1112.648889][T17031] do_recvmmsg+0xc9/0x1200 [ 1112.653375][T17061] __msan_chain_origin+0xbd/0x140 [ 1112.653445][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.657932][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1112.663044][T17061] get_compat_msghdr+0x10c/0x280 [ 1112.663109][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1112.729063][T17061] ___sys_recvmsg+0x289/0xb40 [ 1112.733807][T17061] ? __schedule+0x176c/0x21c0 [ 1112.738543][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1112.743701][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1112.749562][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1112.754715][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1112.760587][T17061] do_recvmmsg+0x7c9/0x1200 [ 1112.765137][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1112.770216][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1112.775383][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1112.780187][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.786741][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1112.791472][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.797862][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1112.802945][T17061] do_fast_syscall_32+0x33/0x70 [ 1112.807858][T17061] do_SYSENTER_32+0x1b/0x20 [ 1112.812414][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.818977][T17061] RIP: 0023:0xf7f11549 [ 1112.823073][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1112.842718][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1112.851173][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1112.859178][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1112.867171][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1112.875253][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1112.883245][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1112.891261][T17061] [ 1112.896389][T17061] Uninit was stored to memory at: [ 1112.901506][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.906771][T17061] get_compat_msghdr+0x10c/0x280 [ 1112.911892][T17061] ___sys_recvmsg+0x289/0xb40 [ 1112.916628][T17061] do_recvmmsg+0x7c9/0x1200 [ 1112.921180][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1112.926026][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.932547][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1112.937624][T17061] do_fast_syscall_32+0x33/0x70 [ 1112.944139][T17061] do_SYSENTER_32+0x1b/0x20 [ 1112.948689][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1112.955279][T17061] [ 1112.957612][T17061] Uninit was stored to memory at: [ 1112.962791][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1112.967945][T17061] get_compat_msghdr+0x10c/0x280 [ 1112.973041][T17061] ___sys_recvmsg+0x289/0xb40 [ 1112.977769][T17061] do_recvmmsg+0x7c9/0x1200 [ 1112.982593][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1112.987493][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1112.994018][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1112.999091][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.004156][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.008706][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.015289][T17061] [ 1113.017623][T17061] Uninit was stored to memory at: [ 1113.022829][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.027988][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.033107][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.037836][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.042517][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.048632][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.055411][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.060489][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.065488][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.070033][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.076511][T17061] [ 1113.078845][T17061] Uninit was stored to memory at: [ 1113.084008][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.089167][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.094248][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.098974][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.103648][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.108899][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.115390][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.120469][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.125461][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.130009][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.136525][T17061] [ 1113.138857][T17061] Uninit was stored to memory at: [ 1113.144025][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.149299][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.154372][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.159110][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.163757][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.168743][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.175225][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.180298][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.185289][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.189837][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.196325][T17061] [ 1113.198750][T17061] Uninit was stored to memory at: [ 1113.203914][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.209071][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.214155][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.218883][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.223536][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.228260][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.234739][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.239811][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.244853][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.249415][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.255958][T17061] [ 1113.258291][T17061] Uninit was stored to memory at: [ 1113.263524][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.268683][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.273820][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.278545][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.283190][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.287917][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.294509][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.299583][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.304651][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.309203][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.315753][T17061] [ 1113.318088][T17061] Local variable msg_sys created at: [ 1113.323516][T17061] do_recvmmsg+0xc9/0x1200 [ 1113.327985][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.390993][T17061] not chained 2170000 origins [ 1113.395808][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1113.407392][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.417477][T17061] Call Trace: [ 1113.420770][T17061] [ 1113.423713][T17061] dump_stack_lvl+0x200/0x28c [ 1113.428446][T17061] dump_stack+0x29/0x2c [ 1113.432639][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1113.438416][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1113.444538][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1113.449703][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1113.455565][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1113.461164][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1113.466332][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1113.472212][T17061] ? should_fail+0x79/0x9c0 [ 1113.476749][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1113.481922][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1113.488215][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1113.494342][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1113.499505][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1113.505378][T17061] __msan_chain_origin+0xbd/0x140 [ 1113.510542][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.515803][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.520788][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1113.525512][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.530236][T17061] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1113.535647][T17061] ? __schedule+0x1980/0x21c0 [ 1113.540377][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1113.545540][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1113.551399][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1113.556560][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1113.562420][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.566983][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1113.572068][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1113.577232][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1113.582040][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.588599][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.593332][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.599722][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.604877][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.609768][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.614307][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.620700][T17061] RIP: 0023:0xf7f11549 [ 1113.624787][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1113.644436][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1113.652890][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1113.660900][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1113.668919][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1113.676921][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1113.684920][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1113.693040][T17061] [ 1113.696269][T17061] Uninit was stored to memory at: [ 1113.701363][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.706625][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.711614][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.716420][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.720978][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.725814][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.732280][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.737362][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.742358][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.746905][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.753460][T17061] [ 1113.755799][T17061] Uninit was stored to memory at: [ 1113.760903][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.766236][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.771230][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.776079][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.780637][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.785557][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.792032][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.797107][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.802153][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.806701][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.813239][T17061] [ 1113.815579][T17061] Uninit was stored to memory at: [ 1113.820679][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.826029][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.831019][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.835917][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.840477][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.845359][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.851856][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.856931][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.862014][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.866563][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.873132][T17061] [ 1113.875470][T17061] Uninit was stored to memory at: [ 1113.880651][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.885995][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.890987][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.895918][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.900487][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.905378][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.911868][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.916942][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.922018][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.926569][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.933120][T17061] [ 1113.935451][T17061] Uninit was stored to memory at: [ 1113.940536][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.945799][T17061] get_compat_msghdr+0x10c/0x280 [ 1113.950787][T17061] ___sys_recvmsg+0x289/0xb40 [ 1113.955766][T17061] do_recvmmsg+0x7c9/0x1200 [ 1113.960320][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1113.965185][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1113.971568][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1113.976742][T17061] do_fast_syscall_32+0x33/0x70 [ 1113.981756][T17061] do_SYSENTER_32+0x1b/0x20 [ 1113.986315][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1113.989583][T17046] not chained 2180000 origins [ 1113.992833][T17061] [ 1113.992842][T17061] Uninit was stored to memory at: [ 1113.992916][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1113.997619][T17046] CPU: 1 PID: 17046 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1113.999939][T17061] get_compat_msghdr+0x10c/0x280 [ 1114.004953][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.004980][T17046] Call Trace: [ 1114.004996][T17046] [ 1114.005012][T17046] dump_stack_lvl+0x200/0x28c [ 1114.005073][T17046] dump_stack+0x29/0x2c [ 1114.010163][T17061] ___sys_recvmsg+0x289/0xb40 [ 1114.021685][T17046] kmsan_internal_chain_origin+0x78/0x120 [ 1114.021752][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1114.026785][T17061] do_recvmmsg+0x7c9/0x1200 [ 1114.036834][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1114.036897][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.040184][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1114.043112][T17046] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1114.043175][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1114.047821][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.051960][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.052032][T17046] ? should_fail+0x79/0x9c0 [ 1114.056701][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1114.062423][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1114.062498][T17046] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1114.068549][T17061] do_fast_syscall_32+0x33/0x70 [ 1114.073040][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1114.073109][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1114.078207][T17061] do_SYSENTER_32+0x1b/0x20 [ 1114.083995][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.084062][T17046] __msan_chain_origin+0xbd/0x140 [ 1114.088742][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.094278][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.094359][T17046] get_compat_msghdr+0x10c/0x280 [ 1114.099458][T17061] [ 1114.099467][T17061] Uninit was stored to memory at: [ 1114.105778][T17046] ? do_recvmmsg+0x7c9/0x1200 [ 1114.105844][T17046] ___sys_recvmsg+0x289/0xb40 [ 1114.111766][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.116142][T17046] ? __schedule+0x176c/0x21c0 [ 1114.121135][T17061] get_compat_msghdr+0x10c/0x280 [ 1114.126255][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1114.126317][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.132617][T17061] ___sys_recvmsg+0x289/0xb40 [ 1114.137404][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1114.143557][T17061] do_recvmmsg+0x7c9/0x1200 [ 1114.148577][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.153167][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1114.158966][T17046] do_recvmmsg+0x7c9/0x1200 [ 1114.164056][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.170284][T17046] ? filter_irq_stacks+0xb9/0x230 [ 1114.175544][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1114.180400][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1114.182765][T17061] do_fast_syscall_32+0x33/0x70 [ 1114.187719][T17046] ? __sys_recvmmsg+0xb9/0x6f0 [ 1114.192459][T17061] do_SYSENTER_32+0x1b/0x20 [ 1114.197055][T17046] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.202230][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.206811][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1114.211823][T17061] [ 1114.216869][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.222724][T17061] Local variable msg_sys created at: [ 1114.227311][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1114.232473][T17061] do_recvmmsg+0xc9/0x1200 [ 1114.236882][T17046] do_fast_syscall_32+0x33/0x70 [ 1114.242768][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1114.247362][T17046] do_SYSENTER_32+0x1b/0x20 [ 1114.342523][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.348913][T17046] RIP: 0023:0xf7f83549 [ 1114.353003][T17046] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1114.372648][T17046] RSP: 002b:00000000f7f1b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1114.381092][T17046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1114.389114][T17046] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1114.397195][T17046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1114.405186][T17046] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1114.413175][T17046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1114.421181][T17046] [ 1114.429706][T17046] Uninit was stored to memory at: [ 1114.436155][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.441336][T17046] get_compat_msghdr+0x10c/0x280 [ 1114.446422][T17046] ___sys_recvmsg+0x289/0xb40 [ 1114.451330][T17046] do_recvmmsg+0x7c9/0x1200 [ 1114.455973][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1114.460698][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.467259][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1114.472426][T17046] do_fast_syscall_32+0x33/0x70 [ 1114.477340][T17046] do_SYSENTER_32+0x1b/0x20 [ 1114.481967][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.488343][T17046] [ 1114.490681][T17046] Uninit was stored to memory at: [ 1114.495856][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.501012][T17046] get_compat_msghdr+0x10c/0x280 [ 1114.506080][T17046] ___sys_recvmsg+0x289/0xb40 [ 1114.510816][T17046] do_recvmmsg+0x7c9/0x1200 [ 1114.515487][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1114.520211][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.526715][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1114.531870][T17046] do_fast_syscall_32+0x33/0x70 [ 1114.536760][T17046] do_SYSENTER_32+0x1b/0x20 [ 1114.541298][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.541490][T17061] not chained 2190000 origins [ 1114.547752][T17046] [ 1114.547761][T17046] Uninit was stored to memory at: [ 1114.552482][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1114.554883][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.559826][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.571426][T17046] get_compat_msghdr+0x10c/0x280 [ 1114.576440][T17061] Call Trace: [ 1114.576458][T17061] [ 1114.576474][T17061] dump_stack_lvl+0x200/0x28c [ 1114.576535][T17061] dump_stack+0x29/0x2c [ 1114.586649][T17046] ___sys_recvmsg+0x289/0xb40 [ 1114.591496][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1114.594882][T17046] do_recvmmsg+0x7c9/0x1200 [ 1114.597717][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1114.602465][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1114.606545][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1114.611295][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.617008][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.617082][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1114.617143][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1114.617204][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.617273][T17061] ? should_fail+0x79/0x9c0 [ 1114.621926][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1114.627904][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1114.632647][T17046] do_fast_syscall_32+0x33/0x70 [ 1114.637662][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1114.644053][T17046] do_SYSENTER_32+0x1b/0x20 [ 1114.649765][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1114.655429][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.660430][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1114.666334][T17046] [ 1114.670713][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.675801][T17046] Uninit was stored to memory at: [ 1114.680835][T17061] __msan_chain_origin+0xbd/0x140 [ 1114.685837][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.691919][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.691999][T17061] get_compat_msghdr+0x10c/0x280 [ 1114.696498][T17046] get_compat_msghdr+0x10c/0x280 [ 1114.702562][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1114.702629][T17061] ___sys_recvmsg+0x289/0xb40 [ 1114.708949][T17046] ___sys_recvmsg+0x289/0xb40 [ 1114.714056][T17061] ? __schedule+0x176c/0x21c0 [ 1114.714120][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1114.716469][T17046] do_recvmmsg+0x7c9/0x1200 [ 1114.722269][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.722336][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1114.727367][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1114.732375][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1114.732447][T17061] do_recvmmsg+0x7c9/0x1200 [ 1114.737549][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.742649][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1114.742726][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1114.747639][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1114.752569][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1114.752630][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.757405][T17046] do_fast_syscall_32+0x33/0x70 [ 1114.762068][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1114.762144][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.766830][T17046] do_SYSENTER_32+0x1b/0x20 [ 1114.771497][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1114.776671][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.781084][T17061] do_fast_syscall_32+0x33/0x70 [ 1114.786996][T17046] [ 1114.792071][T17061] do_SYSENTER_32+0x1b/0x20 [ 1114.792128][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.796810][T17046] Uninit was stored to memory at: [ 1114.796887][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.802599][T17061] RIP: 0023:0xf7f11549 [ 1114.802639][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1114.802685][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 [ 1114.807163][T17046] get_compat_msghdr+0x10c/0x280 [ 1114.813476][T17061] ORIG_RAX: 0000000000000151 [ 1114.813497][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1114.813531][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1114.813561][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1114.813591][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1114.818616][T17046] ___sys_recvmsg+0x289/0xb40 [ 1114.823708][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1114.823755][T17061] [ 1114.823872][T17061] Uninit was stored to memory at: [ 1114.828796][T17046] do_recvmmsg+0x7c9/0x1200 [ 1114.833689][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.840108][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1114.845022][T17061] get_compat_msghdr+0x10c/0x280 [ 1114.849676][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.856063][T17061] ___sys_recvmsg+0x289/0xb40 [ 1114.860545][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1114.865627][T17061] do_recvmmsg+0x7c9/0x1200 [ 1114.872011][T17046] do_fast_syscall_32+0x33/0x70 [ 1114.876829][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1114.879137][T17046] do_SYSENTER_32+0x1b/0x20 [ 1114.883696][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.890014][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.895110][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1114.900201][T17046] [ 1114.900210][T17046] Uninit was stored to memory at: [ 1114.904331][T17061] do_fast_syscall_32+0x33/0x70 [ 1114.924066][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.930052][T17061] do_SYSENTER_32+0x1b/0x20 [ 1114.935051][T17046] get_compat_msghdr+0x10c/0x280 [ 1114.939724][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1114.947848][T17046] ___sys_recvmsg+0x289/0xb40 [ 1114.955884][T17061] [ 1114.955893][T17061] Uninit was stored to memory at: [ 1114.955970][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1114.963924][T17046] do_recvmmsg+0x7c9/0x1200 [ 1114.971946][T17061] get_compat_msghdr+0x10c/0x280 [ 1114.976607][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1114.984644][T17061] ___sys_recvmsg+0x289/0xb40 [ 1114.987651][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1114.992735][T17061] do_recvmmsg+0x7c9/0x1200 [ 1114.997222][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1115.002395][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.007052][T17046] do_fast_syscall_32+0x33/0x70 [ 1115.012051][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.018465][T17046] do_SYSENTER_32+0x1b/0x20 [ 1115.023203][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1115.028207][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.032772][T17061] do_fast_syscall_32+0x33/0x70 [ 1115.037604][T17046] [ 1115.037613][T17046] Uninit was stored to memory at: [ 1115.042343][T17061] do_SYSENTER_32+0x1b/0x20 [ 1115.046993][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1115.053323][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.059630][T17046] get_compat_msghdr+0x10c/0x280 [ 1115.064753][T17061] [ 1115.064761][T17061] Uninit was stored to memory at: [ 1115.067063][T17046] ___sys_recvmsg+0x289/0xb40 [ 1115.072207][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1115.076980][T17046] do_recvmmsg+0x7c9/0x1200 [ 1115.082157][T17061] get_compat_msghdr+0x10c/0x280 [ 1115.086642][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1115.091565][T17061] ___sys_recvmsg+0x289/0xb40 [ 1115.097956][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.102618][T17061] do_recvmmsg+0x7c9/0x1200 [ 1115.104929][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1115.110460][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.115641][T17046] do_fast_syscall_32+0x33/0x70 [ 1115.120126][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.125127][T17046] do_SYSENTER_32+0x1b/0x20 [ 1115.129770][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1115.134512][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.140822][T17061] do_fast_syscall_32+0x33/0x70 [ 1115.145406][T17046] [ 1115.145416][T17046] Local variable msg_sys created at: [ 1115.150426][T17061] do_SYSENTER_32+0x1b/0x20 [ 1115.155168][T17046] do_recvmmsg+0xc9/0x1200 [ 1115.160001][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.166387][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1115.170871][T17061] [ 1115.170880][T17061] Uninit was stored to memory at: [ 1115.339822][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1115.345075][T17061] get_compat_msghdr+0x10c/0x280 [ 1115.350061][T17061] ___sys_recvmsg+0x289/0xb40 [ 1115.354901][T17061] do_recvmmsg+0x7c9/0x1200 [ 1115.359467][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.364366][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.370752][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1115.375910][T17061] do_fast_syscall_32+0x33/0x70 [ 1115.380806][T17061] do_SYSENTER_32+0x1b/0x20 [ 1115.385421][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.391884][T17061] [ 1115.394219][T17061] Uninit was stored to memory at: [ 1115.399304][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1115.404549][T17061] get_compat_msghdr+0x10c/0x280 [ 1115.409531][T17061] ___sys_recvmsg+0x289/0xb40 [ 1115.414442][T17061] do_recvmmsg+0x7c9/0x1200 [ 1115.418993][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.423826][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.430227][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1115.435385][T17061] do_fast_syscall_32+0x33/0x70 [ 1115.440275][T17061] do_SYSENTER_32+0x1b/0x20 [ 1115.444914][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.451301][T17061] [ 1115.453721][T17061] Uninit was stored to memory at: [ 1115.459245][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1115.464487][T17061] get_compat_msghdr+0x10c/0x280 [ 1115.469496][T17061] ___sys_recvmsg+0x289/0xb40 [ 1115.474323][T17061] do_recvmmsg+0x7c9/0x1200 [ 1115.478881][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.483704][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.490089][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1115.495258][T17061] do_fast_syscall_32+0x33/0x70 [ 1115.500158][T17061] do_SYSENTER_32+0x1b/0x20 [ 1115.504783][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.511155][T17061] [ 1115.513575][T17061] Uninit was stored to memory at: [ 1115.518662][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1115.523912][T17061] get_compat_msghdr+0x10c/0x280 [ 1115.528901][T17061] ___sys_recvmsg+0x289/0xb40 [ 1115.533722][T17061] do_recvmmsg+0x7c9/0x1200 [ 1115.538272][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.543087][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.549470][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1115.554633][T17061] do_fast_syscall_32+0x33/0x70 [ 1115.559526][T17061] do_SYSENTER_32+0x1b/0x20 [ 1115.564165][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.570542][T17061] [ 1115.572955][T17061] Local variable msg_sys created at: [ 1115.578249][T17061] do_recvmmsg+0xc9/0x1200 [ 1115.582801][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.653155][T17061] not chained 2200000 origins [ 1115.657876][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1115.669467][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.679548][T17061] Call Trace: [ 1115.682842][T17061] [ 1115.685796][T17061] dump_stack_lvl+0x200/0x28c [ 1115.690525][T17061] dump_stack+0x29/0x2c [ 1115.694714][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1115.700486][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1115.706603][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1115.711766][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1115.717645][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1115.723244][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1115.728418][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1115.734279][T17061] ? should_fail+0x79/0x9c0 [ 1115.738826][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1115.744002][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1115.750294][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1115.756417][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1115.761577][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1115.767437][T17061] __msan_chain_origin+0xbd/0x140 [ 1115.772514][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1115.777686][T17061] get_compat_msghdr+0x10c/0x280 [ 1115.782672][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1115.787396][T17061] ___sys_recvmsg+0x289/0xb40 [ 1115.792123][T17061] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1115.797537][T17061] ? __schedule+0x1980/0x21c0 [ 1115.802262][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1115.807426][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1115.813295][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1115.818475][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1115.824342][T17061] do_recvmmsg+0x7c9/0x1200 [ 1115.828907][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1115.833997][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1115.839165][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1115.843971][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.850527][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.855263][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.861656][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1115.866745][T17061] do_fast_syscall_32+0x33/0x70 [ 1115.871633][T17061] do_SYSENTER_32+0x1b/0x20 [ 1115.876175][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1115.882546][T17061] RIP: 0023:0xf7f11549 [ 1115.886626][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1115.906264][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1115.914709][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1115.922702][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1115.930698][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1115.938685][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1115.946759][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1115.954765][T17061] [ 1115.957994][T17061] Uninit was stored to memory at: [ 1115.963162][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1115.968321][T17061] get_compat_msghdr+0x10c/0x280 [ 1115.973421][T17061] ___sys_recvmsg+0x289/0xb40 [ 1115.978151][T17061] do_recvmmsg+0x7c9/0x1200 [ 1115.982794][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1115.987517][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1115.994082][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1115.999147][T17061] do_fast_syscall_32+0x33/0x70 [ 1116.004131][T17061] do_SYSENTER_32+0x1b/0x20 [ 1116.008674][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.015207][T17061] [ 1116.017534][T17061] Uninit was stored to memory at: [ 1116.022710][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.027864][T17061] get_compat_msghdr+0x10c/0x280 [ 1116.033012][T17061] ___sys_recvmsg+0x289/0xb40 [ 1116.037740][T17061] do_recvmmsg+0x7c9/0x1200 [ 1116.042472][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1116.047208][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.053750][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1116.058825][T17061] do_fast_syscall_32+0x33/0x70 [ 1116.063889][T17061] do_SYSENTER_32+0x1b/0x20 [ 1116.068434][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.074978][T17061] [ 1116.077310][T17061] Uninit was stored to memory at: [ 1116.082554][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.087712][T17061] get_compat_msghdr+0x10c/0x280 [ 1116.092854][T17061] ___sys_recvmsg+0x289/0xb40 [ 1116.097577][T17061] do_recvmmsg+0x7c9/0x1200 [ 1116.102221][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1116.107015][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.113573][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1116.118649][T17061] do_fast_syscall_32+0x33/0x70 [ 1116.123638][T17061] do_SYSENTER_32+0x1b/0x20 [ 1116.128185][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.134721][T17061] [ 1116.137055][T17061] Uninit was stored to memory at: [ 1116.142288][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.147445][T17061] get_compat_msghdr+0x10c/0x280 [ 1116.152585][T17061] ___sys_recvmsg+0x289/0xb40 [ 1116.157309][T17061] do_recvmmsg+0x7c9/0x1200 [ 1116.162023][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1116.166755][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.173295][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1116.178368][T17061] do_fast_syscall_32+0x33/0x70 [ 1116.183441][T17061] do_SYSENTER_32+0x1b/0x20 [ 1116.187984][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.194538][T17061] [ 1116.196874][T17061] Uninit was stored to memory at: [ 1116.202104][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.207269][T17061] get_compat_msghdr+0x10c/0x280 [ 1116.212417][T17061] ___sys_recvmsg+0x289/0xb40 [ 1116.217177][T17061] do_recvmmsg+0x7c9/0x1200 [ 1116.221833][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1116.226578][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.233121][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1116.238208][T17061] do_fast_syscall_32+0x33/0x70 [ 1116.243266][T17061] do_SYSENTER_32+0x1b/0x20 [ 1116.247812][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.254345][T17061] [ 1116.256674][T17061] Uninit was stored to memory at: [ 1116.261904][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.267062][T17061] get_compat_msghdr+0x10c/0x280 [ 1116.270923][T17031] not chained 2210000 origins [ 1116.272126][T17061] ___sys_recvmsg+0x289/0xb40 [ 1116.272188][T17061] do_recvmmsg+0x7c9/0x1200 [ 1116.272244][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1116.276901][T17031] CPU: 1 PID: 17031 Comm: syz-executor.5 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1116.281553][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.286036][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.290696][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1116.302222][T17031] Call Trace: [ 1116.302243][T17031] [ 1116.302260][T17031] dump_stack_lvl+0x200/0x28c [ 1116.302323][T17031] dump_stack+0x29/0x2c [ 1116.308653][T17061] do_fast_syscall_32+0x33/0x70 [ 1116.318717][T17031] kmsan_internal_chain_origin+0x78/0x120 [ 1116.318789][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1116.323880][T17061] do_SYSENTER_32+0x1b/0x20 [ 1116.327095][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1116.330015][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.334687][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.334758][T17031] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1116.338907][T17061] [ 1116.338917][T17061] Uninit was stored to memory at: [ 1116.343743][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1116.343807][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.349583][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.355585][T17031] ? should_fail+0x79/0x9c0 [ 1116.355634][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1116.360146][T17061] get_compat_msghdr+0x10c/0x280 [ 1116.365239][T17031] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1116.365307][T17031] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1116.371606][T17061] ___sys_recvmsg+0x289/0xb40 [ 1116.377405][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1116.383009][T17061] do_recvmmsg+0x7c9/0x1200 [ 1116.385240][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.390253][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1116.395348][T17031] __msan_chain_origin+0xbd/0x140 [ 1116.395412][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.401220][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.406335][T17031] get_compat_msghdr+0x10c/0x280 [ 1116.406404][T17031] ? do_recvmmsg+0x7c9/0x1200 [ 1116.410882][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1116.415980][T17031] ___sys_recvmsg+0x289/0xb40 [ 1116.416053][T17031] ? __schedule+0x176c/0x21c0 [ 1116.420972][T17061] do_fast_syscall_32+0x33/0x70 [ 1116.427207][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1116.427270][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.433389][T17061] do_SYSENTER_32+0x1b/0x20 [ 1116.438010][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1116.443185][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.447587][T17031] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.453580][T17061] [ 1116.458147][T17031] do_recvmmsg+0x7c9/0x1200 [ 1116.463230][T17061] Local variable msg_sys created at: [ 1116.468243][T17031] ? filter_irq_stacks+0xb9/0x230 [ 1116.474642][T17061] do_recvmmsg+0xc9/0x1200 [ 1116.479487][T17031] ? kmsan_get_metadata+0x33/0x220 [ 1116.484225][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1116.489158][T17031] ? __sys_recvmmsg+0xb9/0x6f0 [ 1116.571950][T17031] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.578522][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1116.583266][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.589662][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1116.594735][T17031] do_fast_syscall_32+0x33/0x70 [ 1116.599634][T17031] do_SYSENTER_32+0x1b/0x20 [ 1116.604184][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.610562][T17031] RIP: 0023:0xf7f7e549 [ 1116.614648][T17031] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1116.634294][T17031] RSP: 002b:00000000f7f795cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1116.642759][T17031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1116.650772][T17031] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1116.658776][T17031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1116.666778][T17031] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1116.674778][T17031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1116.682789][T17031] [ 1116.692381][T17031] Uninit was stored to memory at: [ 1116.697492][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.703319][T17031] get_compat_msghdr+0x10c/0x280 [ 1116.708303][T17031] ___sys_recvmsg+0x289/0xb40 [ 1116.713118][T17031] do_recvmmsg+0x7c9/0x1200 [ 1116.717673][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1116.719669][T17061] not chained 2220000 origins [ 1116.722471][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.722536][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1116.722588][T17031] do_fast_syscall_32+0x33/0x70 [ 1116.722637][T17031] do_SYSENTER_32+0x1b/0x20 [ 1116.722684][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.722740][T17031] [ 1116.722747][T17031] Uninit was stored to memory at: [ 1116.722818][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.722872][T17031] get_compat_msghdr+0x10c/0x280 [ 1116.722924][T17031] ___sys_recvmsg+0x289/0xb40 [ 1116.727592][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1116.734001][T17031] do_recvmmsg+0x7c9/0x1200 [ 1116.738906][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.743822][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1116.748228][T17061] Call Trace: [ 1116.748244][T17061] [ 1116.754612][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.756847][T17061] dump_stack_lvl+0x200/0x28c [ 1116.761931][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1116.767054][T17061] dump_stack+0x29/0x2c [ 1116.772176][T17031] do_fast_syscall_32+0x33/0x70 [ 1116.776730][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1116.788482][T17031] do_SYSENTER_32+0x1b/0x20 [ 1116.792824][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1116.792892][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1116.803114][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.807708][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.810974][T17031] [ 1116.810984][T17031] Uninit was stored to memory at: [ 1116.813898][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1116.813961][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1116.820353][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.824955][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.825027][T17061] ? should_fail+0x79/0x9c0 [ 1116.830037][T17031] get_compat_msghdr+0x10c/0x280 [ 1116.834176][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1116.834238][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1116.834305][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1116.839119][T17031] ___sys_recvmsg+0x289/0xb40 [ 1116.844822][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1116.844885][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.849380][T17031] do_recvmmsg+0x7c9/0x1200 [ 1116.855431][T17061] __msan_chain_origin+0xbd/0x140 [ 1116.855495][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.860592][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1116.866925][T17061] get_compat_msghdr+0x10c/0x280 [ 1116.867000][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1116.872902][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.875134][T17061] ___sys_recvmsg+0x289/0xb40 [ 1116.880133][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1116.885673][T17061] ? __schedule+0x176c/0x21c0 [ 1116.885738][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1116.885801][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.890872][T17031] do_fast_syscall_32+0x33/0x70 [ 1116.895984][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1116.896050][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1116.901938][T17031] do_SYSENTER_32+0x1b/0x20 [ 1116.906360][T17061] do_recvmmsg+0x7c9/0x1200 [ 1116.911276][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.916374][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1116.916457][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1116.922748][T17031] [ 1116.928733][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1116.933491][T17031] Uninit was stored to memory at: [ 1116.938473][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.944398][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1116.948744][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1116.953821][T17031] get_compat_msghdr+0x10c/0x280 [ 1116.958862][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.963579][T17031] ___sys_recvmsg+0x289/0xb40 [ 1116.968432][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1116.973154][T17031] do_recvmmsg+0x7c9/0x1200 [ 1116.979561][T17061] do_fast_syscall_32+0x33/0x70 [ 1116.984320][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1116.989220][T17061] do_SYSENTER_32+0x1b/0x20 [ 1116.993979][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1116.998988][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.004858][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1117.009610][T17061] RIP: 0023:0xf7f11549 [ 1117.014781][T17031] do_fast_syscall_32+0x33/0x70 [ 1117.020491][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1117.025054][T17031] do_SYSENTER_32+0x1b/0x20 [ 1117.029550][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 [ 1117.036003][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.040892][T17061] ORIG_RAX: 0000000000000151 [ 1117.040910][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1117.046065][T17031] [ 1117.048308][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1117.053151][T17031] Uninit was stored to memory at: [ 1117.058080][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1117.064722][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.069670][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1117.074403][T17031] get_compat_msghdr+0x10c/0x280 [ 1117.079247][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1117.085666][T17031] ___sys_recvmsg+0x289/0xb40 [ 1117.090232][T17061] [ 1117.095295][T17031] do_recvmmsg+0x7c9/0x1200 [ 1117.101737][T17061] Uninit was stored to memory at: [ 1117.104619][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1117.109256][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.113751][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.120067][T17061] get_compat_msghdr+0x10c/0x280 [ 1117.126452][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1117.131473][T17061] ___sys_recvmsg+0x289/0xb40 [ 1117.135603][T17031] do_fast_syscall_32+0x33/0x70 [ 1117.140475][T17061] do_recvmmsg+0x7c9/0x1200 [ 1117.160145][T17031] do_SYSENTER_32+0x1b/0x20 [ 1117.164688][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1117.170752][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.177148][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.181899][T17031] [ 1117.189842][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1117.192257][T17031] Uninit was stored to memory at: [ 1117.192331][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.200223][T17061] do_fast_syscall_32+0x33/0x70 [ 1117.205324][T17031] get_compat_msghdr+0x10c/0x280 [ 1117.213360][T17061] do_SYSENTER_32+0x1b/0x20 [ 1117.218452][T17031] ___sys_recvmsg+0x289/0xb40 [ 1117.226491][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.231421][T17031] do_recvmmsg+0x7c9/0x1200 [ 1117.239462][T17061] [ 1117.239471][T17061] Uninit was stored to memory at: [ 1117.244192][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1117.247243][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.251920][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.256921][T17061] get_compat_msghdr+0x10c/0x280 [ 1117.261576][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1117.266761][T17061] ___sys_recvmsg+0x289/0xb40 [ 1117.273065][T17031] do_fast_syscall_32+0x33/0x70 [ 1117.277962][T17061] do_recvmmsg+0x7c9/0x1200 [ 1117.283045][T17031] do_SYSENTER_32+0x1b/0x20 [ 1117.287704][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1117.292612][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.297097][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.301579][T17031] [ 1117.301588][T17031] Uninit was stored to memory at: [ 1117.306317][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1117.312763][T17031] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.319286][T17061] do_fast_syscall_32+0x33/0x70 [ 1117.321707][T17031] get_compat_msghdr+0x10c/0x280 [ 1117.326679][T17061] do_SYSENTER_32+0x1b/0x20 [ 1117.331611][T17031] ___sys_recvmsg+0x289/0xb40 [ 1117.336765][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.341593][T17031] do_recvmmsg+0x7c9/0x1200 [ 1117.346596][T17061] [ 1117.351018][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1117.355753][T17061] Uninit was stored to memory at: [ 1117.355825][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.362137][T17031] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.366602][T17061] get_compat_msghdr+0x10c/0x280 [ 1117.368914][T17031] __do_fast_syscall_32+0x95/0xf0 [ 1117.373995][T17061] ___sys_recvmsg+0x289/0xb40 [ 1117.378744][T17031] do_fast_syscall_32+0x33/0x70 [ 1117.383912][T17061] do_recvmmsg+0x7c9/0x1200 [ 1117.390225][T17031] do_SYSENTER_32+0x1b/0x20 [ 1117.395219][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1117.400221][T17031] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.404952][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.409808][T17031] [ 1117.409818][T17031] Local variable msg_sys created at: [ 1117.414366][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1117.418852][T17031] do_recvmmsg+0xc9/0x1200 [ 1117.423599][T17061] do_fast_syscall_32+0x33/0x70 [ 1117.429995][T17031] __sys_recvmmsg+0x520/0x6f0 [ 1117.436377][T17061] do_SYSENTER_32+0x1b/0x20 [ 1117.585032][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.591433][T17061] [ 1117.593866][T17061] Uninit was stored to memory at: [ 1117.598992][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.604288][T17061] get_compat_msghdr+0x10c/0x280 [ 1117.609290][T17061] ___sys_recvmsg+0x289/0xb40 [ 1117.614172][T17061] do_recvmmsg+0x7c9/0x1200 [ 1117.618723][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1117.623560][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.629958][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1117.635145][T17061] do_fast_syscall_32+0x33/0x70 [ 1117.640039][T17061] do_SYSENTER_32+0x1b/0x20 [ 1117.644686][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.651090][T17061] [ 1117.653527][T17061] Uninit was stored to memory at: [ 1117.658623][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.663884][T17061] get_compat_msghdr+0x10c/0x280 [ 1117.668874][T17061] ___sys_recvmsg+0x289/0xb40 [ 1117.673701][T17061] do_recvmmsg+0x7c9/0x1200 [ 1117.678248][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1117.683090][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.689477][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1117.694660][T17061] do_fast_syscall_32+0x33/0x70 [ 1117.699549][T17061] do_SYSENTER_32+0x1b/0x20 [ 1117.704202][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.710587][T17061] [ 1117.713016][T17061] Uninit was stored to memory at: [ 1117.718102][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.723362][T17061] get_compat_msghdr+0x10c/0x280 [ 1117.728344][T17061] ___sys_recvmsg+0x289/0xb40 [ 1117.733153][T17061] do_recvmmsg+0x7c9/0x1200 [ 1117.737698][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1117.742511][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.748898][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1117.754055][T17061] do_fast_syscall_32+0x33/0x70 [ 1117.758945][T17061] do_SYSENTER_32+0x1b/0x20 [ 1117.763587][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.769966][T17061] [ 1117.772403][T17061] Uninit was stored to memory at: [ 1117.777506][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1117.782775][T17061] get_compat_msghdr+0x10c/0x280 [ 1117.787756][T17061] ___sys_recvmsg+0x289/0xb40 [ 1117.792613][T17061] do_recvmmsg+0x7c9/0x1200 [ 1117.797178][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1117.802013][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1117.808401][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1117.813589][T17061] do_fast_syscall_32+0x33/0x70 [ 1117.818495][T17061] do_SYSENTER_32+0x1b/0x20 [ 1117.823223][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.829607][T17061] [ 1117.832109][T17061] Local variable msg_sys created at: [ 1117.837487][T17061] do_recvmmsg+0xc9/0x1200 [ 1117.842130][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1117.925315][T17046] not chained 2230000 origins [ 1117.930036][T17046] CPU: 1 PID: 17046 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1117.941618][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.951698][T17046] Call Trace: [ 1117.954997][T17046] [ 1117.957953][T17046] dump_stack_lvl+0x200/0x28c [ 1117.962688][T17046] dump_stack+0x29/0x2c [ 1117.966876][T17046] kmsan_internal_chain_origin+0x78/0x120 [ 1117.972647][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1117.978775][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1117.983940][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1117.989799][T17046] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1117.995392][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1118.000557][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.006434][T17046] ? should_fail+0x79/0x9c0 [ 1118.010977][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1118.016138][T17046] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1118.022431][T17046] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1118.028557][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1118.033717][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.039574][T17046] __msan_chain_origin+0xbd/0x140 [ 1118.044650][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.049827][T17046] get_compat_msghdr+0x10c/0x280 [ 1118.054818][T17046] ? do_recvmmsg+0x7c9/0x1200 [ 1118.059559][T17046] ___sys_recvmsg+0x289/0xb40 [ 1118.064292][T17046] ? __schedule+0x176c/0x21c0 [ 1118.069016][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1118.074176][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.080035][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1118.085206][T17046] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.091069][T17046] do_recvmmsg+0x7c9/0x1200 [ 1118.095623][T17046] ? filter_irq_stacks+0xb9/0x230 [ 1118.100709][T17046] ? kmsan_get_metadata+0x33/0x220 [ 1118.105880][T17046] ? __sys_recvmmsg+0xb9/0x6f0 [ 1118.110692][T17046] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.111946][T17061] not chained 2240000 origins [ 1118.117251][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1118.126589][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.132967][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1118.138037][T17046] do_fast_syscall_32+0x33/0x70 [ 1118.142918][T17046] do_SYSENTER_32+0x1b/0x20 [ 1118.147466][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.153827][T17046] RIP: 0023:0xf7f83549 [ 1118.157907][T17046] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1118.177541][T17046] RSP: 002b:00000000f7f1b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1118.185978][T17046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1118.193979][T17046] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1118.201961][T17046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1118.209944][T17046] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1118.217927][T17046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1118.225921][T17046] [ 1118.228944][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1118.233451][T17046] Uninit was stored to memory at: [ 1118.240524][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.246213][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.255579][T17061] Call Trace: [ 1118.255596][T17061] [ 1118.255612][T17061] dump_stack_lvl+0x200/0x28c [ 1118.255672][T17061] dump_stack+0x29/0x2c [ 1118.260757][T17046] get_compat_msghdr+0x10c/0x280 [ 1118.264028][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1118.264094][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1118.267039][T17046] ___sys_recvmsg+0x289/0xb40 [ 1118.271679][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1118.271740][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.271810][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1118.275923][T17046] do_recvmmsg+0x7c9/0x1200 [ 1118.280845][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1118.286620][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1118.292601][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.292673][T17061] ? should_fail+0x79/0x9c0 [ 1118.297331][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.302424][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1118.302485][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1118.302551][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1118.308322][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1118.313854][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1118.313916][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.318407][T17046] do_fast_syscall_32+0x33/0x70 [ 1118.323499][T17061] __msan_chain_origin+0xbd/0x140 [ 1118.323561][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.323640][T17061] get_compat_msghdr+0x10c/0x280 [ 1118.328286][T17046] do_SYSENTER_32+0x1b/0x20 [ 1118.334080][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1118.334145][T17061] ___sys_recvmsg+0x289/0xb40 [ 1118.338629][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.344940][T17061] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1118.345000][T17061] ? __schedule+0x1980/0x21c0 [ 1118.350098][T17046] [ 1118.350108][T17046] Uninit was stored to memory at: [ 1118.356327][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1118.356390][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.362577][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.367443][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1118.372640][T17046] get_compat_msghdr+0x10c/0x280 [ 1118.378328][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1118.383232][T17046] ___sys_recvmsg+0x289/0xb40 [ 1118.388166][T17061] do_recvmmsg+0x7c9/0x1200 [ 1118.393325][T17046] do_recvmmsg+0x7c9/0x1200 [ 1118.398173][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1118.402727][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1118.407324][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1118.412070][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.418312][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1118.423758][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1118.428310][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.430622][T17046] do_fast_syscall_32+0x33/0x70 [ 1118.435630][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1118.435707][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.440794][T17046] do_SYSENTER_32+0x1b/0x20 [ 1118.446596][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1118.446657][T17061] do_fast_syscall_32+0x33/0x70 [ 1118.451942][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.456845][T17061] do_SYSENTER_32+0x1b/0x20 [ 1118.461844][T17046] [ 1118.467553][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.472349][T17046] Uninit was stored to memory at: [ 1118.476729][T17061] RIP: 0023:0xf7f11549 [ 1118.481284][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.486412][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1118.486460][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1118.486507][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1118.491151][T17046] get_compat_msghdr+0x10c/0x280 [ 1118.496240][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1118.496271][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1118.496300][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1118.496328][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1118.502698][T17046] ___sys_recvmsg+0x289/0xb40 [ 1118.507399][T17061] [ 1118.512466][T17046] do_recvmmsg+0x7c9/0x1200 [ 1118.518974][T17061] Uninit was stored to memory at: [ 1118.523774][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1118.528476][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.534798][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.539292][T17061] get_compat_msghdr+0x10c/0x280 [ 1118.544374][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1118.549207][T17061] ___sys_recvmsg+0x289/0xb40 [ 1118.555589][T17046] do_fast_syscall_32+0x33/0x70 [ 1118.560076][T17061] do_recvmmsg+0x7c9/0x1200 [ 1118.562485][T17046] do_SYSENTER_32+0x1b/0x20 [ 1118.568776][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1118.573857][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.577904][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.583082][T17046] [ 1118.583090][T17046] Uninit was stored to memory at: [ 1118.583162][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.602848][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1118.611242][T17046] get_compat_msghdr+0x10c/0x280 [ 1118.619282][T17061] do_fast_syscall_32+0x33/0x70 [ 1118.624312][T17046] ___sys_recvmsg+0x289/0xb40 [ 1118.632353][T17061] do_SYSENTER_32+0x1b/0x20 [ 1118.640318][T17046] do_recvmmsg+0x7c9/0x1200 [ 1118.648364][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.656408][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1118.661080][T17061] [ 1118.661089][T17061] Uninit was stored to memory at: [ 1118.664166][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.668696][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.673719][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1118.678380][T17061] get_compat_msghdr+0x10c/0x280 [ 1118.683578][T17046] do_fast_syscall_32+0x33/0x70 [ 1118.689888][T17061] ___sys_recvmsg+0x289/0xb40 [ 1118.694902][T17046] do_SYSENTER_32+0x1b/0x20 [ 1118.699910][T17061] do_recvmmsg+0x7c9/0x1200 [ 1118.704734][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.709570][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1118.714133][T17046] [ 1118.714142][T17046] Uninit was stored to memory at: [ 1118.718629][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.723649][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.729901][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1118.736320][T17046] get_compat_msghdr+0x10c/0x280 [ 1118.738664][T17061] do_fast_syscall_32+0x33/0x70 [ 1118.743784][T17046] ___sys_recvmsg+0x289/0xb40 [ 1118.748873][T17061] do_SYSENTER_32+0x1b/0x20 [ 1118.753973][T17046] do_recvmmsg+0x7c9/0x1200 [ 1118.758899][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.763841][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1118.768509][T17061] [ 1118.768519][T17061] Uninit was stored to memory at: [ 1118.773080][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.777629][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.783995][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1118.788661][T17061] get_compat_msghdr+0x10c/0x280 [ 1118.790980][T17046] do_fast_syscall_32+0x33/0x70 [ 1118.796096][T17061] ___sys_recvmsg+0x289/0xb40 [ 1118.802510][T17046] do_SYSENTER_32+0x1b/0x20 [ 1118.807588][T17061] do_recvmmsg+0x7c9/0x1200 [ 1118.812710][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.817636][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1118.822556][T17046] [ 1118.822566][T17046] Uninit was stored to memory at: [ 1118.827311][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.831991][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.836416][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1118.842908][T17046] get_compat_msghdr+0x10c/0x280 [ 1118.847572][T17061] do_fast_syscall_32+0x33/0x70 [ 1118.849886][T17046] ___sys_recvmsg+0x289/0xb40 [ 1118.855046][T17061] do_SYSENTER_32+0x1b/0x20 [ 1118.861413][T17046] do_recvmmsg+0x7c9/0x1200 [ 1118.866701][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.871797][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1118.876705][T17061] [ 1118.876719][T17061] Uninit was stored to memory at: [ 1118.876799][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.881551][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.886316][T17061] get_compat_msghdr+0x10c/0x280 [ 1118.890821][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1118.895385][T17061] ___sys_recvmsg+0x289/0xb40 [ 1118.901789][T17046] do_fast_syscall_32+0x33/0x70 [ 1118.906453][T17061] do_recvmmsg+0x7c9/0x1200 [ 1118.909288][T17046] do_SYSENTER_32+0x1b/0x20 [ 1118.914378][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1118.922355][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.927457][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.932550][T17046] [ 1118.932559][T17046] Uninit was stored to memory at: [ 1118.937470][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1118.942446][T17046] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.947054][T17061] do_fast_syscall_32+0x33/0x70 [ 1118.951546][T17046] get_compat_msghdr+0x10c/0x280 [ 1118.956116][T17061] do_SYSENTER_32+0x1b/0x20 [ 1118.963083][T17046] ___sys_recvmsg+0x289/0xb40 [ 1118.967756][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1118.970076][T17046] do_recvmmsg+0x7c9/0x1200 [ 1118.975191][T17061] [ 1118.975202][T17061] Uninit was stored to memory at: [ 1118.975278][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1118.981510][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1118.986690][T17061] get_compat_msghdr+0x10c/0x280 [ 1118.991782][T17046] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1118.996688][T17061] ___sys_recvmsg+0x289/0xb40 [ 1119.001530][T17046] __do_fast_syscall_32+0x95/0xf0 [ 1119.006368][T17061] do_recvmmsg+0x7c9/0x1200 [ 1119.010858][T17046] do_fast_syscall_32+0x33/0x70 [ 1119.015417][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1119.021912][T17046] do_SYSENTER_32+0x1b/0x20 [ 1119.026573][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1119.028918][T17046] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.034013][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1119.039287][T17046] [ 1119.039297][T17046] Local variable msg_sys created at: [ 1119.045678][T17061] do_fast_syscall_32+0x33/0x70 [ 1119.050600][T17046] do_recvmmsg+0xc9/0x1200 [ 1119.055712][T17061] do_SYSENTER_32+0x1b/0x20 [ 1119.060411][T17046] __sys_recvmmsg+0x520/0x6f0 [ 1119.065310][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.247278][T17061] [ 1119.249645][T17061] Uninit was stored to memory at: [ 1119.254819][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1119.259990][T17061] get_compat_msghdr+0x10c/0x280 [ 1119.265076][T17061] ___sys_recvmsg+0x289/0xb40 [ 1119.269818][T17061] do_recvmmsg+0x7c9/0x1200 [ 1119.274478][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1119.279214][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1119.285704][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1119.290780][T17061] do_fast_syscall_32+0x33/0x70 [ 1119.295823][T17061] do_SYSENTER_32+0x1b/0x20 [ 1119.300384][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.306864][T17061] [ 1119.309205][T17061] Uninit was stored to memory at: [ 1119.314443][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1119.319615][T17061] get_compat_msghdr+0x10c/0x280 [ 1119.324767][T17061] ___sys_recvmsg+0x289/0xb40 [ 1119.329499][T17061] do_recvmmsg+0x7c9/0x1200 [ 1119.334225][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1119.338950][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1119.345506][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1119.350585][T17061] do_fast_syscall_32+0x33/0x70 [ 1119.355651][T17061] do_SYSENTER_32+0x1b/0x20 [ 1119.360199][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.366748][T17061] [ 1119.369087][T17061] Local variable msg_sys created at: [ 1119.374450][T17061] do_recvmmsg+0xc9/0x1200 [ 1119.378917][T17061] __sys_recvmmsg+0x520/0x6f0 03:42:59 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000340)=0x5, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x9}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:42:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x5f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 03:42:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000088000000840000000000000095000000000000007adda226418fb4c3c8bc138d840400000000000000cb2ea79f1b78006079cdde50381464ab51a66a84c35ae0f0c590b7f9b9bc60b49c14ec08d2cd4276456f90429c8477efb7c554aefb50794262df034c666f7ed374ddabc378829a1023cbd3964a8a6d715871dd8615478bed50ed169175f59dd9b78b04a90c8413791909f7513017710a4044ca6d1a98601c17d65ce1ae8dbd524a28120a008a69d42f82017abba378907b66776f42d3565b562cc03aaf36eef6febd066671010a84fe3bb0c5de3f7320162917"], &(0x7f0000000180)='GPL\x00'}, 0x48) [ 1119.540131][T17061] not chained 2250000 origins [ 1119.544973][T17061] CPU: 0 PID: 17061 Comm: syz-executor.4 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1119.556565][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.566654][T17061] Call Trace: [ 1119.569955][T17061] [ 1119.572902][T17061] dump_stack_lvl+0x200/0x28c [ 1119.577650][T17061] dump_stack+0x29/0x2c [ 1119.581853][T17061] kmsan_internal_chain_origin+0x78/0x120 [ 1119.587901][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1119.594030][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1119.599191][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1119.605063][T17061] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1119.610660][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1119.615823][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1119.621689][T17061] ? should_fail+0x79/0x9c0 [ 1119.626229][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1119.631390][T17061] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1119.637683][T17061] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1119.643822][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1119.649005][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1119.654921][T17061] __msan_chain_origin+0xbd/0x140 [ 1119.660004][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1119.665284][T17061] get_compat_msghdr+0x10c/0x280 [ 1119.670277][T17061] ? do_recvmmsg+0x7c9/0x1200 [ 1119.675041][T17061] ___sys_recvmsg+0x289/0xb40 [ 1119.679771][T17061] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1119.685207][T17061] ? __schedule+0x1980/0x21c0 [ 1119.689931][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1119.695089][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1119.700966][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1119.706122][T17061] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1119.711986][T17061] do_recvmmsg+0x7c9/0x1200 [ 1119.716569][T17061] ? filter_irq_stacks+0xb9/0x230 [ 1119.721688][T17061] ? kmsan_get_metadata+0x33/0x220 [ 1119.726861][T17061] ? __sys_recvmmsg+0xb9/0x6f0 [ 1119.731684][T17061] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1119.738251][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1119.742999][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1119.749393][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1119.754475][T17061] do_fast_syscall_32+0x33/0x70 [ 1119.759367][T17061] do_SYSENTER_32+0x1b/0x20 [ 1119.763916][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.770291][T17061] RIP: 0023:0xf7f11549 [ 1119.774388][T17061] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1119.794048][T17061] RSP: 002b:00000000f7eeb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1119.802507][T17061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1119.810508][T17061] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1119.818502][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1119.826509][T17061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1119.834499][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1119.842641][T17061] [ 1119.845883][T17061] Uninit was stored to memory at: [ 1119.851011][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1119.856272][T17061] get_compat_msghdr+0x10c/0x280 [ 1119.861261][T17061] ___sys_recvmsg+0x289/0xb40 [ 1119.866108][T17061] do_recvmmsg+0x7c9/0x1200 [ 1119.870665][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1119.875490][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1119.882045][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1119.887115][T17061] do_fast_syscall_32+0x33/0x70 [ 1119.892123][T17061] do_SYSENTER_32+0x1b/0x20 [ 1119.896674][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.903165][T17061] [ 1119.905498][T17061] Uninit was stored to memory at: [ 1119.910592][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1119.915914][T17061] get_compat_msghdr+0x10c/0x280 [ 1119.920994][T17061] ___sys_recvmsg+0x289/0xb40 [ 1119.925838][T17061] do_recvmmsg+0x7c9/0x1200 [ 1119.930394][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1119.935232][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1119.941778][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1119.946854][T17061] do_fast_syscall_32+0x33/0x70 [ 1119.951914][T17061] do_SYSENTER_32+0x1b/0x20 [ 1119.956465][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.962949][T17061] [ 1119.965278][T17061] Uninit was stored to memory at: [ 1119.970390][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1119.975750][T17061] get_compat_msghdr+0x10c/0x280 [ 1119.980747][T17061] ___sys_recvmsg+0x289/0xb40 [ 1119.985672][T17061] do_recvmmsg+0x7c9/0x1200 [ 1119.990232][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1119.995113][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1120.001521][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1120.006762][T17061] do_fast_syscall_32+0x33/0x70 [ 1120.011727][T17061] do_SYSENTER_32+0x1b/0x20 [ 1120.016271][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.022824][T17061] [ 1120.025160][T17061] Uninit was stored to memory at: [ 1120.030270][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1120.035595][T17061] get_compat_msghdr+0x10c/0x280 [ 1120.040582][T17061] ___sys_recvmsg+0x289/0xb40 [ 1120.045459][T17061] do_recvmmsg+0x7c9/0x1200 [ 1120.050013][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1120.055002][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1120.061393][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1120.066635][T17061] do_fast_syscall_32+0x33/0x70 [ 1120.071537][T17061] do_SYSENTER_32+0x1b/0x20 [ 1120.076253][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.082798][T17061] [ 1120.085145][T17061] Uninit was stored to memory at: [ 1120.090234][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1120.095569][T17061] get_compat_msghdr+0x10c/0x280 [ 1120.100558][T17061] ___sys_recvmsg+0x289/0xb40 [ 1120.105441][T17061] do_recvmmsg+0x7c9/0x1200 [ 1120.110002][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1120.114926][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1120.121313][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1120.126593][T17061] do_fast_syscall_32+0x33/0x70 [ 1120.131518][T17061] do_SYSENTER_32+0x1b/0x20 [ 1120.136289][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.142753][T17061] [ 1120.145088][T17061] Uninit was stored to memory at: [ 1120.150180][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1120.155538][T17061] get_compat_msghdr+0x10c/0x280 [ 1120.160532][T17061] ___sys_recvmsg+0x289/0xb40 [ 1120.165511][T17061] do_recvmmsg+0x7c9/0x1200 [ 1120.170077][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1120.174997][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1120.181390][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1120.186645][T17061] do_fast_syscall_32+0x33/0x70 [ 1120.191569][T17061] do_SYSENTER_32+0x1b/0x20 [ 1120.196255][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.202833][T17061] [ 1120.205197][T17061] Uninit was stored to memory at: [ 1120.210290][T17061] __get_compat_msghdr+0x6ea/0x9e0 [ 1120.215608][T17061] get_compat_msghdr+0x10c/0x280 [ 1120.220599][T17061] ___sys_recvmsg+0x289/0xb40 [ 1120.225481][T17061] do_recvmmsg+0x7c9/0x1200 [ 1120.230038][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1120.234945][T17061] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1120.241356][T17061] __do_fast_syscall_32+0x95/0xf0 [ 1120.246615][T17061] do_fast_syscall_32+0x33/0x70 [ 1120.251538][T17061] do_SYSENTER_32+0x1b/0x20 [ 1120.256268][T17061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.262784][T17061] [ 1120.265206][T17061] Local variable msg_sys created at: [ 1120.270499][T17061] do_recvmmsg+0xc9/0x1200 [ 1120.275160][T17061] __sys_recvmmsg+0x520/0x6f0 [ 1120.706489][T17070] not chained 2260000 origins [ 1120.711335][T17070] CPU: 1 PID: 17070 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1120.722932][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.733046][T17070] Call Trace: [ 1120.736373][T17070] [ 1120.739317][T17070] dump_stack_lvl+0x200/0x28c [ 1120.744044][T17070] dump_stack+0x29/0x2c [ 1120.748236][T17070] kmsan_internal_chain_origin+0x78/0x120 [ 1120.754012][T17070] ? kfree_skb_reason+0xfc/0x3a0 [ 1120.759021][T17070] ? llc_sap_state_process+0xd80/0xe50 [ 1120.764584][T17070] ? kmsan_get_metadata+0x33/0x220 [ 1120.769751][T17070] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1120.775615][T17070] ? kmsan_get_metadata+0x33/0x220 [ 1120.780776][T17070] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1120.786650][T17070] ? should_fail+0x79/0x9c0 [ 1120.791185][T17070] ? kmsan_get_metadata+0x33/0x220 [ 1120.796360][T17070] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1120.802672][T17070] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1120.808804][T17070] ? kmsan_get_metadata+0x33/0x220 [ 1120.813991][T17070] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1120.819860][T17070] __msan_chain_origin+0xbd/0x140 [ 1120.824945][T17070] __get_compat_msghdr+0x6ea/0x9e0 [ 1120.830126][T17070] get_compat_msghdr+0x10c/0x280 [ 1120.835134][T17070] ___sys_sendmsg+0x2b5/0x510 [ 1120.839881][T17070] ? __schedule+0x176c/0x21c0 [ 1120.844610][T17070] ? kmsan_get_metadata+0x33/0x220 [ 1120.849771][T17070] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1120.855630][T17070] ? kmsan_get_metadata+0x33/0x220 [ 1120.860791][T17070] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1120.866654][T17070] __sys_sendmmsg+0x6c7/0xb90 [ 1120.871480][T17070] ? reuseport_array_delete_elem+0x130/0x2e0 [ 1120.877514][T17070] ? kmsan_get_metadata+0x33/0x220 [ 1120.882679][T17070] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1120.888538][T17070] ? kmsan_get_metadata+0x33/0x220 [ 1120.893701][T17070] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1120.899581][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1120.905363][T17070] __do_fast_syscall_32+0x95/0xf0 [ 1120.910436][T17070] do_fast_syscall_32+0x33/0x70 [ 1120.915334][T17070] do_SYSENTER_32+0x1b/0x20 [ 1120.919876][T17070] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.926253][T17070] RIP: 0023:0xf7ff0549 [ 1120.930339][T17070] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1120.949984][T17070] RSP: 002b:00000000f7feb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1120.958455][T17070] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001380 [ 1120.966498][T17070] RDX: 00000000fffffeed RSI: 0000000000000000 RDI: 0000000000000000 [ 1120.974493][T17070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1120.982486][T17070] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1120.990570][T17070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1120.998683][T17070] [ 1121.006328][T17070] Uninit was stored to memory at: [ 1121.011446][T17070] __get_compat_msghdr+0x6ea/0x9e0 [ 1121.017771][T17070] get_compat_msghdr+0x10c/0x280 [ 1121.022869][T17070] ___sys_sendmsg+0x2b5/0x510 [ 1121.027605][T17070] __sys_sendmmsg+0x6c7/0xb90 [ 1121.032435][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1121.038306][T17070] __do_fast_syscall_32+0x95/0xf0 [ 1121.043489][T17070] do_fast_syscall_32+0x33/0x70 [ 1121.048505][T17070] do_SYSENTER_32+0x1b/0x20 [ 1121.053229][T17070] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1121.059638][T17070] [ 1121.062175][T17070] Uninit was stored to memory at: [ 1121.067275][T17070] __get_compat_msghdr+0x6ea/0x9e0 [ 1121.072597][T17070] get_compat_msghdr+0x10c/0x280 [ 1121.077859][T17070] ___sys_sendmsg+0x2b5/0x510 [ 1121.082750][T17070] __sys_sendmmsg+0x6c7/0xb90 [ 1121.087486][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1121.093425][T17070] __do_fast_syscall_32+0x95/0xf0 [ 1121.098511][T17070] do_fast_syscall_32+0x33/0x70 [ 1121.103584][T17070] do_SYSENTER_32+0x1b/0x20 [ 1121.108130][T17070] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1121.114779][T17070] [ 1121.117120][T17070] Uninit was stored to memory at: [ 1121.122399][T17070] __get_compat_msghdr+0x6ea/0x9e0 [ 1121.127584][T17070] get_compat_msghdr+0x10c/0x280 [ 1121.132734][T17070] ___sys_sendmsg+0x2b5/0x510 [ 1121.137488][T17070] __sys_sendmmsg+0x6c7/0xb90 [ 1121.142322][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1121.148100][T17070] __do_fast_syscall_32+0x95/0xf0 [ 1121.153340][T17070] do_fast_syscall_32+0x33/0x70 [ 1121.158231][T17070] do_SYSENTER_32+0x1b/0x20 [ 1121.162942][T17070] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1121.169344][T17070] [ 1121.171831][T17070] Uninit was stored to memory at: [ 1121.177032][T17070] __get_compat_msghdr+0x6ea/0x9e0 [ 1121.182349][T17070] get_compat_msghdr+0x10c/0x280 [ 1121.187364][T17070] ___sys_sendmsg+0x2b5/0x510 [ 1121.192264][T17070] __sys_sendmmsg+0x6c7/0xb90 [ 1121.196992][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1121.202933][T17070] __do_fast_syscall_32+0x95/0xf0 [ 1121.208025][T17070] do_fast_syscall_32+0x33/0x70 [ 1121.213190][T17070] do_SYSENTER_32+0x1b/0x20 [ 1121.217736][T17070] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1121.224381][T17070] [ 1121.226804][T17070] Uninit was stored to memory at: [ 1121.232003][T17070] __get_compat_msghdr+0x6ea/0x9e0 [ 1121.237179][T17070] get_compat_msghdr+0x10c/0x280 [ 1121.242362][T17070] ___sys_sendmsg+0x2b5/0x510 [ 1121.247098][T17070] __sys_sendmmsg+0x6c7/0xb90 [ 1121.251922][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1121.257700][T17070] __do_fast_syscall_32+0x95/0xf0 [ 1121.262929][T17070] do_fast_syscall_32+0x33/0x70 [ 1121.267846][T17070] do_SYSENTER_32+0x1b/0x20 [ 1121.272558][T17070] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1121.278960][T17070] [ 1121.281295][T17070] Uninit was stored to memory at: [ 1121.286554][T17070] __get_compat_msghdr+0x6ea/0x9e0 [ 1121.291827][T17070] get_compat_msghdr+0x10c/0x280 [ 1121.296994][T17070] ___sys_sendmsg+0x2b5/0x510 [ 1121.301867][T17070] __sys_sendmmsg+0x6c7/0xb90 [ 1121.306601][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1121.312462][T17070] __do_fast_syscall_32+0x95/0xf0 [ 1121.317541][T17070] do_fast_syscall_32+0x33/0x70 [ 1121.322557][T17070] do_SYSENTER_32+0x1b/0x20 [ 1121.327105][T17070] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1121.333656][T17070] [ 1121.335989][T17070] Uninit was stored to memory at: [ 1121.341080][T17070] __get_compat_msghdr+0x6ea/0x9e0 [ 1121.346344][T17070] get_compat_msghdr+0x10c/0x280 [ 1121.351338][T17070] ___sys_sendmsg+0x2b5/0x510 03:43:01 executing program 1: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) 03:43:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000000)) 03:43:01 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12014000246b9f4013206104ecee1b7b2a0109021b000100000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000000c0)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0x17, 0x6, @multicast}, 0x0, &(0x7f0000000b00)={0x40, 0x1a, 0x2}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0xfb}, 0x0, 0x0}) 03:43:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x5f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 03:43:01 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00', 0x0, 0x0, 0x5, 0xfffff439}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time}) [ 1121.356235][T17070] __sys_sendmmsg+0x6c7/0xb90 [ 1121.360972][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1121.366909][T17070] __do_fast_syscall_32+0x95/0xf0 [ 1121.372070][T17070] do_fast_syscall_32+0x33/0x70 [ 1121.376980][T17070] do_SYSENTER_32+0x1b/0x20 [ 1121.381534][T17070] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1121.388077][T17070] [ 1121.390417][T17070] Local variable msg_sys created at: [ 1121.395857][T17070] __sys_sendmmsg+0xd3/0xb90 [ 1121.400502][T17070] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1121.537483][T17080] loop4: detected capacity change from 0 to 3 03:43:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x5f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) [ 1121.664080][T17080] EXT4-fs (loop4): unable to read superblock 03:43:01 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00', 0x0, 0x0, 0x5, 0xfffff439}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time}) [ 1121.802001][T14037] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1122.162907][T17084] not chained 2270000 origins [ 1122.167632][T17084] CPU: 1 PID: 17084 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1122.179226][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.189315][T17084] Call Trace: [ 1122.192611][T17084] [ 1122.195555][T17084] dump_stack_lvl+0x200/0x28c [ 1122.200284][T17084] dump_stack+0x29/0x2c [ 1122.204490][T17084] kmsan_internal_chain_origin+0x78/0x120 [ 1122.210261][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1122.216379][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1122.221553][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1122.227418][T17084] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1122.233014][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1122.238176][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1122.244038][T17084] ? should_fail+0x79/0x9c0 [ 1122.248573][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1122.253731][T17084] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1122.260029][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1122.266146][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1122.271321][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1122.277183][T17084] __msan_chain_origin+0xbd/0x140 [ 1122.282259][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1122.287435][T17084] get_compat_msghdr+0x10c/0x280 [ 1122.292428][T17084] ? do_recvmmsg+0x7c9/0x1200 [ 1122.297156][T17084] ___sys_recvmsg+0x289/0xb40 [ 1122.301903][T17084] ? __this_cpu_preempt_check+0x13/0x20 [ 1122.307500][T17084] ? sysvec_call_function_single+0x52/0xb0 [ 1122.313356][T17084] ? asm_sysvec_call_function_single+0x12/0x20 [ 1122.319559][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1122.324717][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1122.330614][T17084] do_recvmmsg+0x7c9/0x1200 [ 1122.335170][T17084] ? filter_irq_stacks+0xb9/0x230 [ 1122.340256][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1122.345423][T17084] ? __sys_recvmmsg+0xb9/0x6f0 [ 1122.350234][T17084] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1122.356793][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1122.361532][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1122.367921][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1122.372993][T17084] do_fast_syscall_32+0x33/0x70 [ 1122.377907][T17084] do_SYSENTER_32+0x1b/0x20 [ 1122.382451][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.388828][T17084] RIP: 0023:0xf7f83549 [ 1122.392917][T17084] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1122.412564][T17084] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1122.421008][T17084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1122.429004][T17084] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1122.436999][T17084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1122.444991][T17084] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1122.452981][T17084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1122.460994][T17084] [ 1122.468575][T17084] Uninit was stored to memory at: [ 1122.473760][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1122.478926][T17084] get_compat_msghdr+0x10c/0x280 [ 1122.484091][T17084] ___sys_recvmsg+0x289/0xb40 [ 1122.488829][T17084] do_recvmmsg+0x7c9/0x1200 [ 1122.493477][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1122.498217][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1122.504686][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1122.509772][T17084] do_fast_syscall_32+0x33/0x70 [ 1122.514756][T17084] do_SYSENTER_32+0x1b/0x20 [ 1122.519322][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.525864][T17084] [ 1122.528204][T17084] Uninit was stored to memory at: [ 1122.533476][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1122.538640][T17084] get_compat_msghdr+0x10c/0x280 [ 1122.543720][T17084] ___sys_recvmsg+0x289/0xb40 [ 1122.548455][T17084] do_recvmmsg+0x7c9/0x1200 [ 1122.553344][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1122.558090][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 03:43:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040ac05320200000000000109022400010000100009040000010300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0xc, {0xc, 0x56, "de3d7e4266450122a832"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1122.564554][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1122.569651][T17084] do_fast_syscall_32+0x33/0x70 [ 1122.574628][T17084] do_SYSENTER_32+0x1b/0x20 [ 1122.579179][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.585634][T17084] [ 1122.588086][T17084] Uninit was stored to memory at: [ 1122.593348][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1122.598518][T17084] get_compat_msghdr+0x10c/0x280 [ 1122.603588][T17084] ___sys_recvmsg+0x289/0xb40 [ 1122.608323][T17084] do_recvmmsg+0x7c9/0x1200 [ 1122.612951][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1122.617692][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1122.624150][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1122.629232][T17084] do_fast_syscall_32+0x33/0x70 [ 1122.634219][T17084] do_SYSENTER_32+0x1b/0x20 [ 1122.638775][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.645236][T17084] [ 1122.647576][T17084] Uninit was stored to memory at: [ 1122.652743][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1122.657908][T17084] get_compat_msghdr+0x10c/0x280 [ 1122.663047][T17084] ___sys_recvmsg+0x289/0xb40 [ 1122.667789][T17084] do_recvmmsg+0x7c9/0x1200 [ 1122.672430][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1122.677173][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1122.683653][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1122.690041][T17084] do_fast_syscall_32+0x33/0x70 [ 1122.695036][T17084] do_SYSENTER_32+0x1b/0x20 [ 1122.699591][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.706047][T17084] [ 1122.708383][T17084] Uninit was stored to memory at: [ 1122.713544][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1122.718710][T17084] get_compat_msghdr+0x10c/0x280 [ 1122.723814][T17084] ___sys_recvmsg+0x289/0xb40 [ 1122.728548][T17084] do_recvmmsg+0x7c9/0x1200 [ 1122.733293][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1122.738030][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1122.744497][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1122.749584][T17084] do_fast_syscall_32+0x33/0x70 [ 1122.754626][T17084] do_SYSENTER_32+0x1b/0x20 [ 1122.759180][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.765719][T17084] [ 1122.768061][T17084] Uninit was stored to memory at: [ 1122.773277][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1122.778455][T17084] get_compat_msghdr+0x10c/0x280 [ 1122.783713][T17084] ___sys_recvmsg+0x289/0xb40 [ 1122.788471][T17084] do_recvmmsg+0x7c9/0x1200 [ 1122.793174][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1122.797910][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1122.804453][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1122.809542][T17084] do_fast_syscall_32+0x33/0x70 [ 1122.814601][T17084] do_SYSENTER_32+0x1b/0x20 [ 1122.819166][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.825684][T17084] [ 1122.828023][T17084] Uninit was stored to memory at: [ 1122.833265][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1122.838470][T17084] get_compat_msghdr+0x10c/0x280 [ 1122.843627][T17084] ___sys_recvmsg+0x289/0xb40 [ 1122.848366][T17084] do_recvmmsg+0x7c9/0x1200 [ 1122.853054][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1122.857797][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1122.864276][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1122.869350][T17084] do_fast_syscall_32+0x33/0x70 [ 1122.874384][T17084] do_SYSENTER_32+0x1b/0x20 [ 1122.878936][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.885471][T17084] [ 1122.887823][T17084] Local variable msg_sys created at: [ 1122.893250][T17084] do_recvmmsg+0xc9/0x1200 [ 1122.897735][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.085015][T17084] not chained 2280000 origins [ 1123.089760][T17084] CPU: 1 PID: 17084 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1123.101351][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.111447][T17084] Call Trace: [ 1123.114747][T17084] [ 1123.117693][T17084] dump_stack_lvl+0x200/0x28c [ 1123.122426][T17084] dump_stack+0x29/0x2c [ 1123.126631][T17084] kmsan_internal_chain_origin+0x78/0x120 [ 1123.132402][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1123.138523][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1123.143684][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1123.149550][T17084] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1123.155168][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1123.160328][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1123.166191][T17084] ? should_fail+0x79/0x9c0 [ 1123.170732][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1123.175918][T17084] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1123.182214][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1123.188333][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1123.193492][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1123.199347][T17084] __msan_chain_origin+0xbd/0x140 [ 1123.204418][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1123.209594][T17084] get_compat_msghdr+0x10c/0x280 [ 1123.214583][T17084] ? do_recvmmsg+0x7c9/0x1200 [ 1123.219309][T17084] ___sys_recvmsg+0x289/0xb40 [ 1123.224042][T17084] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1123.229466][T17084] ? __schedule+0x1980/0x21c0 [ 1123.234190][T17084] ? sysvec_call_function_single+0x52/0xb0 [ 1123.240051][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1123.245221][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1123.251077][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1123.256237][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1123.262100][T17084] do_recvmmsg+0x7c9/0x1200 [ 1123.266654][T17084] ? filter_irq_stacks+0xb9/0x230 [ 1123.271752][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1123.276918][T17084] ? __sys_recvmmsg+0xb9/0x6f0 [ 1123.281733][T17084] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.288291][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.293035][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.299423][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1123.304547][T17084] do_fast_syscall_32+0x33/0x70 [ 1123.309737][T17084] do_SYSENTER_32+0x1b/0x20 [ 1123.314486][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.320876][T17084] RIP: 0023:0xf7f83549 [ 1123.324976][T17084] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1123.344625][T17084] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1123.353073][T17084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1123.361070][T17084] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1123.369062][T17084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1123.377055][T17084] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1123.385049][T17084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1123.393066][T17084] [ 1123.396298][T17084] Uninit was stored to memory at: [ 1123.401397][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1123.406661][T17084] get_compat_msghdr+0x10c/0x280 [ 1123.411732][T17084] ___sys_recvmsg+0x289/0xb40 [ 1123.416475][T17084] do_recvmmsg+0x7c9/0x1200 [ 1123.421031][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.426019][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.432486][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1123.437569][T17084] do_fast_syscall_32+0x33/0x70 [ 1123.442547][T17084] do_SYSENTER_32+0x1b/0x20 [ 1123.447097][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.453551][T17084] [ 1123.455898][T17084] Uninit was stored to memory at: [ 1123.461005][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1123.466301][T17084] get_compat_msghdr+0x10c/0x280 [ 1123.471325][T17084] ___sys_recvmsg+0x289/0xb40 [ 1123.476199][T17084] do_recvmmsg+0x7c9/0x1200 [ 1123.480768][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.485680][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.492140][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1123.497224][T17084] do_fast_syscall_32+0x33/0x70 [ 1123.502316][T17084] do_SYSENTER_32+0x1b/0x20 [ 1123.506875][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.513445][T17084] [ 1123.515786][T17084] Uninit was stored to memory at: [ 1123.520890][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1123.526210][T17084] get_compat_msghdr+0x10c/0x280 [ 1123.531207][T17084] ___sys_recvmsg+0x289/0xb40 [ 1123.536088][T17084] do_recvmmsg+0x7c9/0x1200 [ 1123.540649][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.545539][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.552016][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1123.557097][T17084] do_fast_syscall_32+0x33/0x70 [ 1123.562612][T17084] do_SYSENTER_32+0x1b/0x20 [ 1123.567187][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.573701][T17084] [ 1123.576040][T17084] Uninit was stored to memory at: [ 1123.581154][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1123.586451][T17084] get_compat_msghdr+0x10c/0x280 [ 1123.591445][T17084] ___sys_recvmsg+0x289/0xb40 [ 1123.596327][T17084] do_recvmmsg+0x7c9/0x1200 [ 1123.600889][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.605761][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.612230][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1123.617313][T17084] do_fast_syscall_32+0x33/0x70 [ 1123.622377][T17084] do_SYSENTER_32+0x1b/0x20 [ 1123.626931][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.633477][T17084] [ 1123.635820][T17084] Uninit was stored to memory at: [ 1123.640917][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1123.646239][T17084] get_compat_msghdr+0x10c/0x280 [ 1123.651253][T17084] ___sys_recvmsg+0x289/0xb40 [ 1123.656173][T17084] do_recvmmsg+0x7c9/0x1200 [ 1123.660732][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.665606][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.672074][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1123.677162][T17084] do_fast_syscall_32+0x33/0x70 [ 1123.682210][T17084] do_SYSENTER_32+0x1b/0x20 [ 1123.686768][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.693383][T17084] [ 1123.695739][T17084] Uninit was stored to memory at: [ 1123.700840][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1123.706170][T17084] get_compat_msghdr+0x10c/0x280 [ 1123.711201][T17084] ___sys_recvmsg+0x289/0xb40 [ 1123.716078][T17084] do_recvmmsg+0x7c9/0x1200 [ 1123.720638][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.725506][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.731999][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1123.737076][T17084] do_fast_syscall_32+0x33/0x70 [ 1123.742115][T17084] do_SYSENTER_32+0x1b/0x20 [ 1123.746661][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.753111][T17084] [ 1123.755448][T17084] Uninit was stored to memory at: [ 1123.760547][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1123.765852][T17084] get_compat_msghdr+0x10c/0x280 [ 1123.770847][T17084] ___sys_recvmsg+0x289/0xb40 [ 1123.775755][T17084] do_recvmmsg+0x7c9/0x1200 [ 1123.780313][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1123.785196][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1123.791591][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1123.796816][T17084] do_fast_syscall_32+0x33/0x70 [ 1123.801834][T17084] do_SYSENTER_32+0x1b/0x20 [ 1123.806393][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.812929][T17084] [ 1123.815271][T17084] Local variable msg_sys created at: [ 1123.820572][T17084] do_recvmmsg+0xc9/0x1200 [ 1123.825211][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.010503][T17084] not chained 2290000 origins [ 1124.015303][T17084] CPU: 1 PID: 17084 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1124.026905][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.036994][T17084] Call Trace: [ 1124.040300][T17084] [ 1124.043251][T17084] dump_stack_lvl+0x200/0x28c [ 1124.047985][T17084] dump_stack+0x29/0x2c [ 1124.052183][T17084] kmsan_internal_chain_origin+0x78/0x120 [ 1124.057966][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1124.064106][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1124.069369][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1124.075279][T17084] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1124.080973][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1124.086152][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1124.092025][T17084] ? should_fail+0x79/0x9c0 [ 1124.096570][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1124.101741][T17084] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1124.108044][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1124.114175][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1124.119374][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1124.125340][T17084] __msan_chain_origin+0xbd/0x140 [ 1124.130444][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1124.135628][T17084] get_compat_msghdr+0x10c/0x280 [ 1124.140629][T17084] ? do_recvmmsg+0x7c9/0x1200 [ 1124.145394][T17084] ___sys_recvmsg+0x289/0xb40 [ 1124.150143][T17084] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1124.155566][T17084] ? __schedule+0x1980/0x21c0 [ 1124.160299][T17084] ? sysvec_call_function_single+0x52/0xb0 [ 1124.166183][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1124.171348][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1124.177226][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1124.182409][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1124.188283][T17084] do_recvmmsg+0x7c9/0x1200 [ 1124.192846][T17084] ? filter_irq_stacks+0xb9/0x230 [ 1124.197946][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1124.203126][T17084] ? __sys_recvmmsg+0xb9/0x6f0 [ 1124.207943][T17084] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.214519][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.219273][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.225686][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1124.230771][T17084] do_fast_syscall_32+0x33/0x70 [ 1124.235687][T17084] do_SYSENTER_32+0x1b/0x20 [ 1124.240237][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.246617][T17084] RIP: 0023:0xf7f83549 [ 1124.250799][T17084] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1124.270448][T17084] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1124.278911][T17084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1124.286927][T17084] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1124.294930][T17084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1124.302934][T17084] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1124.310937][T17084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1124.318956][T17084] [ 1124.322130][T17084] Uninit was stored to memory at: [ 1124.327227][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1124.332469][T17084] get_compat_msghdr+0x10c/0x280 [ 1124.337468][T17084] ___sys_recvmsg+0x289/0xb40 [ 1124.342287][T17084] do_recvmmsg+0x7c9/0x1200 [ 1124.346853][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.351586][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.358051][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1124.363283][T17084] do_fast_syscall_32+0x33/0x70 [ 1124.368190][T17084] do_SYSENTER_32+0x1b/0x20 [ 1124.372812][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.379195][T17084] [ 1124.381530][T17084] Uninit was stored to memory at: [ 1124.386753][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1124.391991][T17084] get_compat_msghdr+0x10c/0x280 [ 1124.396987][T17084] ___sys_recvmsg+0x289/0xb40 [ 1124.401836][T17084] do_recvmmsg+0x7c9/0x1200 [ 1124.406395][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.411129][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.417661][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1124.422816][T17084] do_fast_syscall_32+0x33/0x70 [ 1124.427717][T17084] do_SYSENTER_32+0x1b/0x20 [ 1124.432399][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.438791][T17084] [ 1124.441126][T17084] Uninit was stored to memory at: [ 1124.446395][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1124.451572][T17084] get_compat_msghdr+0x10c/0x280 [ 1124.456800][T17084] ___sys_recvmsg+0x289/0xb40 [ 1124.461534][T17084] do_recvmmsg+0x7c9/0x1200 [ 1124.466228][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.470959][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.477499][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1124.482652][T17084] do_fast_syscall_32+0x33/0x70 [ 1124.487554][T17084] do_SYSENTER_32+0x1b/0x20 [ 1124.492226][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.498610][T17084] [ 1124.500949][T17084] Uninit was stored to memory at: [ 1124.506217][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1124.511387][T17084] get_compat_msghdr+0x10c/0x280 [ 1124.516530][T17084] ___sys_recvmsg+0x289/0xb40 [ 1124.521266][T17084] do_recvmmsg+0x7c9/0x1200 [ 1124.525957][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.530705][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.537230][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1124.542398][T17084] do_fast_syscall_32+0x33/0x70 [ 1124.547309][T17084] do_SYSENTER_32+0x1b/0x20 [ 1124.552018][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.558423][T17084] 03:43:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) [ 1124.560767][T17084] Uninit was stored to memory at: [ 1124.565997][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1124.571177][T17084] get_compat_msghdr+0x10c/0x280 [ 1124.576311][T17084] ___sys_recvmsg+0x289/0xb40 [ 1124.581046][T17084] do_recvmmsg+0x7c9/0x1200 [ 1124.585738][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.590484][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.597013][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1124.602169][T17084] do_fast_syscall_32+0x33/0x70 [ 1124.607077][T17084] do_SYSENTER_32+0x1b/0x20 [ 1124.611778][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.618175][T17084] [ 1124.620514][T17084] Uninit was stored to memory at: [ 1124.625760][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1124.630931][T17084] get_compat_msghdr+0x10c/0x280 [ 1124.636091][T17084] ___sys_recvmsg+0x289/0xb40 [ 1124.640840][T17084] do_recvmmsg+0x7c9/0x1200 [ 1124.645596][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.650336][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.656874][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1124.662029][T17084] do_fast_syscall_32+0x33/0x70 [ 1124.666930][T17084] do_SYSENTER_32+0x1b/0x20 [ 1124.671485][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.678017][T17084] [ 1124.680358][T17084] Uninit was stored to memory at: [ 1124.685599][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1124.690773][T17084] get_compat_msghdr+0x10c/0x280 [ 1124.695898][T17084] ___sys_recvmsg+0x289/0xb40 [ 1124.700636][T17084] do_recvmmsg+0x7c9/0x1200 [ 1124.705261][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.709991][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1124.716551][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1124.721722][T17084] do_fast_syscall_32+0x33/0x70 [ 1124.726631][T17084] do_SYSENTER_32+0x1b/0x20 [ 1124.731184][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.737764][T17084] [ 1124.740125][T17084] Local variable msg_sys created at: [ 1124.745559][T17084] do_recvmmsg+0xc9/0x1200 [ 1124.750033][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1124.931543][T17084] not chained 2300000 origins [ 1124.936347][T17084] CPU: 1 PID: 17084 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1124.947950][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.958040][T17084] Call Trace: [ 1124.961341][T17084] [ 1124.964302][T17084] dump_stack_lvl+0x200/0x28c [ 1124.969072][T17084] dump_stack+0x29/0x2c [ 1124.973425][T17084] kmsan_internal_chain_origin+0x78/0x120 03:43:04 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000340)=0x5, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x9}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 1124.979222][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1124.985355][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1124.990525][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1124.996399][T17084] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1125.002011][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.007188][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1125.013062][T17084] ? should_fail+0x79/0x9c0 [ 1125.017645][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.022810][T17084] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1125.029109][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1125.035237][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.040405][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1125.046267][T17084] __msan_chain_origin+0xbd/0x140 [ 1125.051341][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.056522][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.061513][T17084] ? do_recvmmsg+0x7c9/0x1200 [ 1125.066242][T17084] ___sys_recvmsg+0x289/0xb40 [ 1125.070973][T17084] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1125.076391][T17084] ? __schedule+0x1980/0x21c0 [ 1125.081112][T17084] ? sysvec_call_function_single+0x52/0xb0 [ 1125.086988][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.092155][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1125.098021][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.103184][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1125.109046][T17084] do_recvmmsg+0x7c9/0x1200 [ 1125.113603][T17084] ? filter_irq_stacks+0xb9/0x230 [ 1125.118688][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.123883][T17084] ? __sys_recvmmsg+0xb9/0x6f0 [ 1125.128692][T17084] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.135256][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.140014][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.146410][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1125.151491][T17084] do_fast_syscall_32+0x33/0x70 [ 1125.156404][T17084] do_SYSENTER_32+0x1b/0x20 [ 1125.160949][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.167330][T17084] RIP: 0023:0xf7f83549 [ 1125.171437][T17084] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1125.191085][T17084] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1125.199536][T17084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1125.207539][T17084] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1125.215532][T17084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1125.223531][T17084] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1125.231525][T17084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1125.239533][T17084] [ 1125.242737][T17084] Uninit was stored to memory at: [ 1125.247832][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.253068][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.258100][T17084] ___sys_recvmsg+0x289/0xb40 [ 1125.263049][T17084] do_recvmmsg+0x7c9/0x1200 [ 1125.267602][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.272409][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.278804][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1125.283957][T17084] do_fast_syscall_32+0x33/0x70 [ 1125.288864][T17084] do_SYSENTER_32+0x1b/0x20 [ 1125.293540][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.299950][T17084] [ 1125.302446][T17084] Uninit was stored to memory at: [ 1125.307584][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.312819][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.317806][T17084] ___sys_recvmsg+0x289/0xb40 [ 1125.322604][T17084] do_recvmmsg+0x7c9/0x1200 [ 1125.327204][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.332059][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.338454][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1125.343590][T17084] do_fast_syscall_32+0x33/0x70 [ 1125.348510][T17084] do_SYSENTER_32+0x1b/0x20 [ 1125.353259][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.359642][T17084] [ 1125.362107][T17084] Uninit was stored to memory at: [ 1125.367202][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.372507][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.377498][T17084] ___sys_recvmsg+0x289/0xb40 [ 1125.382374][T17084] do_recvmmsg+0x7c9/0x1200 [ 1125.386957][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.391818][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.398237][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1125.403554][T17084] do_fast_syscall_32+0x33/0x70 [ 1125.408474][T17084] do_SYSENTER_32+0x1b/0x20 [ 1125.413168][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.419565][T17084] [ 1125.422042][T17084] Uninit was stored to memory at: [ 1125.427156][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.432457][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.437468][T17084] ___sys_recvmsg+0x289/0xb40 [ 1125.442348][T17084] do_recvmmsg+0x7c9/0x1200 [ 1125.446926][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.451796][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.458195][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1125.463346][T17084] do_fast_syscall_32+0x33/0x70 [ 1125.468257][T17084] do_SYSENTER_32+0x1b/0x20 [ 1125.472890][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.479276][T17084] [ 1125.481616][T17084] Uninit was stored to memory at: [ 1125.486788][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.492098][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.497094][T17084] ___sys_recvmsg+0x289/0xb40 [ 1125.501914][T17084] do_recvmmsg+0x7c9/0x1200 [ 1125.506496][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.511230][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.517766][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1125.522918][T17084] do_fast_syscall_32+0x33/0x70 [ 1125.527827][T17084] do_SYSENTER_32+0x1b/0x20 [ 1125.532522][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.538910][T17084] [ 1125.541255][T17084] Uninit was stored to memory at: [ 1125.546514][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.551743][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.556739][T17084] ___sys_recvmsg+0x289/0xb40 [ 1125.561482][T17084] do_recvmmsg+0x7c9/0x1200 [ 1125.566178][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.570920][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.577451][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1125.582682][T17084] do_fast_syscall_32+0x33/0x70 [ 1125.587584][T17084] do_SYSENTER_32+0x1b/0x20 [ 1125.592265][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.598652][T17084] [ 1125.600998][T17084] Uninit was stored to memory at: [ 1125.606248][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.611436][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.616602][T17084] ___sys_recvmsg+0x289/0xb40 [ 1125.621347][T17084] do_recvmmsg+0x7c9/0x1200 [ 1125.626053][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.630798][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1125.637271][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1125.642414][T17084] do_fast_syscall_32+0x33/0x70 [ 1125.647330][T17084] do_SYSENTER_32+0x1b/0x20 [ 1125.652024][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.658458][T17084] [ 1125.660819][T17084] Local variable msg_sys created at: [ 1125.666249][T17084] do_recvmmsg+0xc9/0x1200 [ 1125.670734][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1125.860636][T17084] not chained 2310000 origins [ 1125.865447][T17084] CPU: 1 PID: 17084 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1125.877023][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.887109][T17084] Call Trace: [ 1125.890410][T17084] [ 1125.893369][T17084] dump_stack_lvl+0x200/0x28c [ 1125.898113][T17084] dump_stack+0x29/0x2c [ 1125.902319][T17084] kmsan_internal_chain_origin+0x78/0x120 [ 1125.908115][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1125.914333][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.919512][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1125.925470][T17084] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1125.931076][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.936251][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1125.942126][T17084] ? should_fail+0x79/0x9c0 [ 1125.946690][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.951859][T17084] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1125.958164][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1125.964442][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1125.969619][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1125.975493][T17084] __msan_chain_origin+0xbd/0x140 [ 1125.980583][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1125.985773][T17084] get_compat_msghdr+0x10c/0x280 [ 1125.990783][T17084] ? do_recvmmsg+0x7c9/0x1200 [ 1125.995507][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.000252][T17084] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1126.005677][T17084] ? __schedule+0x1980/0x21c0 [ 1126.010416][T17084] ? __this_cpu_preempt_check+0x13/0x20 [ 1126.016030][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.021204][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1126.027163][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.032338][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1126.038212][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.042759][T17084] ? filter_irq_stacks+0xb9/0x230 [ 1126.047856][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.053036][T17084] ? __sys_recvmmsg+0xb9/0x6f0 [ 1126.057861][T17084] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.064459][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.069216][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.075625][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1126.080713][T17084] do_fast_syscall_32+0x33/0x70 [ 1126.085626][T17084] do_SYSENTER_32+0x1b/0x20 [ 1126.090180][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.096557][T17084] RIP: 0023:0xf7f83549 [ 1126.100666][T17084] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1126.120300][T17084] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1126.128747][T17084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1126.136767][T17084] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1126.144777][T17084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1126.152787][T17084] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1126.160798][T17084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1126.168819][T17084] [ 1126.171974][T17084] Uninit was stored to memory at: [ 1126.177078][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1126.182324][T17084] get_compat_msghdr+0x10c/0x280 [ 1126.187324][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.192145][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.196705][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.201474][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.207951][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1126.213151][T17084] do_fast_syscall_32+0x33/0x70 [ 1126.218058][T17084] do_SYSENTER_32+0x1b/0x20 [ 1126.222743][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.229134][T17084] [ 1126.231468][T17084] Uninit was stored to memory at: [ 1126.236691][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1126.241926][T17084] get_compat_msghdr+0x10c/0x280 [ 1126.246929][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.251769][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.256371][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.261113][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.267632][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1126.272790][T17084] do_fast_syscall_32+0x33/0x70 [ 1126.277690][T17084] do_SYSENTER_32+0x1b/0x20 [ 1126.282489][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.288883][T17084] [ 1126.291218][T17084] Uninit was stored to memory at: [ 1126.296492][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1126.301737][T17084] get_compat_msghdr+0x10c/0x280 [ 1126.306740][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.311476][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.316173][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.320911][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.327452][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1126.332603][T17084] do_fast_syscall_32+0x33/0x70 [ 1126.337562][T17084] do_SYSENTER_32+0x1b/0x20 [ 1126.342346][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.348738][T17084] [ 1126.351073][T17084] Uninit was stored to memory at: [ 1126.356290][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1126.361463][T17084] get_compat_msghdr+0x10c/0x280 [ 1126.366588][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.371324][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.376074][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.380808][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.387345][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1126.392510][T17084] do_fast_syscall_32+0x33/0x70 [ 1126.397418][T17084] do_SYSENTER_32+0x1b/0x20 [ 1126.402089][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.408473][T17084] [ 1126.410809][T17084] Uninit was stored to memory at: [ 1126.416045][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1126.421214][T17084] get_compat_msghdr+0x10c/0x280 [ 1126.426378][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.431116][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.435795][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.440705][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.447224][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1126.452377][T17084] do_fast_syscall_32+0x33/0x70 [ 1126.457282][T17084] do_SYSENTER_32+0x1b/0x20 [ 1126.461983][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.468379][T17084] [ 1126.470717][T17084] Uninit was stored to memory at: [ 1126.475958][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1126.481133][T17084] get_compat_msghdr+0x10c/0x280 [ 1126.486310][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.491050][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.495737][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.500481][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.507006][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1126.512151][T17084] do_fast_syscall_32+0x33/0x70 [ 1126.517176][T17084] do_SYSENTER_32+0x1b/0x20 [ 1126.521841][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.528234][T17084] [ 1126.530599][T17084] Uninit was stored to memory at: [ 1126.535861][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1126.541032][T17084] get_compat_msghdr+0x10c/0x280 [ 1126.546162][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.550903][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.555597][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.560340][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.566874][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1126.572397][T17084] do_fast_syscall_32+0x33/0x70 [ 1126.577304][T17084] do_SYSENTER_32+0x1b/0x20 [ 1126.582008][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.588394][T17084] [ 1126.590732][T17084] Local variable msg_sys created at: [ 1126.596158][T17084] do_recvmmsg+0xc9/0x1200 [ 1126.600631][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.780989][T17084] not chained 2320000 origins [ 1126.785862][T17084] CPU: 1 PID: 17084 Comm: syz-executor.1 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1126.797457][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1126.807558][T17084] Call Trace: [ 1126.810861][T17084] [ 1126.813898][T17084] dump_stack_lvl+0x200/0x28c [ 1126.818644][T17084] dump_stack+0x29/0x2c [ 1126.822862][T17084] kmsan_internal_chain_origin+0x78/0x120 [ 1126.828652][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1126.834790][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.839965][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1126.845843][T17084] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1126.851449][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.856619][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1126.862497][T17084] ? should_fail+0x79/0x9c0 [ 1126.867048][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.872219][T17084] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1126.878529][T17084] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1126.884668][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.889840][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1126.895708][T17084] __msan_chain_origin+0xbd/0x140 [ 1126.900790][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1126.905989][T17084] get_compat_msghdr+0x10c/0x280 [ 1126.910987][T17084] ? do_recvmmsg+0x7c9/0x1200 [ 1126.915704][T17084] ___sys_recvmsg+0x289/0xb40 [ 1126.920442][T17084] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1126.925868][T17084] ? __schedule+0x1980/0x21c0 [ 1126.930605][T17084] ? __this_cpu_preempt_check+0x13/0x20 [ 1126.936322][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.941500][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1126.947384][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.952553][T17084] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1126.958428][T17084] do_recvmmsg+0x7c9/0x1200 [ 1126.962995][T17084] ? filter_irq_stacks+0xb9/0x230 [ 1126.968096][T17084] ? kmsan_get_metadata+0x33/0x220 [ 1126.973278][T17084] ? __sys_recvmmsg+0xb9/0x6f0 [ 1126.978113][T17084] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.984685][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1126.989434][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1126.995831][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1127.000895][T17084] do_fast_syscall_32+0x33/0x70 [ 1127.005799][T17084] do_SYSENTER_32+0x1b/0x20 [ 1127.010357][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.016744][T17084] RIP: 0023:0xf7f83549 [ 1127.020840][T17084] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1127.040540][T17084] RSP: 002b:00000000f7f5d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1127.049002][T17084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1127.057014][T17084] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1127.065024][T17084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1127.073028][T17084] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1127.081029][T17084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1127.089050][T17084] [ 1127.092245][T17084] Uninit was stored to memory at: [ 1127.097345][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1127.102591][T17084] get_compat_msghdr+0x10c/0x280 [ 1127.107585][T17084] ___sys_recvmsg+0x289/0xb40 [ 1127.112401][T17084] do_recvmmsg+0x7c9/0x1200 [ 1127.116975][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1127.121772][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1127.128189][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1127.133339][T17084] do_fast_syscall_32+0x33/0x70 [ 1127.138241][T17084] do_SYSENTER_32+0x1b/0x20 [ 1127.142864][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.149249][T17084] [ 1127.151584][T17084] Uninit was stored to memory at: [ 1127.156803][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1127.162045][T17084] get_compat_msghdr+0x10c/0x280 [ 1127.167037][T17084] ___sys_recvmsg+0x289/0xb40 [ 1127.172002][T17084] do_recvmmsg+0x7c9/0x1200 [ 1127.176566][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1127.181301][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1127.187792][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1127.192943][T17084] do_fast_syscall_32+0x33/0x70 [ 1127.197847][T17084] do_SYSENTER_32+0x1b/0x20 [ 1127.202573][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.208965][T17084] [ 1127.211335][T17084] Uninit was stored to memory at: [ 1127.216566][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1127.221797][T17084] get_compat_msghdr+0x10c/0x280 [ 1127.226800][T17084] ___sys_recvmsg+0x289/0xb40 [ 1127.231573][T17084] do_recvmmsg+0x7c9/0x1200 [ 1127.236256][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1127.240988][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1127.247542][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1127.252686][T17084] do_fast_syscall_32+0x33/0x70 [ 1127.257586][T17084] do_SYSENTER_32+0x1b/0x20 [ 1127.262320][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.268707][T17084] [ 1127.271039][T17084] Uninit was stored to memory at: [ 1127.276243][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1127.281410][T17084] get_compat_msghdr+0x10c/0x280 [ 1127.286543][T17084] ___sys_recvmsg+0x289/0xb40 [ 1127.291282][T17084] do_recvmmsg+0x7c9/0x1200 [ 1127.295956][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1127.300689][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1127.307250][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1127.312400][T17084] do_fast_syscall_32+0x33/0x70 [ 1127.317310][T17084] do_SYSENTER_32+0x1b/0x20 [ 1127.321987][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.328371][T17084] [ 1127.330705][T17084] Uninit was stored to memory at: [ 1127.335925][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1127.341095][T17084] get_compat_msghdr+0x10c/0x280 [ 1127.346214][T17084] ___sys_recvmsg+0x289/0xb40 [ 1127.350955][T17084] do_recvmmsg+0x7c9/0x1200 [ 1127.355649][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1127.360384][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1127.366913][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1127.372064][T17084] do_fast_syscall_32+0x33/0x70 [ 1127.377055][T17084] do_SYSENTER_32+0x1b/0x20 [ 1127.381602][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.388105][T17084] [ 1127.390440][T17084] Uninit was stored to memory at: [ 1127.395664][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1127.400831][T17084] get_compat_msghdr+0x10c/0x280 [ 1127.405930][T17084] ___sys_recvmsg+0x289/0xb40 [ 1127.410679][T17084] do_recvmmsg+0x7c9/0x1200 [ 1127.415380][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1127.420121][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1127.426644][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1127.431784][T17084] do_fast_syscall_32+0x33/0x70 [ 1127.436684][T17084] do_SYSENTER_32+0x1b/0x20 [ 1127.441237][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.447737][T17084] [ 1127.450077][T17084] Uninit was stored to memory at: [ 1127.455326][T17084] __get_compat_msghdr+0x6ea/0x9e0 [ 1127.460503][T17084] get_compat_msghdr+0x10c/0x280 [ 1127.465578][T17084] ___sys_recvmsg+0x289/0xb40 [ 1127.470317][T17084] do_recvmmsg+0x7c9/0x1200 [ 1127.474943][T17084] __sys_recvmmsg+0x520/0x6f0 [ 1127.479683][T17084] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1127.486156][T17084] __do_fast_syscall_32+0x95/0xf0 [ 1127.491236][T17084] do_fast_syscall_32+0x33/0x70 [ 1127.496253][T17084] do_SYSENTER_32+0x1b/0x20 [ 1127.500804][T17084] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.507308][T17084] [ 1127.509659][T17084] Local variable msg_sys created at: [ 1127.515098][T17084] do_recvmmsg+0xc9/0x1200 [ 1127.519584][T17084] __sys_recvmmsg+0x520/0x6f0 03:43:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000340)=0x5, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x9}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:43:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{&(0x7f00000015c0)=@caif=@rfm={0x25, 0x3e, "9058cd3ac6e7b87abbc076b08fad4448"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="64bb2b096d049a00000000000800", 0xe}], 0x1}}], 0x1, 0x0) 03:43:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00', 0x0, 0x0, 0x5, 0xfffff439}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time}) 03:43:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) [ 1128.162039][T10296] usb 5-1: new high-speed USB device number 35 using dummy_hcd 03:43:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{&(0x7f00000015c0)=@caif=@rfm={0x25, 0x3e, "9058cd3ac6e7b87abbc076b08fad4448"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="64bb2b096d049a00000000000800", 0xe}], 0x1}}], 0x1, 0x0) [ 1128.522868][T10296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.534197][T10296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.544488][T10296] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 1128.553847][T10296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:43:08 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00', 0x0, 0x0, 0x5, 0xfffff439}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time}) 03:43:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 03:43:08 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1128.804000][T10296] usb 5-1: config 0 descriptor?? 03:43:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{&(0x7f00000015c0)=@caif=@rfm={0x25, 0x3e, "9058cd3ac6e7b87abbc076b08fad4448"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="64bb2b096d049a00000000000800", 0xe}], 0x1}}], 0x1, 0x0) [ 1128.862907][T10296] usb 5-1: can't set config #0, error -71 [ 1128.934250][T10296] usb 5-1: USB disconnect, device number 35 [ 1129.239578][T17112] fs-verity: sha512 using implementation "sha512-generic" [ 1129.333797][T17117] fs-verity: sha256 using implementation "sha256-generic" [ 1129.373456][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 1129.380095][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 03:43:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{&(0x7f00000015c0)=@caif=@rfm={0x25, 0x3e, "9058cd3ac6e7b87abbc076b08fad4448"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="64bb2b096d049a00000000000800", 0xe}], 0x1}}], 0x1, 0x0) 03:43:09 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000240)=0x24) 03:43:10 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000340)=0x5, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x9}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 1130.525543][T17124] not chained 2330000 origins [ 1130.530471][T17124] CPU: 0 PID: 17124 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1130.542061][T17124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.552148][T17124] Call Trace: [ 1130.555453][T17124] [ 1130.558407][T17124] dump_stack_lvl+0x200/0x28c [ 1130.563150][T17124] dump_stack+0x29/0x2c [ 1130.567347][T17124] kmsan_internal_chain_origin+0x78/0x120 [ 1130.573139][T17124] ? kfree_skb_reason+0x1bb/0x3a0 [ 1130.578210][T17124] ? llc_sap_state_process+0xd80/0xe50 [ 1130.583745][T17124] ? kmsan_get_metadata+0x33/0x220 [ 1130.589029][T17124] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1130.594918][T17124] ? kmsan_get_metadata+0x33/0x220 [ 1130.600095][T17124] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1130.606013][T17124] ? should_fail+0x79/0x9c0 [ 1130.610562][T17124] ? kmsan_get_metadata+0x33/0x220 [ 1130.615738][T17124] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1130.622051][T17124] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1130.628188][T17124] ? kmsan_get_metadata+0x33/0x220 [ 1130.633361][T17124] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1130.639241][T17124] __msan_chain_origin+0xbd/0x140 [ 1130.644322][T17124] __get_compat_msghdr+0x6ea/0x9e0 [ 1130.649509][T17124] get_compat_msghdr+0x10c/0x280 [ 1130.654514][T17124] ___sys_sendmsg+0x2b5/0x510 [ 1130.659268][T17124] ? __schedule+0x176c/0x21c0 [ 1130.664006][T17124] ? kmsan_get_metadata+0x33/0x220 [ 1130.669177][T17124] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1130.675052][T17124] ? kmsan_get_metadata+0x33/0x220 [ 1130.680226][T17124] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1130.686129][T17124] __sys_sendmmsg+0x6c7/0xb90 [ 1130.690878][T17124] ? reuseport_array_delete_elem+0x130/0x2e0 [ 1130.696918][T17124] ? kmsan_get_metadata+0x33/0x220 [ 1130.702092][T17124] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1130.707970][T17124] ? kmsan_get_metadata+0x33/0x220 [ 1130.713140][T17124] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1130.719020][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1130.724813][T17124] __do_fast_syscall_32+0x95/0xf0 [ 1130.729894][T17124] do_fast_syscall_32+0x33/0x70 [ 1130.734788][T17124] do_SYSENTER_32+0x1b/0x20 [ 1130.739334][T17124] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.745714][T17124] RIP: 0023:0xf7ff0549 [ 1130.749804][T17124] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1130.769470][T17124] RSP: 002b:00000000f7feb5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1130.777934][T17124] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001380 [ 1130.785945][T17124] RDX: 00000000fffffeed RSI: 0000000000000000 RDI: 0000000000000000 [ 1130.793960][T17124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1130.801965][T17124] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1130.809958][T17124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1130.817972][T17124] 03:43:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000340)=0x5, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x9}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:43:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 03:43:10 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000240)=0x24) 03:43:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 03:43:10 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1130.827878][T17124] Uninit was stored to memory at: [ 1130.833981][T17124] __get_compat_msghdr+0x6ea/0x9e0 [ 1130.839161][T17124] get_compat_msghdr+0x10c/0x280 [ 1130.844289][T17124] ___sys_sendmsg+0x2b5/0x510 [ 1130.849027][T17124] __sys_sendmmsg+0x6c7/0xb90 [ 1130.853907][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1130.859689][T17124] __do_fast_syscall_32+0x95/0xf0 [ 1130.864934][T17124] do_fast_syscall_32+0x33/0x70 [ 1130.869837][T17124] do_SYSENTER_32+0x1b/0x20 [ 1130.874540][T17124] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.880931][T17124] [ 1130.883436][T17124] Uninit was stored to memory at: [ 1130.888546][T17124] __get_compat_msghdr+0x6ea/0x9e0 [ 1130.893860][T17124] get_compat_msghdr+0x10c/0x280 [ 1130.898861][T17124] ___sys_sendmsg+0x2b5/0x510 [ 1130.903753][T17124] __sys_sendmmsg+0x6c7/0xb90 [ 1130.908493][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1130.914425][T17124] __do_fast_syscall_32+0x95/0xf0 [ 1130.919531][T17124] do_fast_syscall_32+0x33/0x70 [ 1130.924573][T17124] do_SYSENTER_32+0x1b/0x20 [ 1130.929123][T17124] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.935630][T17124] [ 1130.937964][T17124] Uninit was stored to memory at: [ 1130.943171][T17124] __get_compat_msghdr+0x6ea/0x9e0 [ 1130.948334][T17124] get_compat_msghdr+0x10c/0x280 [ 1130.953460][T17124] ___sys_sendmsg+0x2b5/0x510 [ 1130.958189][T17124] __sys_sendmmsg+0x6c7/0xb90 [ 1130.963033][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1130.968806][T17124] __do_fast_syscall_32+0x95/0xf0 [ 1130.974026][T17124] do_fast_syscall_32+0x33/0x70 [ 1130.978923][T17124] do_SYSENTER_32+0x1b/0x20 [ 1130.983606][T17124] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.989997][T17124] [ 1130.992450][T17124] Uninit was stored to memory at: [ 1130.997546][T17124] __get_compat_msghdr+0x6ea/0x9e0 [ 1131.002833][T17124] get_compat_msghdr+0x10c/0x280 [ 1131.007835][T17124] ___sys_sendmsg+0x2b5/0x510 [ 1131.012707][T17124] __sys_sendmmsg+0x6c7/0xb90 [ 1131.017437][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1131.023339][T17124] __do_fast_syscall_32+0x95/0xf0 [ 1131.028417][T17124] do_fast_syscall_32+0x33/0x70 [ 1131.033529][T17124] do_SYSENTER_32+0x1b/0x20 [ 1131.038081][T17124] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.044598][T17124] [ 1131.046932][T17124] Uninit was stored to memory at: [ 1131.052155][T17124] __get_compat_msghdr+0x6ea/0x9e0 [ 1131.057320][T17124] get_compat_msghdr+0x10c/0x280 [ 1131.062441][T17124] ___sys_sendmsg+0x2b5/0x510 [ 1131.067167][T17124] __sys_sendmmsg+0x6c7/0xb90 [ 1131.072015][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1131.077795][T17124] __do_fast_syscall_32+0x95/0xf0 [ 1131.082998][T17124] do_fast_syscall_32+0x33/0x70 [ 1131.087904][T17124] do_SYSENTER_32+0x1b/0x20 [ 1131.092584][T17124] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.098971][T17124] [ 1131.101308][T17124] Uninit was stored to memory at: [ 1131.106592][T17124] __get_compat_msghdr+0x6ea/0x9e0 [ 1131.111852][T17124] get_compat_msghdr+0x10c/0x280 [ 1131.116856][T17124] ___sys_sendmsg+0x2b5/0x510 [ 1131.121591][T17124] __sys_sendmmsg+0x6c7/0xb90 [ 1131.126502][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1131.132462][T17124] __do_fast_syscall_32+0x95/0xf0 [ 1131.137545][T17124] do_fast_syscall_32+0x33/0x70 [ 1131.142627][T17124] do_SYSENTER_32+0x1b/0x20 [ 1131.147210][T17124] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.153780][T17124] [ 1131.156118][T17124] Uninit was stored to memory at: [ 1131.161232][T17124] __get_compat_msghdr+0x6ea/0x9e0 [ 1131.166593][T17124] get_compat_msghdr+0x10c/0x280 [ 1131.171587][T17124] ___sys_sendmsg+0x2b5/0x510 03:43:11 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000240)=0x24) [ 1131.176550][T17124] __sys_sendmmsg+0x6c7/0xb90 [ 1131.181295][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 [ 1131.187281][T17124] __do_fast_syscall_32+0x95/0xf0 [ 1131.192561][T17124] do_fast_syscall_32+0x33/0x70 [ 1131.197477][T17124] do_SYSENTER_32+0x1b/0x20 [ 1131.202203][T17124] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.208586][T17124] [ 1131.210921][T17124] Local variable msg_sys created at: [ 1131.216417][T17124] __sys_sendmmsg+0xd3/0xb90 [ 1131.221063][T17124] __ia32_compat_sys_sendmmsg+0x12b/0x180 03:43:11 executing program 5: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:11 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:11 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000240)=0x24) 03:43:11 executing program 2: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:12 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:13 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000340)=0x5, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x9}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:43:13 executing program 5: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:13 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:13 executing program 2: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000340)=0x5, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x9}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:43:13 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:14 executing program 5: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:14 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:14 executing program 2: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xe6ba) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}}, 0x0) 03:43:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}}, 0x0) 03:43:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}}, 0x0) 03:43:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}]}, 0x78}}, 0x0) 03:43:15 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000052d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 03:43:15 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 03:43:15 executing program 3: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x2000ae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0x2000ae41, 0x0) ioctl$KVM_RUN(r2, 0x2000ae80, 0x0) 03:43:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}}, 0x0) 03:43:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}]}, 0x78}}, 0x0) 03:43:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) unlink(0x0) 03:43:16 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 03:43:16 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT2(r0, 0x0, 0x7e) [ 1136.429183][T17207] ===================================================== [ 1136.436501][T17207] BUG: KMSAN: uninit-value in bpf_get_branch_snapshot+0x128/0x180 [ 1136.444542][T17207] bpf_get_branch_snapshot+0x128/0x180 [ 1136.450036][T17207] ___bpf_prog_run+0x93a/0xb300 [ 1136.455042][T17207] __bpf_prog_run32+0x125/0x190 [ 1136.459928][T17207] bpf_trace_run2+0x12d/0x390 [ 1136.464837][T17207] __bpf_trace_sys_exit+0x1a8/0x200 [ 1136.470094][T17207] syscall_exit_work+0x4b3/0x500 [ 1136.475769][T17207] syscall_exit_to_user_mode+0x37/0x40 [ 1136.481270][T17207] __do_fast_syscall_32+0xa4/0xf0 [ 1136.486492][T17207] do_fast_syscall_32+0x33/0x70 [ 1136.491376][T17207] do_SYSENTER_32+0x1b/0x20 [ 1136.497377][T17207] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.504119][T17207] [ 1136.506448][T17207] Local variable regs created at: [ 1136.511493][T17207] __bpf_prog_run32+0x88/0x190 [ 1136.516391][T17207] bpf_trace_run2+0x12d/0x390 [ 1136.521094][T17207] [ 1136.523491][T17207] CPU: 0 PID: 17207 Comm: syz-executor.2 Tainted: G W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1136.535165][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.545329][T17207] ===================================================== [ 1136.552349][T17207] Disabling lock debugging due to kernel taint [ 1136.558497][ T2839] ===================================================== [ 1136.558499][T17207] Kernel panic - not syncing: kmsan.panic set ... [ 1136.558519][T17207] CPU: 0 PID: 17207 Comm: syz-executor.2 Tainted: G B W 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1136.558574][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.558600][T17207] Call Trace: [ 1136.558619][T17207] [ 1136.558634][T17207] dump_stack_lvl+0x200/0x28c [ 1136.558700][T17207] dump_stack+0x29/0x2c [ 1136.558751][T17207] panic+0x502/0xc7a [ 1136.558829][T17207] ? add_taint+0x185/0x210 [ 1136.558902][T17207] ? console_unlock+0x1bb0/0x20e0 [ 1136.559022][T17207] kmsan_report+0x2cc/0x2d0 [ 1136.559093][T17207] ? kmsan_get_metadata+0x33/0x220 [ 1136.559157][T17207] ? __msan_warning+0x92/0x110 [ 1136.559216][T17207] ? bpf_get_branch_snapshot+0x128/0x180 [ 1136.559274][T17207] ? ___bpf_prog_run+0x93a/0xb300 [ 1136.559334][T17207] ? __bpf_prog_run32+0x125/0x190 [ 1136.559392][T17207] ? bpf_trace_run2+0x12d/0x390 [ 1136.559442][T17207] ? __bpf_trace_sys_exit+0x1a8/0x200 [ 1136.559514][T17207] ? syscall_exit_work+0x4b3/0x500 [ 1136.559578][T17207] ? syscall_exit_to_user_mode+0x37/0x40 [ 1136.559646][T17207] ? __do_fast_syscall_32+0xa4/0xf0 [ 1136.559709][T17207] ? do_fast_syscall_32+0x33/0x70 [ 1136.559765][T17207] ? do_SYSENTER_32+0x1b/0x20 [ 1136.559819][T17207] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.559887][T17207] ? preempt_count_sub+0xfc/0x340 [ 1136.559967][T17207] ? cpus_read_unlock+0x198/0x1c0 [ 1136.560029][T17207] ? static_key_enable+0x45/0x50 [ 1136.560111][T17207] ? tracepoint_add_func+0x13dd/0x14c0 [ 1136.560183][T17207] ? kmsan_get_metadata+0x33/0x220 [ 1136.560248][T17207] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1136.560317][T17207] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1136.560387][T17207] ? kmsan_get_metadata+0x33/0x220 [ 1136.560455][T17207] __msan_warning+0x92/0x110 [ 1136.560515][T17207] bpf_get_branch_snapshot+0x128/0x180 [ 1136.560574][T17207] ? kmsan_get_metadata+0x33/0x220 [ 1136.560638][T17207] ___bpf_prog_run+0x93a/0xb300 [ 1136.560704][T17207] ? bpf_get_attach_cookie_pe+0x90/0x90 [ 1136.560771][T17207] __bpf_prog_run32+0x125/0x190 [ 1136.560834][T17207] ? kmsan_get_metadata+0x33/0x220 [ 1136.560898][T17207] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1136.560973][T17207] ? kmsan_get_metadata+0x4d/0x220 [ 1136.561037][T17207] ? ___bpf_prog_run+0xb300/0xb300 [ 1136.561098][T17207] ? ___bpf_prog_run+0xb300/0xb300 [ 1136.561157][T17207] bpf_trace_run2+0x12d/0x390 [ 1136.561220][T17207] __bpf_trace_sys_exit+0x1a8/0x200 [ 1136.561293][T17207] syscall_exit_work+0x4b3/0x500 [ 1136.561366][T17207] syscall_exit_to_user_mode+0x37/0x40 [ 1136.561434][T17207] __do_fast_syscall_32+0xa4/0xf0 [ 1136.561501][T17207] do_fast_syscall_32+0x33/0x70 [ 1136.561558][T17207] do_SYSENTER_32+0x1b/0x20 [ 1136.561612][T17207] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.561680][T17207] RIP: 0023:0xf7ff7549 [ 1136.561716][T17207] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1136.561765][T17207] RSP: 002b:00000000f7ff25cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1136.561812][T17207] RAX: 0000000000000004 RBX: 0000000000000011 RCX: 0000000020000180 [ 1136.561844][T17207] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1136.561874][T17207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1136.561904][T17207] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1136.561939][T17207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1136.561983][T17207] [ 1136.565605][T17207] Kernel Offset: disabled [ 1136.989717][T17207] Rebooting in 86400 seconds..