x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:05:12 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)='\f', 0x1, 0x0, 0x0, 0x0) 04:05:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) [ 2211.186066][ T32] audit: type=1804 audit(1611374712.484:416): pid=11441 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir306502974/syzkaller.E31GKC/1366/bus" dev="sda1" ino=16245 res=1 errno=0 04:05:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 04:05:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 2211.392609][ T32] audit: type=1804 audit(1611374712.534:417): pid=11439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir306502974/syzkaller.E31GKC/1366/bus" dev="sda1" ino=16245 res=1 errno=0 [ 2211.417495][ T32] audit: type=1804 audit(1611374712.564:418): pid=11439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir306502974/syzkaller.E31GKC/1366/bus" dev="sda1" ino=16245 res=1 errno=0 04:05:12 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='mountinfo\x00') ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000440)=r1) 04:05:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffffff}]}}]}, 0x38}}, 0x0) 04:05:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000140)=0x1, 0x4) 04:05:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 04:05:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 04:05:13 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffffff}]}}]}, 0x38}}, 0x0) 04:05:13 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='mountinfo\x00') ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000440)=r1) 04:05:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 04:05:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 04:05:14 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffffff}]}}]}, 0x38}}, 0x0) 04:05:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 04:05:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 04:05:14 executing program 1: syz_emit_ethernet(0x34, &(0x7f00000001c0)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x88be, 0x8, 0x0, @gue={{0x2}, "88a8"}}}}}}, 0x0) 04:05:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffffff}]}}]}, 0x38}}, 0x0) 04:05:15 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000100)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}, {&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000001a8885d61aee4febb69bd33546bd0e04", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='clear_cache,notreelog,notreelog']) 04:05:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 04:05:15 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) unshare(0x24020400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x4004743b, 0x0) [ 2214.467512][T11504] BTRFS info (device loop2): force clearing of disk cache [ 2214.475229][T11504] BTRFS info (device loop2): disabling tree log [ 2214.482397][T11504] BTRFS info (device loop2): disk space caching is enabled [ 2214.491032][T11504] BTRFS info (device loop2): has skinny extents 04:05:15 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000022c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 04:05:15 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 04:05:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 04:05:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 04:05:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) [ 2214.876136][T11504] attempt to access beyond end of device [ 2214.876136][T11504] loop2: rw=4096, want=2064, limit=267 [ 2214.895434][T11504] BTRFS error (device loop2): failed to read chunk root [ 2215.012616][T11504] BTRFS error (device loop2): open_ctree failed [ 2215.160697][T11537] BTRFS info (device loop2): force clearing of disk cache [ 2215.177466][T11537] BTRFS info (device loop2): disabling tree log [ 2215.183927][T11537] BTRFS info (device loop2): disk space caching is enabled [ 2215.195601][T11537] BTRFS info (device loop2): has skinny extents 04:05:16 executing program 1: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000240)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) [ 2215.406519][ T8496] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2215.617634][T11537] BTRFS error (device loop2): open_ctree failed [ 2215.669620][ T8496] usb 1-1: Using ep0 maxpacket: 16 [ 2215.787882][ T8496] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2215.968959][ T8496] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2215.978440][ T8496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.986944][ T8496] usb 1-1: Product: syz [ 2215.991325][ T8496] usb 1-1: Manufacturer: syz [ 2215.996097][ T8496] usb 1-1: SerialNumber: syz 04:05:17 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000100)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}, {&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000001a8885d61aee4febb69bd33546bd0e04", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='clear_cache,notreelog,notreelog']) [ 2216.367190][T11562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.423104][T11561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2216.443261][ T17] usb 1-1: USB disconnect, device number 44 [ 2216.540660][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2216.710027][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:05:18 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa77d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x200000a0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=r1, @ANYBLOB, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB, @ANYBLOB], 0x38}}, 0xf616ec17addfb5f8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x72, "75491a54988c75efadc343f9ff506cbe1d5d95fdad31a9e06ab4d212573bed005c611da9b6247dfbd2ff23c9715ebefb883276a67bd2fdf8fa4c696e0f024dd38e265e6b3ca6aea8612a1dcc6da643e82075ace4b02cf1dcf9b0d1bc38f40c2061054365265417a6c950ca710705e3069dc6"}, &(0x7f0000000000)=0x7a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x1, 0x0) [ 2216.993316][T11602] BTRFS info (device loop2): force clearing of disk cache [ 2217.001219][T11602] BTRFS info (device loop2): disabling tree log [ 2217.008556][T11602] BTRFS info (device loop2): disk space caching is enabled [ 2217.015887][T11602] BTRFS info (device loop2): has skinny extents [ 2217.213345][T11562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.226424][ T17] usb 1-1: new high-speed USB device number 45 using dummy_hcd 04:05:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="c7442400f7000000c744240200000000c7442406000000000f011c24670f22a63ed1383e398c6a012d00c7b9cd0b0000b80da90000ba000000000f3036cf0fc75d5866baa00066ed0f01c5c744240000880000c7442402626f0000c7442406000000000f011424", 0x67}], 0x1, 0x0, &(0x7f0000000440), 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x34}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x6c, 0x43], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = dup(r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x7, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r4}, @generic={0x0, 0x5, 0x7, 0x1}, @func, @jmp={0x5, 0x1, 0x3, 0x2, 0x4, 0x4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0x8, 0x0, 0x1, 0x6, 0xffffffffffffffff}], 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xa, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x20}, 0x10, 0xffffffffffffffff, r4}, 0x74) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000) 04:05:18 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f00000000c0)={[{@dots='dots'}]}) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2020, &(0x7f00000003c0)=ANY=[]) unlinkat(r1, &(0x7f0000000200)='./file0\x00', 0x200) [ 2217.466536][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 2217.588017][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2217.629616][T11618] IPVS: ftp: loaded support on port[0] = 21 [ 2217.875991][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2217.885333][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.893666][ T17] usb 1-1: Product: syz [ 2217.898078][ T17] usb 1-1: Manufacturer: syz [ 2217.912335][ T17] usb 1-1: SerialNumber: syz [ 2217.946879][T11602] BTRFS error (device loop2): open_ctree failed [ 2218.193867][T11629] IPVS: ftp: loaded support on port[0] = 21 04:05:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x15) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x62, 0x0) [ 2218.357553][ T17] usb 1-1: can't set config #1, error -71 [ 2218.381206][ T17] usb 1-1: USB disconnect, device number 45 [ 2218.496046][T11642] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 04:05:19 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000100)=[{&(0x7f0000010000)="90e42e850000000000f700000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d0000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000000000000000000000000000000000000450300000000000000000000000100000000000000000000010000000000007200000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000001a8885d61aee4febb69bd33546bd0e04f90cac8b044b4fa88bee4b8d3da88dc2", 0x12b, 0x10000}, {&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000001a8885d61aee4febb69bd33546bd0e04", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='clear_cache,notreelog,notreelog']) [ 2218.723369][T11562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.983148][T11629] wlan0 speed is unknown, defaulting to 1000 04:05:20 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000200)={0x0, [], 0xf8, "515c3db604b9fe"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) read$proc_mixer(r0, 0x0, 0x0) 04:05:20 executing program 3: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)) [ 2219.353043][T11680] BTRFS info (device loop2): force clearing of disk cache [ 2219.361309][T11680] BTRFS info (device loop2): disabling tree log [ 2219.367991][T11680] BTRFS info (device loop2): disk space caching is enabled [ 2219.375329][T11680] BTRFS info (device loop2): has skinny extents [ 2219.646565][T11692] binder: 11688:11692 ioctl d000943e 0 returned -22 [ 2219.657044][T11692] binder: 11688:11692 ioctl d000943d 20000200 returned -22 [ 2219.820095][T11562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.897260][T11680] attempt to access beyond end of device [ 2219.897260][T11680] loop2: rw=4096, want=2064, limit=267 [ 2219.924165][T11680] BTRFS error (device loop2): failed to read chunk root [ 2219.995274][T11680] BTRFS error (device loop2): open_ctree failed [ 2220.092456][T11562] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.112172][T11562] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.133242][T11562] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.162024][T11562] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 04:05:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d413ffaefd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x78, 0x80}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 04:05:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 04:05:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) 04:05:22 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000100)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}, {&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000001a8885d61aee4febb69bd33546bd0e04", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='clear_cache,notreelog,notreelog']) 04:05:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) [ 2221.216576][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2221.427501][T11739] BTRFS info (device loop2): force clearing of disk cache [ 2221.434849][T11739] BTRFS info (device loop2): disabling tree log [ 2221.441730][T11739] BTRFS info (device loop2): disk space caching is enabled [ 2221.449537][T11739] BTRFS info (device loop2): has skinny extents [ 2221.501174][T11618] wlan0 speed is unknown, defaulting to 1000 [ 2221.700842][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2221.745601][T11756] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.161873][T11739] BTRFS error (device loop2): open_ctree failed [ 2222.368187][T11756] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.545603][T11756] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.683410][T11756] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.043916][T11756] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2223.073483][T11756] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2223.179826][T11756] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2223.209099][T11756] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 04:05:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d413ffaefd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x78, 0x80}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 04:05:27 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x31, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xc}]}]}}, &(0x7f0000000240)=""/241, 0x32, 0xf1, 0x8}, 0x20) 04:05:27 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcs\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 04:05:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)) 04:05:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) 04:05:27 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa77d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x200000a0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=r1, @ANYBLOB, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB, @ANYBLOB], 0x38}}, 0xf616ec17addfb5f8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x72, "75491a54988c75efadc343f9ff506cbe1d5d95fdad31a9e06ab4d212573bed005c611da9b6247dfbd2ff23c9715ebefb883276a67bd2fdf8fa4c696e0f024dd38e265e6b3ca6aea8612a1dcc6da643e82075ace4b02cf1dcf9b0d1bc38f40c2061054365265417a6c950ca710705e3069dc6"}, &(0x7f0000000000)=0x7a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x1, 0x0) 04:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03"]) ioctl$KVM_SET_NESTED_STATE(r2, 0xc008ae91, &(0x7f0000001500)={{0x0, 0x0, 0x80}, "409b80f62ee940613e77a170e74f13e04d7e53c392cfd84bc77575502080ebbc464810fd15abd56569de54b2907ffdddd62247284574bac8d0a432d90926ea9853585873cf3524eb316d0035c3c0de257aadb6f39660379d0a2bd52cf40a7f19dbdc5b0344d0081e3182dc3b168ef52684ac2dc959e9e97c698e73d605173f15b4025ff4138cb4afb77359375130648ad5b7d28d41778ff03c67a2575289e9b70dfbf9739d0136a92e7e22f5cb69f6bc227f19e9922898da27f29a3c67a1fdf6e149298811e318db4af72f2c8b40e4cf8bd27cf6179849bd74206e1861e9a14f2264375245e8ca644ccb44187d7add2c486ab27c32cd7a5897a6f46fef239082182a21a34ef7825c5fa39f5c6ff9356d005eaa21f16b589f927bdcf48e09294e57381d2c27921931cce4795baf7711f4764d6e28be52e42cc313fa4e6a2934137c6ee4f4db76b0bcba8b1bd0c298e33506699509eae927d021063769f12f46cd44f08ca8dfc5ed089cba977bdb907882dfe56c2db8907bb30da96a35bb8fca0648b8958cc27490c1b54ad7e3a48e2ec1a1e4879e214807960ac8c962c907cba15bbdc82cbade427cd20b3fefed875ccdaa5d3ac0db3a7ab55d9264283b6df7c04af3adc1881157423f5e7b1a79295473f41b1919a42d13d7b9c9ac3bab5db67bd45206155e551b2f7c476e1ca8b2d7ab1398f1992308d98c86e9818baf457a9d6bff95b0db990812acb5df3780f4b5aa27ec0a62b1a28930375fa221ed04e97cbd6110d6cc67f324400d0608fbb293c688db1f0ecc54b4cae5f48fd54dd7e75cac424b742aee6c34014c230ea2692d69bad5dbfab7b2bf53182bde8e8577b423d0865fc4f22a4b6648c3771eb9040f944b97b41f78b710b57e110bb8fbc64dbecbf0e282d88df6e592625bfab4b96ca1298fe1db007c3d6066e724e00a8f26811afa5856d4463339030bfd8d22a72c454f11b05f8df17b4ca8a73733f96da137aa06607f90e359ac3739ce7ab631937b6c78bc06aa728ec1d0b3358132b93f087553102da659ddcb4b1200fe6c10e78b33a6e0478ced4557961f9ec1a6916ae4a70c0c8e9b59b1080ba9df4cf4a6029d1d85e927d873732f0547f247d97deb97f450751c46c97ed327678b2d62d1d4744e3957276f15256844ae2567f29c02b52bbf2e65f696b800962a0d0c4f2b032fc65ebe7e42a44603daf5bb133232ec4594db782af1390f1ef6b8884e87bbe5b4817ba8512f4acadde124b70528e25266cd68c4dbb291e9dc99f86dba300cbbc40c3918a0d5bdb9b9f88cb0c623e9cce90f0e84bc51b138f7ec81b8e679eec52debb0034240fb1755403a75efbc69757036dcba90257bfa1806402212c471ef801c1634190f0c976755a26f8a0a8138dc3401047f7b3b33430ca797d90f607be1edfdf23275aeefe8931575ca0537b24249fcd39a26ce6a1763d60e8c48025f1542e1cde7c9160e0f9b70d11bbaec664d90ca47723930b6b38e81626c702df1e0b30e6a194a5aa1389dd4a3378b184da8c7544fb67c8a45a1afb2cbce1aca48154e1c59516ed0233fea18b5bc52cac86e2f5c0f9a174ab7f3b9ba2d3c08e8dd13329f3d2acd7b69467d99d975527137a316925274b9236e0beae82db2b8bba9db42ec779030675cced128cdbb911768670657ae428f41f1ba051b9b532f515386beeb083b6f10045123ca0f3e5e2d1196b34b74f56c8b625f18b7592ef3cbfdc008ebfc33473630782a12f81dd91230ba70ff990da606f12ac9b09d24437722626b15dc04fbb99c992b3088a26936e295db4554c679a9e7f2f391a29871317d0154fa5b618ca21b13bf9a0a08f9ea3a091ba3605ecb22c2464969eb884c4e68d3c54dd1f2e4c7f28667c3029525b0366734c33b10732725ec4b9ed20f4773a4814fa79cdca3c2e2dbc14e73726084afef225aabf4ab20d82ee8c965aa635567e6f41984e80e8b7abd3bac0106b9f37fd164a7bb84f34b4e91ad09c73c4727e686dd6ebac289de8cb2b9104f1f4fba71d59a70516d27e867f3f8de351de695462fc6c5d5f0e7d645ccb0c12ece851c96e7623715fa747e2ffb09ac1897f943e192115b9ca44037684483d0bc81114632cb29cdc7aec43113ca7098cc282a94d63df489a06fca60c0e9b77a77c10d10603170f0d12eb633b0881be41601902e63cd45de8794c290fe272d69805e01e6a2b3de0f8a80dc86ba2253e1adce7ae96a572050bc706a638a18e9b9f3f509842a9dd5c9cc4d2d180bfe2dff9d12f5a191236426f5b0bf6210b902c068d746f9b6ed7d2241c2ab0ed945b2cfdbbc74bf99f1d0f041740bb930739fbae41f96c9a2f8b13b8bbe19c43e083e9d197234abd433dfcec105de9483ec655040535595d0addb2c24364dce803b6585de69e997d0bff1f3c1c03d4a27520bae9b87e7af04768bd660ed3b9ec9fe86defd37b7622fc886a061e375dec5ac94e3226b0831e7f82564cf55c8ae42532cb083753dba2174b7a05ef7152100e4f33e535e4093fcdd94a2cb2fb0bb1bc50552cda61261971f1d792b413fba84d4532a22752fa1c51718bad4f41f24ef17df8797742affa7ab9fda42d2b60dfee4344bff87e0aaa4db56ba5d63765c8d54c987dd376c2ce796b2b1cec806c9b2362fb6a10648d8366c69b8ec6e5aa655044aa459da09c4fb0be8d983cd64c62199e0bcd7d4a6afc9b594314e0c97cd007add8a42316dff9c6846822d70850b4ba6cc40323f226a1208f71adf342d0481ce8a386087c7fa171f547708c8f92faa418ad9f73fee9887f3199de76ce01679101c7058fedd4f95f88f10be6e78b65c04ab88e5b72b373494704124552ec46f72b55c206992eeb7c466df2659345461fc647bd0d22fae8fbbe5090e86df7d14f9c2285b3af387c2c3a36a93b305f588cc86342153c3a948f9573373a0bf6eb68e806cc21bb81034d672b55e152c886873e79c09a8bb5ccad07866890704c9d76e7c00742a1cb7e89864f62927c3364644ce4048eb47cd5d578684e085fbb752cd1a46b83235aca67c4bf04cafff58ce826dcb035ac0ab78da1b725a60531fe8747b8e8b52be1106ea0550a2b96f21e6e933d07f4cb6989c713113d05a89910a79a5695328e0b38e762eedcb9e963dbd838ff210a6817de89441953ab3d6d3745d1065956cfe878a57e35b11f226108918ca0190eec77f4746331bced833b7bf9aa2c4fa1962ff6a1362314703e9b2b0d5c3f6af75ff639b92f18a167328b48fc68142e5ba6a006e81afa6c94cd007d020a75db042e9f7fd4e9a0357ce52cef40faa846bd9b6f372ce99b816e97e841b4b71a2d7ca4ca0095a3b420a26c36edb95246b114663ddd18271d75d9e2904adcbacd05fb4bd19947c3b3025d9e3dffc4b979ce75b4cdeec7ad0b2c52040808ba5f83cbbe7d4fac4be3620e56cd3ee70ae0a04402d5a685617b45d45106d51031cc07a156cfd62ec5ca462b31815fc76af711108ec789d2e4f2300dbd6243bc7392f476f9c011720f72f1b5b2545eb420828e8cc196b7d89d06ec5629f7af86c541ae83a3c1cc83d1e893267a9c0278a67a20d33feed64e78ec9618c54e37e5d8bdbd5031d847407612e416675086b813b0e237d766f1682f00af9520fa2d3f519a07982d353f1f4871e9613aa624a17ec90ff5b8d927fef8d5e5872d084aed39f978f3b9610ea87e210be0e45adeef7d1a7910c6ab904646f39619c3e7a256a3f11f43d40f5f398b68c7f5d3d1c3dfd70f4080a523c80dc38e7cee32acf6bab837fb9efaa0595d843ae4452858ff60f0c11ba5874f809d13773953511f43c61584a13adfb8a2539cf7d3d6549da45c0801d34a53224e5fb5152cd8a774f5b4144efb9fc4fb9d6f4b5d30485d68e7709e280e77aa548a7936be87bca5b7e136eafd32b438dc5e357a443c825b6be626ce7e2a63bf84d22b2426f2bebd7cba610be372259e9968ad619a199bb15e5eef703f42efee3d012eb364ef9dffdb2c5ee102e1ecafff457abc38545ad29e21730067f35e5805bdd49d7e2308939baec63e2ee20ee230ddac623a92d31a6874348766492a99d957bfde91458c1f8f75ec4bbc757070bcd559655fa4fd5c5f30aecec82f6afa7416374475c56cb2e44ec5ea5cea54bf44a39cf763b3e9c35f9c47b5607eb92a59d776371fcc42dd10aaa4180afe985a51401630c797ebbf980cfd185c35b5911d85ba8aaa7dbdc8e4e88116d507ce9624bb962368277a76e564ca7d8e0d615492ea651c5679924c5571a1d011f3bcf4ea00c65ca8ccde89e49eec278b413599ef61cfb0c0288d99308c27f2c62f813385b3a7f56a5224401d4415682cf400ed186c5d9fa197c70e051ad28274b64cafffbf10a1a52aa1f24e9f5cd17f9fb38357c7d281989e8e428214e6b4aefb972024998fcd20a4ada4a60455306ef211edc87f568908435811424e5cf234b67af2d129ddc2b2b7acdc963799ad2de45ce76225045a14f4c5e7898e9248c6504ca039935eb93de70002e795bd9eea42932dd733ac72ecfae0e21e3cd6412e64281a28f245a742f0b09dbc0017ce912bb543ea979709c6e16bd361eeb0fe37a009c4e047111352a0518f9cc4cf805755acf25e328f1490565a277da02cf2791d0811ade07eaff09ba1fb4bb66262ebc78b0c7587143d95fc1dfdcdbab460c8c610fe3c32feb794967d2b3d9c8429c61072a371d568bd1242f9a945c1586453bcc90c8a87b7badfe9f53fe585b90a80fc50913a68e5df2961d059d3857a4a1423c89fd19d3226be2af9fa28a8e354df02ab1c024fbdb6bfef522a5f171038b28490ab5665e0e092a404b66031ce9c352494b803ffdd32b250a787f8f528ac8f1a944c2cecd13cbe6fd76408fc9efa3c24b8526e0e20dcdc468a9bb1adc3dc70f934d40b73a5d705b015496652c43c8a48fe0171d8d0e6fccf103013a84bc444119c7219340ce6aec44dbb0400ad791da29a8ddb279b96e8bf6345ce52af1c7aac14f195fb29f2d88a29b9b3c5558d71223761e924278e7c3378c295ffde7d518411dc4c8bb7ebd581bba5fabad300967e573e73e6cd9935426f5203ceb3693184b6a76f07f8d0d49cc9ef1e004ee671c5116bf6ff941e2472364aa19755cafe4de14aa200c59e9c07ebc4f8bfad058b59bda7f1a15df24f4bb43a7650abb974604620dfaa352808e42f6f6e747f3d3cb371b917a3f5828859a219c132b4434281d4846714a1826d6442f61745c6983c329dfc040f6e79db3ca25978ffb13df5d344dcebfddb517189eb20a016ee22de92e6fd5351fcae2a5dc16797c34508f3054bcf2b4fab839e999bb677ad4569b890f90e971d9e11eb74bbc749965963d96a42c41139d0c98de8c24adb8bf1996f0dd9ec25326e06fdb96c37f68a0683f1a94c60543ecb7a8f2cd134c2bdbe7f9916c7fc63e3958ecd41552d84abb90ab0a0434775950a103986d1fc16c35f0aceee8704d9ee2c89273ec4378f3b02b80379d6bf4c65af84a9d66d720113fa4182894a56c1b64e5b9aa9f5a97fad2075cbac47f9eae058e298bc66f1d70a7a61c9f703b8063867577b028d6530c6d8d2f9f5b00c30cf5ed56c7d99979f7a3d353fa3231efd5ce3cae43dce168b819feacbf4c27f8946261ca4c526db026c548040a0ef472ca9a48b30d3a44a47c04f90b76f4e4d6334329f422f043199665f8a3d97bd4fcf08826dd4462194ab9049c4844cdd25fb785a4c71b2e8c4c3d890859891bcb0d24206bd10088483e8af68628293d1e56fdb1963b", "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"}) [ 2225.888934][T11833] BPF:Invalid section offset [ 2225.906229][T11835] BPF:Invalid section offset [ 2225.991267][T11834] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.308570][T11834] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:05:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x173) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080), 0x10}, 0x20) [ 2226.925579][T11847] IPVS: ftp: loaded support on port[0] = 21 04:05:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) [ 2227.250078][T11834] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:05:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d413ffaefd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x78, 0x80}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) [ 2227.547617][T11834] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.049057][T11834] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2228.076175][T11834] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 04:05:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) write$nbd(r1, 0x0, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 04:05:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="027a3aea21b96323", 0x8}], 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2228.099085][T11834] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2228.119131][T11834] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 04:05:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcf, 0x0, 0x0) 04:05:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) 04:05:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d413ffaefd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x78, 0x80}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 04:05:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}}, 0x0) [ 2229.577676][T11901] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:05:31 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[{@part={'part', 0x3d, 0x100000000}}]}) [ 2229.785134][T11901] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.955662][T11901] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.074522][T11901] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.227185][T11924] hfs: part requires an argument [ 2230.232232][T11924] hfs: unable to parse mount options [ 2230.271908][T11901] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.297420][T11901] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.317008][T11901] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.336856][T11901] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.412168][T11924] hfs: part requires an argument [ 2230.417526][T11924] hfs: unable to parse mount options [ 2231.595894][T11847] wlan0 speed is unknown, defaulting to 1000 04:05:33 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa77d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x200000a0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=r1, @ANYBLOB, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB, @ANYBLOB], 0x38}}, 0xf616ec17addfb5f8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x72, "75491a54988c75efadc343f9ff506cbe1d5d95fdad31a9e06ab4d212573bed005c611da9b6247dfbd2ff23c9715ebefb883276a67bd2fdf8fa4c696e0f024dd38e265e6b3ca6aea8612a1dcc6da643e82075ace4b02cf1dcf9b0d1bc38f40c2061054365265417a6c950ca710705e3069dc6"}, &(0x7f0000000000)=0x7a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x1, 0x0) 04:05:33 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000000c0)={0x2, 0x3, 0x4, 0x4315, 'syz1\x00', 0x800}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x8, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000600000000e500000900000095000000000000007f37040001130000950000000000000018210000fe9c0ad5ea8cff0cd76d08cafcedc1341ba4bb58b2", @ANYRES32=r1, @ANYBLOB='\x00'/16], &(0x7f0000000180)='GPL\x00', 0xd36, 0x1000, &(0x7f0000000400)=""/4096, 0x41100, 0x3, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0x4, 0x5cd9}, 0x10, r2, r3}, 0x74) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000001480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000080)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4803600d00000003101e00010040d5ae7d0200ff", 0x25}], 0x1, 0x0, 0x0, 0x792ef0fd}, 0x0) r6 = socket(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000003600)={&(0x7f0000000080)=@id, 0x10, 0x0}, 0x0) shutdown(r6, 0x2) shutdown(r6, 0x2) 04:05:33 executing program 0: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='nilfs2\x00', 0x0, 0x0) 04:05:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000740)=[{&(0x7f00000007c0)=""/189, 0xbd}], 0x1, 0x3c, 0x0) 04:05:33 executing program 4: syz_mount_image$romfs(&(0x7f0000000080)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2d726f6d3166732d00002c70103260d6726f6d20356636363363303800000000000000490000002000000000d1ffff972e", 0x31}, {&(0x7f0000010100)="0000052a000000000000041a69968a5766696c6530000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a", 0x320, 0xe0}], 0x8000, &(0x7f0000000000)) 04:05:33 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="050f09"]}) [ 2232.040753][T11971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2232.048504][T11971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.056580][T11971] device bridge0 entered promiscuous mode [ 2232.286917][ T8488] usb 4-1: new high-speed USB device number 35 using dummy_hcd 04:05:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)) 04:05:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001900)=[{&(0x7f0000000880)="b19462c33f5d8115ec7c43c924cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c771e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b56475a9a3d7b2c10a61673255ee1dd14e0bf57bf2bfebd301941e2b3259c1506b98db698f5c9b31995", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000080)) [ 2232.902314][T11980] IPVS: ftp: loaded support on port[0] = 21 [ 2233.256811][ T8488] usb 4-1: Using ep0 maxpacket: 8 [ 2233.381777][ T8488] usb 4-1: unable to get BOS descriptor set 04:05:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001900)=[{&(0x7f0000000880)="b19462c33f5d8115ec7c43c924cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c771e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b56475a9a3d7b2c10a61673255ee1dd14e0bf57bf2bfebd301941e2b3259c1506b98db698f5c9b31995", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000080)) [ 2233.476741][ T8488] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2233.658457][ T8488] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2233.667990][ T8488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.677262][ T8488] usb 4-1: Product: syz [ 2233.681549][ T8488] usb 4-1: Manufacturer: syz [ 2233.686441][ T8488] usb 4-1: SerialNumber: syz [ 2233.730800][T11977] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2233.741807][T11977] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.749334][T11977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2233.757605][T11977] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.766040][T11977] bridge0: port 1(bridge_slave_0) entered forwarding state 04:05:35 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x5}}}) [ 2234.000462][ T8488] cdc_ether: probe of 4-1:1.0 failed with error -22 04:05:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)='\x00', 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) [ 2234.223534][ T8488] usb 4-1: USB disconnect, device number 35 04:05:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001900)=[{&(0x7f0000000880)="b19462c33f5d8115ec7c43c924cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c771e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b56475a9a3d7b2c10a61673255ee1dd14e0bf57bf2bfebd301941e2b3259c1506b98db698f5c9b31995", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000080)) [ 2234.944699][T11983] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.952457][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.026720][ T8488] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2235.266449][ T8488] usb 4-1: Using ep0 maxpacket: 8 [ 2235.386658][ T8488] usb 4-1: unable to get BOS descriptor set [ 2235.469142][ T8488] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2235.478947][T11978] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2235.492454][T11978] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.499907][T11978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2235.507898][T11978] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.515258][T11978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2235.526963][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2235.927105][ T8488] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2235.936881][ T8488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.996896][ T8488] usb 4-1: can't set config #1, error -71 [ 2236.014376][ T8488] usb 4-1: USB disconnect, device number 36 [ 2236.520476][T11980] wlan0 speed is unknown, defaulting to 1000 04:05:38 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa77d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x200000a0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=r1, @ANYBLOB, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB, @ANYBLOB], 0x38}}, 0xf616ec17addfb5f8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x72, "75491a54988c75efadc343f9ff506cbe1d5d95fdad31a9e06ab4d212573bed005c611da9b6247dfbd2ff23c9715ebefb883276a67bd2fdf8fa4c696e0f024dd38e265e6b3ca6aea8612a1dcc6da643e82075ace4b02cf1dcf9b0d1bc38f40c2061054365265417a6c950ca710705e3069dc6"}, &(0x7f0000000000)=0x7a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x1, 0x0) 04:05:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "58cc1f3559b6a114e69568eb733c76a6"}) 04:05:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001900)=[{&(0x7f0000000880)="b19462c33f5d8115ec7c43c924cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c771e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b56475a9a3d7b2c10a61673255ee1dd14e0bf57bf2bfebd301941e2b3259c1506b98db698f5c9b31995", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000080)) 04:05:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xddd, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000006240)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000380)=@pppol2tpv3, 0x80, 0x0}, 0x12100) 04:05:38 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 04:05:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x48}}, 0x0) 04:05:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x48}}, 0x0) 04:05:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="390000001000090468fe07002b0068fe0100ee002000000745000c070307001404003600120003000e04000001000000000000000000000020", 0x39}], 0x1) 04:05:38 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000380)) socket$inet6(0xa, 0x3, 0x1f) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) dup2(r0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f0000", @ANYRES32=r5, @ANYBLOB], 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 04:05:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "58cc1f3559b6a114e69568eb733c76a6"}) 04:05:39 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="02000000020283", 0x200000c7}], 0x1) [ 2237.959790][T12069] IPVS: ftp: loaded support on port[0] = 21 [ 2238.403683][ T32] audit: type=1800 audit(1611374739.704:419): pid=12079 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16363 res=0 errno=0 04:05:40 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000080)=@ethtool_rxfh={0x2d, 0x0, 0x0, 0x0, 0x0, "94b097"}}) [ 2239.730701][T12069] wlan0 speed is unknown, defaulting to 1000 04:05:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x48}}, 0x0) 04:05:41 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x48, 0x32, 0x2ba41ce72a4439a1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 04:05:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "58cc1f3559b6a114e69568eb733c76a6"}) 04:05:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x5}, 0xdc) 04:05:41 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000}) 04:05:41 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000012c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept4$llc(r0, 0x0, 0x0, 0x0) 04:05:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "58cc1f3559b6a114e69568eb733c76a6"}) 04:05:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x3bfed571e73cf471, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in6=@local, 0x0, 0x6c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x21}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 04:05:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x48}}, 0x0) 04:05:42 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x48, 0x32, 0x2ba41ce72a4439a1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 04:05:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lsetxattr$trusted_overlay_origin(&(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) creat(&(0x7f00000020c0)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0}) [ 2241.044178][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:05:42 executing program 2: syz_mount_image$qnx6(&(0x7f0000000040)='qnx6\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) 04:05:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x24, 0x400, 0xc}, 0x40) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 04:05:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000000020c3067d3100020900000000000000000000f6ffffffa6067d5b01"]) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)) 04:05:43 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x48, 0x32, 0x2ba41ce72a4439a1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 2241.752471][T12146] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). 04:05:43 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae02, 0x0) [ 2241.898769][T12146] qnx6: wrong signature (magic) in superblock #1. [ 2241.905456][T12146] qnx6: unable to read the first superblock 04:05:43 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x96L\x82\xdb9\xa0\x8b\a\x00\x00\x00\xa8!\xe8\xd1\xa0\x7f\xce0\x1c\xb7\xe5\x8a\x1f\x1b\xf6\x18\xf3\xdc(K\xa8p\x00?\x00'/60, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000002000000000c4a40003003e000039a594249c0fc83d0000000000000000000001000000000028cc7ebd5d74dafc20380003"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 04:05:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x305}, 0x14}}, 0x0) 04:05:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000000020c3067d3100020900000000000000000000f6ffffffa6067d5b01"]) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)) 04:05:43 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x48, 0x32, 0x2ba41ce72a4439a1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 04:05:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r1, 0x703, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 04:05:44 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000010100)="0000e3310000000011", 0x9}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xffffffffffffffff, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0307008300fffffcfe000100000004000180"], 0x18}}, 0x0) 04:05:44 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000002100)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) 04:05:44 executing program 2: msgsnd(0x0, &(0x7f0000000100)={0x0, "e62934fbcdff8b360e100ebbcbd498233466c29dd0fc1278acb5a611e9e0c00af0f135d1c3ed3f1817045f30f9e7b5b5034b05b49911e2f415767096c56f70baaaaa8028388571ee949fff15999e3cb3407eb1447705396cb7e97c97baa73b257bf38225a849e49f87157630cfb5d3ce89a8640a3dd71390ee53826bd8143e3b8a23e156e6fb5b45a7eb0af712837f75e04b8d"}, 0xfffffffffffffdea, 0x800) 04:05:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75a}]}]}]}, 0x34}}, 0x0) 04:05:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000000020c3067d3100020900000000000000000000f6ffffffa6067d5b01"]) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)) 04:05:45 executing program 1: futex(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:05:45 executing program 5: munmap(&(0x7f0000fee000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x1) 04:05:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000000020c3067d3100020900000000000000000000f6ffffffa6067d5b01"]) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)) 04:05:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e7864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 04:05:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @private0}]}, 0x2c}}, 0x0) 04:05:45 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x0, 0x30}, &(0x7f0000000200)=0x18) 04:05:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x1, 0x4000, 0xa1, 0x0, 0xffffffffffffffff, 0x0, [0x34, 0x7]}, 0x40) [ 2244.579383][T12188] not chained 80000 origins [ 2244.583968][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2244.586123][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2244.586123][T12188] Call Trace: [ 2244.586123][T12188] dump_stack+0x21c/0x280 [ 2244.586123][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2244.586123][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2244.586123][T12188] ? __wake_up+0x1fc/0x250 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2244.586123][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2244.586123][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2244.586123][T12188] ? _copy_from_user+0x1fd/0x300 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] __msan_chain_origin+0x57/0xa0 [ 2244.586123][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2244.586123][T12188] get_compat_msghdr+0x108/0x2b0 [ 2244.586123][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2244.586123][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2244.586123][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2244.586123][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2244.586123][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.586123][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.586123][T12188] __do_fast_syscall_32+0x102/0x160 [ 2244.586123][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2244.586123][T12188] do_SYSENTER_32+0x73/0x90 [ 2244.586123][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.586123][T12188] RIP: 0023:0xf7f01549 [ 2244.586123][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2244.586123][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2244.586123][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2244.586123][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2244.586123][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2244.586123][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2244.586123][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2244.586123][T12188] Uninit was stored to memory at: [ 2244.586123][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2244.586123][T12188] __msan_chain_origin+0x57/0xa0 [ 2244.586123][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2244.586123][T12188] get_compat_msghdr+0x108/0x2b0 [ 2244.586123][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2244.586123][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2244.586123][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.586123][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.586123][T12188] __do_fast_syscall_32+0x102/0x160 [ 2244.586123][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2244.586123][T12188] do_SYSENTER_32+0x73/0x90 [ 2244.586123][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.586123][T12188] [ 2244.586123][T12188] Uninit was stored to memory at: [ 2244.586123][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2244.586123][T12188] __msan_chain_origin+0x57/0xa0 [ 2244.586123][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2244.586123][T12188] get_compat_msghdr+0x108/0x2b0 [ 2244.586123][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2244.586123][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2244.586123][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.586123][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.586123][T12188] __do_fast_syscall_32+0x102/0x160 [ 2244.586123][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2244.586123][T12188] do_SYSENTER_32+0x73/0x90 [ 2244.586123][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.586123][T12188] [ 2244.586123][T12188] Uninit was stored to memory at: [ 2244.586123][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2244.586123][T12188] __msan_chain_origin+0x57/0xa0 [ 2244.586123][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2244.586123][T12188] get_compat_msghdr+0x108/0x2b0 [ 2244.586123][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2244.586123][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2244.586123][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.586123][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.586123][T12188] __do_fast_syscall_32+0x102/0x160 [ 2244.586123][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2244.586123][T12188] do_SYSENTER_32+0x73/0x90 [ 2244.586123][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.586123][T12188] [ 2244.586123][T12188] Uninit was stored to memory at: [ 2244.586123][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2244.586123][T12188] __msan_chain_origin+0x57/0xa0 [ 2244.586123][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2244.586123][T12188] get_compat_msghdr+0x108/0x2b0 [ 2244.586123][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2244.586123][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2244.586123][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.586123][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.586123][T12188] __do_fast_syscall_32+0x102/0x160 [ 2244.586123][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2244.586123][T12188] do_SYSENTER_32+0x73/0x90 [ 2244.586123][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.586123][T12188] [ 2244.586123][T12188] Uninit was stored to memory at: [ 2244.586123][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2244.586123][T12188] __msan_chain_origin+0x57/0xa0 [ 2244.586123][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2244.586123][T12188] get_compat_msghdr+0x108/0x2b0 [ 2244.586123][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2244.586123][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2244.586123][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.586123][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.586123][T12188] __do_fast_syscall_32+0x102/0x160 [ 2244.586123][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2244.586123][T12188] do_SYSENTER_32+0x73/0x90 [ 2244.586123][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.586123][T12188] [ 2244.586123][T12188] Uninit was stored to memory at: [ 2244.586123][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2244.586123][T12188] __msan_chain_origin+0x57/0xa0 [ 2244.586123][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2244.586123][T12188] get_compat_msghdr+0x108/0x2b0 [ 2244.586123][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2244.586123][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2244.586123][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.586123][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.586123][T12188] __do_fast_syscall_32+0x102/0x160 [ 2244.586123][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2244.586123][T12188] do_SYSENTER_32+0x73/0x90 [ 2244.586123][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.586123][T12188] [ 2244.586123][T12188] Uninit was stored to memory at: [ 2244.586123][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2244.586123][T12188] __msan_chain_origin+0x57/0xa0 [ 2244.586123][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2244.586123][T12188] get_compat_msghdr+0x108/0x2b0 [ 2244.586123][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2244.586123][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2244.586123][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.586123][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.586123][T12188] __do_fast_syscall_32+0x102/0x160 [ 2244.586123][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2244.586123][T12188] do_SYSENTER_32+0x73/0x90 [ 2244.586123][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.586123][T12188] [ 2244.586123][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2244.586123][T12188] do_recvmmsg+0xbf/0x22f0 [ 2244.586123][T12188] do_recvmmsg+0xbf/0x22f0 [ 2245.500079][T12224] sctp: [Deprecated]: syz-executor.2 (pid 12224) Use of int in max_burst socket option. [ 2245.500079][T12224] Use struct sctp_assoc_value instead [ 2245.725181][T12227] sctp: [Deprecated]: syz-executor.2 (pid 12227) Use of int in max_burst socket option. [ 2245.725181][T12227] Use struct sctp_assoc_value instead [ 2246.516078][T12214] not chained 90000 origins [ 2246.516155][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2246.516155][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2246.516155][T12214] Call Trace: [ 2246.516155][T12214] dump_stack+0x21c/0x280 [ 2246.516155][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2246.516155][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2246.516155][T12214] ? __wake_up+0x1fc/0x250 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2246.516155][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2246.516155][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2246.516155][T12214] ? _copy_from_user+0x1fd/0x300 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] __msan_chain_origin+0x57/0xa0 [ 2246.516155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2246.516155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2246.516155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2246.516155][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2246.516155][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2246.516155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2246.516155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.516155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.516155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2246.516155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2246.516155][T12214] do_SYSENTER_32+0x73/0x90 [ 2246.516155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.516155][T12214] RIP: 0023:0xf7f01549 [ 2246.516155][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2246.516155][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2246.516155][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2246.516155][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2246.516155][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2246.516155][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2246.516155][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2246.516155][T12214] Uninit was stored to memory at: [ 2246.516155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2246.516155][T12214] __msan_chain_origin+0x57/0xa0 [ 2246.516155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2246.516155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2246.516155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2246.516155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2246.516155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.516155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.516155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2246.516155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2246.516155][T12214] do_SYSENTER_32+0x73/0x90 [ 2246.516155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.516155][T12214] [ 2246.516155][T12214] Uninit was stored to memory at: [ 2246.516155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2246.516155][T12214] __msan_chain_origin+0x57/0xa0 [ 2246.516155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2246.516155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2246.516155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2246.516155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2246.516155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.516155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.516155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2246.516155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2246.516155][T12214] do_SYSENTER_32+0x73/0x90 [ 2246.516155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.516155][T12214] [ 2246.516155][T12214] Uninit was stored to memory at: [ 2246.516155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2246.516155][T12214] __msan_chain_origin+0x57/0xa0 [ 2246.516155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2246.516155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2246.516155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2246.516155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2246.516155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.516155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.516155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2246.516155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2246.516155][T12214] do_SYSENTER_32+0x73/0x90 [ 2246.516155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.516155][T12214] [ 2246.516155][T12214] Uninit was stored to memory at: [ 2246.516155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2246.516155][T12214] __msan_chain_origin+0x57/0xa0 [ 2246.516155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2246.516155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2246.516155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2246.516155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2246.516155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.516155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.516155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2246.516155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2246.516155][T12214] do_SYSENTER_32+0x73/0x90 [ 2246.516155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.516155][T12214] [ 2246.516155][T12214] Uninit was stored to memory at: [ 2246.516155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2246.516155][T12214] __msan_chain_origin+0x57/0xa0 [ 2246.516155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2246.516155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2246.516155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2246.516155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2246.516155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.516155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.516155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2246.516155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2246.516155][T12214] do_SYSENTER_32+0x73/0x90 [ 2246.516155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.516155][T12214] [ 2246.516155][T12214] Uninit was stored to memory at: [ 2246.516155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2246.516155][T12214] __msan_chain_origin+0x57/0xa0 [ 2246.516155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2246.516155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2246.516155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2246.516155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2246.516155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.516155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.516155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2246.516155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2246.516155][T12214] do_SYSENTER_32+0x73/0x90 [ 2246.516155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.516155][T12214] [ 2246.516155][T12214] Uninit was stored to memory at: [ 2246.516155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2246.516155][T12214] __msan_chain_origin+0x57/0xa0 [ 2246.516155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2246.516155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2246.516155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2246.516155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2246.516155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.516155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.516155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2246.516155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2246.516155][T12214] do_SYSENTER_32+0x73/0x90 [ 2246.516155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.516155][T12214] [ 2246.516155][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2246.516155][T12214] do_recvmmsg+0xbf/0x22f0 [ 2246.516155][T12214] do_recvmmsg+0xbf/0x22f0 [ 2247.873381][T12214] not chained 100000 origins [ 2247.876143][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2247.876143][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2247.876143][T12214] Call Trace: [ 2247.876143][T12214] dump_stack+0x21c/0x280 [ 2247.908724][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2247.908724][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.934890][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2247.934890][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.962055][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2247.962055][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2247.962055][T12214] ? __wake_up+0x1fc/0x250 [ 2247.991915][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.991915][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2247.991915][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2247.991915][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.991915][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2247.991915][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2247.991915][T12214] ? _copy_from_user+0x1fd/0x300 [ 2247.991915][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.991915][T12214] __msan_chain_origin+0x57/0xa0 [ 2247.991915][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2247.991915][T12214] get_compat_msghdr+0x108/0x2b0 [ 2247.991915][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2247.991915][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.991915][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2247.991915][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.991915][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2247.991915][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2247.991915][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2247.991915][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2247.991915][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.991915][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2247.991915][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2247.991915][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2247.991915][T12214] __do_fast_syscall_32+0x102/0x160 [ 2247.991915][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2247.991915][T12214] do_SYSENTER_32+0x73/0x90 [ 2247.991915][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2247.991915][T12214] RIP: 0023:0xf7f01549 [ 2247.991915][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2247.991915][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2247.991915][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2247.991915][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2247.991915][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2247.991915][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2248.340119][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2248.340119][T12214] Uninit was stored to memory at: [ 2248.340119][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2248.340119][T12214] __msan_chain_origin+0x57/0xa0 [ 2248.340119][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2248.340119][T12214] get_compat_msghdr+0x108/0x2b0 [ 2248.340119][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2248.340119][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2248.340119][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2248.340119][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2248.340119][T12214] __do_fast_syscall_32+0x102/0x160 [ 2248.340119][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2248.340119][T12214] do_SYSENTER_32+0x73/0x90 [ 2248.340119][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2248.340119][T12214] [ 2248.340119][T12214] Uninit was stored to memory at: [ 2248.340119][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2248.340119][T12214] __msan_chain_origin+0x57/0xa0 [ 2248.340119][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2248.340119][T12214] get_compat_msghdr+0x108/0x2b0 [ 2248.340119][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2248.340119][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2248.340119][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2248.340119][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2248.340119][T12214] __do_fast_syscall_32+0x102/0x160 [ 2248.340119][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2248.340119][T12214] do_SYSENTER_32+0x73/0x90 [ 2248.340119][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2248.340119][T12214] [ 2248.340119][T12214] Uninit was stored to memory at: [ 2248.340119][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2248.340119][T12214] __msan_chain_origin+0x57/0xa0 [ 2248.340119][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2248.340119][T12214] get_compat_msghdr+0x108/0x2b0 [ 2248.340119][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2248.340119][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2248.340119][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2248.340119][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2248.340119][T12214] __do_fast_syscall_32+0x102/0x160 [ 2248.340119][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2248.340119][T12214] do_SYSENTER_32+0x73/0x90 [ 2248.340119][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2248.340119][T12214] [ 2248.340119][T12214] Uninit was stored to memory at: [ 2248.340119][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2248.340119][T12214] __msan_chain_origin+0x57/0xa0 [ 2248.340119][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2248.340119][T12214] get_compat_msghdr+0x108/0x2b0 [ 2248.340119][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2248.340119][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2248.340119][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2248.340119][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2248.340119][T12214] __do_fast_syscall_32+0x102/0x160 [ 2248.340119][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2248.340119][T12214] do_SYSENTER_32+0x73/0x90 [ 2248.340119][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2248.340119][T12214] [ 2248.340119][T12214] Uninit was stored to memory at: [ 2248.340119][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2248.340119][T12214] __msan_chain_origin+0x57/0xa0 [ 2248.340119][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2248.340119][T12214] get_compat_msghdr+0x108/0x2b0 [ 2248.340119][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2248.340119][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2248.340119][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2248.340119][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2248.340119][T12214] __do_fast_syscall_32+0x102/0x160 [ 2248.340119][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2248.340119][T12214] do_SYSENTER_32+0x73/0x90 [ 2248.340119][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2248.340119][T12214] [ 2248.340119][T12214] Uninit was stored to memory at: [ 2248.340119][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2248.340119][T12214] __msan_chain_origin+0x57/0xa0 [ 2248.340119][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2248.340119][T12214] get_compat_msghdr+0x108/0x2b0 [ 2248.340119][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2248.340119][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2248.340119][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2248.340119][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2248.340119][T12214] __do_fast_syscall_32+0x102/0x160 [ 2248.340119][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2248.340119][T12214] do_SYSENTER_32+0x73/0x90 [ 2248.340119][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2248.340119][T12214] [ 2248.340119][T12214] Uninit was stored to memory at: [ 2248.340119][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2248.340119][T12214] __msan_chain_origin+0x57/0xa0 [ 2248.340119][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2248.340119][T12214] get_compat_msghdr+0x108/0x2b0 [ 2248.340119][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2248.340119][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2248.340119][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2248.340119][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2248.340119][T12214] __do_fast_syscall_32+0x102/0x160 [ 2248.340119][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2248.340119][T12214] do_SYSENTER_32+0x73/0x90 [ 2248.340119][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2248.340119][T12214] [ 2248.340119][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2248.340119][T12214] do_recvmmsg+0xbf/0x22f0 [ 2248.340119][T12214] do_recvmmsg+0xbf/0x22f0 [ 2249.444931][T12188] not chained 110000 origins [ 2249.446157][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2249.446157][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2249.446157][T12188] Call Trace: [ 2249.446157][T12188] dump_stack+0x21c/0x280 [ 2249.446157][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2249.446157][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2249.446157][T12188] ? __wake_up+0x1fc/0x250 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2249.446157][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2249.446157][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2249.446157][T12188] ? _copy_from_user+0x1fd/0x300 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] __msan_chain_origin+0x57/0xa0 [ 2249.446157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2249.446157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2249.446157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2249.446157][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2249.446157][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2249.446157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2249.446157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.446157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.446157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2249.446157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2249.446157][T12188] do_SYSENTER_32+0x73/0x90 [ 2249.446157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.446157][T12188] RIP: 0023:0xf7f01549 [ 2249.446157][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2249.446157][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2249.446157][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2249.446157][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2249.446157][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2249.446157][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2249.446157][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2249.446157][T12188] Uninit was stored to memory at: [ 2249.446157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2249.446157][T12188] __msan_chain_origin+0x57/0xa0 [ 2249.446157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2249.446157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2249.446157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2249.446157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2249.446157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.446157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.446157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2249.446157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2249.446157][T12188] do_SYSENTER_32+0x73/0x90 [ 2249.446157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.446157][T12188] [ 2249.446157][T12188] Uninit was stored to memory at: [ 2249.446157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2249.446157][T12188] __msan_chain_origin+0x57/0xa0 [ 2249.446157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2249.446157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2249.446157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2249.446157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2249.446157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.446157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.446157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2249.446157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2249.446157][T12188] do_SYSENTER_32+0x73/0x90 [ 2249.446157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.446157][T12188] [ 2249.446157][T12188] Uninit was stored to memory at: [ 2249.446157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2249.446157][T12188] __msan_chain_origin+0x57/0xa0 [ 2249.446157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2249.446157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2249.446157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2249.446157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2249.446157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.446157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.446157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2249.446157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2249.446157][T12188] do_SYSENTER_32+0x73/0x90 [ 2249.446157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.446157][T12188] [ 2249.446157][T12188] Uninit was stored to memory at: [ 2249.446157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2249.446157][T12188] __msan_chain_origin+0x57/0xa0 [ 2249.446157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2249.446157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2249.446157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2249.446157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2249.446157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.446157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.446157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2249.446157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2249.446157][T12188] do_SYSENTER_32+0x73/0x90 [ 2249.446157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.446157][T12188] [ 2249.446157][T12188] Uninit was stored to memory at: [ 2249.446157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2249.446157][T12188] __msan_chain_origin+0x57/0xa0 [ 2249.446157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2249.446157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2249.446157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2249.446157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2249.446157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.446157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.446157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2249.446157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2249.446157][T12188] do_SYSENTER_32+0x73/0x90 [ 2249.446157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.446157][T12188] [ 2249.446157][T12188] Uninit was stored to memory at: [ 2249.446157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2249.446157][T12188] __msan_chain_origin+0x57/0xa0 [ 2249.446157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2249.446157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2249.446157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2249.446157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2249.446157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.446157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.446157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2249.446157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2249.446157][T12188] do_SYSENTER_32+0x73/0x90 [ 2249.446157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.446157][T12188] [ 2249.446157][T12188] Uninit was stored to memory at: [ 2249.446157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2249.446157][T12188] __msan_chain_origin+0x57/0xa0 [ 2249.446157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2249.446157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2249.446157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2249.446157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2249.446157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.446157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.446157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2249.446157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2249.446157][T12188] do_SYSENTER_32+0x73/0x90 [ 2249.446157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.446157][T12188] [ 2249.446157][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2249.446157][T12188] do_recvmmsg+0xbf/0x22f0 [ 2249.446157][T12188] do_recvmmsg+0xbf/0x22f0 [ 2251.290138][T12188] not chained 120000 origins [ 2251.296140][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2251.296140][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2251.296140][T12188] Call Trace: [ 2251.296140][T12188] dump_stack+0x21c/0x280 [ 2251.296140][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2251.296140][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2251.296140][T12188] ? __wake_up+0x1fc/0x250 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2251.296140][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2251.296140][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2251.296140][T12188] ? _copy_from_user+0x1fd/0x300 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] __msan_chain_origin+0x57/0xa0 [ 2251.296140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2251.296140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2251.296140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2251.296140][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2251.296140][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2251.296140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2251.296140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.296140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.296140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2251.296140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2251.296140][T12188] do_SYSENTER_32+0x73/0x90 [ 2251.296140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.296140][T12188] RIP: 0023:0xf7f01549 [ 2251.296140][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2251.296140][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2251.296140][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2251.296140][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2251.296140][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2251.296140][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2251.296140][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2251.296140][T12188] Uninit was stored to memory at: [ 2251.296140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2251.296140][T12188] __msan_chain_origin+0x57/0xa0 [ 2251.296140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2251.296140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2251.296140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2251.296140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2251.296140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.296140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.296140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2251.296140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2251.296140][T12188] do_SYSENTER_32+0x73/0x90 [ 2251.296140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.296140][T12188] [ 2251.296140][T12188] Uninit was stored to memory at: [ 2251.296140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2251.296140][T12188] __msan_chain_origin+0x57/0xa0 [ 2251.813321][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2251.813321][T12188] get_compat_msghdr+0x108/0x2b0 [ 2251.813321][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2251.813321][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2251.813321][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.813321][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.813321][T12188] __do_fast_syscall_32+0x102/0x160 [ 2251.813321][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2251.813321][T12188] do_SYSENTER_32+0x73/0x90 [ 2251.813321][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.813321][T12188] [ 2251.813321][T12188] Uninit was stored to memory at: [ 2251.813321][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2251.813321][T12188] __msan_chain_origin+0x57/0xa0 [ 2251.813321][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2251.813321][T12188] get_compat_msghdr+0x108/0x2b0 [ 2251.813321][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2251.813321][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2251.813321][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.813321][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.813321][T12188] __do_fast_syscall_32+0x102/0x160 [ 2251.813321][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2251.813321][T12188] do_SYSENTER_32+0x73/0x90 [ 2251.813321][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.813321][T12188] [ 2251.813321][T12188] Uninit was stored to memory at: [ 2251.813321][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2251.813321][T12188] __msan_chain_origin+0x57/0xa0 [ 2251.813321][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2251.813321][T12188] get_compat_msghdr+0x108/0x2b0 [ 2251.813321][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2251.813321][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2251.813321][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.813321][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.813321][T12188] __do_fast_syscall_32+0x102/0x160 [ 2251.813321][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2251.813321][T12188] do_SYSENTER_32+0x73/0x90 [ 2251.813321][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.813321][T12188] [ 2251.813321][T12188] Uninit was stored to memory at: [ 2251.813321][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2251.813321][T12188] __msan_chain_origin+0x57/0xa0 [ 2251.813321][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2251.813321][T12188] get_compat_msghdr+0x108/0x2b0 [ 2251.813321][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2251.813321][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2252.127794][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.127794][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.127794][T12188] __do_fast_syscall_32+0x102/0x160 [ 2252.127794][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2252.127794][T12188] do_SYSENTER_32+0x73/0x90 [ 2252.127794][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.127794][T12188] [ 2252.127794][T12188] Uninit was stored to memory at: [ 2252.127794][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2252.127794][T12188] __msan_chain_origin+0x57/0xa0 [ 2252.127794][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2252.127794][T12188] get_compat_msghdr+0x108/0x2b0 [ 2252.127794][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2252.127794][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2252.127794][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.127794][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.127794][T12188] __do_fast_syscall_32+0x102/0x160 [ 2252.127794][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2252.127794][T12188] do_SYSENTER_32+0x73/0x90 [ 2252.127794][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.127794][T12188] [ 2252.127794][T12188] Uninit was stored to memory at: [ 2252.127794][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2252.127794][T12188] __msan_chain_origin+0x57/0xa0 [ 2252.127794][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2252.127794][T12188] get_compat_msghdr+0x108/0x2b0 [ 2252.127794][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2252.127794][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2252.127794][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.127794][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.127794][T12188] __do_fast_syscall_32+0x102/0x160 [ 2252.127794][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2252.127794][T12188] do_SYSENTER_32+0x73/0x90 [ 2252.127794][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.127794][T12188] [ 2252.127794][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2252.127794][T12188] do_recvmmsg+0xbf/0x22f0 [ 2252.127794][T12188] do_recvmmsg+0xbf/0x22f0 [ 2253.411266][T12214] not chained 130000 origins [ 2253.415926][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2253.416144][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2253.416144][T12214] Call Trace: [ 2253.416144][T12214] dump_stack+0x21c/0x280 [ 2253.416144][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2253.448308][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.448308][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2253.448308][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.448308][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2253.448308][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2253.448308][T12214] ? __wake_up+0x1fc/0x250 [ 2253.448308][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.448308][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2253.448308][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2253.448308][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.448308][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2253.448308][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2253.448308][T12214] ? _copy_from_user+0x1fd/0x300 [ 2253.448308][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.448308][T12214] __msan_chain_origin+0x57/0xa0 [ 2253.448308][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2253.448308][T12214] get_compat_msghdr+0x108/0x2b0 [ 2253.448308][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2253.448308][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.448308][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2253.448308][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.448308][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2253.448308][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2253.608546][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2253.608546][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2253.608546][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.608546][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2253.608546][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.608546][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.608546][T12214] __do_fast_syscall_32+0x102/0x160 [ 2253.608546][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2253.608546][T12214] do_SYSENTER_32+0x73/0x90 [ 2253.608546][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.608546][T12214] RIP: 0023:0xf7f01549 [ 2253.608546][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2253.608546][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2253.608546][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2253.608546][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2253.608546][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2253.608546][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2253.608546][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2253.608546][T12214] Uninit was stored to memory at: [ 2253.608546][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2253.756890][T12214] __msan_chain_origin+0x57/0xa0 [ 2253.756890][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2253.756890][T12214] get_compat_msghdr+0x108/0x2b0 [ 2253.756890][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2253.779071][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2253.786835][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.786835][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.786835][T12214] __do_fast_syscall_32+0x102/0x160 [ 2253.786835][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2253.786835][T12214] do_SYSENTER_32+0x73/0x90 [ 2253.816406][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.816406][T12214] [ 2253.816406][T12214] Uninit was stored to memory at: [ 2253.816406][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2253.816406][T12214] __msan_chain_origin+0x57/0xa0 [ 2253.816406][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2253.816406][T12214] get_compat_msghdr+0x108/0x2b0 [ 2253.816406][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2253.816406][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2253.816406][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.816406][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.816406][T12214] __do_fast_syscall_32+0x102/0x160 [ 2253.816406][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2253.816406][T12214] do_SYSENTER_32+0x73/0x90 [ 2253.816406][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.816406][T12214] [ 2253.816406][T12214] Uninit was stored to memory at: [ 2253.816406][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2253.816406][T12214] __msan_chain_origin+0x57/0xa0 [ 2253.816406][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2253.926473][T12214] get_compat_msghdr+0x108/0x2b0 [ 2253.926473][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2253.926473][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2253.926473][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.926473][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.926473][T12214] __do_fast_syscall_32+0x102/0x160 [ 2253.926473][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2253.926473][T12214] do_SYSENTER_32+0x73/0x90 [ 2253.926473][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.926473][T12214] [ 2253.926473][T12214] Uninit was stored to memory at: [ 2253.926473][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2253.926473][T12214] __msan_chain_origin+0x57/0xa0 [ 2253.926473][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2253.926473][T12214] get_compat_msghdr+0x108/0x2b0 [ 2253.926473][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2253.926473][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2253.926473][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.926473][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.926473][T12214] __do_fast_syscall_32+0x102/0x160 [ 2253.926473][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2253.926473][T12214] do_SYSENTER_32+0x73/0x90 [ 2253.926473][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.926473][T12214] [ 2253.926473][T12214] Uninit was stored to memory at: [ 2254.086347][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2254.086347][T12214] __msan_chain_origin+0x57/0xa0 [ 2254.086347][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2254.086347][T12214] get_compat_msghdr+0x108/0x2b0 [ 2254.086347][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2254.116365][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2254.116365][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.116365][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.116365][T12214] __do_fast_syscall_32+0x102/0x160 [ 2254.116365][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2254.146481][T12214] do_SYSENTER_32+0x73/0x90 [ 2254.146481][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.146481][T12214] [ 2254.146481][T12214] Uninit was stored to memory at: [ 2254.146481][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2254.146481][T12214] __msan_chain_origin+0x57/0xa0 [ 2254.146481][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2254.146481][T12214] get_compat_msghdr+0x108/0x2b0 [ 2254.146481][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2254.146481][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2254.146481][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.146481][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.146481][T12214] __do_fast_syscall_32+0x102/0x160 [ 2254.146481][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2254.241676][T12214] do_SYSENTER_32+0x73/0x90 [ 2254.241676][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.241676][T12214] [ 2254.241676][T12214] Uninit was stored to memory at: [ 2254.241676][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2254.241676][T12214] __msan_chain_origin+0x57/0xa0 [ 2254.241676][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2254.241676][T12214] get_compat_msghdr+0x108/0x2b0 [ 2254.241676][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2254.241676][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2254.241676][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.241676][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.241676][T12214] __do_fast_syscall_32+0x102/0x160 [ 2254.241676][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2254.241676][T12214] do_SYSENTER_32+0x73/0x90 [ 2254.241676][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.241676][T12214] [ 2254.241676][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2254.241676][T12214] do_recvmmsg+0xbf/0x22f0 [ 2254.241676][T12214] do_recvmmsg+0xbf/0x22f0 [ 2254.993748][T12214] not chained 140000 origins [ 2254.996156][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2255.006850][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2255.006850][T12214] Call Trace: [ 2255.017963][T12214] dump_stack+0x21c/0x280 [ 2255.017963][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2255.017963][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.017963][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2255.017963][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.017963][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2255.017963][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2255.017963][T12214] ? __wake_up+0x1fc/0x250 [ 2255.017963][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.017963][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2255.017963][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2255.017963][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.017963][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2255.017963][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2255.017963][T12214] ? _copy_from_user+0x1fd/0x300 [ 2255.017963][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.017963][T12214] __msan_chain_origin+0x57/0xa0 [ 2255.017963][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2255.017963][T12214] get_compat_msghdr+0x108/0x2b0 [ 2255.017963][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2255.127471][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.127471][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2255.127471][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.127471][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2255.127471][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2255.127471][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2255.127471][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2255.127471][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.127471][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2255.127471][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.127471][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.127471][T12214] __do_fast_syscall_32+0x102/0x160 [ 2255.127471][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2255.127471][T12214] do_SYSENTER_32+0x73/0x90 [ 2255.127471][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.127471][T12214] RIP: 0023:0xf7f01549 [ 2255.127471][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2255.127471][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2255.127471][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2255.127471][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2255.127471][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2255.127471][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2255.127471][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2255.127471][T12214] Uninit was stored to memory at: [ 2255.286384][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2255.286384][T12214] __msan_chain_origin+0x57/0xa0 [ 2255.286384][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2255.286384][T12214] get_compat_msghdr+0x108/0x2b0 [ 2255.286384][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2255.286384][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2255.316514][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.316514][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.316514][T12214] __do_fast_syscall_32+0x102/0x160 [ 2255.316514][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2255.316514][T12214] do_SYSENTER_32+0x73/0x90 [ 2255.316514][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.316514][T12214] [ 2255.316514][T12214] Uninit was stored to memory at: [ 2255.316514][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2255.316514][T12214] __msan_chain_origin+0x57/0xa0 [ 2255.316514][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2255.316514][T12214] get_compat_msghdr+0x108/0x2b0 [ 2255.316514][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2255.316514][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2255.316514][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.316514][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.316514][T12214] __do_fast_syscall_32+0x102/0x160 [ 2255.316514][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2255.316514][T12214] do_SYSENTER_32+0x73/0x90 [ 2255.316514][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.446356][T12214] [ 2255.446356][T12214] Uninit was stored to memory at: [ 2255.446356][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2255.466333][T12214] __msan_chain_origin+0x57/0xa0 [ 2255.466333][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2255.466333][T12214] get_compat_msghdr+0x108/0x2b0 [ 2255.466333][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2255.496430][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2255.496430][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.496430][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.496430][T12214] __do_fast_syscall_32+0x102/0x160 [ 2255.496430][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2255.496430][T12214] do_SYSENTER_32+0x73/0x90 [ 2255.496430][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.496430][T12214] [ 2255.496430][T12214] Uninit was stored to memory at: [ 2255.496430][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2255.496430][T12214] __msan_chain_origin+0x57/0xa0 [ 2255.496430][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2255.496430][T12214] get_compat_msghdr+0x108/0x2b0 [ 2255.496430][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2255.496430][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2255.496430][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.600099][T12188] not chained 150000 origins [ 2255.496430][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.608387][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2255.496430][T12214] __do_fast_syscall_32+0x102/0x160 [ 2255.608387][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2255.496430][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2255.608387][T12188] Call Trace: [ 2255.496430][T12214] do_SYSENTER_32+0x73/0x90 [ 2255.608387][T12188] dump_stack+0x21c/0x280 [ 2255.496430][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.608387][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2255.496430][T12214] [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] Uninit was stored to memory at: [ 2255.608387][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2255.496430][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] __msan_chain_origin+0x57/0xa0 [ 2255.608387][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2255.496430][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2255.608387][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2255.496430][T12214] get_compat_msghdr+0x108/0x2b0 [ 2255.608387][T12188] ? __wake_up+0x1fc/0x250 [ 2255.496430][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2255.608387][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2255.496430][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.608387][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2255.496430][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] __do_fast_syscall_32+0x102/0x160 [ 2255.608387][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2255.496430][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2255.608387][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2255.496430][T12214] do_SYSENTER_32+0x73/0x90 [ 2255.608387][T12188] ? _copy_from_user+0x1fd/0x300 [ 2255.496430][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] [ 2255.608387][T12188] __msan_chain_origin+0x57/0xa0 [ 2255.496430][T12214] Uninit was stored to memory at: [ 2255.608387][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2255.496430][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2255.608387][T12188] get_compat_msghdr+0x108/0x2b0 [ 2255.496430][T12214] __msan_chain_origin+0x57/0xa0 [ 2255.608387][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2255.496430][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] get_compat_msghdr+0x108/0x2b0 [ 2255.608387][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2255.496430][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2255.608387][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2255.496430][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.608387][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2255.496430][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.608387][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2255.496430][T12214] __do_fast_syscall_32+0x102/0x160 [ 2255.608387][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2255.496430][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] do_SYSENTER_32+0x73/0x90 [ 2255.608387][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2255.496430][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.608387][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.496430][T12214] [ 2255.608387][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.496430][T12214] Uninit was stored to memory at: [ 2255.608387][T12188] __do_fast_syscall_32+0x102/0x160 [ 2255.496430][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2255.608387][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2255.496430][T12214] __msan_chain_origin+0x57/0xa0 [ 2255.608387][T12188] do_SYSENTER_32+0x73/0x90 [ 2255.496430][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2255.608387][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.496430][T12214] get_compat_msghdr+0x108/0x2b0 [ 2255.608387][T12188] RIP: 0023:0xf7f01549 [ 2255.496430][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2255.608387][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2255.496430][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2255.608387][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 [ 2255.496430][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.608387][T12188] ORIG_RAX: 0000000000000151 [ 2255.496430][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.608387][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2255.496430][T12214] __do_fast_syscall_32+0x102/0x160 [ 2255.608387][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2255.496430][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2255.608387][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2255.496430][T12214] do_SYSENTER_32+0x73/0x90 [ 2255.608387][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2255.496430][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.608387][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2255.496430][T12214] [ 2255.608387][T12188] Uninit was stored to memory at: [ 2255.496430][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2255.608387][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2255.496430][T12214] do_recvmmsg+0xbf/0x22f0 [ 2255.608387][T12188] __msan_chain_origin+0x57/0xa0 [ 2255.496430][T12214] do_recvmmsg+0xbf/0x22f0 [ 2255.608387][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2256.166199][T12188] get_compat_msghdr+0x108/0x2b0 [ 2256.166199][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2256.183652][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2256.183652][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.183652][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.200730][T12188] __do_fast_syscall_32+0x102/0x160 [ 2256.200730][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2256.200730][T12188] do_SYSENTER_32+0x73/0x90 [ 2256.200730][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.200730][T12188] [ 2256.200730][T12188] Uninit was stored to memory at: [ 2256.200730][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2256.200730][T12188] __msan_chain_origin+0x57/0xa0 [ 2256.200730][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2256.200730][T12188] get_compat_msghdr+0x108/0x2b0 [ 2256.200730][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2256.200730][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2256.200730][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.200730][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.200730][T12188] __do_fast_syscall_32+0x102/0x160 [ 2256.200730][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2256.200730][T12188] do_SYSENTER_32+0x73/0x90 [ 2256.200730][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.200730][T12188] [ 2256.200730][T12188] Uninit was stored to memory at: [ 2256.200730][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2256.200730][T12188] __msan_chain_origin+0x57/0xa0 [ 2256.200730][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2256.200730][T12188] get_compat_msghdr+0x108/0x2b0 [ 2256.200730][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2256.200730][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2256.200730][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.200730][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.200730][T12188] __do_fast_syscall_32+0x102/0x160 [ 2256.200730][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2256.200730][T12188] do_SYSENTER_32+0x73/0x90 [ 2256.200730][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.200730][T12188] [ 2256.200730][T12188] Uninit was stored to memory at: [ 2256.200730][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2256.200730][T12188] __msan_chain_origin+0x57/0xa0 [ 2256.200730][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2256.200730][T12188] get_compat_msghdr+0x108/0x2b0 [ 2256.200730][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2256.200730][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2256.200730][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.200730][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.200730][T12188] __do_fast_syscall_32+0x102/0x160 [ 2256.200730][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2256.200730][T12188] do_SYSENTER_32+0x73/0x90 [ 2256.200730][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.200730][T12188] [ 2256.200730][T12188] Uninit was stored to memory at: [ 2256.200730][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2256.200730][T12188] __msan_chain_origin+0x57/0xa0 [ 2256.200730][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2256.200730][T12188] get_compat_msghdr+0x108/0x2b0 [ 2256.200730][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2256.200730][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2256.200730][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.200730][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.200730][T12188] __do_fast_syscall_32+0x102/0x160 [ 2256.200730][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2256.200730][T12188] do_SYSENTER_32+0x73/0x90 [ 2256.200730][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.200730][T12188] [ 2256.200730][T12188] Uninit was stored to memory at: [ 2256.200730][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2256.200730][T12188] __msan_chain_origin+0x57/0xa0 [ 2256.200730][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2256.200730][T12188] get_compat_msghdr+0x108/0x2b0 [ 2256.200730][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2256.200730][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2256.200730][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.200730][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.200730][T12188] __do_fast_syscall_32+0x102/0x160 [ 2256.200730][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2256.200730][T12188] do_SYSENTER_32+0x73/0x90 [ 2256.200730][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.200730][T12188] [ 2256.200730][T12188] Uninit was stored to memory at: [ 2256.200730][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2256.200730][T12188] __msan_chain_origin+0x57/0xa0 [ 2256.200730][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2256.200730][T12188] get_compat_msghdr+0x108/0x2b0 [ 2256.200730][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2256.200730][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2256.200730][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.200730][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.200730][T12188] __do_fast_syscall_32+0x102/0x160 [ 2256.200730][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2256.200730][T12188] do_SYSENTER_32+0x73/0x90 [ 2256.200730][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.200730][T12188] [ 2256.200730][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2256.200730][T12188] do_recvmmsg+0xbf/0x22f0 [ 2256.200730][T12188] do_recvmmsg+0xbf/0x22f0 [ 2257.497367][T12214] not chained 160000 origins [ 2257.502047][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2257.506139][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2257.506139][T12214] Call Trace: [ 2257.521238][T12214] dump_stack+0x21c/0x280 [ 2257.521238][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2257.521238][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.521238][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2257.521238][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2257.548374][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2257.548374][T12214] ? __wake_up+0x1fc/0x250 [ 2257.548374][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2257.548374][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2257.548374][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2257.548374][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2257.548374][T12214] ? _copy_from_user+0x1fd/0x300 [ 2257.548374][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] __msan_chain_origin+0x57/0xa0 [ 2257.548374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2257.548374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2257.548374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2257.548374][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2257.548374][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2257.548374][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2257.548374][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2257.548374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2257.548374][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.548374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.548374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2257.548374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2257.548374][T12214] do_SYSENTER_32+0x73/0x90 [ 2257.548374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.548374][T12214] RIP: 0023:0xf7f01549 [ 2257.548374][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2257.548374][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2257.548374][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2257.548374][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2257.548374][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2257.548374][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2257.548374][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2257.548374][T12214] Uninit was stored to memory at: [ 2257.548374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2257.548374][T12214] __msan_chain_origin+0x57/0xa0 [ 2257.548374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2257.548374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2257.548374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2257.548374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2257.548374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.548374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.548374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2257.548374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2257.548374][T12214] do_SYSENTER_32+0x73/0x90 [ 2257.548374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.548374][T12214] [ 2257.548374][T12214] Uninit was stored to memory at: [ 2257.548374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2257.548374][T12214] __msan_chain_origin+0x57/0xa0 [ 2257.548374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2257.548374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2257.548374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2257.548374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2257.548374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.548374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.548374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2257.548374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2257.548374][T12214] do_SYSENTER_32+0x73/0x90 [ 2257.548374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.548374][T12214] [ 2257.548374][T12214] Uninit was stored to memory at: [ 2257.548374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2257.548374][T12214] __msan_chain_origin+0x57/0xa0 [ 2257.548374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2257.548374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2257.548374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2257.548374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2257.548374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.548374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.548374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2257.548374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2257.548374][T12214] do_SYSENTER_32+0x73/0x90 [ 2257.548374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.548374][T12214] [ 2257.548374][T12214] Uninit was stored to memory at: [ 2257.548374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2257.548374][T12214] __msan_chain_origin+0x57/0xa0 [ 2257.548374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2257.548374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2257.548374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2257.548374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2257.548374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.548374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.548374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2257.548374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2257.548374][T12214] do_SYSENTER_32+0x73/0x90 [ 2257.548374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.068205][T12188] not chained 170000 origins [ 2257.548374][T12214] [ 2257.548374][T12214] Uninit was stored to memory at: [ 2258.075292][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2257.548374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2258.076121][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2257.548374][T12214] __msan_chain_origin+0x57/0xa0 [ 2258.076121][T12188] Call Trace: [ 2257.548374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2258.076121][T12188] dump_stack+0x21c/0x280 [ 2257.548374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2258.076121][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2257.548374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2258.076121][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2257.548374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.076121][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2257.548374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2258.076121][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2257.548374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2258.076121][T12188] ? __wake_up+0x1fc/0x250 [ 2257.548374][T12214] do_SYSENTER_32+0x73/0x90 [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.076121][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2257.548374][T12214] [ 2258.076121][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2257.548374][T12214] Uninit was stored to memory at: [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2258.076121][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2257.548374][T12214] __msan_chain_origin+0x57/0xa0 [ 2258.076121][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2257.548374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2258.076121][T12188] ? _copy_from_user+0x1fd/0x300 [ 2257.548374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2258.076121][T12188] __msan_chain_origin+0x57/0xa0 [ 2257.548374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2258.076121][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2257.548374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.076121][T12188] get_compat_msghdr+0x108/0x2b0 [ 2257.548374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.076121][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2257.548374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2258.076121][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2257.548374][T12214] do_SYSENTER_32+0x73/0x90 [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.076121][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2257.548374][T12214] [ 2258.076121][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2257.548374][T12214] Uninit was stored to memory at: [ 2258.076121][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2257.548374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2258.076121][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2257.548374][T12214] __msan_chain_origin+0x57/0xa0 [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2258.076121][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2257.548374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2258.076121][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.548374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2258.076121][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.548374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2258.076121][T12188] __do_fast_syscall_32+0x102/0x160 [ 2257.548374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.076121][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2257.548374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.076121][T12188] do_SYSENTER_32+0x73/0x90 [ 2257.548374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2258.076121][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.548374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2258.076121][T12188] RIP: 0023:0xf7f01549 [ 2257.548374][T12214] do_SYSENTER_32+0x73/0x90 [ 2258.076121][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2257.548374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.076121][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 [ 2257.548374][T12214] [ 2258.076121][T12188] ORIG_RAX: 0000000000000151 [ 2257.548374][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2258.076121][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2257.548374][T12214] do_recvmmsg+0xbf/0x22f0 [ 2258.076121][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2258.076121][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2257.548374][T12214] do_recvmmsg+0xbf/0x22f0 [ 2258.076121][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2258.573897][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2258.573897][T12188] Uninit was stored to memory at: [ 2258.573897][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2258.573897][T12188] __msan_chain_origin+0x57/0xa0 [ 2258.573897][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2258.573897][T12188] get_compat_msghdr+0x108/0x2b0 [ 2258.616892][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2258.616892][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2258.616892][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.616892][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.616892][T12188] __do_fast_syscall_32+0x102/0x160 [ 2258.616892][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2258.616892][T12188] do_SYSENTER_32+0x73/0x90 [ 2258.616892][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.616892][T12188] [ 2258.616892][T12188] Uninit was stored to memory at: [ 2258.616892][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2258.616892][T12188] __msan_chain_origin+0x57/0xa0 [ 2258.616892][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2258.616892][T12188] get_compat_msghdr+0x108/0x2b0 [ 2258.616892][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2258.616892][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2258.616892][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.616892][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.616892][T12188] __do_fast_syscall_32+0x102/0x160 [ 2258.742515][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2258.744845][T12188] do_SYSENTER_32+0x73/0x90 [ 2258.744845][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.744845][T12188] [ 2258.744845][T12188] Uninit was stored to memory at: [ 2258.744845][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2258.744845][T12188] __msan_chain_origin+0x57/0xa0 [ 2258.744845][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2258.780905][T12188] get_compat_msghdr+0x108/0x2b0 [ 2258.780905][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2258.780905][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2258.780905][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.780905][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.780905][T12188] __do_fast_syscall_32+0x102/0x160 [ 2258.780905][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2258.780905][T12188] do_SYSENTER_32+0x73/0x90 [ 2258.780905][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.780905][T12188] [ 2258.780905][T12188] Uninit was stored to memory at: [ 2258.780905][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2258.780905][T12188] __msan_chain_origin+0x57/0xa0 [ 2258.780905][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2258.780905][T12188] get_compat_msghdr+0x108/0x2b0 [ 2258.887310][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2258.887310][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2258.887310][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.887310][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.887310][T12188] __do_fast_syscall_32+0x102/0x160 [ 2258.887310][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2258.887310][T12188] do_SYSENTER_32+0x73/0x90 [ 2258.887310][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.887310][T12188] [ 2258.887310][T12188] Uninit was stored to memory at: [ 2258.887310][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2258.887310][T12188] __msan_chain_origin+0x57/0xa0 [ 2258.887310][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2258.887310][T12188] get_compat_msghdr+0x108/0x2b0 [ 2258.887310][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2258.887310][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2258.887310][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.887310][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.887310][T12188] __do_fast_syscall_32+0x102/0x160 [ 2258.887310][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2258.887310][T12188] do_SYSENTER_32+0x73/0x90 [ 2258.887310][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.887310][T12188] [ 2258.887310][T12188] Uninit was stored to memory at: [ 2258.887310][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2258.887310][T12188] __msan_chain_origin+0x57/0xa0 [ 2258.887310][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2258.887310][T12188] get_compat_msghdr+0x108/0x2b0 [ 2258.887310][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2258.887310][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2258.887310][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.887310][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.887310][T12188] __do_fast_syscall_32+0x102/0x160 [ 2258.887310][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2258.887310][T12188] do_SYSENTER_32+0x73/0x90 [ 2258.887310][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.887310][T12188] [ 2258.887310][T12188] Uninit was stored to memory at: [ 2258.887310][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2258.887310][T12188] __msan_chain_origin+0x57/0xa0 [ 2258.887310][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2258.887310][T12188] get_compat_msghdr+0x108/0x2b0 [ 2258.887310][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2258.887310][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2258.887310][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.887310][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.887310][T12188] __do_fast_syscall_32+0x102/0x160 [ 2258.887310][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2258.887310][T12188] do_SYSENTER_32+0x73/0x90 [ 2259.287663][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.287663][T12188] [ 2259.287663][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2259.287663][T12188] do_recvmmsg+0xbf/0x22f0 [ 2259.287663][T12188] do_recvmmsg+0xbf/0x22f0 [ 2259.743044][T12188] not chained 180000 origins [ 2259.746128][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2259.746128][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2259.746128][T12188] Call Trace: [ 2259.746128][T12188] dump_stack+0x21c/0x280 [ 2259.746128][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2259.790675][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.790675][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2259.790675][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.790675][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2259.821747][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2259.821747][T12188] ? __wake_up+0x1fc/0x250 [ 2259.821747][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.821747][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2259.852533][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2259.852533][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.852533][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2259.852533][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2259.852533][T12188] ? _copy_from_user+0x1fd/0x300 [ 2259.852533][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.852533][T12188] __msan_chain_origin+0x57/0xa0 [ 2259.852533][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2259.852533][T12188] get_compat_msghdr+0x108/0x2b0 [ 2259.852533][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2259.852533][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.852533][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2259.852533][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.852533][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2259.852533][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2259.852533][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2259.852533][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2259.852533][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.852533][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2259.852533][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.852533][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.852533][T12188] __do_fast_syscall_32+0x102/0x160 [ 2259.852533][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2260.024435][T12188] do_SYSENTER_32+0x73/0x90 [ 2260.024435][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.024435][T12188] RIP: 0023:0xf7f01549 [ 2260.024435][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2260.024435][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2260.024435][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2260.024435][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2260.024435][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2260.024435][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2260.024435][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2260.024435][T12188] Uninit was stored to memory at: [ 2260.024435][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2260.024435][T12188] __msan_chain_origin+0x57/0xa0 [ 2260.024435][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2260.024435][T12188] get_compat_msghdr+0x108/0x2b0 [ 2260.024435][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2260.024435][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2260.024435][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.024435][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.024435][T12188] __do_fast_syscall_32+0x102/0x160 [ 2260.024435][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2260.024435][T12188] do_SYSENTER_32+0x73/0x90 [ 2260.024435][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.024435][T12188] [ 2260.024435][T12188] Uninit was stored to memory at: [ 2260.024435][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2260.024435][T12188] __msan_chain_origin+0x57/0xa0 [ 2260.024435][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2260.024435][T12188] get_compat_msghdr+0x108/0x2b0 [ 2260.024435][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2260.024435][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2260.024435][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.024435][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.024435][T12188] __do_fast_syscall_32+0x102/0x160 [ 2260.024435][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2260.024435][T12188] do_SYSENTER_32+0x73/0x90 [ 2260.024435][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.024435][T12188] [ 2260.024435][T12188] Uninit was stored to memory at: [ 2260.024435][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2260.024435][T12188] __msan_chain_origin+0x57/0xa0 [ 2260.024435][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2260.024435][T12188] get_compat_msghdr+0x108/0x2b0 [ 2260.024435][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2260.024435][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2260.024435][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.024435][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.024435][T12188] __do_fast_syscall_32+0x102/0x160 [ 2260.024435][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2260.024435][T12188] do_SYSENTER_32+0x73/0x90 [ 2260.024435][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.024435][T12188] [ 2260.024435][T12188] Uninit was stored to memory at: [ 2260.024435][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2260.024435][T12188] __msan_chain_origin+0x57/0xa0 [ 2260.024435][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2260.024435][T12188] get_compat_msghdr+0x108/0x2b0 [ 2260.024435][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2260.024435][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2260.024435][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.024435][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.024435][T12188] __do_fast_syscall_32+0x102/0x160 [ 2260.024435][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2260.024435][T12188] do_SYSENTER_32+0x73/0x90 [ 2260.024435][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.024435][T12188] [ 2260.024435][T12188] Uninit was stored to memory at: [ 2260.024435][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2260.024435][T12188] __msan_chain_origin+0x57/0xa0 [ 2260.024435][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2260.024435][T12188] get_compat_msghdr+0x108/0x2b0 [ 2260.024435][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2260.024435][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2260.024435][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.024435][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.024435][T12188] __do_fast_syscall_32+0x102/0x160 [ 2260.024435][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2260.024435][T12188] do_SYSENTER_32+0x73/0x90 [ 2260.024435][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.024435][T12188] [ 2260.024435][T12188] Uninit was stored to memory at: [ 2260.024435][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2260.024435][T12188] __msan_chain_origin+0x57/0xa0 [ 2260.024435][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2260.024435][T12188] get_compat_msghdr+0x108/0x2b0 [ 2260.024435][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2260.024435][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2260.024435][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.024435][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.024435][T12188] __do_fast_syscall_32+0x102/0x160 [ 2260.024435][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2260.024435][T12188] do_SYSENTER_32+0x73/0x90 [ 2260.024435][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.024435][T12188] [ 2260.024435][T12188] Uninit was stored to memory at: [ 2260.024435][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2260.024435][T12188] __msan_chain_origin+0x57/0xa0 [ 2260.024435][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2260.024435][T12188] get_compat_msghdr+0x108/0x2b0 [ 2260.024435][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2260.024435][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2260.024435][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.024435][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.024435][T12188] __do_fast_syscall_32+0x102/0x160 [ 2260.024435][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2260.024435][T12188] do_SYSENTER_32+0x73/0x90 [ 2260.024435][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.024435][T12188] [ 2260.024435][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2260.024435][T12188] do_recvmmsg+0xbf/0x22f0 [ 2260.024435][T12188] do_recvmmsg+0xbf/0x22f0 [ 2261.057026][T12214] not chained 190000 origins [ 2261.064670][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2261.066164][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2261.066164][T12214] Call Trace: [ 2261.066164][T12214] dump_stack+0x21c/0x280 [ 2261.066164][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2261.066164][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2261.066164][T12214] ? __wake_up+0x1fc/0x250 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2261.066164][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2261.066164][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2261.066164][T12214] ? _copy_from_user+0x1fd/0x300 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] __msan_chain_origin+0x57/0xa0 [ 2261.066164][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2261.066164][T12214] get_compat_msghdr+0x108/0x2b0 [ 2261.066164][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2261.066164][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2261.066164][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2261.066164][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2261.066164][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.066164][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.066164][T12214] __do_fast_syscall_32+0x102/0x160 [ 2261.066164][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2261.066164][T12214] do_SYSENTER_32+0x73/0x90 [ 2261.066164][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.066164][T12214] RIP: 0023:0xf7f01549 [ 2261.066164][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2261.066164][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2261.066164][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2261.066164][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2261.066164][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2261.066164][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2261.066164][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2261.423207][T12214] Uninit was stored to memory at: [ 2261.423207][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2261.423207][T12214] __msan_chain_origin+0x57/0xa0 [ 2261.423207][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2261.423207][T12214] get_compat_msghdr+0x108/0x2b0 [ 2261.423207][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2261.423207][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2261.423207][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.423207][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.423207][T12214] __do_fast_syscall_32+0x102/0x160 [ 2261.423207][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2261.423207][T12214] do_SYSENTER_32+0x73/0x90 [ 2261.423207][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.423207][T12214] [ 2261.423207][T12214] Uninit was stored to memory at: [ 2261.423207][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2261.423207][T12214] __msan_chain_origin+0x57/0xa0 [ 2261.423207][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2261.423207][T12214] get_compat_msghdr+0x108/0x2b0 [ 2261.423207][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2261.423207][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2261.423207][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.423207][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.423207][T12214] __do_fast_syscall_32+0x102/0x160 [ 2261.423207][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2261.423207][T12214] do_SYSENTER_32+0x73/0x90 [ 2261.423207][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.423207][T12214] [ 2261.423207][T12214] Uninit was stored to memory at: [ 2261.423207][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2261.423207][T12214] __msan_chain_origin+0x57/0xa0 [ 2261.423207][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2261.423207][T12214] get_compat_msghdr+0x108/0x2b0 [ 2261.423207][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2261.423207][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2261.423207][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.423207][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.423207][T12214] __do_fast_syscall_32+0x102/0x160 [ 2261.423207][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2261.423207][T12214] do_SYSENTER_32+0x73/0x90 [ 2261.423207][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.423207][T12214] [ 2261.423207][T12214] Uninit was stored to memory at: [ 2261.423207][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2261.423207][T12214] __msan_chain_origin+0x57/0xa0 [ 2261.423207][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2261.423207][T12214] get_compat_msghdr+0x108/0x2b0 [ 2261.423207][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2261.423207][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2261.423207][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.423207][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.423207][T12214] __do_fast_syscall_32+0x102/0x160 [ 2261.423207][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2261.423207][T12214] do_SYSENTER_32+0x73/0x90 [ 2261.423207][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.423207][T12214] [ 2261.423207][T12214] Uninit was stored to memory at: [ 2261.423207][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2261.423207][T12214] __msan_chain_origin+0x57/0xa0 [ 2261.423207][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2261.423207][T12214] get_compat_msghdr+0x108/0x2b0 [ 2261.423207][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2261.423207][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2261.423207][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.423207][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.423207][T12214] __do_fast_syscall_32+0x102/0x160 [ 2261.423207][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2261.423207][T12214] do_SYSENTER_32+0x73/0x90 [ 2261.423207][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.423207][T12214] [ 2261.423207][T12214] Uninit was stored to memory at: [ 2261.423207][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2261.423207][T12214] __msan_chain_origin+0x57/0xa0 [ 2261.423207][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2261.423207][T12214] get_compat_msghdr+0x108/0x2b0 [ 2261.423207][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2261.423207][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2261.423207][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.423207][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.423207][T12214] __do_fast_syscall_32+0x102/0x160 [ 2261.423207][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2261.423207][T12214] do_SYSENTER_32+0x73/0x90 [ 2261.423207][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.423207][T12214] [ 2261.423207][T12214] Uninit was stored to memory at: [ 2261.423207][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2261.423207][T12214] __msan_chain_origin+0x57/0xa0 [ 2261.423207][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2261.423207][T12214] get_compat_msghdr+0x108/0x2b0 [ 2261.423207][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2261.423207][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2261.423207][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.423207][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.423207][T12214] __do_fast_syscall_32+0x102/0x160 [ 2261.423207][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2261.423207][T12214] do_SYSENTER_32+0x73/0x90 [ 2261.423207][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.423207][T12214] [ 2261.423207][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2261.423207][T12214] do_recvmmsg+0xbf/0x22f0 [ 2261.423207][T12214] do_recvmmsg+0xbf/0x22f0 [ 2262.305470][T12188] not chained 200000 origins [ 2262.306149][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2262.306149][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2262.306149][T12188] Call Trace: [ 2262.306149][T12188] dump_stack+0x21c/0x280 [ 2262.306149][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2262.306149][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2262.306149][T12188] ? __wake_up+0x1fc/0x250 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2262.306149][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2262.306149][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2262.306149][T12188] ? _copy_from_user+0x1fd/0x300 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] __msan_chain_origin+0x57/0xa0 [ 2262.306149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2262.306149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2262.306149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2262.306149][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2262.306149][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2262.306149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2262.306149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.306149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.306149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2262.306149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2262.306149][T12188] do_SYSENTER_32+0x73/0x90 [ 2262.306149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.306149][T12188] RIP: 0023:0xf7f01549 [ 2262.306149][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2262.306149][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2262.306149][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2262.306149][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2262.306149][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2262.306149][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2262.306149][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2262.306149][T12188] Uninit was stored to memory at: [ 2262.306149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2262.306149][T12188] __msan_chain_origin+0x57/0xa0 [ 2262.306149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2262.306149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2262.306149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2262.306149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2262.306149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.306149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.306149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2262.306149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2262.306149][T12188] do_SYSENTER_32+0x73/0x90 [ 2262.306149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.306149][T12188] [ 2262.306149][T12188] Uninit was stored to memory at: [ 2262.306149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2262.306149][T12188] __msan_chain_origin+0x57/0xa0 [ 2262.306149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2262.306149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2262.306149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2262.306149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2262.306149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.306149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.306149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2262.306149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2262.306149][T12188] do_SYSENTER_32+0x73/0x90 [ 2262.306149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.306149][T12188] [ 2262.306149][T12188] Uninit was stored to memory at: [ 2262.306149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2262.306149][T12188] __msan_chain_origin+0x57/0xa0 [ 2262.306149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2262.306149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2262.306149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2262.306149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2262.306149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.306149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.306149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2262.306149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2262.306149][T12188] do_SYSENTER_32+0x73/0x90 [ 2262.306149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.306149][T12188] [ 2262.306149][T12188] Uninit was stored to memory at: [ 2262.306149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2262.306149][T12188] __msan_chain_origin+0x57/0xa0 [ 2262.306149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2262.306149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2262.306149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2262.306149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2262.306149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.306149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.306149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2262.306149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2262.306149][T12188] do_SYSENTER_32+0x73/0x90 [ 2262.306149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.306149][T12188] [ 2262.306149][T12188] Uninit was stored to memory at: [ 2262.306149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2262.306149][T12188] __msan_chain_origin+0x57/0xa0 [ 2262.306149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2262.306149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2262.306149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2262.306149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2262.306149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.306149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.306149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2262.306149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2262.306149][T12188] do_SYSENTER_32+0x73/0x90 [ 2262.306149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.306149][T12188] [ 2262.306149][T12188] Uninit was stored to memory at: [ 2262.306149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2262.306149][T12188] __msan_chain_origin+0x57/0xa0 [ 2262.306149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2262.306149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2262.306149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2262.306149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2262.306149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.306149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.306149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2262.306149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2262.306149][T12188] do_SYSENTER_32+0x73/0x90 [ 2262.306149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.306149][T12188] [ 2262.306149][T12188] Uninit was stored to memory at: [ 2262.306149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2262.306149][T12188] __msan_chain_origin+0x57/0xa0 [ 2262.306149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2262.306149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2262.306149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2262.306149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2262.306149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.306149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.306149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2262.306149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2262.306149][T12188] do_SYSENTER_32+0x73/0x90 [ 2262.306149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.306149][T12188] [ 2262.306149][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2262.306149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2262.306149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2263.558613][T12214] not chained 210000 origins [ 2263.565024][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2263.566167][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.566167][T12214] Call Trace: [ 2263.566167][T12214] dump_stack+0x21c/0x280 [ 2263.566167][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2263.566167][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2263.566167][T12214] ? __wake_up+0x1fc/0x250 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2263.566167][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2263.566167][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2263.566167][T12214] ? _copy_from_user+0x1fd/0x300 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] __msan_chain_origin+0x57/0xa0 [ 2263.566167][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2263.566167][T12214] get_compat_msghdr+0x108/0x2b0 [ 2263.566167][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2263.566167][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2263.566167][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2263.566167][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2263.566167][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.566167][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.566167][T12214] __do_fast_syscall_32+0x102/0x160 [ 2263.566167][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2263.566167][T12214] do_SYSENTER_32+0x73/0x90 [ 2263.801053][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.801053][T12214] RIP: 0023:0xf7f01549 [ 2263.801053][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2263.801053][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2263.801053][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2263.801053][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2263.801053][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2263.801053][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2263.801053][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2263.801053][T12214] Uninit was stored to memory at: [ 2263.801053][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2263.801053][T12214] __msan_chain_origin+0x57/0xa0 [ 2263.801053][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2263.801053][T12214] get_compat_msghdr+0x108/0x2b0 [ 2263.801053][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2263.801053][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2263.801053][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.801053][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.801053][T12214] __do_fast_syscall_32+0x102/0x160 [ 2263.801053][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2263.801053][T12214] do_SYSENTER_32+0x73/0x90 [ 2263.801053][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.801053][T12214] [ 2263.801053][T12214] Uninit was stored to memory at: [ 2263.801053][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2263.801053][T12214] __msan_chain_origin+0x57/0xa0 [ 2263.801053][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2263.801053][T12214] get_compat_msghdr+0x108/0x2b0 [ 2263.801053][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2263.801053][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2263.801053][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.801053][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.801053][T12214] __do_fast_syscall_32+0x102/0x160 [ 2263.801053][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2263.801053][T12214] do_SYSENTER_32+0x73/0x90 [ 2263.801053][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.801053][T12214] [ 2263.801053][T12214] Uninit was stored to memory at: [ 2263.801053][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2263.801053][T12214] __msan_chain_origin+0x57/0xa0 [ 2263.801053][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2263.801053][T12214] get_compat_msghdr+0x108/0x2b0 [ 2263.801053][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2263.801053][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2263.801053][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.801053][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.801053][T12214] __do_fast_syscall_32+0x102/0x160 [ 2263.801053][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2263.801053][T12214] do_SYSENTER_32+0x73/0x90 [ 2263.801053][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.801053][T12214] [ 2263.801053][T12214] Uninit was stored to memory at: [ 2263.801053][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2263.801053][T12214] __msan_chain_origin+0x57/0xa0 [ 2263.801053][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2263.801053][T12214] get_compat_msghdr+0x108/0x2b0 [ 2263.801053][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2263.801053][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2263.801053][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.801053][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.801053][T12214] __do_fast_syscall_32+0x102/0x160 [ 2263.801053][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2263.801053][T12214] do_SYSENTER_32+0x73/0x90 [ 2263.801053][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.801053][T12214] [ 2263.801053][T12214] Uninit was stored to memory at: [ 2263.801053][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2263.801053][T12214] __msan_chain_origin+0x57/0xa0 [ 2263.801053][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2263.801053][T12214] get_compat_msghdr+0x108/0x2b0 [ 2263.801053][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2263.801053][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2263.801053][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.801053][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.801053][T12214] __do_fast_syscall_32+0x102/0x160 [ 2263.801053][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2263.801053][T12214] do_SYSENTER_32+0x73/0x90 [ 2263.801053][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.801053][T12214] [ 2263.801053][T12214] Uninit was stored to memory at: [ 2263.801053][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2263.801053][T12214] __msan_chain_origin+0x57/0xa0 [ 2263.801053][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2263.801053][T12214] get_compat_msghdr+0x108/0x2b0 [ 2263.801053][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2263.801053][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2263.801053][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.801053][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.399448][T12188] not chained 220000 origins [ 2263.801053][T12214] __do_fast_syscall_32+0x102/0x160 [ 2264.406118][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2263.801053][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2264.406118][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.801053][T12214] do_SYSENTER_32+0x73/0x90 [ 2264.406118][T12188] Call Trace: [ 2263.801053][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.406118][T12188] dump_stack+0x21c/0x280 [ 2263.801053][T12214] [ 2264.406118][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2263.801053][T12214] Uninit was stored to memory at: [ 2264.406118][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2263.801053][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2264.406118][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2263.801053][T12214] __msan_chain_origin+0x57/0xa0 [ 2264.406118][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2263.801053][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2264.406118][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2263.801053][T12214] get_compat_msghdr+0x108/0x2b0 [ 2264.406118][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2263.801053][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2264.406118][T12188] ? __wake_up+0x1fc/0x250 [ 2263.801053][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2264.406118][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2263.801053][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.406118][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2263.801053][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.406118][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2263.801053][T12214] __do_fast_syscall_32+0x102/0x160 [ 2264.406118][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2263.801053][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2264.406118][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2263.801053][T12214] do_SYSENTER_32+0x73/0x90 [ 2264.406118][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2263.801053][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.406118][T12188] ? _copy_from_user+0x1fd/0x300 [ 2263.801053][T12214] [ 2264.406118][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2263.801053][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2264.406118][T12188] __msan_chain_origin+0x57/0xa0 [ 2263.801053][T12214] do_recvmmsg+0xbf/0x22f0 [ 2264.406118][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2263.801053][T12214] do_recvmmsg+0xbf/0x22f0 [ 2264.406118][T12188] get_compat_msghdr+0x108/0x2b0 [ 2264.641994][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2264.641994][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2264.641994][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2264.658213][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2264.658213][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2264.668930][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2264.668930][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2264.668930][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2264.668930][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2264.668930][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2264.668930][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.668930][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.668930][T12188] __do_fast_syscall_32+0x102/0x160 [ 2264.668930][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2264.668930][T12188] do_SYSENTER_32+0x73/0x90 [ 2264.668930][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.668930][T12188] RIP: 0023:0xf7f01549 [ 2264.668930][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2264.756444][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2264.756444][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2264.756444][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2264.756444][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2264.756444][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2264.756444][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2264.756444][T12188] Uninit was stored to memory at: [ 2264.756444][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2264.756444][T12188] __msan_chain_origin+0x57/0xa0 [ 2264.756444][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2264.756444][T12188] get_compat_msghdr+0x108/0x2b0 [ 2264.756444][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2264.756444][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2264.756444][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.756444][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.756444][T12188] __do_fast_syscall_32+0x102/0x160 [ 2264.756444][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2264.756444][T12188] do_SYSENTER_32+0x73/0x90 [ 2264.756444][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.756444][T12188] [ 2264.756444][T12188] Uninit was stored to memory at: [ 2264.756444][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2264.756444][T12188] __msan_chain_origin+0x57/0xa0 [ 2264.756444][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2264.756444][T12188] get_compat_msghdr+0x108/0x2b0 [ 2264.756444][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2264.756444][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2264.756444][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.756444][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.756444][T12188] __do_fast_syscall_32+0x102/0x160 [ 2264.756444][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2264.756444][T12188] do_SYSENTER_32+0x73/0x90 [ 2264.756444][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.756444][T12188] [ 2264.756444][T12188] Uninit was stored to memory at: [ 2264.756444][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2264.756444][T12188] __msan_chain_origin+0x57/0xa0 [ 2264.756444][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2264.756444][T12188] get_compat_msghdr+0x108/0x2b0 [ 2264.756444][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2264.756444][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2264.756444][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.756444][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.756444][T12188] __do_fast_syscall_32+0x102/0x160 [ 2264.756444][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2264.756444][T12188] do_SYSENTER_32+0x73/0x90 [ 2264.756444][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.756444][T12188] [ 2264.756444][T12188] Uninit was stored to memory at: [ 2264.756444][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2264.756444][T12188] __msan_chain_origin+0x57/0xa0 [ 2264.756444][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2264.756444][T12188] get_compat_msghdr+0x108/0x2b0 [ 2264.756444][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2264.756444][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2264.756444][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.756444][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.756444][T12188] __do_fast_syscall_32+0x102/0x160 [ 2264.756444][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2264.756444][T12188] do_SYSENTER_32+0x73/0x90 [ 2264.756444][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.756444][T12188] [ 2264.756444][T12188] Uninit was stored to memory at: [ 2264.756444][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2264.756444][T12188] __msan_chain_origin+0x57/0xa0 [ 2264.756444][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2264.756444][T12188] get_compat_msghdr+0x108/0x2b0 [ 2264.756444][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2264.756444][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2264.756444][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.756444][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.756444][T12188] __do_fast_syscall_32+0x102/0x160 [ 2264.756444][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2264.756444][T12188] do_SYSENTER_32+0x73/0x90 [ 2264.756444][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.756444][T12188] [ 2264.756444][T12188] Uninit was stored to memory at: [ 2264.756444][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2264.756444][T12188] __msan_chain_origin+0x57/0xa0 [ 2264.756444][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2264.756444][T12188] get_compat_msghdr+0x108/0x2b0 [ 2264.756444][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2264.756444][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2264.756444][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.756444][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.756444][T12188] __do_fast_syscall_32+0x102/0x160 [ 2264.756444][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2264.756444][T12188] do_SYSENTER_32+0x73/0x90 [ 2264.756444][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.756444][T12188] [ 2264.756444][T12188] Uninit was stored to memory at: [ 2264.756444][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2264.756444][T12188] __msan_chain_origin+0x57/0xa0 [ 2264.756444][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2264.756444][T12188] get_compat_msghdr+0x108/0x2b0 [ 2264.756444][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2264.756444][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2264.756444][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.756444][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.756444][T12188] __do_fast_syscall_32+0x102/0x160 [ 2264.756444][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2264.756444][T12188] do_SYSENTER_32+0x73/0x90 [ 2264.756444][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.756444][T12188] [ 2264.756444][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2264.756444][T12188] do_recvmmsg+0xbf/0x22f0 [ 2264.756444][T12188] do_recvmmsg+0xbf/0x22f0 [ 2265.645076][T12214] not chained 230000 origins [ 2265.649671][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2265.649671][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2265.649671][T12214] Call Trace: [ 2265.649671][T12214] dump_stack+0x21c/0x280 [ 2265.649671][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2265.649671][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2265.649671][T12214] ? __wake_up+0x1fc/0x250 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2265.649671][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2265.649671][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2265.649671][T12214] ? _copy_from_user+0x1fd/0x300 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] __msan_chain_origin+0x57/0xa0 [ 2265.649671][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2265.649671][T12214] get_compat_msghdr+0x108/0x2b0 [ 2265.649671][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2265.649671][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2265.649671][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2265.649671][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2265.649671][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.649671][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.649671][T12214] __do_fast_syscall_32+0x102/0x160 [ 2265.649671][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2265.649671][T12214] do_SYSENTER_32+0x73/0x90 [ 2265.649671][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.649671][T12214] RIP: 0023:0xf7f01549 [ 2265.649671][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2265.649671][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2265.649671][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2265.649671][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2265.649671][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2265.649671][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2265.649671][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2265.649671][T12214] Uninit was stored to memory at: [ 2265.649671][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2265.649671][T12214] __msan_chain_origin+0x57/0xa0 [ 2265.649671][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2265.649671][T12214] get_compat_msghdr+0x108/0x2b0 [ 2265.649671][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2265.649671][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2265.649671][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.649671][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.649671][T12214] __do_fast_syscall_32+0x102/0x160 [ 2265.649671][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2265.649671][T12214] do_SYSENTER_32+0x73/0x90 [ 2265.649671][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.649671][T12214] [ 2265.649671][T12214] Uninit was stored to memory at: [ 2265.649671][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2265.649671][T12214] __msan_chain_origin+0x57/0xa0 [ 2265.649671][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2265.649671][T12214] get_compat_msghdr+0x108/0x2b0 [ 2265.649671][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2265.649671][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2265.649671][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.649671][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.649671][T12214] __do_fast_syscall_32+0x102/0x160 [ 2265.649671][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2265.649671][T12214] do_SYSENTER_32+0x73/0x90 [ 2265.649671][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.649671][T12214] [ 2265.649671][T12214] Uninit was stored to memory at: [ 2265.649671][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2265.649671][T12214] __msan_chain_origin+0x57/0xa0 [ 2265.649671][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2265.649671][T12214] get_compat_msghdr+0x108/0x2b0 [ 2265.649671][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2265.649671][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2265.649671][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.649671][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.649671][T12214] __do_fast_syscall_32+0x102/0x160 [ 2265.649671][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2265.649671][T12214] do_SYSENTER_32+0x73/0x90 [ 2265.649671][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.649671][T12214] [ 2265.649671][T12214] Uninit was stored to memory at: [ 2265.649671][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2265.649671][T12214] __msan_chain_origin+0x57/0xa0 [ 2265.649671][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2265.649671][T12214] get_compat_msghdr+0x108/0x2b0 [ 2265.649671][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2265.649671][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2265.649671][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.649671][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.649671][T12214] __do_fast_syscall_32+0x102/0x160 [ 2265.649671][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2265.649671][T12214] do_SYSENTER_32+0x73/0x90 [ 2265.649671][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.649671][T12214] [ 2265.649671][T12214] Uninit was stored to memory at: [ 2265.649671][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2265.649671][T12214] __msan_chain_origin+0x57/0xa0 [ 2265.649671][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2265.649671][T12214] get_compat_msghdr+0x108/0x2b0 [ 2265.649671][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2265.649671][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2265.649671][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.649671][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.649671][T12214] __do_fast_syscall_32+0x102/0x160 [ 2265.649671][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2265.649671][T12214] do_SYSENTER_32+0x73/0x90 [ 2265.649671][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.649671][T12214] [ 2265.649671][T12214] Uninit was stored to memory at: [ 2265.649671][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2266.423195][T12214] __msan_chain_origin+0x57/0xa0 [ 2266.423195][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2266.423195][T12214] get_compat_msghdr+0x108/0x2b0 [ 2266.423195][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2266.423195][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2266.423195][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.423195][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.423195][T12214] __do_fast_syscall_32+0x102/0x160 [ 2266.423195][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2266.423195][T12214] do_SYSENTER_32+0x73/0x90 [ 2266.423195][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.423195][T12214] [ 2266.423195][T12214] Uninit was stored to memory at: [ 2266.423195][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2266.423195][T12214] __msan_chain_origin+0x57/0xa0 [ 2266.423195][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2266.423195][T12214] get_compat_msghdr+0x108/0x2b0 [ 2266.423195][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2266.423195][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2266.423195][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.423195][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.423195][T12214] __do_fast_syscall_32+0x102/0x160 [ 2266.423195][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2266.423195][T12214] do_SYSENTER_32+0x73/0x90 [ 2266.423195][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.423195][T12214] [ 2266.423195][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2266.423195][T12214] do_recvmmsg+0xbf/0x22f0 [ 2266.423195][T12214] do_recvmmsg+0xbf/0x22f0 [ 2266.773307][T12188] not chained 240000 origins [ 2266.776161][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2266.776161][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2266.776161][T12188] Call Trace: [ 2266.776161][T12188] dump_stack+0x21c/0x280 [ 2266.776161][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2266.776161][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2266.776161][T12188] ? __wake_up+0x1fc/0x250 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2266.776161][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2266.776161][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2266.776161][T12188] ? _copy_from_user+0x1fd/0x300 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] __msan_chain_origin+0x57/0xa0 [ 2266.776161][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2266.776161][T12188] get_compat_msghdr+0x108/0x2b0 [ 2266.776161][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2266.776161][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2266.776161][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2266.776161][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2266.776161][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.776161][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.776161][T12188] __do_fast_syscall_32+0x102/0x160 [ 2266.776161][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2266.776161][T12188] do_SYSENTER_32+0x73/0x90 [ 2266.776161][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.776161][T12188] RIP: 0023:0xf7f01549 [ 2266.776161][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2266.776161][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2266.776161][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2266.776161][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2266.776161][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2266.776161][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2266.776161][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2266.776161][T12188] Uninit was stored to memory at: [ 2266.776161][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2266.776161][T12188] __msan_chain_origin+0x57/0xa0 [ 2266.776161][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2266.776161][T12188] get_compat_msghdr+0x108/0x2b0 [ 2266.776161][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2266.776161][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2266.776161][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.776161][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.776161][T12188] __do_fast_syscall_32+0x102/0x160 [ 2266.776161][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2266.776161][T12188] do_SYSENTER_32+0x73/0x90 [ 2266.776161][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.776161][T12188] [ 2266.776161][T12188] Uninit was stored to memory at: [ 2266.776161][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2266.776161][T12188] __msan_chain_origin+0x57/0xa0 [ 2266.776161][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2266.776161][T12188] get_compat_msghdr+0x108/0x2b0 [ 2266.776161][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2266.776161][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2266.776161][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.776161][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.776161][T12188] __do_fast_syscall_32+0x102/0x160 [ 2266.776161][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2266.776161][T12188] do_SYSENTER_32+0x73/0x90 [ 2266.776161][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.776161][T12188] [ 2266.776161][T12188] Uninit was stored to memory at: [ 2266.776161][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2266.776161][T12188] __msan_chain_origin+0x57/0xa0 [ 2266.776161][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2266.776161][T12188] get_compat_msghdr+0x108/0x2b0 [ 2266.776161][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2266.776161][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2266.776161][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.776161][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.776161][T12188] __do_fast_syscall_32+0x102/0x160 [ 2266.776161][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2266.776161][T12188] do_SYSENTER_32+0x73/0x90 [ 2266.776161][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.776161][T12188] [ 2266.776161][T12188] Uninit was stored to memory at: [ 2266.776161][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2266.776161][T12188] __msan_chain_origin+0x57/0xa0 [ 2266.776161][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2266.776161][T12188] get_compat_msghdr+0x108/0x2b0 [ 2266.776161][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2266.776161][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2266.776161][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.776161][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.776161][T12188] __do_fast_syscall_32+0x102/0x160 [ 2266.776161][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2266.776161][T12188] do_SYSENTER_32+0x73/0x90 [ 2266.776161][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.776161][T12188] [ 2266.776161][T12188] Uninit was stored to memory at: [ 2266.776161][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2266.776161][T12188] __msan_chain_origin+0x57/0xa0 [ 2266.776161][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2266.776161][T12188] get_compat_msghdr+0x108/0x2b0 [ 2266.776161][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2266.776161][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2266.776161][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.776161][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.776161][T12188] __do_fast_syscall_32+0x102/0x160 [ 2266.776161][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2266.776161][T12188] do_SYSENTER_32+0x73/0x90 [ 2266.776161][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.776161][T12188] [ 2266.776161][T12188] Uninit was stored to memory at: [ 2266.776161][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2266.776161][T12188] __msan_chain_origin+0x57/0xa0 [ 2266.776161][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2266.776161][T12188] get_compat_msghdr+0x108/0x2b0 [ 2266.776161][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2266.776161][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2266.776161][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.776161][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.776161][T12188] __do_fast_syscall_32+0x102/0x160 [ 2266.776161][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2266.776161][T12188] do_SYSENTER_32+0x73/0x90 [ 2266.776161][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.776161][T12188] [ 2266.776161][T12188] Uninit was stored to memory at: [ 2266.776161][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2266.776161][T12188] __msan_chain_origin+0x57/0xa0 [ 2266.776161][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2266.776161][T12188] get_compat_msghdr+0x108/0x2b0 [ 2266.776161][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2266.776161][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2266.776161][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.776161][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.776161][T12188] __do_fast_syscall_32+0x102/0x160 [ 2266.776161][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2266.776161][T12188] do_SYSENTER_32+0x73/0x90 [ 2266.776161][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.776161][T12188] [ 2266.776161][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2266.776161][T12188] do_recvmmsg+0xbf/0x22f0 [ 2266.776161][T12188] do_recvmmsg+0xbf/0x22f0 [ 2268.068246][T12188] not chained 250000 origins [ 2268.072889][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2268.076484][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2268.076484][T12188] Call Trace: [ 2268.076484][T12188] dump_stack+0x21c/0x280 [ 2268.076484][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2268.076484][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2268.076484][T12188] ? __wake_up+0x1fc/0x250 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2268.076484][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2268.076484][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2268.076484][T12188] ? _copy_from_user+0x1fd/0x300 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] __msan_chain_origin+0x57/0xa0 [ 2268.076484][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2268.076484][T12188] get_compat_msghdr+0x108/0x2b0 [ 2268.076484][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2268.076484][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2268.076484][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2268.076484][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2268.076484][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.076484][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.076484][T12188] __do_fast_syscall_32+0x102/0x160 [ 2268.076484][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2268.076484][T12188] do_SYSENTER_32+0x73/0x90 [ 2268.076484][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.076484][T12188] RIP: 0023:0xf7f01549 [ 2268.076484][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2268.076484][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2268.076484][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2268.076484][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2268.076484][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2268.076484][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2268.076484][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2268.076484][T12188] Uninit was stored to memory at: [ 2268.076484][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2268.076484][T12188] __msan_chain_origin+0x57/0xa0 [ 2268.076484][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2268.076484][T12188] get_compat_msghdr+0x108/0x2b0 [ 2268.076484][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2268.076484][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2268.076484][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.076484][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.076484][T12188] __do_fast_syscall_32+0x102/0x160 [ 2268.076484][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2268.076484][T12188] do_SYSENTER_32+0x73/0x90 [ 2268.076484][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.076484][T12188] [ 2268.076484][T12188] Uninit was stored to memory at: [ 2268.076484][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2268.076484][T12188] __msan_chain_origin+0x57/0xa0 [ 2268.076484][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2268.076484][T12188] get_compat_msghdr+0x108/0x2b0 [ 2268.076484][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2268.076484][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2268.076484][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.076484][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.076484][T12188] __do_fast_syscall_32+0x102/0x160 [ 2268.076484][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2268.076484][T12188] do_SYSENTER_32+0x73/0x90 [ 2268.076484][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.076484][T12188] [ 2268.076484][T12188] Uninit was stored to memory at: [ 2268.076484][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2268.076484][T12188] __msan_chain_origin+0x57/0xa0 [ 2268.076484][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2268.076484][T12188] get_compat_msghdr+0x108/0x2b0 [ 2268.076484][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2268.076484][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2268.076484][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.076484][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.076484][T12188] __do_fast_syscall_32+0x102/0x160 [ 2268.076484][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2268.076484][T12188] do_SYSENTER_32+0x73/0x90 [ 2268.076484][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.076484][T12188] [ 2268.076484][T12188] Uninit was stored to memory at: [ 2268.076484][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2268.076484][T12188] __msan_chain_origin+0x57/0xa0 [ 2268.076484][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2268.076484][T12188] get_compat_msghdr+0x108/0x2b0 [ 2268.076484][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2268.076484][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2268.076484][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.076484][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.076484][T12188] __do_fast_syscall_32+0x102/0x160 [ 2268.076484][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2268.076484][T12188] do_SYSENTER_32+0x73/0x90 [ 2268.076484][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.076484][T12188] [ 2268.076484][T12188] Uninit was stored to memory at: [ 2268.076484][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2268.076484][T12188] __msan_chain_origin+0x57/0xa0 [ 2268.076484][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2268.076484][T12188] get_compat_msghdr+0x108/0x2b0 [ 2268.076484][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2268.076484][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2268.076484][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.076484][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.076484][T12188] __do_fast_syscall_32+0x102/0x160 [ 2268.076484][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2268.076484][T12188] do_SYSENTER_32+0x73/0x90 [ 2268.076484][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.076484][T12188] [ 2268.076484][T12188] Uninit was stored to memory at: [ 2268.076484][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2268.076484][T12188] __msan_chain_origin+0x57/0xa0 [ 2268.076484][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2268.076484][T12188] get_compat_msghdr+0x108/0x2b0 [ 2268.076484][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2268.076484][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2268.076484][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.076484][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.076484][T12188] __do_fast_syscall_32+0x102/0x160 [ 2268.076484][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2268.076484][T12188] do_SYSENTER_32+0x73/0x90 [ 2268.076484][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.076484][T12188] [ 2268.076484][T12188] Uninit was stored to memory at: [ 2268.076484][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2268.076484][T12188] __msan_chain_origin+0x57/0xa0 [ 2268.076484][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2268.076484][T12188] get_compat_msghdr+0x108/0x2b0 [ 2268.076484][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2268.076484][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2268.076484][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.076484][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.076484][T12188] __do_fast_syscall_32+0x102/0x160 [ 2268.076484][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2268.076484][T12188] do_SYSENTER_32+0x73/0x90 [ 2268.076484][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.076484][T12188] [ 2268.076484][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2268.076484][T12188] do_recvmmsg+0xbf/0x22f0 [ 2268.076484][T12188] do_recvmmsg+0xbf/0x22f0 [ 2269.179177][T12188] not chained 260000 origins [ 2269.183830][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2269.186139][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2269.186139][T12188] Call Trace: [ 2269.186139][T12188] dump_stack+0x21c/0x280 [ 2269.186139][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2269.186139][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2269.186139][T12188] ? __wake_up+0x1fc/0x250 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2269.186139][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2269.186139][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2269.186139][T12188] ? _copy_from_user+0x1fd/0x300 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] __msan_chain_origin+0x57/0xa0 [ 2269.186139][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2269.186139][T12188] get_compat_msghdr+0x108/0x2b0 [ 2269.186139][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2269.186139][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2269.186139][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2269.186139][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2269.186139][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.186139][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.186139][T12188] __do_fast_syscall_32+0x102/0x160 [ 2269.186139][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2269.186139][T12188] do_SYSENTER_32+0x73/0x90 [ 2269.186139][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.186139][T12188] RIP: 0023:0xf7f01549 [ 2269.186139][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2269.186139][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2269.186139][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2269.186139][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2269.186139][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2269.186139][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2269.186139][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2269.186139][T12188] Uninit was stored to memory at: [ 2269.186139][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2269.186139][T12188] __msan_chain_origin+0x57/0xa0 [ 2269.186139][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2269.186139][T12188] get_compat_msghdr+0x108/0x2b0 [ 2269.186139][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2269.186139][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2269.186139][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.186139][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.186139][T12188] __do_fast_syscall_32+0x102/0x160 [ 2269.186139][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2269.186139][T12188] do_SYSENTER_32+0x73/0x90 [ 2269.186139][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.186139][T12188] [ 2269.186139][T12188] Uninit was stored to memory at: [ 2269.186139][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2269.186139][T12188] __msan_chain_origin+0x57/0xa0 [ 2269.186139][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2269.186139][T12188] get_compat_msghdr+0x108/0x2b0 [ 2269.186139][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2269.186139][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2269.186139][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.186139][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.186139][T12188] __do_fast_syscall_32+0x102/0x160 [ 2269.186139][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2269.186139][T12188] do_SYSENTER_32+0x73/0x90 [ 2269.186139][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.186139][T12188] [ 2269.186139][T12188] Uninit was stored to memory at: [ 2269.186139][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2269.186139][T12188] __msan_chain_origin+0x57/0xa0 [ 2269.186139][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2269.186139][T12188] get_compat_msghdr+0x108/0x2b0 [ 2269.186139][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2269.186139][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2269.186139][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.186139][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.186139][T12188] __do_fast_syscall_32+0x102/0x160 [ 2269.186139][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2269.186139][T12188] do_SYSENTER_32+0x73/0x90 [ 2269.186139][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.186139][T12188] [ 2269.186139][T12188] Uninit was stored to memory at: [ 2269.186139][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2269.186139][T12188] __msan_chain_origin+0x57/0xa0 [ 2269.186139][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2269.186139][T12188] get_compat_msghdr+0x108/0x2b0 [ 2269.186139][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2269.186139][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2269.186139][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.186139][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.186139][T12188] __do_fast_syscall_32+0x102/0x160 [ 2269.186139][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2269.186139][T12188] do_SYSENTER_32+0x73/0x90 [ 2269.186139][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.186139][T12188] [ 2269.186139][T12188] Uninit was stored to memory at: [ 2269.186139][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2269.186139][T12188] __msan_chain_origin+0x57/0xa0 [ 2269.186139][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2269.186139][T12188] get_compat_msghdr+0x108/0x2b0 [ 2269.186139][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2269.186139][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2269.186139][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.186139][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.186139][T12188] __do_fast_syscall_32+0x102/0x160 [ 2269.186139][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2269.186139][T12188] do_SYSENTER_32+0x73/0x90 [ 2269.186139][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.186139][T12188] [ 2269.186139][T12188] Uninit was stored to memory at: [ 2269.186139][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2269.186139][T12188] __msan_chain_origin+0x57/0xa0 [ 2269.186139][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2269.186139][T12188] get_compat_msghdr+0x108/0x2b0 [ 2269.186139][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2269.186139][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2269.186139][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.186139][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.186139][T12188] __do_fast_syscall_32+0x102/0x160 [ 2269.186139][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2269.186139][T12188] do_SYSENTER_32+0x73/0x90 [ 2269.186139][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.186139][T12188] [ 2269.186139][T12188] Uninit was stored to memory at: [ 2269.186139][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2269.186139][T12188] __msan_chain_origin+0x57/0xa0 [ 2269.186139][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2269.186139][T12188] get_compat_msghdr+0x108/0x2b0 [ 2269.186139][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2269.186139][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2269.186139][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.186139][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.186139][T12188] __do_fast_syscall_32+0x102/0x160 [ 2269.186139][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2269.186139][T12188] do_SYSENTER_32+0x73/0x90 [ 2269.186139][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.186139][T12188] [ 2269.186139][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2269.186139][T12188] do_recvmmsg+0xbf/0x22f0 [ 2269.186139][T12188] do_recvmmsg+0xbf/0x22f0 [ 2270.329995][T12188] not chained 270000 origins [ 2270.334651][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2270.336162][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2270.336162][T12188] Call Trace: [ 2270.336162][T12188] dump_stack+0x21c/0x280 [ 2270.336162][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2270.336162][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2270.336162][T12188] ? __wake_up+0x1fc/0x250 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2270.336162][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2270.336162][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2270.336162][T12188] ? _copy_from_user+0x1fd/0x300 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] __msan_chain_origin+0x57/0xa0 [ 2270.336162][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2270.336162][T12188] get_compat_msghdr+0x108/0x2b0 [ 2270.336162][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2270.336162][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2270.336162][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2270.336162][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2270.336162][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.336162][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.336162][T12188] __do_fast_syscall_32+0x102/0x160 [ 2270.336162][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2270.336162][T12188] do_SYSENTER_32+0x73/0x90 [ 2270.336162][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.336162][T12188] RIP: 0023:0xf7f01549 [ 2270.336162][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2270.336162][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2270.336162][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2270.336162][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2270.336162][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2270.336162][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2270.336162][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2270.336162][T12188] Uninit was stored to memory at: [ 2270.336162][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2270.336162][T12188] __msan_chain_origin+0x57/0xa0 [ 2270.336162][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2270.336162][T12188] get_compat_msghdr+0x108/0x2b0 [ 2270.336162][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2270.336162][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2270.336162][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.336162][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.336162][T12188] __do_fast_syscall_32+0x102/0x160 [ 2270.336162][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2270.336162][T12188] do_SYSENTER_32+0x73/0x90 [ 2270.336162][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.336162][T12188] [ 2270.336162][T12188] Uninit was stored to memory at: [ 2270.336162][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2270.336162][T12188] __msan_chain_origin+0x57/0xa0 [ 2270.336162][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2270.336162][T12188] get_compat_msghdr+0x108/0x2b0 [ 2270.336162][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2270.336162][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2270.336162][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.336162][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.336162][T12188] __do_fast_syscall_32+0x102/0x160 [ 2270.336162][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2270.336162][T12188] do_SYSENTER_32+0x73/0x90 [ 2270.336162][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.336162][T12188] [ 2270.336162][T12188] Uninit was stored to memory at: [ 2270.336162][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2270.336162][T12188] __msan_chain_origin+0x57/0xa0 [ 2270.336162][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2270.336162][T12188] get_compat_msghdr+0x108/0x2b0 [ 2270.336162][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2270.336162][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2270.336162][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.336162][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.336162][T12188] __do_fast_syscall_32+0x102/0x160 [ 2270.336162][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2270.336162][T12188] do_SYSENTER_32+0x73/0x90 [ 2270.336162][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.336162][T12188] [ 2270.336162][T12188] Uninit was stored to memory at: [ 2270.336162][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2270.336162][T12188] __msan_chain_origin+0x57/0xa0 [ 2270.336162][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2270.336162][T12188] get_compat_msghdr+0x108/0x2b0 [ 2270.336162][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2270.336162][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2270.336162][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.336162][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.336162][T12188] __do_fast_syscall_32+0x102/0x160 [ 2270.336162][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2270.336162][T12188] do_SYSENTER_32+0x73/0x90 [ 2270.336162][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.336162][T12188] [ 2270.336162][T12188] Uninit was stored to memory at: [ 2270.336162][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2270.336162][T12188] __msan_chain_origin+0x57/0xa0 [ 2270.336162][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2270.336162][T12188] get_compat_msghdr+0x108/0x2b0 [ 2270.336162][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2270.336162][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2270.336162][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.336162][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.336162][T12188] __do_fast_syscall_32+0x102/0x160 [ 2270.336162][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2270.336162][T12188] do_SYSENTER_32+0x73/0x90 [ 2270.336162][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.336162][T12188] [ 2270.336162][T12188] Uninit was stored to memory at: [ 2270.336162][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2270.336162][T12188] __msan_chain_origin+0x57/0xa0 [ 2270.336162][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2270.336162][T12188] get_compat_msghdr+0x108/0x2b0 [ 2270.336162][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2270.336162][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2270.336162][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.336162][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.336162][T12188] __do_fast_syscall_32+0x102/0x160 [ 2270.336162][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2270.336162][T12188] do_SYSENTER_32+0x73/0x90 [ 2270.336162][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.336162][T12188] [ 2270.336162][T12188] Uninit was stored to memory at: [ 2270.336162][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2270.336162][T12188] __msan_chain_origin+0x57/0xa0 [ 2270.336162][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2270.336162][T12188] get_compat_msghdr+0x108/0x2b0 [ 2270.336162][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2270.336162][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2270.336162][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.336162][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.336162][T12188] __do_fast_syscall_32+0x102/0x160 [ 2270.336162][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2270.336162][T12188] do_SYSENTER_32+0x73/0x90 [ 2270.336162][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.336162][T12188] [ 2270.336162][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2270.336162][T12188] do_recvmmsg+0xbf/0x22f0 [ 2270.336162][T12188] do_recvmmsg+0xbf/0x22f0 [ 2271.454277][T12214] not chained 280000 origins [ 2271.456160][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2271.456160][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2271.456160][T12214] Call Trace: [ 2271.456160][T12214] dump_stack+0x21c/0x280 [ 2271.456160][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2271.456160][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2271.456160][T12214] ? __wake_up+0x1fc/0x250 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2271.456160][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2271.456160][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2271.456160][T12214] ? _copy_from_user+0x1fd/0x300 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] __msan_chain_origin+0x57/0xa0 [ 2271.456160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2271.456160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2271.456160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2271.456160][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2271.456160][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2271.456160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2271.456160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.456160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.456160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2271.456160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2271.456160][T12214] do_SYSENTER_32+0x73/0x90 [ 2271.456160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.456160][T12214] RIP: 0023:0xf7f01549 [ 2271.456160][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2271.456160][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2271.456160][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2271.456160][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2271.456160][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2271.456160][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2271.456160][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2271.456160][T12214] Uninit was stored to memory at: [ 2271.456160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2271.456160][T12214] __msan_chain_origin+0x57/0xa0 [ 2271.456160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2271.456160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2271.456160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2271.456160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2271.456160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.456160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.456160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2271.456160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2271.456160][T12214] do_SYSENTER_32+0x73/0x90 [ 2271.456160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.456160][T12214] [ 2271.456160][T12214] Uninit was stored to memory at: [ 2271.456160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2271.456160][T12214] __msan_chain_origin+0x57/0xa0 [ 2271.456160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2271.456160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2271.456160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2271.456160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2271.456160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.456160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.456160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2271.456160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2271.456160][T12214] do_SYSENTER_32+0x73/0x90 [ 2271.456160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.456160][T12214] [ 2271.456160][T12214] Uninit was stored to memory at: [ 2271.456160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2271.456160][T12214] __msan_chain_origin+0x57/0xa0 [ 2271.456160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2271.456160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2271.456160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2271.456160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2271.456160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.456160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.456160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2271.456160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2271.456160][T12214] do_SYSENTER_32+0x73/0x90 [ 2271.456160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.456160][T12214] [ 2271.456160][T12214] Uninit was stored to memory at: [ 2271.456160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2271.456160][T12214] __msan_chain_origin+0x57/0xa0 [ 2271.456160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2271.456160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2271.456160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2271.456160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2271.456160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.456160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.456160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2271.456160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2271.456160][T12214] do_SYSENTER_32+0x73/0x90 [ 2271.456160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.456160][T12214] [ 2271.456160][T12214] Uninit was stored to memory at: [ 2271.456160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2271.456160][T12214] __msan_chain_origin+0x57/0xa0 [ 2271.456160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2271.456160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2271.456160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2271.456160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2271.456160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.456160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.456160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2271.456160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2271.456160][T12214] do_SYSENTER_32+0x73/0x90 [ 2271.456160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.456160][T12214] [ 2271.456160][T12214] Uninit was stored to memory at: [ 2271.456160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2271.456160][T12214] __msan_chain_origin+0x57/0xa0 [ 2271.456160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2271.456160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2271.456160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2271.456160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2271.456160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.456160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.456160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2271.456160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2271.456160][T12214] do_SYSENTER_32+0x73/0x90 [ 2271.456160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.456160][T12214] [ 2271.456160][T12214] Uninit was stored to memory at: [ 2271.456160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2271.456160][T12214] __msan_chain_origin+0x57/0xa0 [ 2271.456160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2271.456160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2271.456160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2271.456160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2271.456160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.456160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.456160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2271.456160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2271.456160][T12214] do_SYSENTER_32+0x73/0x90 [ 2271.456160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.456160][T12214] [ 2271.456160][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2271.456160][T12214] do_recvmmsg+0xbf/0x22f0 [ 2271.456160][T12214] do_recvmmsg+0xbf/0x22f0 [ 2272.458386][T12214] not chained 290000 origins [ 2272.464715][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2272.466154][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2272.466154][T12214] Call Trace: [ 2272.466154][T12214] dump_stack+0x21c/0x280 [ 2272.466154][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2272.466154][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2272.466154][T12214] ? __wake_up+0x1fc/0x250 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2272.466154][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2272.466154][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2272.466154][T12214] ? _copy_from_user+0x1fd/0x300 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] __msan_chain_origin+0x57/0xa0 [ 2272.466154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2272.466154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2272.466154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2272.466154][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2272.466154][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2272.466154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2272.466154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.466154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.466154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2272.466154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2272.466154][T12214] do_SYSENTER_32+0x73/0x90 [ 2272.466154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.466154][T12214] RIP: 0023:0xf7f01549 [ 2272.466154][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2272.466154][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2272.466154][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2272.466154][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2272.466154][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2272.466154][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2272.466154][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2272.466154][T12214] Uninit was stored to memory at: [ 2272.466154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2272.466154][T12214] __msan_chain_origin+0x57/0xa0 [ 2272.466154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2272.466154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2272.466154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2272.466154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2272.466154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.466154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.466154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2272.466154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2272.466154][T12214] do_SYSENTER_32+0x73/0x90 [ 2272.466154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.466154][T12214] [ 2272.466154][T12214] Uninit was stored to memory at: [ 2272.466154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2272.466154][T12214] __msan_chain_origin+0x57/0xa0 [ 2272.466154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2272.466154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2272.466154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2272.466154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2272.466154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.466154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.466154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2272.466154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2272.466154][T12214] do_SYSENTER_32+0x73/0x90 [ 2272.466154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.466154][T12214] [ 2272.466154][T12214] Uninit was stored to memory at: [ 2272.466154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2272.466154][T12214] __msan_chain_origin+0x57/0xa0 [ 2272.466154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2272.466154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2272.466154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2272.466154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2272.466154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.466154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.466154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2272.466154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2272.466154][T12214] do_SYSENTER_32+0x73/0x90 [ 2272.466154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.466154][T12214] [ 2272.466154][T12214] Uninit was stored to memory at: [ 2272.466154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2272.466154][T12214] __msan_chain_origin+0x57/0xa0 [ 2272.466154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2272.466154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2272.466154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2272.466154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2272.466154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.466154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.466154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2272.466154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2272.466154][T12214] do_SYSENTER_32+0x73/0x90 [ 2272.466154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.466154][T12214] [ 2272.466154][T12214] Uninit was stored to memory at: [ 2272.466154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2272.466154][T12214] __msan_chain_origin+0x57/0xa0 [ 2272.466154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2272.466154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2272.466154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2272.466154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2272.466154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.466154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.466154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2272.466154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2272.466154][T12214] do_SYSENTER_32+0x73/0x90 [ 2272.466154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.466154][T12214] [ 2272.466154][T12214] Uninit was stored to memory at: [ 2272.466154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2272.466154][T12214] __msan_chain_origin+0x57/0xa0 [ 2272.466154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2272.466154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2272.466154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2272.466154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2272.466154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.466154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.466154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2272.466154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2272.466154][T12214] do_SYSENTER_32+0x73/0x90 [ 2272.466154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.466154][T12214] [ 2272.466154][T12214] Uninit was stored to memory at: [ 2272.466154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2272.466154][T12214] __msan_chain_origin+0x57/0xa0 [ 2272.466154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2272.466154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2272.466154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2272.466154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2272.466154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.466154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.466154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2272.466154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2272.466154][T12214] do_SYSENTER_32+0x73/0x90 [ 2272.466154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.466154][T12214] [ 2272.466154][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2272.466154][T12214] do_recvmmsg+0xbf/0x22f0 [ 2272.466154][T12214] do_recvmmsg+0xbf/0x22f0 [ 2273.685872][T12188] not chained 300000 origins [ 2273.686111][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2273.686111][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2273.686111][T12188] Call Trace: [ 2273.686111][T12188] dump_stack+0x21c/0x280 [ 2273.686111][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2273.686111][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2273.726521][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2273.726521][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2273.726521][T12188] ? __wake_up+0x1fc/0x250 [ 2273.726521][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2273.726521][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2273.726521][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2273.726521][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2273.726521][T12188] ? _copy_from_user+0x1fd/0x300 [ 2273.726521][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] __msan_chain_origin+0x57/0xa0 [ 2273.726521][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2273.726521][T12188] get_compat_msghdr+0x108/0x2b0 [ 2273.726521][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2273.726521][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2273.726521][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2273.726521][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2273.726521][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2273.726521][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2273.726521][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2273.726521][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.726521][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.726521][T12188] __do_fast_syscall_32+0x102/0x160 [ 2273.726521][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2273.726521][T12188] do_SYSENTER_32+0x73/0x90 [ 2273.726521][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.726521][T12188] RIP: 0023:0xf7f01549 [ 2273.726521][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2273.726521][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2273.726521][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2273.726521][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2273.726521][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2273.726521][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2273.726521][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2273.726521][T12188] Uninit was stored to memory at: [ 2273.726521][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2273.726521][T12188] __msan_chain_origin+0x57/0xa0 [ 2273.726521][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2273.726521][T12188] get_compat_msghdr+0x108/0x2b0 [ 2273.726521][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2273.726521][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2273.726521][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.726521][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.726521][T12188] __do_fast_syscall_32+0x102/0x160 [ 2273.726521][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2273.726521][T12188] do_SYSENTER_32+0x73/0x90 [ 2273.726521][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.726521][T12188] [ 2273.726521][T12188] Uninit was stored to memory at: [ 2273.726521][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2273.726521][T12188] __msan_chain_origin+0x57/0xa0 [ 2273.726521][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2273.726521][T12188] get_compat_msghdr+0x108/0x2b0 [ 2273.726521][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2273.726521][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2273.726521][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.726521][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.726521][T12188] __do_fast_syscall_32+0x102/0x160 [ 2273.726521][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2273.726521][T12188] do_SYSENTER_32+0x73/0x90 [ 2273.726521][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.726521][T12188] [ 2273.726521][T12188] Uninit was stored to memory at: [ 2273.726521][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2273.726521][T12188] __msan_chain_origin+0x57/0xa0 [ 2273.726521][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2273.726521][T12188] get_compat_msghdr+0x108/0x2b0 [ 2273.726521][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2273.726521][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2273.726521][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.726521][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.726521][T12188] __do_fast_syscall_32+0x102/0x160 [ 2273.726521][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2273.726521][T12188] do_SYSENTER_32+0x73/0x90 [ 2273.726521][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.726521][T12188] [ 2273.726521][T12188] Uninit was stored to memory at: [ 2273.726521][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2273.726521][T12188] __msan_chain_origin+0x57/0xa0 [ 2273.726521][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2273.726521][T12188] get_compat_msghdr+0x108/0x2b0 [ 2273.726521][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2273.726521][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2273.726521][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.726521][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.726521][T12188] __do_fast_syscall_32+0x102/0x160 [ 2273.726521][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2273.726521][T12188] do_SYSENTER_32+0x73/0x90 [ 2273.726521][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.726521][T12188] [ 2273.726521][T12188] Uninit was stored to memory at: [ 2273.726521][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2273.726521][T12188] __msan_chain_origin+0x57/0xa0 [ 2273.726521][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2273.726521][T12188] get_compat_msghdr+0x108/0x2b0 [ 2273.726521][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2273.726521][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2273.726521][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.726521][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.726521][T12188] __do_fast_syscall_32+0x102/0x160 [ 2273.726521][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2273.726521][T12188] do_SYSENTER_32+0x73/0x90 [ 2273.726521][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.726521][T12188] [ 2273.726521][T12188] Uninit was stored to memory at: [ 2273.726521][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2273.726521][T12188] __msan_chain_origin+0x57/0xa0 [ 2273.726521][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2273.726521][T12188] get_compat_msghdr+0x108/0x2b0 [ 2273.726521][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2273.726521][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2273.726521][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.726521][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.726521][T12188] __do_fast_syscall_32+0x102/0x160 [ 2274.406401][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2274.406401][T12188] do_SYSENTER_32+0x73/0x90 [ 2274.406401][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.406401][T12188] [ 2274.406401][T12188] Uninit was stored to memory at: [ 2274.406401][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2274.406401][T12188] __msan_chain_origin+0x57/0xa0 [ 2274.406401][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2274.406401][T12188] get_compat_msghdr+0x108/0x2b0 [ 2274.406401][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2274.406401][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2274.406401][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.406401][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.406401][T12188] __do_fast_syscall_32+0x102/0x160 [ 2274.406401][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2274.406401][T12188] do_SYSENTER_32+0x73/0x90 [ 2274.406401][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.406401][T12188] [ 2274.406401][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2274.406401][T12188] do_recvmmsg+0xbf/0x22f0 [ 2274.406401][T12188] do_recvmmsg+0xbf/0x22f0 [ 2274.703292][T12214] not chained 310000 origins [ 2274.706141][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2274.706141][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2274.706141][T12214] Call Trace: [ 2274.706141][T12214] dump_stack+0x21c/0x280 [ 2274.706141][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2274.706141][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2274.706141][T12214] ? __wake_up+0x1fc/0x250 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2274.706141][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2274.706141][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2274.706141][T12214] ? _copy_from_user+0x1fd/0x300 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] __msan_chain_origin+0x57/0xa0 [ 2274.706141][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2274.706141][T12214] get_compat_msghdr+0x108/0x2b0 [ 2274.706141][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2274.706141][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2274.706141][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2274.706141][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2274.706141][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.706141][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.706141][T12214] __do_fast_syscall_32+0x102/0x160 [ 2274.706141][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2274.706141][T12214] do_SYSENTER_32+0x73/0x90 [ 2274.706141][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.706141][T12214] RIP: 0023:0xf7f01549 [ 2274.706141][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2274.706141][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2274.706141][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2274.706141][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2274.706141][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2274.706141][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2274.706141][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2274.706141][T12214] Uninit was stored to memory at: [ 2274.706141][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2274.706141][T12214] __msan_chain_origin+0x57/0xa0 [ 2274.706141][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2274.706141][T12214] get_compat_msghdr+0x108/0x2b0 [ 2274.706141][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2274.706141][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2274.706141][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.706141][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.706141][T12214] __do_fast_syscall_32+0x102/0x160 [ 2274.706141][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2274.706141][T12214] do_SYSENTER_32+0x73/0x90 [ 2274.706141][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.706141][T12214] [ 2274.706141][T12214] Uninit was stored to memory at: [ 2274.706141][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2274.706141][T12214] __msan_chain_origin+0x57/0xa0 [ 2274.706141][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2274.706141][T12214] get_compat_msghdr+0x108/0x2b0 [ 2274.706141][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2274.706141][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2274.706141][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.706141][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.706141][T12214] __do_fast_syscall_32+0x102/0x160 [ 2274.706141][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2274.706141][T12214] do_SYSENTER_32+0x73/0x90 [ 2274.706141][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.706141][T12214] [ 2274.706141][T12214] Uninit was stored to memory at: [ 2274.706141][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2274.706141][T12214] __msan_chain_origin+0x57/0xa0 [ 2274.706141][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2274.706141][T12214] get_compat_msghdr+0x108/0x2b0 [ 2274.706141][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2274.706141][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2274.706141][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.706141][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.706141][T12214] __do_fast_syscall_32+0x102/0x160 [ 2274.706141][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2274.706141][T12214] do_SYSENTER_32+0x73/0x90 [ 2274.706141][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.706141][T12214] [ 2274.706141][T12214] Uninit was stored to memory at: [ 2274.706141][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2274.706141][T12214] __msan_chain_origin+0x57/0xa0 [ 2274.706141][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2274.706141][T12214] get_compat_msghdr+0x108/0x2b0 [ 2274.706141][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2274.706141][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2274.706141][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.706141][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.706141][T12214] __do_fast_syscall_32+0x102/0x160 [ 2274.706141][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2274.706141][T12214] do_SYSENTER_32+0x73/0x90 [ 2274.706141][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.706141][T12214] [ 2274.706141][T12214] Uninit was stored to memory at: [ 2274.706141][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2274.706141][T12214] __msan_chain_origin+0x57/0xa0 [ 2274.706141][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2274.706141][T12214] get_compat_msghdr+0x108/0x2b0 [ 2274.706141][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2274.706141][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2274.706141][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.706141][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.706141][T12214] __do_fast_syscall_32+0x102/0x160 [ 2274.706141][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2274.706141][T12214] do_SYSENTER_32+0x73/0x90 [ 2274.706141][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.706141][T12214] [ 2275.366449][T12214] Uninit was stored to memory at: [ 2275.366449][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2275.366449][T12214] __msan_chain_origin+0x57/0xa0 [ 2275.366449][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2275.383984][T12214] get_compat_msghdr+0x108/0x2b0 [ 2275.383984][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2275.383984][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2275.383984][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.383984][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.383984][T12214] __do_fast_syscall_32+0x102/0x160 [ 2275.383984][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2275.383984][T12214] do_SYSENTER_32+0x73/0x90 [ 2275.383984][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.383984][T12214] [ 2275.383984][T12214] Uninit was stored to memory at: [ 2275.383984][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2275.383984][T12214] __msan_chain_origin+0x57/0xa0 [ 2275.383984][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2275.383984][T12214] get_compat_msghdr+0x108/0x2b0 [ 2275.383984][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2275.383984][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2275.383984][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.383984][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.383984][T12214] __do_fast_syscall_32+0x102/0x160 [ 2275.383984][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2275.383984][T12214] do_SYSENTER_32+0x73/0x90 [ 2275.383984][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.383984][T12214] [ 2275.383984][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2275.383984][T12214] do_recvmmsg+0xbf/0x22f0 [ 2275.383984][T12214] do_recvmmsg+0xbf/0x22f0 [ 2275.730046][T12214] not chained 320000 origins [ 2275.734683][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2275.736115][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2275.736115][T12214] Call Trace: [ 2275.736115][T12214] dump_stack+0x21c/0x280 [ 2275.736115][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2275.766367][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.766367][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2275.766367][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.766367][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2275.766367][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2275.797873][T12214] ? __wake_up+0x1fc/0x250 [ 2275.797873][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.797873][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2275.797873][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2275.797873][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.797873][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2275.797873][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2275.797873][T12214] ? _copy_from_user+0x1fd/0x300 [ 2275.797873][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.797873][T12214] __msan_chain_origin+0x57/0xa0 [ 2275.797873][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2275.797873][T12214] get_compat_msghdr+0x108/0x2b0 [ 2275.797873][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2275.797873][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.797873][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2275.797873][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.797873][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2275.797873][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2275.797873][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2275.797873][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2275.797873][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.797873][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2275.797873][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.797873][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.797873][T12214] __do_fast_syscall_32+0x102/0x160 [ 2275.797873][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2275.797873][T12214] do_SYSENTER_32+0x73/0x90 [ 2275.797873][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.797873][T12214] RIP: 0023:0xf7f01549 [ 2275.797873][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2275.797873][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2275.797873][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2275.797873][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2275.797873][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2276.006424][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2276.006424][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2276.006424][T12214] Uninit was stored to memory at: [ 2276.006424][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2276.006424][T12214] __msan_chain_origin+0x57/0xa0 [ 2276.006424][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2276.006424][T12214] get_compat_msghdr+0x108/0x2b0 [ 2276.006424][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2276.056922][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2276.056922][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.056922][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.056922][T12214] __do_fast_syscall_32+0x102/0x160 [ 2276.056922][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2276.056922][T12214] do_SYSENTER_32+0x73/0x90 [ 2276.056922][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.056922][T12214] [ 2276.056922][T12214] Uninit was stored to memory at: [ 2276.056922][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2276.108181][T12188] not chained 330000 origins [ 2276.056922][T12214] __msan_chain_origin+0x57/0xa0 [ 2276.114200][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2276.056922][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2276.116152][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2276.056922][T12214] get_compat_msghdr+0x108/0x2b0 [ 2276.116152][T12188] Call Trace: [ 2276.056922][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2276.116152][T12188] dump_stack+0x21c/0x280 [ 2276.056922][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2276.116152][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2276.056922][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.116152][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2276.056922][T12214] __do_fast_syscall_32+0x102/0x160 [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2276.116152][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2276.056922][T12214] do_SYSENTER_32+0x73/0x90 [ 2276.116152][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2276.056922][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.116152][T12188] ? __wake_up+0x1fc/0x250 [ 2276.056922][T12214] [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] Uninit was stored to memory at: [ 2276.116152][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2276.056922][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2276.116152][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2276.056922][T12214] __msan_chain_origin+0x57/0xa0 [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2276.116152][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2276.056922][T12214] get_compat_msghdr+0x108/0x2b0 [ 2276.116152][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2276.056922][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2276.116152][T12188] ? _copy_from_user+0x1fd/0x300 [ 2276.056922][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.116152][T12188] __msan_chain_origin+0x57/0xa0 [ 2276.056922][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.116152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2276.056922][T12214] __do_fast_syscall_32+0x102/0x160 [ 2276.116152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2276.056922][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2276.116152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2276.056922][T12214] do_SYSENTER_32+0x73/0x90 [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.116152][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2276.056922][T12214] [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] Uninit was stored to memory at: [ 2276.116152][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2276.056922][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2276.116152][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2276.056922][T12214] __msan_chain_origin+0x57/0xa0 [ 2276.116152][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2276.056922][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2276.116152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2276.056922][T12214] get_compat_msghdr+0x108/0x2b0 [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2276.116152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2276.056922][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2276.116152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.056922][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.116152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.056922][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.116152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2276.056922][T12214] __do_fast_syscall_32+0x102/0x160 [ 2276.116152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2276.056922][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2276.116152][T12188] do_SYSENTER_32+0x73/0x90 [ 2276.056922][T12214] do_SYSENTER_32+0x73/0x90 [ 2276.116152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.056922][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.116152][T12188] RIP: 0023:0xf7f01549 [ 2276.056922][T12214] [ 2276.116152][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2276.056922][T12214] Uninit was stored to memory at: [ 2276.116152][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2276.056922][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2276.056922][T12214] __msan_chain_origin+0x57/0xa0 [ 2276.116152][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2276.056922][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2276.116152][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2276.056922][T12214] get_compat_msghdr+0x108/0x2b0 [ 2276.116152][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2276.056922][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2276.116152][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2276.056922][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2276.116152][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2276.056922][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.116152][T12188] Uninit was stored to memory at: [ 2276.056922][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.116152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2276.056922][T12214] __do_fast_syscall_32+0x102/0x160 [ 2276.116152][T12188] __msan_chain_origin+0x57/0xa0 [ 2276.056922][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2276.116152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2276.056922][T12214] do_SYSENTER_32+0x73/0x90 [ 2276.116152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2276.056922][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.116152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2276.056922][T12214] [ 2276.116152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2276.056922][T12214] Uninit was stored to memory at: [ 2276.116152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.056922][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2276.116152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.056922][T12214] __msan_chain_origin+0x57/0xa0 [ 2276.116152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2276.056922][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2276.116152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2276.056922][T12214] get_compat_msghdr+0x108/0x2b0 [ 2276.116152][T12188] do_SYSENTER_32+0x73/0x90 [ 2276.056922][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2276.116152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.056922][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2276.116152][T12188] [ 2276.116152][T12188] Uninit was stored to memory at: [ 2276.056922][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.116152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2276.056922][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.116152][T12188] __msan_chain_origin+0x57/0xa0 [ 2276.056922][T12214] __do_fast_syscall_32+0x102/0x160 [ 2276.116152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2276.056922][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2276.116152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2276.056922][T12214] do_SYSENTER_32+0x73/0x90 [ 2276.116152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2276.056922][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.116152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2276.056922][T12214] [ 2276.116152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.056922][T12214] Uninit was stored to memory at: [ 2276.116152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.056922][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2276.116152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2276.056922][T12214] __msan_chain_origin+0x57/0xa0 [ 2276.116152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2276.056922][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2276.116152][T12188] do_SYSENTER_32+0x73/0x90 [ 2276.056922][T12214] get_compat_msghdr+0x108/0x2b0 [ 2276.116152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.056922][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2276.116152][T12188] [ 2276.056922][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2276.116152][T12188] Uninit was stored to memory at: [ 2276.056922][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.116152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2276.056922][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.116152][T12188] __msan_chain_origin+0x57/0xa0 [ 2276.056922][T12214] __do_fast_syscall_32+0x102/0x160 [ 2276.116152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2276.056922][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2276.116152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2276.056922][T12214] do_SYSENTER_32+0x73/0x90 [ 2276.116152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2276.056922][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.116152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2276.056922][T12214] [ 2276.116152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.056922][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2276.116152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.056922][T12214] do_recvmmsg+0xbf/0x22f0 [ 2276.116152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2276.056922][T12214] do_recvmmsg+0xbf/0x22f0 [ 2276.116152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.017397][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.017397][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.017397][T12188] [ 2277.017397][T12188] Uninit was stored to memory at: [ 2277.044602][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.044602][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.044602][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.044602][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.044602][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.044602][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.044602][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.044602][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.044602][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.044602][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.044602][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.044602][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.044602][T12188] [ 2277.044602][T12188] Uninit was stored to memory at: [ 2277.044602][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.044602][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.044602][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.044602][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.044602][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.044602][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.044602][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.044602][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.044602][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.044602][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.044602][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.044602][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.044602][T12188] [ 2277.044602][T12188] Uninit was stored to memory at: [ 2277.044602][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.044602][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.044602][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.044602][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.044602][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.044602][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.044602][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.044602][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.044602][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.044602][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.044602][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.044602][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.044602][T12188] [ 2277.044602][T12188] Uninit was stored to memory at: [ 2277.044602][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.044602][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.044602][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.044602][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.044602][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.044602][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.044602][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.044602][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.044602][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.044602][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.044602][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.044602][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.044602][T12188] [ 2277.044602][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2277.044602][T12188] do_recvmmsg+0xbf/0x22f0 [ 2277.044602][T12188] do_recvmmsg+0xbf/0x22f0 [ 2277.568530][T12188] not chained 340000 origins [ 2277.573169][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2277.576205][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.576205][T12188] Call Trace: [ 2277.576205][T12188] dump_stack+0x21c/0x280 [ 2277.576205][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2277.576205][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2277.576205][T12188] ? __wake_up+0x1fc/0x250 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2277.576205][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2277.576205][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2277.576205][T12188] ? _copy_from_user+0x1fd/0x300 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.576205][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.576205][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.576205][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2277.576205][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2277.576205][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2277.576205][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2277.576205][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.576205][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.576205][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.576205][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.576205][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.576205][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.576205][T12188] RIP: 0023:0xf7f01549 [ 2277.576205][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2277.576205][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2277.576205][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2277.576205][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2277.576205][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2277.576205][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2277.576205][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2277.576205][T12188] Uninit was stored to memory at: [ 2277.576205][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.576205][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.576205][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.576205][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.576205][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.576205][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.576205][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.576205][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.576205][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.576205][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.576205][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.576205][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.576205][T12188] [ 2277.576205][T12188] Uninit was stored to memory at: [ 2277.576205][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.576205][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.576205][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.576205][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.576205][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.576205][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.576205][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.576205][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.576205][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.576205][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.576205][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.576205][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.576205][T12188] [ 2277.576205][T12188] Uninit was stored to memory at: [ 2277.576205][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.576205][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.576205][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.576205][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.576205][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.576205][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.576205][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.576205][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.576205][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.576205][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.576205][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.576205][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.576205][T12188] [ 2277.576205][T12188] Uninit was stored to memory at: [ 2277.576205][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.576205][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.576205][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.576205][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.576205][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.576205][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.576205][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.576205][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.576205][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.576205][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.576205][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.576205][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.576205][T12188] [ 2277.576205][T12188] Uninit was stored to memory at: [ 2277.576205][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.576205][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.576205][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.576205][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.576205][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.576205][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.576205][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.576205][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.576205][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.576205][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.576205][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.576205][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.576205][T12188] [ 2277.576205][T12188] Uninit was stored to memory at: [ 2277.576205][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.576205][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.576205][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.576205][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.576205][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.576205][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.576205][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.576205][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.576205][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.576205][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.576205][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.576205][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.576205][T12188] [ 2277.576205][T12188] Uninit was stored to memory at: [ 2277.576205][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2277.576205][T12188] __msan_chain_origin+0x57/0xa0 [ 2277.576205][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2277.576205][T12188] get_compat_msghdr+0x108/0x2b0 [ 2277.576205][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2277.576205][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2277.576205][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.576205][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.576205][T12188] __do_fast_syscall_32+0x102/0x160 [ 2277.576205][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2277.576205][T12188] do_SYSENTER_32+0x73/0x90 [ 2277.576205][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.576205][T12188] [ 2277.576205][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2277.576205][T12188] do_recvmmsg+0xbf/0x22f0 [ 2277.576205][T12188] do_recvmmsg+0xbf/0x22f0 [ 2278.644075][T12214] not chained 350000 origins [ 2278.646166][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2278.646166][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2278.646166][T12214] Call Trace: [ 2278.646166][T12214] dump_stack+0x21c/0x280 [ 2278.646166][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2278.646166][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2278.646166][T12214] ? __wake_up+0x1fc/0x250 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2278.646166][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2278.646166][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2278.646166][T12214] ? _copy_from_user+0x1fd/0x300 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] __msan_chain_origin+0x57/0xa0 [ 2278.646166][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2278.646166][T12214] get_compat_msghdr+0x108/0x2b0 [ 2278.646166][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2278.646166][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2278.646166][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2278.646166][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2278.646166][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.646166][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.646166][T12214] __do_fast_syscall_32+0x102/0x160 [ 2278.646166][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2278.646166][T12214] do_SYSENTER_32+0x73/0x90 [ 2278.646166][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.646166][T12214] RIP: 0023:0xf7f01549 [ 2278.646166][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2278.646166][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2278.646166][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2278.646166][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2278.646166][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2278.646166][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2278.646166][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2278.646166][T12214] Uninit was stored to memory at: [ 2278.646166][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2278.646166][T12214] __msan_chain_origin+0x57/0xa0 [ 2278.646166][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2278.646166][T12214] get_compat_msghdr+0x108/0x2b0 [ 2278.646166][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2278.646166][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2278.646166][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.646166][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.646166][T12214] __do_fast_syscall_32+0x102/0x160 [ 2278.646166][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2278.646166][T12214] do_SYSENTER_32+0x73/0x90 [ 2278.646166][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.646166][T12214] [ 2278.646166][T12214] Uninit was stored to memory at: [ 2278.646166][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2278.646166][T12214] __msan_chain_origin+0x57/0xa0 [ 2278.646166][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2278.646166][T12214] get_compat_msghdr+0x108/0x2b0 [ 2278.646166][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2278.646166][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2278.646166][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.646166][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.646166][T12214] __do_fast_syscall_32+0x102/0x160 [ 2278.646166][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2278.646166][T12214] do_SYSENTER_32+0x73/0x90 [ 2278.646166][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.646166][T12214] [ 2278.646166][T12214] Uninit was stored to memory at: [ 2278.646166][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2278.646166][T12214] __msan_chain_origin+0x57/0xa0 [ 2278.646166][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2278.646166][T12214] get_compat_msghdr+0x108/0x2b0 [ 2278.646166][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2278.646166][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2278.646166][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.646166][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.646166][T12214] __do_fast_syscall_32+0x102/0x160 [ 2278.646166][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2278.646166][T12214] do_SYSENTER_32+0x73/0x90 [ 2278.646166][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.646166][T12214] [ 2278.646166][T12214] Uninit was stored to memory at: [ 2278.646166][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2278.646166][T12214] __msan_chain_origin+0x57/0xa0 [ 2278.646166][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2278.646166][T12214] get_compat_msghdr+0x108/0x2b0 [ 2278.646166][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2278.646166][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2278.646166][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.646166][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.646166][T12214] __do_fast_syscall_32+0x102/0x160 [ 2278.646166][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2278.646166][T12214] do_SYSENTER_32+0x73/0x90 [ 2278.646166][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.646166][T12214] [ 2278.646166][T12214] Uninit was stored to memory at: [ 2278.646166][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2278.646166][T12214] __msan_chain_origin+0x57/0xa0 [ 2278.646166][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2278.646166][T12214] get_compat_msghdr+0x108/0x2b0 [ 2278.646166][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2278.646166][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2278.646166][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.646166][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.646166][T12214] __do_fast_syscall_32+0x102/0x160 [ 2278.646166][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2278.646166][T12214] do_SYSENTER_32+0x73/0x90 [ 2278.646166][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.646166][T12214] [ 2278.646166][T12214] Uninit was stored to memory at: [ 2278.646166][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2278.646166][T12214] __msan_chain_origin+0x57/0xa0 [ 2278.646166][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2278.646166][T12214] get_compat_msghdr+0x108/0x2b0 [ 2278.646166][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2278.646166][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2278.646166][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.646166][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.646166][T12214] __do_fast_syscall_32+0x102/0x160 [ 2278.646166][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2278.646166][T12214] do_SYSENTER_32+0x73/0x90 [ 2278.646166][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.646166][T12214] [ 2278.646166][T12214] Uninit was stored to memory at: [ 2278.646166][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2278.646166][T12214] __msan_chain_origin+0x57/0xa0 [ 2278.646166][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2278.646166][T12214] get_compat_msghdr+0x108/0x2b0 [ 2278.646166][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2278.646166][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2278.646166][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.646166][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.646166][T12214] __do_fast_syscall_32+0x102/0x160 [ 2278.646166][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2278.646166][T12214] do_SYSENTER_32+0x73/0x90 [ 2278.646166][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.646166][T12214] [ 2278.646166][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2278.646166][T12214] do_recvmmsg+0xbf/0x22f0 [ 2278.646166][T12214] do_recvmmsg+0xbf/0x22f0 [ 2279.791316][T12188] not chained 360000 origins [ 2279.795955][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2279.796148][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2279.796148][T12188] Call Trace: [ 2279.796148][T12188] dump_stack+0x21c/0x280 [ 2279.796148][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2279.796148][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2279.796148][T12188] ? __wake_up+0x1fc/0x250 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2279.796148][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2279.796148][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2279.796148][T12188] ? _copy_from_user+0x1fd/0x300 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] __msan_chain_origin+0x57/0xa0 [ 2279.796148][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2279.796148][T12188] get_compat_msghdr+0x108/0x2b0 [ 2279.796148][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2279.796148][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2279.796148][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2279.796148][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2279.796148][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.796148][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.796148][T12188] __do_fast_syscall_32+0x102/0x160 [ 2279.796148][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2279.796148][T12188] do_SYSENTER_32+0x73/0x90 [ 2279.796148][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.796148][T12188] RIP: 0023:0xf7f01549 [ 2279.796148][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2279.796148][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2279.796148][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2279.796148][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2279.796148][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2279.796148][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2279.796148][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2279.796148][T12188] Uninit was stored to memory at: [ 2279.796148][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2279.796148][T12188] __msan_chain_origin+0x57/0xa0 [ 2279.796148][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2279.796148][T12188] get_compat_msghdr+0x108/0x2b0 [ 2279.796148][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2279.796148][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2279.796148][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.796148][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.796148][T12188] __do_fast_syscall_32+0x102/0x160 [ 2279.796148][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2279.796148][T12188] do_SYSENTER_32+0x73/0x90 [ 2279.796148][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.796148][T12188] [ 2279.796148][T12188] Uninit was stored to memory at: [ 2279.796148][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2279.796148][T12188] __msan_chain_origin+0x57/0xa0 [ 2279.796148][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2279.796148][T12188] get_compat_msghdr+0x108/0x2b0 [ 2279.796148][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2279.796148][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2279.796148][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.796148][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.796148][T12188] __do_fast_syscall_32+0x102/0x160 [ 2279.796148][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2279.796148][T12188] do_SYSENTER_32+0x73/0x90 [ 2279.796148][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.796148][T12188] [ 2279.796148][T12188] Uninit was stored to memory at: [ 2279.796148][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2279.796148][T12188] __msan_chain_origin+0x57/0xa0 [ 2279.796148][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2279.796148][T12188] get_compat_msghdr+0x108/0x2b0 [ 2279.796148][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2279.796148][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2279.796148][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.796148][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.796148][T12188] __do_fast_syscall_32+0x102/0x160 [ 2279.796148][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2279.796148][T12188] do_SYSENTER_32+0x73/0x90 [ 2279.796148][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.796148][T12188] [ 2279.796148][T12188] Uninit was stored to memory at: [ 2279.796148][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2279.796148][T12188] __msan_chain_origin+0x57/0xa0 [ 2279.796148][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2279.796148][T12188] get_compat_msghdr+0x108/0x2b0 [ 2279.796148][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2279.796148][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2279.796148][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.796148][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.796148][T12188] __do_fast_syscall_32+0x102/0x160 [ 2279.796148][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2279.796148][T12188] do_SYSENTER_32+0x73/0x90 [ 2279.796148][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.796148][T12188] [ 2279.796148][T12188] Uninit was stored to memory at: [ 2279.796148][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2279.796148][T12188] __msan_chain_origin+0x57/0xa0 [ 2279.796148][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2279.796148][T12188] get_compat_msghdr+0x108/0x2b0 [ 2279.796148][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2279.796148][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2279.796148][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.796148][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.796148][T12188] __do_fast_syscall_32+0x102/0x160 [ 2279.796148][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2279.796148][T12188] do_SYSENTER_32+0x73/0x90 [ 2279.796148][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.796148][T12188] [ 2279.796148][T12188] Uninit was stored to memory at: [ 2279.796148][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2279.796148][T12188] __msan_chain_origin+0x57/0xa0 [ 2279.796148][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2279.796148][T12188] get_compat_msghdr+0x108/0x2b0 [ 2279.796148][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2279.796148][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2279.796148][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.796148][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.796148][T12188] __do_fast_syscall_32+0x102/0x160 [ 2279.796148][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2279.796148][T12188] do_SYSENTER_32+0x73/0x90 [ 2279.796148][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.796148][T12188] [ 2279.796148][T12188] Uninit was stored to memory at: [ 2279.796148][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2279.796148][T12188] __msan_chain_origin+0x57/0xa0 [ 2279.796148][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2279.796148][T12188] get_compat_msghdr+0x108/0x2b0 [ 2279.796148][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2279.796148][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2279.796148][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.796148][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.796148][T12188] __do_fast_syscall_32+0x102/0x160 [ 2279.796148][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2279.796148][T12188] do_SYSENTER_32+0x73/0x90 [ 2279.796148][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.796148][T12188] [ 2279.796148][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2279.796148][T12188] do_recvmmsg+0xbf/0x22f0 [ 2279.796148][T12188] do_recvmmsg+0xbf/0x22f0 [ 2280.746798][T12188] not chained 370000 origins [ 2280.751438][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2280.756214][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2280.756214][T12188] Call Trace: [ 2280.756214][T12188] dump_stack+0x21c/0x280 [ 2280.756214][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2280.756214][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2280.756214][T12188] ? __wake_up+0x1fc/0x250 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2280.756214][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2280.756214][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2280.756214][T12188] ? _copy_from_user+0x1fd/0x300 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] __msan_chain_origin+0x57/0xa0 [ 2280.756214][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2280.756214][T12188] get_compat_msghdr+0x108/0x2b0 [ 2280.756214][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2280.756214][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2280.756214][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2280.756214][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2280.756214][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.756214][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.756214][T12188] __do_fast_syscall_32+0x102/0x160 [ 2280.756214][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2280.756214][T12188] do_SYSENTER_32+0x73/0x90 [ 2280.756214][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.756214][T12188] RIP: 0023:0xf7f01549 [ 2280.756214][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2280.756214][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2280.756214][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2280.756214][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2280.756214][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2280.756214][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2280.756214][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2280.756214][T12188] Uninit was stored to memory at: [ 2280.756214][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2280.756214][T12188] __msan_chain_origin+0x57/0xa0 [ 2280.756214][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2280.756214][T12188] get_compat_msghdr+0x108/0x2b0 [ 2280.756214][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2280.756214][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2280.756214][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.756214][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.756214][T12188] __do_fast_syscall_32+0x102/0x160 [ 2280.756214][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2280.756214][T12188] do_SYSENTER_32+0x73/0x90 [ 2280.756214][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.756214][T12188] [ 2280.756214][T12188] Uninit was stored to memory at: [ 2280.756214][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2280.756214][T12188] __msan_chain_origin+0x57/0xa0 [ 2280.756214][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2280.756214][T12188] get_compat_msghdr+0x108/0x2b0 [ 2280.756214][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2280.756214][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2280.756214][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.756214][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.756214][T12188] __do_fast_syscall_32+0x102/0x160 [ 2280.756214][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2280.756214][T12188] do_SYSENTER_32+0x73/0x90 [ 2280.756214][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.756214][T12188] [ 2280.756214][T12188] Uninit was stored to memory at: [ 2280.756214][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2280.756214][T12188] __msan_chain_origin+0x57/0xa0 [ 2280.756214][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2280.756214][T12188] get_compat_msghdr+0x108/0x2b0 [ 2280.756214][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2280.756214][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2280.756214][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.756214][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.756214][T12188] __do_fast_syscall_32+0x102/0x160 [ 2280.756214][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2280.756214][T12188] do_SYSENTER_32+0x73/0x90 [ 2280.756214][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.756214][T12188] [ 2280.756214][T12188] Uninit was stored to memory at: [ 2280.756214][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2280.756214][T12188] __msan_chain_origin+0x57/0xa0 [ 2280.756214][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2280.756214][T12188] get_compat_msghdr+0x108/0x2b0 [ 2280.756214][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2280.756214][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2280.756214][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.756214][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.756214][T12188] __do_fast_syscall_32+0x102/0x160 [ 2280.756214][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2280.756214][T12188] do_SYSENTER_32+0x73/0x90 [ 2280.756214][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.756214][T12188] [ 2280.756214][T12188] Uninit was stored to memory at: [ 2280.756214][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2280.756214][T12188] __msan_chain_origin+0x57/0xa0 [ 2280.756214][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2280.756214][T12188] get_compat_msghdr+0x108/0x2b0 [ 2280.756214][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2280.756214][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2280.756214][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.756214][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.756214][T12188] __do_fast_syscall_32+0x102/0x160 [ 2280.756214][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2280.756214][T12188] do_SYSENTER_32+0x73/0x90 [ 2280.756214][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.756214][T12188] [ 2280.756214][T12188] Uninit was stored to memory at: [ 2280.756214][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2280.756214][T12188] __msan_chain_origin+0x57/0xa0 [ 2280.756214][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2280.756214][T12188] get_compat_msghdr+0x108/0x2b0 [ 2280.756214][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2280.756214][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2280.756214][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.756214][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.756214][T12188] __do_fast_syscall_32+0x102/0x160 [ 2280.756214][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2280.756214][T12188] do_SYSENTER_32+0x73/0x90 [ 2280.756214][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.756214][T12188] [ 2280.756214][T12188] Uninit was stored to memory at: [ 2280.756214][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2280.756214][T12188] __msan_chain_origin+0x57/0xa0 [ 2280.756214][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2280.756214][T12188] get_compat_msghdr+0x108/0x2b0 [ 2280.756214][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2280.756214][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2280.756214][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.756214][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.756214][T12188] __do_fast_syscall_32+0x102/0x160 [ 2280.756214][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2280.756214][T12188] do_SYSENTER_32+0x73/0x90 [ 2280.756214][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.756214][T12188] [ 2280.756214][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2280.756214][T12188] do_recvmmsg+0xbf/0x22f0 [ 2280.756214][T12188] do_recvmmsg+0xbf/0x22f0 [ 2281.831359][T12214] not chained 380000 origins [ 2281.836089][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2281.836347][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2281.836347][T12214] Call Trace: [ 2281.836347][T12214] dump_stack+0x21c/0x280 [ 2281.836347][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2281.867200][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.867200][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2281.867200][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.867200][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2281.867200][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2281.896339][T12214] ? __wake_up+0x1fc/0x250 [ 2281.896339][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.896339][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2281.896339][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2281.896339][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.926547][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2281.926547][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2281.926547][T12214] ? _copy_from_user+0x1fd/0x300 [ 2281.926547][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.926547][T12214] __msan_chain_origin+0x57/0xa0 [ 2281.926547][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2281.956679][T12214] get_compat_msghdr+0x108/0x2b0 [ 2281.956679][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2281.956679][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.956679][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2281.956679][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.956679][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2281.956679][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2281.956679][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2281.956679][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2281.956679][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.956679][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2281.956679][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.956679][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.956679][T12214] __do_fast_syscall_32+0x102/0x160 [ 2281.956679][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2281.956679][T12214] do_SYSENTER_32+0x73/0x90 [ 2281.956679][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.956679][T12214] RIP: 0023:0xf7f01549 [ 2281.956679][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2281.956679][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2281.956679][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2281.956679][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2281.956679][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2281.956679][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2281.956679][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2281.956679][T12214] Uninit was stored to memory at: [ 2281.956679][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2281.956679][T12214] __msan_chain_origin+0x57/0xa0 [ 2281.956679][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2281.956679][T12214] get_compat_msghdr+0x108/0x2b0 [ 2281.956679][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2281.956679][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2281.956679][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.956679][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.956679][T12214] __do_fast_syscall_32+0x102/0x160 [ 2281.956679][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2281.956679][T12214] do_SYSENTER_32+0x73/0x90 [ 2281.956679][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.956679][T12214] [ 2281.956679][T12214] Uninit was stored to memory at: [ 2281.956679][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2281.956679][T12214] __msan_chain_origin+0x57/0xa0 [ 2281.956679][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2281.956679][T12214] get_compat_msghdr+0x108/0x2b0 [ 2281.956679][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2281.956679][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2281.956679][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.956679][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.956679][T12214] __do_fast_syscall_32+0x102/0x160 [ 2281.956679][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2281.956679][T12214] do_SYSENTER_32+0x73/0x90 [ 2281.956679][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.956679][T12214] [ 2281.956679][T12214] Uninit was stored to memory at: [ 2281.956679][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2281.956679][T12214] __msan_chain_origin+0x57/0xa0 [ 2281.956679][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2281.956679][T12214] get_compat_msghdr+0x108/0x2b0 [ 2281.956679][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2281.956679][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2281.956679][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.956679][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.956679][T12214] __do_fast_syscall_32+0x102/0x160 [ 2281.956679][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2281.956679][T12214] do_SYSENTER_32+0x73/0x90 [ 2281.956679][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.956679][T12214] [ 2281.956679][T12214] Uninit was stored to memory at: [ 2281.956679][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2281.956679][T12214] __msan_chain_origin+0x57/0xa0 [ 2281.956679][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2281.956679][T12214] get_compat_msghdr+0x108/0x2b0 [ 2281.956679][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2281.956679][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2281.956679][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.956679][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.956679][T12214] __do_fast_syscall_32+0x102/0x160 [ 2281.956679][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2281.956679][T12214] do_SYSENTER_32+0x73/0x90 [ 2281.956679][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.956679][T12214] [ 2281.956679][T12214] Uninit was stored to memory at: [ 2281.956679][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2281.956679][T12214] __msan_chain_origin+0x57/0xa0 [ 2281.956679][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2281.956679][T12214] get_compat_msghdr+0x108/0x2b0 [ 2281.956679][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2281.956679][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2281.956679][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.956679][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.956679][T12214] __do_fast_syscall_32+0x102/0x160 [ 2281.956679][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2281.956679][T12214] do_SYSENTER_32+0x73/0x90 [ 2281.956679][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.956679][T12214] [ 2281.956679][T12214] Uninit was stored to memory at: [ 2281.956679][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2281.956679][T12214] __msan_chain_origin+0x57/0xa0 [ 2281.956679][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2281.956679][T12214] get_compat_msghdr+0x108/0x2b0 [ 2281.956679][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2281.956679][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2281.956679][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.956679][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.956679][T12214] __do_fast_syscall_32+0x102/0x160 [ 2281.956679][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2281.956679][T12214] do_SYSENTER_32+0x73/0x90 [ 2281.956679][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.956679][T12214] [ 2281.956679][T12214] Uninit was stored to memory at: [ 2281.956679][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2281.956679][T12214] __msan_chain_origin+0x57/0xa0 [ 2281.956679][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2281.956679][T12214] get_compat_msghdr+0x108/0x2b0 [ 2281.956679][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2281.956679][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2281.956679][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.956679][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.956679][T12214] __do_fast_syscall_32+0x102/0x160 [ 2281.956679][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2281.956679][T12214] do_SYSENTER_32+0x73/0x90 [ 2281.956679][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.956679][T12214] [ 2281.956679][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2281.956679][T12214] do_recvmmsg+0xbf/0x22f0 [ 2281.956679][T12214] do_recvmmsg+0xbf/0x22f0 [ 2282.843106][T12214] not chained 390000 origins [ 2282.846153][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2282.856392][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2282.856392][T12214] Call Trace: [ 2282.856392][T12214] dump_stack+0x21c/0x280 [ 2282.856392][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2282.856392][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2282.856392][T12214] ? __wake_up+0x1fc/0x250 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2282.856392][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2282.856392][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2282.856392][T12214] ? _copy_from_user+0x1fd/0x300 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] __msan_chain_origin+0x57/0xa0 [ 2282.856392][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2282.856392][T12214] get_compat_msghdr+0x108/0x2b0 [ 2282.856392][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2282.856392][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2282.856392][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2282.856392][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2282.856392][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.856392][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.856392][T12214] __do_fast_syscall_32+0x102/0x160 [ 2282.856392][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2282.856392][T12214] do_SYSENTER_32+0x73/0x90 [ 2282.856392][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.856392][T12214] RIP: 0023:0xf7f01549 [ 2282.856392][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2282.856392][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2282.856392][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2282.856392][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2282.856392][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2282.856392][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2282.856392][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2282.856392][T12214] Uninit was stored to memory at: [ 2282.856392][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2282.856392][T12214] __msan_chain_origin+0x57/0xa0 [ 2282.856392][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2282.856392][T12214] get_compat_msghdr+0x108/0x2b0 [ 2282.856392][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2282.856392][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2282.856392][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.856392][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.856392][T12214] __do_fast_syscall_32+0x102/0x160 [ 2282.856392][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2282.856392][T12214] do_SYSENTER_32+0x73/0x90 [ 2282.856392][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.856392][T12214] [ 2282.856392][T12214] Uninit was stored to memory at: [ 2282.856392][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2282.856392][T12214] __msan_chain_origin+0x57/0xa0 [ 2282.856392][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2282.856392][T12214] get_compat_msghdr+0x108/0x2b0 [ 2282.856392][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2282.856392][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2282.856392][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.856392][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.856392][T12214] __do_fast_syscall_32+0x102/0x160 [ 2282.856392][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2282.856392][T12214] do_SYSENTER_32+0x73/0x90 [ 2282.856392][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.856392][T12214] [ 2282.856392][T12214] Uninit was stored to memory at: [ 2282.856392][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2282.856392][T12214] __msan_chain_origin+0x57/0xa0 [ 2282.856392][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2282.856392][T12214] get_compat_msghdr+0x108/0x2b0 [ 2282.856392][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2282.856392][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2282.856392][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.856392][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.856392][T12214] __do_fast_syscall_32+0x102/0x160 [ 2282.856392][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2282.856392][T12214] do_SYSENTER_32+0x73/0x90 [ 2282.856392][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.856392][T12214] [ 2282.856392][T12214] Uninit was stored to memory at: [ 2282.856392][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2282.856392][T12214] __msan_chain_origin+0x57/0xa0 [ 2282.856392][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2282.856392][T12214] get_compat_msghdr+0x108/0x2b0 [ 2282.856392][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2282.856392][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2282.856392][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.856392][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.856392][T12214] __do_fast_syscall_32+0x102/0x160 [ 2282.856392][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2282.856392][T12214] do_SYSENTER_32+0x73/0x90 [ 2282.856392][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.856392][T12214] [ 2282.856392][T12214] Uninit was stored to memory at: [ 2282.856392][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2282.856392][T12214] __msan_chain_origin+0x57/0xa0 [ 2282.856392][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2282.856392][T12214] get_compat_msghdr+0x108/0x2b0 [ 2282.856392][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2282.856392][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2282.856392][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.856392][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.856392][T12214] __do_fast_syscall_32+0x102/0x160 [ 2282.856392][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2282.856392][T12214] do_SYSENTER_32+0x73/0x90 [ 2282.856392][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.856392][T12214] [ 2282.856392][T12214] Uninit was stored to memory at: [ 2282.856392][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2282.856392][T12214] __msan_chain_origin+0x57/0xa0 [ 2282.856392][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2282.856392][T12214] get_compat_msghdr+0x108/0x2b0 [ 2282.856392][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2282.856392][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2282.856392][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.856392][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.856392][T12214] __do_fast_syscall_32+0x102/0x160 [ 2282.856392][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2282.856392][T12214] do_SYSENTER_32+0x73/0x90 [ 2282.856392][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.856392][T12214] [ 2282.856392][T12214] Uninit was stored to memory at: [ 2282.856392][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2282.856392][T12214] __msan_chain_origin+0x57/0xa0 [ 2282.856392][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2282.856392][T12214] get_compat_msghdr+0x108/0x2b0 [ 2282.856392][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2282.856392][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2282.856392][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.856392][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.856392][T12214] __do_fast_syscall_32+0x102/0x160 [ 2282.856392][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2282.856392][T12214] do_SYSENTER_32+0x73/0x90 [ 2282.856392][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.856392][T12214] [ 2282.856392][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2282.856392][T12214] do_recvmmsg+0xbf/0x22f0 [ 2282.856392][T12214] do_recvmmsg+0xbf/0x22f0 [ 2283.907107][T12188] not chained 400000 origins [ 2283.911792][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2283.916153][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2283.916153][T12188] Call Trace: [ 2283.916153][T12188] dump_stack+0x21c/0x280 [ 2283.916153][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2283.916153][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2283.916153][T12188] ? __wake_up+0x1fc/0x250 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2283.916153][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2283.916153][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2283.916153][T12188] ? _copy_from_user+0x1fd/0x300 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] __msan_chain_origin+0x57/0xa0 [ 2283.916153][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2283.916153][T12188] get_compat_msghdr+0x108/0x2b0 [ 2283.916153][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2283.916153][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2283.916153][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2283.916153][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2283.916153][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.916153][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.916153][T12188] __do_fast_syscall_32+0x102/0x160 [ 2283.916153][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2283.916153][T12188] do_SYSENTER_32+0x73/0x90 [ 2283.916153][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.916153][T12188] RIP: 0023:0xf7f01549 [ 2283.916153][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2283.916153][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2283.916153][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2283.916153][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2283.916153][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2283.916153][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2283.916153][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2283.916153][T12188] Uninit was stored to memory at: [ 2283.916153][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2283.916153][T12188] __msan_chain_origin+0x57/0xa0 [ 2283.916153][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2283.916153][T12188] get_compat_msghdr+0x108/0x2b0 [ 2283.916153][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2283.916153][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2283.916153][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.916153][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.916153][T12188] __do_fast_syscall_32+0x102/0x160 [ 2283.916153][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2283.916153][T12188] do_SYSENTER_32+0x73/0x90 [ 2283.916153][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.916153][T12188] [ 2283.916153][T12188] Uninit was stored to memory at: [ 2283.916153][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2283.916153][T12188] __msan_chain_origin+0x57/0xa0 [ 2283.916153][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2283.916153][T12188] get_compat_msghdr+0x108/0x2b0 [ 2283.916153][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2283.916153][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2283.916153][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.916153][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.916153][T12188] __do_fast_syscall_32+0x102/0x160 [ 2283.916153][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2283.916153][T12188] do_SYSENTER_32+0x73/0x90 [ 2283.916153][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.916153][T12188] [ 2283.916153][T12188] Uninit was stored to memory at: [ 2283.916153][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2283.916153][T12188] __msan_chain_origin+0x57/0xa0 [ 2283.916153][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2283.916153][T12188] get_compat_msghdr+0x108/0x2b0 [ 2283.916153][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2283.916153][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2283.916153][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.916153][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.916153][T12188] __do_fast_syscall_32+0x102/0x160 [ 2283.916153][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2283.916153][T12188] do_SYSENTER_32+0x73/0x90 [ 2283.916153][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.916153][T12188] [ 2283.916153][T12188] Uninit was stored to memory at: [ 2283.916153][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2283.916153][T12188] __msan_chain_origin+0x57/0xa0 [ 2283.916153][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2283.916153][T12188] get_compat_msghdr+0x108/0x2b0 [ 2283.916153][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2283.916153][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2283.916153][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.916153][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.916153][T12188] __do_fast_syscall_32+0x102/0x160 [ 2283.916153][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2283.916153][T12188] do_SYSENTER_32+0x73/0x90 [ 2283.916153][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.916153][T12188] [ 2283.916153][T12188] Uninit was stored to memory at: [ 2283.916153][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2283.916153][T12188] __msan_chain_origin+0x57/0xa0 [ 2283.916153][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2283.916153][T12188] get_compat_msghdr+0x108/0x2b0 [ 2283.916153][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2283.916153][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2283.916153][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.916153][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.916153][T12188] __do_fast_syscall_32+0x102/0x160 [ 2283.916153][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2283.916153][T12188] do_SYSENTER_32+0x73/0x90 [ 2283.916153][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.916153][T12188] [ 2283.916153][T12188] Uninit was stored to memory at: [ 2283.916153][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2283.916153][T12188] __msan_chain_origin+0x57/0xa0 [ 2283.916153][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2283.916153][T12188] get_compat_msghdr+0x108/0x2b0 [ 2283.916153][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2283.916153][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2283.916153][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.916153][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.916153][T12188] __do_fast_syscall_32+0x102/0x160 [ 2283.916153][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2283.916153][T12188] do_SYSENTER_32+0x73/0x90 [ 2283.916153][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.916153][T12188] [ 2283.916153][T12188] Uninit was stored to memory at: [ 2283.916153][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2283.916153][T12188] __msan_chain_origin+0x57/0xa0 [ 2283.916153][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2283.916153][T12188] get_compat_msghdr+0x108/0x2b0 [ 2283.916153][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2283.916153][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2283.916153][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.916153][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.916153][T12188] __do_fast_syscall_32+0x102/0x160 [ 2283.916153][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2283.916153][T12188] do_SYSENTER_32+0x73/0x90 [ 2283.916153][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.916153][T12188] [ 2283.916153][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2283.916153][T12188] do_recvmmsg+0xbf/0x22f0 [ 2283.916153][T12188] do_recvmmsg+0xbf/0x22f0 [ 2284.963244][T12214] not chained 410000 origins [ 2284.966143][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2284.966143][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2284.966143][T12214] Call Trace: [ 2284.966143][T12214] dump_stack+0x21c/0x280 [ 2284.966143][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2284.966143][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2284.966143][T12214] ? __wake_up+0x1fc/0x250 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2284.966143][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2284.966143][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2284.966143][T12214] ? _copy_from_user+0x1fd/0x300 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] __msan_chain_origin+0x57/0xa0 [ 2284.966143][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2284.966143][T12214] get_compat_msghdr+0x108/0x2b0 [ 2284.966143][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2284.966143][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2284.966143][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2284.966143][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2284.966143][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.966143][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.966143][T12214] __do_fast_syscall_32+0x102/0x160 [ 2284.966143][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2284.966143][T12214] do_SYSENTER_32+0x73/0x90 [ 2284.966143][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.966143][T12214] RIP: 0023:0xf7f01549 [ 2284.966143][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2284.966143][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2284.966143][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2284.966143][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2284.966143][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2284.966143][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2284.966143][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2284.966143][T12214] Uninit was stored to memory at: [ 2284.966143][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2284.966143][T12214] __msan_chain_origin+0x57/0xa0 [ 2284.966143][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2284.966143][T12214] get_compat_msghdr+0x108/0x2b0 [ 2284.966143][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2284.966143][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2284.966143][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.966143][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.966143][T12214] __do_fast_syscall_32+0x102/0x160 [ 2284.966143][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2284.966143][T12214] do_SYSENTER_32+0x73/0x90 [ 2284.966143][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.966143][T12214] [ 2284.966143][T12214] Uninit was stored to memory at: [ 2284.966143][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2284.966143][T12214] __msan_chain_origin+0x57/0xa0 [ 2284.966143][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2284.966143][T12214] get_compat_msghdr+0x108/0x2b0 [ 2284.966143][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2284.966143][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2284.966143][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.966143][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.966143][T12214] __do_fast_syscall_32+0x102/0x160 [ 2284.966143][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2284.966143][T12214] do_SYSENTER_32+0x73/0x90 [ 2284.966143][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.966143][T12214] [ 2284.966143][T12214] Uninit was stored to memory at: [ 2284.966143][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2284.966143][T12214] __msan_chain_origin+0x57/0xa0 [ 2284.966143][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2284.966143][T12214] get_compat_msghdr+0x108/0x2b0 [ 2284.966143][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2284.966143][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2284.966143][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.966143][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.966143][T12214] __do_fast_syscall_32+0x102/0x160 [ 2284.966143][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2284.966143][T12214] do_SYSENTER_32+0x73/0x90 [ 2284.966143][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.966143][T12214] [ 2284.966143][T12214] Uninit was stored to memory at: [ 2284.966143][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2284.966143][T12214] __msan_chain_origin+0x57/0xa0 [ 2284.966143][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2284.966143][T12214] get_compat_msghdr+0x108/0x2b0 [ 2284.966143][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2284.966143][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2284.966143][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.966143][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.966143][T12214] __do_fast_syscall_32+0x102/0x160 [ 2284.966143][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2284.966143][T12214] do_SYSENTER_32+0x73/0x90 [ 2284.966143][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.966143][T12214] [ 2284.966143][T12214] Uninit was stored to memory at: [ 2284.966143][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2284.966143][T12214] __msan_chain_origin+0x57/0xa0 [ 2284.966143][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2284.966143][T12214] get_compat_msghdr+0x108/0x2b0 [ 2284.966143][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2284.966143][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2284.966143][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.966143][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.966143][T12214] __do_fast_syscall_32+0x102/0x160 [ 2284.966143][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2284.966143][T12214] do_SYSENTER_32+0x73/0x90 [ 2284.966143][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.966143][T12214] [ 2284.966143][T12214] Uninit was stored to memory at: [ 2284.966143][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2284.966143][T12214] __msan_chain_origin+0x57/0xa0 [ 2284.966143][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2284.966143][T12214] get_compat_msghdr+0x108/0x2b0 [ 2284.966143][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2284.966143][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2284.966143][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.966143][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.966143][T12214] __do_fast_syscall_32+0x102/0x160 [ 2284.966143][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2284.966143][T12214] do_SYSENTER_32+0x73/0x90 [ 2284.966143][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.966143][T12214] [ 2284.966143][T12214] Uninit was stored to memory at: [ 2284.966143][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2284.966143][T12214] __msan_chain_origin+0x57/0xa0 [ 2284.966143][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2284.966143][T12214] get_compat_msghdr+0x108/0x2b0 [ 2284.966143][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2284.966143][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2284.966143][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.966143][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.966143][T12214] __do_fast_syscall_32+0x102/0x160 [ 2284.966143][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2284.966143][T12214] do_SYSENTER_32+0x73/0x90 [ 2284.966143][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.966143][T12214] [ 2284.966143][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2284.966143][T12214] do_recvmmsg+0xbf/0x22f0 [ 2284.966143][T12214] do_recvmmsg+0xbf/0x22f0 [ 2286.089523][T12214] not chained 420000 origins [ 2286.094178][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2286.096156][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2286.096156][T12214] Call Trace: [ 2286.096156][T12214] dump_stack+0x21c/0x280 [ 2286.096156][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2286.096156][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2286.096156][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2286.096156][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2286.096156][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2286.096156][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2286.096156][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2286.096156][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2286.096156][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2286.096156][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2286.096156][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2286.096156][T12214] ? _copy_from_user+0x1fd/0x300 [ 2286.096156][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2286.096156][T12214] __msan_chain_origin+0x57/0xa0 [ 2286.096156][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2286.096156][T12214] get_compat_msghdr+0x108/0x2b0 [ 2286.096156][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2286.096156][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2286.096156][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2286.096156][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2286.096156][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2286.096156][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2286.096156][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2286.096156][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2286.096156][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2286.096156][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2286.096156][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.096156][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.096156][T12214] __do_fast_syscall_32+0x102/0x160 [ 2286.096156][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2286.096156][T12214] do_SYSENTER_32+0x73/0x90 [ 2286.096156][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.096156][T12214] RIP: 0023:0xf7f01549 [ 2286.096156][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2286.096156][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2286.096156][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2286.096156][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2286.096156][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2286.096156][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2286.096156][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2286.096156][T12214] Uninit was stored to memory at: [ 2286.096156][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2286.096156][T12214] __msan_chain_origin+0x57/0xa0 [ 2286.096156][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2286.096156][T12214] get_compat_msghdr+0x108/0x2b0 [ 2286.096156][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2286.096156][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2286.096156][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.096156][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.096156][T12214] __do_fast_syscall_32+0x102/0x160 [ 2286.096156][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2286.096156][T12214] do_SYSENTER_32+0x73/0x90 [ 2286.096156][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.096156][T12214] [ 2286.096156][T12214] Uninit was stored to memory at: [ 2286.096156][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2286.096156][T12214] __msan_chain_origin+0x57/0xa0 [ 2286.096156][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2286.096156][T12214] get_compat_msghdr+0x108/0x2b0 [ 2286.096156][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2286.096156][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2286.096156][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.096156][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.096156][T12214] __do_fast_syscall_32+0x102/0x160 [ 2286.096156][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2286.096156][T12214] do_SYSENTER_32+0x73/0x90 [ 2286.096156][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.096156][T12214] [ 2286.096156][T12214] Uninit was stored to memory at: [ 2286.096156][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2286.096156][T12214] __msan_chain_origin+0x57/0xa0 [ 2286.096156][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2286.096156][T12214] get_compat_msghdr+0x108/0x2b0 [ 2286.096156][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2286.096156][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2286.096156][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.096156][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.096156][T12214] __do_fast_syscall_32+0x102/0x160 [ 2286.096156][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2286.096156][T12214] do_SYSENTER_32+0x73/0x90 [ 2286.096156][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.096156][T12214] [ 2286.096156][T12214] Uninit was stored to memory at: [ 2286.096156][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2286.096156][T12214] __msan_chain_origin+0x57/0xa0 [ 2286.096156][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2286.096156][T12214] get_compat_msghdr+0x108/0x2b0 [ 2286.096156][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2286.096156][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2286.096156][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.096156][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.096156][T12214] __do_fast_syscall_32+0x102/0x160 [ 2286.096156][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2286.096156][T12214] do_SYSENTER_32+0x73/0x90 [ 2286.096156][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.096156][T12214] [ 2286.096156][T12214] Uninit was stored to memory at: [ 2286.096156][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2286.096156][T12214] __msan_chain_origin+0x57/0xa0 [ 2286.096156][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2286.096156][T12214] get_compat_msghdr+0x108/0x2b0 [ 2286.096156][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2286.096156][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2286.096156][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.096156][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.096156][T12214] __do_fast_syscall_32+0x102/0x160 [ 2286.096156][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2286.096156][T12214] do_SYSENTER_32+0x73/0x90 [ 2286.096156][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.096156][T12214] [ 2286.096156][T12214] Uninit was stored to memory at: [ 2286.096156][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2286.096156][T12214] __msan_chain_origin+0x57/0xa0 [ 2286.096156][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2286.096156][T12214] get_compat_msghdr+0x108/0x2b0 [ 2286.096156][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2286.096156][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2286.096156][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.096156][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.096156][T12214] __do_fast_syscall_32+0x102/0x160 [ 2286.096156][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2286.096156][T12214] do_SYSENTER_32+0x73/0x90 [ 2286.096156][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.096156][T12214] [ 2286.096156][T12214] Uninit was stored to memory at: [ 2286.096156][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2286.096156][T12214] __msan_chain_origin+0x57/0xa0 [ 2286.096156][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2286.096156][T12214] get_compat_msghdr+0x108/0x2b0 [ 2286.096156][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2286.096156][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2286.096156][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.096156][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.096156][T12214] __do_fast_syscall_32+0x102/0x160 [ 2286.096156][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2286.096156][T12214] do_SYSENTER_32+0x73/0x90 [ 2286.096156][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.096156][T12214] [ 2286.096156][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2286.096156][T12214] do_recvmmsg+0xbf/0x22f0 [ 2286.096156][T12214] do_recvmmsg+0xbf/0x22f0 [ 2287.086820][T12214] not chained 430000 origins [ 2287.091467][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2287.096142][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2287.096142][T12214] Call Trace: [ 2287.096142][T12214] dump_stack+0x21c/0x280 [ 2287.096142][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2287.096142][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2287.096142][T12214] ? __wake_up+0x1fc/0x250 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2287.096142][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2287.096142][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2287.096142][T12214] ? _copy_from_user+0x1fd/0x300 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] __msan_chain_origin+0x57/0xa0 [ 2287.096142][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2287.096142][T12214] get_compat_msghdr+0x108/0x2b0 [ 2287.096142][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2287.096142][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2287.096142][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2287.096142][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2287.096142][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.096142][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.096142][T12214] __do_fast_syscall_32+0x102/0x160 [ 2287.096142][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2287.096142][T12214] do_SYSENTER_32+0x73/0x90 [ 2287.096142][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.096142][T12214] RIP: 0023:0xf7f01549 [ 2287.096142][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2287.096142][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2287.096142][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2287.096142][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2287.096142][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2287.096142][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2287.096142][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2287.096142][T12214] Uninit was stored to memory at: [ 2287.096142][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2287.096142][T12214] __msan_chain_origin+0x57/0xa0 [ 2287.096142][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2287.096142][T12214] get_compat_msghdr+0x108/0x2b0 [ 2287.096142][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2287.096142][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2287.096142][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.096142][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.096142][T12214] __do_fast_syscall_32+0x102/0x160 [ 2287.096142][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2287.096142][T12214] do_SYSENTER_32+0x73/0x90 [ 2287.096142][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.096142][T12214] [ 2287.096142][T12214] Uninit was stored to memory at: [ 2287.096142][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2287.096142][T12214] __msan_chain_origin+0x57/0xa0 [ 2287.096142][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2287.096142][T12214] get_compat_msghdr+0x108/0x2b0 [ 2287.096142][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2287.096142][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2287.096142][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.096142][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.096142][T12214] __do_fast_syscall_32+0x102/0x160 [ 2287.096142][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2287.096142][T12214] do_SYSENTER_32+0x73/0x90 [ 2287.096142][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.096142][T12214] [ 2287.096142][T12214] Uninit was stored to memory at: [ 2287.096142][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2287.096142][T12214] __msan_chain_origin+0x57/0xa0 [ 2287.096142][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2287.096142][T12214] get_compat_msghdr+0x108/0x2b0 [ 2287.096142][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2287.096142][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2287.096142][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.096142][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.096142][T12214] __do_fast_syscall_32+0x102/0x160 [ 2287.096142][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2287.096142][T12214] do_SYSENTER_32+0x73/0x90 [ 2287.096142][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.096142][T12214] [ 2287.096142][T12214] Uninit was stored to memory at: [ 2287.096142][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2287.096142][T12214] __msan_chain_origin+0x57/0xa0 [ 2287.096142][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2287.096142][T12214] get_compat_msghdr+0x108/0x2b0 [ 2287.096142][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2287.096142][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2287.096142][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.096142][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.096142][T12214] __do_fast_syscall_32+0x102/0x160 [ 2287.096142][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2287.096142][T12214] do_SYSENTER_32+0x73/0x90 [ 2287.096142][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.096142][T12214] [ 2287.096142][T12214] Uninit was stored to memory at: [ 2287.096142][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2287.096142][T12214] __msan_chain_origin+0x57/0xa0 [ 2287.096142][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2287.096142][T12214] get_compat_msghdr+0x108/0x2b0 [ 2287.096142][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2287.096142][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2287.096142][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.096142][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.096142][T12214] __do_fast_syscall_32+0x102/0x160 [ 2287.096142][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2287.096142][T12214] do_SYSENTER_32+0x73/0x90 [ 2287.096142][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.096142][T12214] [ 2287.096142][T12214] Uninit was stored to memory at: [ 2287.096142][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2287.096142][T12214] __msan_chain_origin+0x57/0xa0 [ 2287.096142][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2287.096142][T12214] get_compat_msghdr+0x108/0x2b0 [ 2287.096142][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2287.096142][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2287.096142][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.096142][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.096142][T12214] __do_fast_syscall_32+0x102/0x160 [ 2287.096142][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2287.096142][T12214] do_SYSENTER_32+0x73/0x90 [ 2287.096142][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.096142][T12214] [ 2287.096142][T12214] Uninit was stored to memory at: [ 2287.096142][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2287.096142][T12214] __msan_chain_origin+0x57/0xa0 [ 2287.096142][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2287.096142][T12214] get_compat_msghdr+0x108/0x2b0 [ 2287.096142][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2287.096142][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2287.096142][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.096142][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.096142][T12214] __do_fast_syscall_32+0x102/0x160 [ 2287.096142][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2287.096142][T12214] do_SYSENTER_32+0x73/0x90 [ 2287.096142][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.096142][T12214] [ 2287.096142][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2287.096142][T12214] do_recvmmsg+0xbf/0x22f0 [ 2287.096142][T12214] do_recvmmsg+0xbf/0x22f0 [ 2288.153019][T12188] not chained 440000 origins [ 2288.156149][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2288.156149][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.156149][T12188] Call Trace: [ 2288.156149][T12188] dump_stack+0x21c/0x280 [ 2288.156149][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2288.156149][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2288.156149][T12188] ? __wake_up+0x1fc/0x250 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2288.156149][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2288.156149][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2288.156149][T12188] ? _copy_from_user+0x1fd/0x300 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] __msan_chain_origin+0x57/0xa0 [ 2288.156149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2288.156149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2288.156149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2288.156149][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2288.156149][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2288.156149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2288.156149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.156149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.156149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2288.156149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2288.156149][T12188] do_SYSENTER_32+0x73/0x90 [ 2288.156149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.156149][T12188] RIP: 0023:0xf7f01549 [ 2288.156149][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2288.156149][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2288.156149][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2288.156149][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2288.156149][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2288.156149][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2288.156149][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2288.156149][T12188] Uninit was stored to memory at: [ 2288.156149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2288.156149][T12188] __msan_chain_origin+0x57/0xa0 [ 2288.156149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2288.156149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2288.156149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2288.156149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2288.156149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.156149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.156149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2288.156149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2288.156149][T12188] do_SYSENTER_32+0x73/0x90 [ 2288.156149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.156149][T12188] [ 2288.156149][T12188] Uninit was stored to memory at: [ 2288.156149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2288.156149][T12188] __msan_chain_origin+0x57/0xa0 [ 2288.156149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2288.156149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2288.156149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2288.156149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2288.156149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.156149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.156149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2288.156149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2288.156149][T12188] do_SYSENTER_32+0x73/0x90 [ 2288.156149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.156149][T12188] [ 2288.156149][T12188] Uninit was stored to memory at: [ 2288.156149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2288.156149][T12188] __msan_chain_origin+0x57/0xa0 [ 2288.156149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2288.156149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2288.156149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2288.156149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2288.156149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.156149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.156149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2288.156149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2288.156149][T12188] do_SYSENTER_32+0x73/0x90 [ 2288.156149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.156149][T12188] [ 2288.156149][T12188] Uninit was stored to memory at: [ 2288.156149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2288.156149][T12188] __msan_chain_origin+0x57/0xa0 [ 2288.156149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2288.156149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2288.156149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2288.156149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2288.156149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.156149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.156149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2288.156149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2288.156149][T12188] do_SYSENTER_32+0x73/0x90 [ 2288.156149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.156149][T12188] [ 2288.156149][T12188] Uninit was stored to memory at: [ 2288.156149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2288.156149][T12188] __msan_chain_origin+0x57/0xa0 [ 2288.156149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2288.156149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2288.156149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2288.156149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2288.156149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.156149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.156149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2288.156149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2288.156149][T12188] do_SYSENTER_32+0x73/0x90 [ 2288.156149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.156149][T12188] [ 2288.156149][T12188] Uninit was stored to memory at: [ 2288.156149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2288.156149][T12188] __msan_chain_origin+0x57/0xa0 [ 2288.156149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2288.156149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2288.156149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2288.156149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2288.156149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.156149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.156149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2288.156149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2288.156149][T12188] do_SYSENTER_32+0x73/0x90 [ 2288.156149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.156149][T12188] [ 2288.156149][T12188] Uninit was stored to memory at: [ 2288.156149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2288.156149][T12188] __msan_chain_origin+0x57/0xa0 [ 2288.156149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2288.156149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2288.156149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2288.156149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2288.156149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.156149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.156149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2288.156149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2288.156149][T12188] do_SYSENTER_32+0x73/0x90 [ 2288.156149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.156149][T12188] [ 2288.156149][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2288.156149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2288.156149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2289.243350][T12188] not chained 450000 origins [ 2289.246156][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2289.246156][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2289.246156][T12188] Call Trace: [ 2289.246156][T12188] dump_stack+0x21c/0x280 [ 2289.246156][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2289.246156][T12188] ? do_user_addr_fault+0x11d4/0x16c0 [ 2289.246156][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2289.246156][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2289.246156][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2289.246156][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2289.246156][T12188] ? _copy_from_user+0x1fd/0x300 [ 2289.246156][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] __msan_chain_origin+0x57/0xa0 [ 2289.246156][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2289.246156][T12188] get_compat_msghdr+0x108/0x2b0 [ 2289.246156][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2289.246156][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2289.246156][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2289.246156][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2289.246156][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2289.246156][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2289.246156][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.246156][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.246156][T12188] __do_fast_syscall_32+0x102/0x160 [ 2289.246156][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2289.246156][T12188] do_SYSENTER_32+0x73/0x90 [ 2289.246156][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.246156][T12188] RIP: 0023:0xf7f01549 [ 2289.246156][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2289.246156][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2289.246156][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2289.246156][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2289.246156][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2289.246156][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2289.246156][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2289.246156][T12188] Uninit was stored to memory at: [ 2289.246156][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2289.246156][T12188] __msan_chain_origin+0x57/0xa0 [ 2289.246156][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2289.246156][T12188] get_compat_msghdr+0x108/0x2b0 [ 2289.246156][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2289.246156][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2289.246156][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.246156][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.246156][T12188] __do_fast_syscall_32+0x102/0x160 [ 2289.246156][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2289.246156][T12188] do_SYSENTER_32+0x73/0x90 [ 2289.246156][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.246156][T12188] [ 2289.246156][T12188] Uninit was stored to memory at: [ 2289.246156][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2289.246156][T12188] __msan_chain_origin+0x57/0xa0 [ 2289.246156][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2289.246156][T12188] get_compat_msghdr+0x108/0x2b0 [ 2289.246156][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2289.246156][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2289.246156][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.246156][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.246156][T12188] __do_fast_syscall_32+0x102/0x160 [ 2289.246156][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2289.246156][T12188] do_SYSENTER_32+0x73/0x90 [ 2289.246156][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.246156][T12188] [ 2289.246156][T12188] Uninit was stored to memory at: [ 2289.246156][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2289.246156][T12188] __msan_chain_origin+0x57/0xa0 [ 2289.246156][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2289.246156][T12188] get_compat_msghdr+0x108/0x2b0 [ 2289.246156][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2289.246156][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2289.246156][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.246156][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.246156][T12188] __do_fast_syscall_32+0x102/0x160 [ 2289.246156][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2289.246156][T12188] do_SYSENTER_32+0x73/0x90 [ 2289.246156][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.246156][T12188] [ 2289.246156][T12188] Uninit was stored to memory at: [ 2289.246156][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2289.246156][T12188] __msan_chain_origin+0x57/0xa0 [ 2289.246156][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2289.246156][T12188] get_compat_msghdr+0x108/0x2b0 [ 2289.246156][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2289.246156][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2289.246156][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.246156][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.246156][T12188] __do_fast_syscall_32+0x102/0x160 [ 2289.246156][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2289.246156][T12188] do_SYSENTER_32+0x73/0x90 [ 2289.246156][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.246156][T12188] [ 2289.246156][T12188] Uninit was stored to memory at: [ 2289.246156][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2289.246156][T12188] __msan_chain_origin+0x57/0xa0 [ 2289.246156][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2289.246156][T12188] get_compat_msghdr+0x108/0x2b0 [ 2289.246156][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2289.246156][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2289.246156][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.246156][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.246156][T12188] __do_fast_syscall_32+0x102/0x160 [ 2289.246156][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2289.246156][T12188] do_SYSENTER_32+0x73/0x90 [ 2289.246156][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.246156][T12188] [ 2289.246156][T12188] Uninit was stored to memory at: [ 2289.246156][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2289.246156][T12188] __msan_chain_origin+0x57/0xa0 [ 2289.246156][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2289.246156][T12188] get_compat_msghdr+0x108/0x2b0 [ 2289.246156][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2289.246156][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2289.246156][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.001666][T12214] not chained 460000 origins [ 2289.246156][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.006119][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2289.246156][T12188] __do_fast_syscall_32+0x102/0x160 [ 2290.006119][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2289.246156][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2290.006119][T12214] Call Trace: [ 2289.246156][T12188] do_SYSENTER_32+0x73/0x90 [ 2290.006119][T12214] dump_stack+0x21c/0x280 [ 2289.246156][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.006119][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2289.246156][T12188] [ 2290.006119][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] Uninit was stored to memory at: [ 2290.006119][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2289.246156][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2290.006119][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] __msan_chain_origin+0x57/0xa0 [ 2290.006119][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2289.246156][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2290.006119][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2289.246156][T12188] get_compat_msghdr+0x108/0x2b0 [ 2290.006119][T12214] ? __wake_up+0x1fc/0x250 [ 2289.246156][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2290.006119][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2290.006119][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2289.246156][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.006119][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2289.246156][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.006119][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] __do_fast_syscall_32+0x102/0x160 [ 2290.006119][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2289.246156][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2290.006119][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2289.246156][T12188] do_SYSENTER_32+0x73/0x90 [ 2290.006119][T12214] ? _copy_from_user+0x1fd/0x300 [ 2289.246156][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.006119][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2289.246156][T12188] [ 2290.006119][T12214] __msan_chain_origin+0x57/0xa0 [ 2289.246156][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2290.006119][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2289.246156][T12188] do_recvmmsg+0xbf/0x22f0 [ 2290.006119][T12214] get_compat_msghdr+0x108/0x2b0 [ 2289.246156][T12188] do_recvmmsg+0xbf/0x22f0 [ 2290.006119][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2290.253564][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2290.258277][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2290.265268][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2290.274279][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2290.274279][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2290.274279][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2290.274279][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2290.274279][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2290.274279][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2290.274279][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.274279][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.274279][T12214] __do_fast_syscall_32+0x102/0x160 [ 2290.274279][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2290.274279][T12214] do_SYSENTER_32+0x73/0x90 [ 2290.274279][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.274279][T12214] RIP: 0023:0xf7f01549 [ 2290.274279][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2290.274279][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2290.274279][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2290.274279][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2290.274279][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2290.274279][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2290.274279][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2290.274279][T12214] Uninit was stored to memory at: [ 2290.274279][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2290.274279][T12214] __msan_chain_origin+0x57/0xa0 [ 2290.274279][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2290.274279][T12214] get_compat_msghdr+0x108/0x2b0 [ 2290.274279][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2290.274279][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2290.274279][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.274279][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.274279][T12214] __do_fast_syscall_32+0x102/0x160 [ 2290.274279][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2290.274279][T12214] do_SYSENTER_32+0x73/0x90 [ 2290.274279][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.274279][T12214] [ 2290.274279][T12214] Uninit was stored to memory at: [ 2290.274279][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2290.274279][T12214] __msan_chain_origin+0x57/0xa0 [ 2290.274279][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2290.274279][T12214] get_compat_msghdr+0x108/0x2b0 [ 2290.274279][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2290.274279][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2290.274279][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.274279][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.274279][T12214] __do_fast_syscall_32+0x102/0x160 [ 2290.274279][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2290.274279][T12214] do_SYSENTER_32+0x73/0x90 [ 2290.274279][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.274279][T12214] [ 2290.274279][T12214] Uninit was stored to memory at: [ 2290.274279][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2290.274279][T12214] __msan_chain_origin+0x57/0xa0 [ 2290.274279][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2290.274279][T12214] get_compat_msghdr+0x108/0x2b0 [ 2290.274279][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2290.274279][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2290.274279][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.274279][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.274279][T12214] __do_fast_syscall_32+0x102/0x160 [ 2290.274279][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2290.274279][T12214] do_SYSENTER_32+0x73/0x90 [ 2290.274279][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.274279][T12214] [ 2290.274279][T12214] Uninit was stored to memory at: [ 2290.274279][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2290.274279][T12214] __msan_chain_origin+0x57/0xa0 [ 2290.274279][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2290.274279][T12214] get_compat_msghdr+0x108/0x2b0 [ 2290.274279][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2290.274279][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2290.274279][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.274279][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.274279][T12214] __do_fast_syscall_32+0x102/0x160 [ 2290.274279][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2290.274279][T12214] do_SYSENTER_32+0x73/0x90 [ 2290.274279][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.274279][T12214] [ 2290.274279][T12214] Uninit was stored to memory at: [ 2290.274279][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2290.274279][T12214] __msan_chain_origin+0x57/0xa0 [ 2290.274279][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2290.274279][T12214] get_compat_msghdr+0x108/0x2b0 [ 2290.274279][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2290.274279][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2290.274279][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.274279][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.274279][T12214] __do_fast_syscall_32+0x102/0x160 [ 2290.274279][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2290.274279][T12214] do_SYSENTER_32+0x73/0x90 [ 2290.274279][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.274279][T12214] [ 2290.274279][T12214] Uninit was stored to memory at: [ 2290.274279][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2290.274279][T12214] __msan_chain_origin+0x57/0xa0 [ 2290.274279][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2290.274279][T12214] get_compat_msghdr+0x108/0x2b0 [ 2290.274279][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2290.274279][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2290.274279][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.274279][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.274279][T12214] __do_fast_syscall_32+0x102/0x160 [ 2290.274279][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2290.274279][T12214] do_SYSENTER_32+0x73/0x90 [ 2290.274279][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.274279][T12214] [ 2290.274279][T12214] Uninit was stored to memory at: [ 2290.274279][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2290.274279][T12214] __msan_chain_origin+0x57/0xa0 [ 2290.274279][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2290.274279][T12214] get_compat_msghdr+0x108/0x2b0 [ 2290.274279][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2290.274279][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2290.274279][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.274279][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.274279][T12214] __do_fast_syscall_32+0x102/0x160 [ 2290.274279][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2290.274279][T12214] do_SYSENTER_32+0x73/0x90 [ 2290.274279][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.274279][T12214] [ 2290.274279][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2290.274279][T12214] do_recvmmsg+0xbf/0x22f0 [ 2290.274279][T12214] do_recvmmsg+0xbf/0x22f0 [ 2291.326151][T12188] not chained 470000 origins [ 2291.326151][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2291.326151][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2291.326151][T12188] Call Trace: [ 2291.326151][T12188] dump_stack+0x21c/0x280 [ 2291.326151][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2291.326151][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2291.326151][T12188] ? __wake_up+0x1fc/0x250 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2291.326151][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2291.326151][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2291.326151][T12188] ? _copy_from_user+0x1fd/0x300 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] __msan_chain_origin+0x57/0xa0 [ 2291.326151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2291.326151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2291.326151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2291.326151][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2291.326151][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2291.326151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2291.326151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.326151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.326151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2291.326151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2291.326151][T12188] do_SYSENTER_32+0x73/0x90 [ 2291.326151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.326151][T12188] RIP: 0023:0xf7f01549 [ 2291.326151][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2291.326151][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2291.326151][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2291.326151][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2291.326151][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2291.326151][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2291.326151][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2291.326151][T12188] Uninit was stored to memory at: [ 2291.326151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2291.326151][T12188] __msan_chain_origin+0x57/0xa0 [ 2291.326151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2291.326151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2291.326151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2291.326151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2291.326151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.326151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.326151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2291.326151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2291.326151][T12188] do_SYSENTER_32+0x73/0x90 [ 2291.326151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.326151][T12188] [ 2291.326151][T12188] Uninit was stored to memory at: [ 2291.326151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2291.326151][T12188] __msan_chain_origin+0x57/0xa0 [ 2291.326151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2291.326151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2291.326151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2291.326151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2291.326151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.326151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.326151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2291.326151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2291.326151][T12188] do_SYSENTER_32+0x73/0x90 [ 2291.326151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.326151][T12188] [ 2291.326151][T12188] Uninit was stored to memory at: [ 2291.326151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2291.326151][T12188] __msan_chain_origin+0x57/0xa0 [ 2291.326151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2291.326151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2291.326151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2291.326151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2291.326151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.326151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.326151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2291.326151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2291.326151][T12188] do_SYSENTER_32+0x73/0x90 [ 2291.326151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.326151][T12188] [ 2291.326151][T12188] Uninit was stored to memory at: [ 2291.326151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2291.326151][T12188] __msan_chain_origin+0x57/0xa0 [ 2291.326151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2291.326151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2291.326151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2291.326151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2291.326151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.326151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.326151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2291.326151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2291.326151][T12188] do_SYSENTER_32+0x73/0x90 [ 2291.326151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.326151][T12188] [ 2291.326151][T12188] Uninit was stored to memory at: [ 2291.326151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2291.326151][T12188] __msan_chain_origin+0x57/0xa0 [ 2291.326151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2291.326151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2291.326151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2291.326151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2291.326151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.326151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.326151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2291.326151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2291.326151][T12188] do_SYSENTER_32+0x73/0x90 [ 2291.326151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.326151][T12188] [ 2291.326151][T12188] Uninit was stored to memory at: [ 2291.326151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2291.326151][T12188] __msan_chain_origin+0x57/0xa0 [ 2291.326151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2291.326151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2291.326151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2291.326151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2291.326151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.326151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.326151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2291.326151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2291.326151][T12188] do_SYSENTER_32+0x73/0x90 [ 2291.326151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.326151][T12188] [ 2291.326151][T12188] Uninit was stored to memory at: [ 2291.326151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2291.326151][T12188] __msan_chain_origin+0x57/0xa0 [ 2291.326151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2291.326151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2291.326151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2291.326151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2291.326151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.326151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.326151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2291.326151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2291.326151][T12188] do_SYSENTER_32+0x73/0x90 [ 2291.326151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.326151][T12188] [ 2291.326151][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2291.326151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2291.326151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2292.487248][T12214] not chained 480000 origins [ 2292.492941][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2292.496162][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2292.496162][T12214] Call Trace: [ 2292.496162][T12214] dump_stack+0x21c/0x280 [ 2292.496162][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2292.496162][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2292.496162][T12214] ? __wake_up+0x1fc/0x250 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2292.496162][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2292.496162][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2292.496162][T12214] ? _copy_from_user+0x1fd/0x300 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] __msan_chain_origin+0x57/0xa0 [ 2292.496162][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2292.496162][T12214] get_compat_msghdr+0x108/0x2b0 [ 2292.496162][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2292.496162][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2292.496162][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2292.496162][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2292.496162][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.496162][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.496162][T12214] __do_fast_syscall_32+0x102/0x160 [ 2292.496162][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2292.496162][T12214] do_SYSENTER_32+0x73/0x90 [ 2292.496162][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.496162][T12214] RIP: 0023:0xf7f01549 [ 2292.496162][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2292.496162][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2292.496162][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2292.496162][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2292.496162][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2292.496162][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2292.496162][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2292.496162][T12214] Uninit was stored to memory at: [ 2292.496162][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2292.496162][T12214] __msan_chain_origin+0x57/0xa0 [ 2292.799502][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2292.799502][T12214] get_compat_msghdr+0x108/0x2b0 [ 2292.799502][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2292.799502][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2292.799502][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.799502][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.799502][T12214] __do_fast_syscall_32+0x102/0x160 [ 2292.799502][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2292.799502][T12214] do_SYSENTER_32+0x73/0x90 [ 2292.799502][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.799502][T12214] [ 2292.799502][T12214] Uninit was stored to memory at: [ 2292.799502][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2292.799502][T12214] __msan_chain_origin+0x57/0xa0 [ 2292.799502][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2292.799502][T12214] get_compat_msghdr+0x108/0x2b0 [ 2292.799502][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2292.799502][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2292.799502][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.799502][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.799502][T12214] __do_fast_syscall_32+0x102/0x160 [ 2292.799502][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2292.799502][T12214] do_SYSENTER_32+0x73/0x90 [ 2292.799502][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.799502][T12214] [ 2292.799502][T12214] Uninit was stored to memory at: [ 2292.799502][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2292.799502][T12214] __msan_chain_origin+0x57/0xa0 [ 2292.799502][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2292.799502][T12214] get_compat_msghdr+0x108/0x2b0 [ 2292.799502][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2292.799502][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2292.799502][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.799502][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.799502][T12214] __do_fast_syscall_32+0x102/0x160 [ 2292.799502][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2292.799502][T12214] do_SYSENTER_32+0x73/0x90 [ 2292.799502][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.799502][T12214] [ 2292.799502][T12214] Uninit was stored to memory at: [ 2292.799502][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2292.799502][T12214] __msan_chain_origin+0x57/0xa0 [ 2292.799502][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2292.799502][T12214] get_compat_msghdr+0x108/0x2b0 [ 2292.799502][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2292.799502][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2292.799502][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.799502][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.799502][T12214] __do_fast_syscall_32+0x102/0x160 [ 2292.799502][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2292.799502][T12214] do_SYSENTER_32+0x73/0x90 [ 2292.799502][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.799502][T12214] [ 2292.799502][T12214] Uninit was stored to memory at: [ 2292.799502][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2292.799502][T12214] __msan_chain_origin+0x57/0xa0 [ 2292.799502][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2292.799502][T12214] get_compat_msghdr+0x108/0x2b0 [ 2292.799502][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2292.799502][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2292.799502][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.799502][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.799502][T12214] __do_fast_syscall_32+0x102/0x160 [ 2292.799502][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2292.799502][T12214] do_SYSENTER_32+0x73/0x90 [ 2292.799502][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.799502][T12214] [ 2292.799502][T12214] Uninit was stored to memory at: [ 2292.799502][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2292.799502][T12214] __msan_chain_origin+0x57/0xa0 [ 2292.799502][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2292.799502][T12214] get_compat_msghdr+0x108/0x2b0 [ 2292.799502][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2292.799502][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2292.799502][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.799502][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.799502][T12214] __do_fast_syscall_32+0x102/0x160 [ 2292.799502][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2292.799502][T12214] do_SYSENTER_32+0x73/0x90 [ 2292.799502][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.799502][T12214] [ 2292.799502][T12214] Uninit was stored to memory at: [ 2292.799502][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2292.799502][T12214] __msan_chain_origin+0x57/0xa0 [ 2292.799502][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2292.799502][T12214] get_compat_msghdr+0x108/0x2b0 [ 2292.799502][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2292.799502][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2292.799502][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.799502][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.799502][T12214] __do_fast_syscall_32+0x102/0x160 [ 2292.799502][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2292.799502][T12214] do_SYSENTER_32+0x73/0x90 [ 2292.799502][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.799502][T12214] [ 2292.799502][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2292.799502][T12214] do_recvmmsg+0xbf/0x22f0 [ 2292.799502][T12214] do_recvmmsg+0xbf/0x22f0 [ 2293.843319][T12214] not chained 490000 origins [ 2293.846154][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2293.846154][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.846154][T12214] Call Trace: [ 2293.846154][T12214] dump_stack+0x21c/0x280 [ 2293.846154][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2293.846154][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2293.846154][T12214] ? __wake_up+0x1fc/0x250 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2293.846154][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2293.846154][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2293.846154][T12214] ? _copy_from_user+0x1fd/0x300 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] __msan_chain_origin+0x57/0xa0 [ 2293.846154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2293.846154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2293.846154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2293.846154][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2293.846154][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2293.846154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2293.846154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.846154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.846154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2293.846154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2293.846154][T12214] do_SYSENTER_32+0x73/0x90 [ 2293.846154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.846154][T12214] RIP: 0023:0xf7f01549 [ 2293.846154][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2293.846154][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2293.846154][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2293.846154][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2293.846154][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2293.846154][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2293.846154][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2293.846154][T12214] Uninit was stored to memory at: [ 2293.846154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2293.846154][T12214] __msan_chain_origin+0x57/0xa0 [ 2293.846154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2293.846154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2293.846154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2293.846154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2293.846154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.846154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.846154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2293.846154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2293.846154][T12214] do_SYSENTER_32+0x73/0x90 [ 2293.846154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.846154][T12214] [ 2293.846154][T12214] Uninit was stored to memory at: [ 2293.846154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2293.846154][T12214] __msan_chain_origin+0x57/0xa0 [ 2293.846154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2293.846154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2293.846154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2293.846154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2293.846154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.846154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.846154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2293.846154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2293.846154][T12214] do_SYSENTER_32+0x73/0x90 [ 2293.846154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.846154][T12214] [ 2293.846154][T12214] Uninit was stored to memory at: [ 2293.846154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2293.846154][T12214] __msan_chain_origin+0x57/0xa0 [ 2293.846154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2293.846154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2293.846154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2293.846154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2293.846154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.846154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.846154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2293.846154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2293.846154][T12214] do_SYSENTER_32+0x73/0x90 [ 2293.846154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.846154][T12214] [ 2293.846154][T12214] Uninit was stored to memory at: [ 2293.846154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2293.846154][T12214] __msan_chain_origin+0x57/0xa0 [ 2293.846154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2293.846154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2293.846154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2293.846154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2293.846154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.846154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.846154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2293.846154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2293.846154][T12214] do_SYSENTER_32+0x73/0x90 [ 2293.846154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.846154][T12214] [ 2293.846154][T12214] Uninit was stored to memory at: [ 2293.846154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2293.846154][T12214] __msan_chain_origin+0x57/0xa0 [ 2293.846154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2293.846154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2293.846154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2293.846154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2293.846154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.846154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.846154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2293.846154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2293.846154][T12214] do_SYSENTER_32+0x73/0x90 [ 2293.846154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.846154][T12214] [ 2293.846154][T12214] Uninit was stored to memory at: [ 2293.846154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2293.846154][T12214] __msan_chain_origin+0x57/0xa0 [ 2293.846154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2293.846154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2293.846154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2293.846154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2293.846154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.846154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.846154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2293.846154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2293.846154][T12214] do_SYSENTER_32+0x73/0x90 [ 2293.846154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.846154][T12214] [ 2293.846154][T12214] Uninit was stored to memory at: [ 2293.846154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2293.846154][T12214] __msan_chain_origin+0x57/0xa0 [ 2293.846154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2293.846154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2293.846154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2293.846154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2293.846154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.846154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.846154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2293.846154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2293.846154][T12214] do_SYSENTER_32+0x73/0x90 [ 2293.846154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.846154][T12214] [ 2293.846154][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2293.846154][T12214] do_recvmmsg+0xbf/0x22f0 [ 2293.846154][T12214] do_recvmmsg+0xbf/0x22f0 [ 2294.918452][T12188] not chained 500000 origins [ 2294.923103][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2294.926135][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2294.926135][T12188] Call Trace: [ 2294.926135][T12188] dump_stack+0x21c/0x280 [ 2294.926135][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2294.926135][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2294.926135][T12188] ? __wake_up+0x1fc/0x250 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2294.926135][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2294.926135][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2294.926135][T12188] ? _copy_from_user+0x1fd/0x300 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] __msan_chain_origin+0x57/0xa0 [ 2294.926135][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2294.926135][T12188] get_compat_msghdr+0x108/0x2b0 [ 2294.926135][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2294.926135][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2294.926135][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2294.926135][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2294.926135][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.926135][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.926135][T12188] __do_fast_syscall_32+0x102/0x160 [ 2294.926135][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2294.926135][T12188] do_SYSENTER_32+0x73/0x90 [ 2294.926135][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.926135][T12188] RIP: 0023:0xf7f01549 [ 2294.926135][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2294.926135][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2294.926135][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2294.926135][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2294.926135][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2294.926135][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2294.926135][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2294.926135][T12188] Uninit was stored to memory at: [ 2294.926135][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2294.926135][T12188] __msan_chain_origin+0x57/0xa0 [ 2294.926135][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2294.926135][T12188] get_compat_msghdr+0x108/0x2b0 [ 2294.926135][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2294.926135][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2294.926135][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.926135][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.926135][T12188] __do_fast_syscall_32+0x102/0x160 [ 2294.926135][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2294.926135][T12188] do_SYSENTER_32+0x73/0x90 [ 2294.926135][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.926135][T12188] [ 2294.926135][T12188] Uninit was stored to memory at: [ 2294.926135][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2294.926135][T12188] __msan_chain_origin+0x57/0xa0 [ 2294.926135][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2294.926135][T12188] get_compat_msghdr+0x108/0x2b0 [ 2294.926135][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2294.926135][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2294.926135][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.926135][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.926135][T12188] __do_fast_syscall_32+0x102/0x160 [ 2294.926135][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2294.926135][T12188] do_SYSENTER_32+0x73/0x90 [ 2294.926135][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.926135][T12188] [ 2294.926135][T12188] Uninit was stored to memory at: [ 2294.926135][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2294.926135][T12188] __msan_chain_origin+0x57/0xa0 [ 2294.926135][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2294.926135][T12188] get_compat_msghdr+0x108/0x2b0 [ 2294.926135][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2294.926135][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2294.926135][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.926135][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.926135][T12188] __do_fast_syscall_32+0x102/0x160 [ 2294.926135][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2294.926135][T12188] do_SYSENTER_32+0x73/0x90 [ 2294.926135][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.926135][T12188] [ 2294.926135][T12188] Uninit was stored to memory at: [ 2294.926135][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2294.926135][T12188] __msan_chain_origin+0x57/0xa0 [ 2294.926135][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2294.926135][T12188] get_compat_msghdr+0x108/0x2b0 [ 2294.926135][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2294.926135][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2294.926135][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.926135][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.926135][T12188] __do_fast_syscall_32+0x102/0x160 [ 2294.926135][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2294.926135][T12188] do_SYSENTER_32+0x73/0x90 [ 2294.926135][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.926135][T12188] [ 2294.926135][T12188] Uninit was stored to memory at: [ 2294.926135][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2294.926135][T12188] __msan_chain_origin+0x57/0xa0 [ 2294.926135][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2294.926135][T12188] get_compat_msghdr+0x108/0x2b0 [ 2294.926135][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2294.926135][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2294.926135][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.926135][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.926135][T12188] __do_fast_syscall_32+0x102/0x160 [ 2294.926135][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2294.926135][T12188] do_SYSENTER_32+0x73/0x90 [ 2294.926135][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.926135][T12188] [ 2294.926135][T12188] Uninit was stored to memory at: [ 2294.926135][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2294.926135][T12188] __msan_chain_origin+0x57/0xa0 [ 2294.926135][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2294.926135][T12188] get_compat_msghdr+0x108/0x2b0 [ 2294.926135][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2294.926135][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2294.926135][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.926135][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.926135][T12188] __do_fast_syscall_32+0x102/0x160 [ 2294.926135][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2294.926135][T12188] do_SYSENTER_32+0x73/0x90 [ 2294.926135][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.926135][T12188] [ 2294.926135][T12188] Uninit was stored to memory at: [ 2294.926135][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2294.926135][T12188] __msan_chain_origin+0x57/0xa0 [ 2294.926135][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2294.926135][T12188] get_compat_msghdr+0x108/0x2b0 [ 2294.926135][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2294.926135][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2294.926135][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.926135][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.926135][T12188] __do_fast_syscall_32+0x102/0x160 [ 2294.926135][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2294.926135][T12188] do_SYSENTER_32+0x73/0x90 [ 2294.926135][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.926135][T12188] [ 2294.926135][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2294.926135][T12188] do_recvmmsg+0xbf/0x22f0 [ 2294.926135][T12188] do_recvmmsg+0xbf/0x22f0 [ 2295.933013][T12188] not chained 510000 origins [ 2295.936151][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2295.936151][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.936151][T12188] Call Trace: [ 2295.936151][T12188] dump_stack+0x21c/0x280 [ 2295.936151][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2295.936151][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2295.936151][T12188] ? __wake_up+0x1fc/0x250 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2295.936151][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2295.936151][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2295.936151][T12188] ? _copy_from_user+0x1fd/0x300 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] __msan_chain_origin+0x57/0xa0 [ 2295.936151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2295.936151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2295.936151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2295.936151][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2295.936151][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2295.936151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2295.936151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.936151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.936151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2295.936151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2295.936151][T12188] do_SYSENTER_32+0x73/0x90 [ 2295.936151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.936151][T12188] RIP: 0023:0xf7f01549 [ 2295.936151][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2295.936151][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2295.936151][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2295.936151][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2295.936151][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2295.936151][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2295.936151][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2295.936151][T12188] Uninit was stored to memory at: [ 2295.936151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2295.936151][T12188] __msan_chain_origin+0x57/0xa0 [ 2295.936151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2295.936151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2295.936151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2295.936151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2295.936151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.936151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.936151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2295.936151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2295.936151][T12188] do_SYSENTER_32+0x73/0x90 [ 2295.936151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.936151][T12188] [ 2295.936151][T12188] Uninit was stored to memory at: [ 2295.936151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2295.936151][T12188] __msan_chain_origin+0x57/0xa0 [ 2295.936151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2295.936151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2295.936151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2295.936151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2295.936151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.936151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.936151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2295.936151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2295.936151][T12188] do_SYSENTER_32+0x73/0x90 [ 2295.936151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.936151][T12188] [ 2295.936151][T12188] Uninit was stored to memory at: [ 2295.936151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2295.936151][T12188] __msan_chain_origin+0x57/0xa0 [ 2295.936151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2295.936151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2295.936151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2295.936151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2295.936151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.936151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.936151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2295.936151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2295.936151][T12188] do_SYSENTER_32+0x73/0x90 [ 2295.936151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.936151][T12188] [ 2295.936151][T12188] Uninit was stored to memory at: [ 2295.936151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2295.936151][T12188] __msan_chain_origin+0x57/0xa0 [ 2295.936151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2295.936151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2295.936151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2295.936151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2295.936151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.936151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.936151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2295.936151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2295.936151][T12188] do_SYSENTER_32+0x73/0x90 [ 2295.936151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.936151][T12188] [ 2295.936151][T12188] Uninit was stored to memory at: [ 2295.936151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2295.936151][T12188] __msan_chain_origin+0x57/0xa0 [ 2295.936151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2295.936151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2295.936151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2295.936151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2295.936151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.936151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.936151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2295.936151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2295.936151][T12188] do_SYSENTER_32+0x73/0x90 [ 2295.936151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.936151][T12188] [ 2295.936151][T12188] Uninit was stored to memory at: [ 2295.936151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2295.936151][T12188] __msan_chain_origin+0x57/0xa0 [ 2295.936151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2295.936151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2295.936151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2295.936151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2295.936151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.936151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.936151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2295.936151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2295.936151][T12188] do_SYSENTER_32+0x73/0x90 [ 2295.936151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.936151][T12188] [ 2295.936151][T12188] Uninit was stored to memory at: [ 2295.936151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2295.936151][T12188] __msan_chain_origin+0x57/0xa0 [ 2295.936151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2295.936151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2295.936151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2295.936151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2295.936151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.936151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.936151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2295.936151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2295.936151][T12188] do_SYSENTER_32+0x73/0x90 [ 2295.936151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.936151][T12188] [ 2295.936151][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2295.936151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2295.936151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2297.055192][T12188] not chained 520000 origins [ 2297.056157][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2297.056157][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.056157][T12188] Call Trace: [ 2297.056157][T12188] dump_stack+0x21c/0x280 [ 2297.056157][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2297.056157][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2297.056157][T12188] ? __wake_up+0x1fc/0x250 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2297.056157][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2297.056157][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2297.056157][T12188] ? _copy_from_user+0x1fd/0x300 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] __msan_chain_origin+0x57/0xa0 [ 2297.056157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2297.056157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2297.056157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2297.056157][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2297.056157][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2297.056157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.056157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.056157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2297.056157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2297.056157][T12188] do_SYSENTER_32+0x73/0x90 [ 2297.056157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.056157][T12188] RIP: 0023:0xf7f01549 [ 2297.056157][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2297.056157][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2297.056157][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2297.056157][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2297.056157][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2297.056157][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2297.056157][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2297.056157][T12188] Uninit was stored to memory at: [ 2297.056157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2297.056157][T12188] __msan_chain_origin+0x57/0xa0 [ 2297.056157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2297.056157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2297.056157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2297.056157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2297.056157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.408298][T12214] not chained 530000 origins [ 2297.056157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.413447][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2297.056157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2297.416120][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.056157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2297.416120][T12214] Call Trace: [ 2297.056157][T12188] do_SYSENTER_32+0x73/0x90 [ 2297.416120][T12214] dump_stack+0x21c/0x280 [ 2297.056157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.416120][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2297.056157][T12188] [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] Uninit was stored to memory at: [ 2297.416120][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2297.056157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] __msan_chain_origin+0x57/0xa0 [ 2297.416120][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2297.056157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2297.416120][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2297.056157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2297.416120][T12214] ? __wake_up+0x1fc/0x250 [ 2297.056157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2297.416120][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2297.056157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.416120][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2297.056157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2297.416120][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2297.056157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2297.416120][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2297.056157][T12188] do_SYSENTER_32+0x73/0x90 [ 2297.416120][T12214] ? _copy_from_user+0x1fd/0x300 [ 2297.056157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] [ 2297.416120][T12214] __msan_chain_origin+0x57/0xa0 [ 2297.056157][T12188] Uninit was stored to memory at: [ 2297.416120][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2297.056157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2297.416120][T12214] get_compat_msghdr+0x108/0x2b0 [ 2297.056157][T12188] __msan_chain_origin+0x57/0xa0 [ 2297.416120][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2297.056157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2297.416120][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2297.056157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2297.416120][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2297.056157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.416120][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2297.056157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.416120][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2297.056157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2297.416120][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2297.056157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] do_SYSENTER_32+0x73/0x90 [ 2297.416120][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2297.056157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.416120][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.056157][T12188] [ 2297.416120][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.056157][T12188] Uninit was stored to memory at: [ 2297.416120][T12214] __do_fast_syscall_32+0x102/0x160 [ 2297.056157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2297.416120][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2297.056157][T12188] __msan_chain_origin+0x57/0xa0 [ 2297.416120][T12214] do_SYSENTER_32+0x73/0x90 [ 2297.056157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2297.416120][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.056157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2297.416120][T12214] RIP: 0023:0xf7f01549 [ 2297.056157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2297.416120][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2297.056157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2297.416120][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 [ 2297.056157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.416120][T12214] ORIG_RAX: 0000000000000151 [ 2297.056157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.416120][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2297.056157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2297.416120][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2297.056157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2297.416120][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2297.056157][T12188] do_SYSENTER_32+0x73/0x90 [ 2297.416120][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2297.056157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.416120][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2297.056157][T12188] [ 2297.416120][T12214] Uninit was stored to memory at: [ 2297.056157][T12188] Uninit was stored to memory at: [ 2297.416120][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2297.056157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2297.416120][T12214] __msan_chain_origin+0x57/0xa0 [ 2297.056157][T12188] __msan_chain_origin+0x57/0xa0 [ 2297.416120][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2297.056157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2297.416120][T12214] get_compat_msghdr+0x108/0x2b0 [ 2297.056157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2297.056157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2297.416120][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2297.056157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2297.416120][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2297.056157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.416120][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.056157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.416120][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.056157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2297.416120][T12214] __do_fast_syscall_32+0x102/0x160 [ 2297.056157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2297.416120][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2297.056157][T12188] do_SYSENTER_32+0x73/0x90 [ 2297.416120][T12214] do_SYSENTER_32+0x73/0x90 [ 2297.056157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.416120][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.056157][T12188] [ 2297.416120][T12214] [ 2297.056157][T12188] Uninit was stored to memory at: [ 2297.416120][T12214] Uninit was stored to memory at: [ 2297.056157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2297.056157][T12188] __msan_chain_origin+0x57/0xa0 [ 2297.416120][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2297.056157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2297.416120][T12214] __msan_chain_origin+0x57/0xa0 [ 2297.056157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2297.416120][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2297.056157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2297.416120][T12214] get_compat_msghdr+0x108/0x2b0 [ 2297.056157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2297.416120][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2297.056157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.416120][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2297.056157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.416120][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.056157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2297.416120][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.056157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2297.416120][T12214] __do_fast_syscall_32+0x102/0x160 [ 2297.056157][T12188] do_SYSENTER_32+0x73/0x90 [ 2297.416120][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2297.056157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.416120][T12214] do_SYSENTER_32+0x73/0x90 [ 2297.056157][T12188] [ 2297.416120][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.056157][T12188] Uninit was stored to memory at: [ 2297.416120][T12214] [ 2297.056157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2297.416120][T12214] Uninit was stored to memory at: [ 2297.056157][T12188] __msan_chain_origin+0x57/0xa0 [ 2297.416120][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2297.056157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2297.416120][T12214] __msan_chain_origin+0x57/0xa0 [ 2297.056157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2297.416120][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2297.056157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2297.416120][T12214] get_compat_msghdr+0x108/0x2b0 [ 2297.056157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2297.416120][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2297.056157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.416120][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2297.056157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.416120][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.056157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2297.416120][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.056157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2297.416120][T12214] __do_fast_syscall_32+0x102/0x160 [ 2297.056157][T12188] do_SYSENTER_32+0x73/0x90 [ 2297.416120][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2297.056157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.416120][T12214] do_SYSENTER_32+0x73/0x90 [ 2297.056157][T12188] [ 2297.416120][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.056157][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2297.416120][T12214] [ 2297.056157][T12188] do_recvmmsg+0xbf/0x22f0 [ 2297.416120][T12214] Uninit was stored to memory at: [ 2297.056157][T12188] do_recvmmsg+0xbf/0x22f0 [ 2297.416120][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2298.385814][T12214] __msan_chain_origin+0x57/0xa0 [ 2298.395843][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2298.395843][T12214] get_compat_msghdr+0x108/0x2b0 [ 2298.395843][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2298.395843][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2298.417829][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.417829][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.417829][T12214] __do_fast_syscall_32+0x102/0x160 [ 2298.417829][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2298.417829][T12214] do_SYSENTER_32+0x73/0x90 [ 2298.417829][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.417829][T12214] [ 2298.417829][T12214] Uninit was stored to memory at: [ 2298.417829][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2298.417829][T12214] __msan_chain_origin+0x57/0xa0 [ 2298.417829][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2298.417829][T12214] get_compat_msghdr+0x108/0x2b0 [ 2298.417829][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2298.417829][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2298.417829][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.417829][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.417829][T12214] __do_fast_syscall_32+0x102/0x160 [ 2298.417829][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2298.417829][T12214] do_SYSENTER_32+0x73/0x90 [ 2298.417829][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.417829][T12214] [ 2298.417829][T12214] Uninit was stored to memory at: [ 2298.417829][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2298.417829][T12214] __msan_chain_origin+0x57/0xa0 [ 2298.417829][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2298.417829][T12214] get_compat_msghdr+0x108/0x2b0 [ 2298.417829][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2298.417829][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2298.417829][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.417829][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.417829][T12214] __do_fast_syscall_32+0x102/0x160 [ 2298.586439][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2298.586439][T12214] do_SYSENTER_32+0x73/0x90 [ 2298.594058][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.594058][T12214] [ 2298.594058][T12214] Uninit was stored to memory at: [ 2298.594058][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2298.594058][T12214] __msan_chain_origin+0x57/0xa0 [ 2298.594058][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2298.594058][T12214] get_compat_msghdr+0x108/0x2b0 [ 2298.594058][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2298.594058][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2298.594058][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.594058][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.594058][T12214] __do_fast_syscall_32+0x102/0x160 [ 2298.594058][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2298.594058][T12214] do_SYSENTER_32+0x73/0x90 [ 2298.594058][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.594058][T12214] [ 2298.594058][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2298.594058][T12214] do_recvmmsg+0xbf/0x22f0 [ 2298.594058][T12214] do_recvmmsg+0xbf/0x22f0 [ 2298.927075][T12214] not chained 540000 origins [ 2298.931711][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2298.936136][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.936136][T12214] Call Trace: [ 2298.936136][T12214] dump_stack+0x21c/0x280 [ 2298.936136][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2298.936136][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2298.936136][T12214] ? __wake_up+0x1fc/0x250 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2298.936136][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2298.936136][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2298.936136][T12214] ? _copy_from_user+0x1fd/0x300 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] __msan_chain_origin+0x57/0xa0 [ 2298.936136][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2298.936136][T12214] get_compat_msghdr+0x108/0x2b0 [ 2298.936136][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2298.936136][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2298.936136][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2298.936136][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2298.936136][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.936136][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.936136][T12214] __do_fast_syscall_32+0x102/0x160 [ 2298.936136][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2298.936136][T12214] do_SYSENTER_32+0x73/0x90 [ 2298.936136][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.936136][T12214] RIP: 0023:0xf7f01549 [ 2298.936136][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2298.936136][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2298.936136][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2298.936136][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2298.936136][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2298.936136][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2298.936136][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2298.936136][T12214] Uninit was stored to memory at: [ 2298.936136][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2298.936136][T12214] __msan_chain_origin+0x57/0xa0 [ 2298.936136][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2298.936136][T12214] get_compat_msghdr+0x108/0x2b0 [ 2298.936136][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2298.936136][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2298.936136][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.936136][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.936136][T12214] __do_fast_syscall_32+0x102/0x160 [ 2298.936136][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2298.936136][T12214] do_SYSENTER_32+0x73/0x90 [ 2298.936136][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.936136][T12214] [ 2298.936136][T12214] Uninit was stored to memory at: [ 2298.936136][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2298.936136][T12214] __msan_chain_origin+0x57/0xa0 [ 2298.936136][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2298.936136][T12214] get_compat_msghdr+0x108/0x2b0 [ 2298.936136][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2298.936136][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2298.936136][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.936136][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.936136][T12214] __do_fast_syscall_32+0x102/0x160 [ 2298.936136][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2298.936136][T12214] do_SYSENTER_32+0x73/0x90 [ 2298.936136][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.936136][T12214] [ 2298.936136][T12214] Uninit was stored to memory at: [ 2298.936136][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2298.936136][T12214] __msan_chain_origin+0x57/0xa0 [ 2298.936136][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2298.936136][T12214] get_compat_msghdr+0x108/0x2b0 [ 2298.936136][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2298.936136][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2298.936136][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.936136][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.936136][T12214] __do_fast_syscall_32+0x102/0x160 [ 2298.936136][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2298.936136][T12214] do_SYSENTER_32+0x73/0x90 [ 2298.936136][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.936136][T12214] [ 2298.936136][T12214] Uninit was stored to memory at: [ 2298.936136][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2299.456668][T12214] __msan_chain_origin+0x57/0xa0 [ 2299.456668][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2299.456668][T12214] get_compat_msghdr+0x108/0x2b0 [ 2299.456668][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2299.456668][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2299.456668][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.456668][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.456668][T12214] __do_fast_syscall_32+0x102/0x160 [ 2299.456668][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2299.456668][T12214] do_SYSENTER_32+0x73/0x90 [ 2299.456668][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.456668][T12214] [ 2299.456668][T12214] Uninit was stored to memory at: [ 2299.456668][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2299.456668][T12214] __msan_chain_origin+0x57/0xa0 [ 2299.456668][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2299.456668][T12214] get_compat_msghdr+0x108/0x2b0 [ 2299.456668][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2299.456668][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2299.456668][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.456668][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.456668][T12214] __do_fast_syscall_32+0x102/0x160 [ 2299.456668][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2299.456668][T12214] do_SYSENTER_32+0x73/0x90 [ 2299.456668][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.456668][T12214] [ 2299.456668][T12214] Uninit was stored to memory at: [ 2299.456668][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2299.456668][T12214] __msan_chain_origin+0x57/0xa0 [ 2299.456668][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2299.456668][T12214] get_compat_msghdr+0x108/0x2b0 [ 2299.456668][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2299.456668][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2299.456668][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.456668][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.456668][T12214] __do_fast_syscall_32+0x102/0x160 [ 2299.456668][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2299.456668][T12214] do_SYSENTER_32+0x73/0x90 [ 2299.456668][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.456668][T12214] [ 2299.456668][T12214] Uninit was stored to memory at: [ 2299.456668][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2299.456668][T12214] __msan_chain_origin+0x57/0xa0 [ 2299.456668][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2299.456668][T12214] get_compat_msghdr+0x108/0x2b0 [ 2299.456668][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2299.456668][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2299.456668][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.456668][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.456668][T12214] __do_fast_syscall_32+0x102/0x160 [ 2299.456668][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2299.456668][T12214] do_SYSENTER_32+0x73/0x90 [ 2299.456668][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.456668][T12214] [ 2299.456668][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2299.456668][T12214] do_recvmmsg+0xbf/0x22f0 [ 2299.456668][T12214] do_recvmmsg+0xbf/0x22f0 [ 2300.028589][T12214] not chained 550000 origins [ 2300.034542][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2300.036315][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.036315][T12214] Call Trace: [ 2300.036315][T12214] dump_stack+0x21c/0x280 [ 2300.036315][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2300.036315][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2300.036315][T12214] ? __wake_up+0x1fc/0x250 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2300.036315][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2300.036315][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2300.036315][T12214] ? _copy_from_user+0x1fd/0x300 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.036315][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.036315][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.036315][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2300.036315][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2300.036315][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2300.036315][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.036315][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.036315][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.036315][T12214] __do_fast_syscall_32+0x102/0x160 [ 2300.036315][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2300.036315][T12214] do_SYSENTER_32+0x73/0x90 [ 2300.036315][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.036315][T12214] RIP: 0023:0xf7f01549 [ 2300.036315][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2300.036315][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2300.036315][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2300.036315][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2300.036315][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2300.036315][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2300.036315][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2300.036315][T12214] Uninit was stored to memory at: [ 2300.036315][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2300.036315][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.036315][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.036315][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.036315][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.036315][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.363649][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.363649][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.363649][T12214] __do_fast_syscall_32+0x102/0x160 [ 2300.363649][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2300.363649][T12214] do_SYSENTER_32+0x73/0x90 [ 2300.363649][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.363649][T12214] [ 2300.363649][T12214] Uninit was stored to memory at: [ 2300.363649][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2300.363649][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.363649][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.363649][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.363649][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.363649][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.363649][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.363649][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.363649][T12214] __do_fast_syscall_32+0x102/0x160 [ 2300.363649][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2300.363649][T12214] do_SYSENTER_32+0x73/0x90 [ 2300.363649][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.363649][T12214] [ 2300.363649][T12214] Uninit was stored to memory at: [ 2300.363649][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2300.363649][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.363649][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.363649][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.363649][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.363649][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.363649][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.363649][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.363649][T12214] __do_fast_syscall_32+0x102/0x160 [ 2300.363649][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2300.363649][T12214] do_SYSENTER_32+0x73/0x90 [ 2300.363649][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.363649][T12214] [ 2300.363649][T12214] Uninit was stored to memory at: [ 2300.363649][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2300.363649][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.363649][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.363649][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.363649][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.363649][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.363649][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.363649][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.363649][T12214] __do_fast_syscall_32+0x102/0x160 [ 2300.363649][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2300.363649][T12214] do_SYSENTER_32+0x73/0x90 [ 2300.363649][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.363649][T12214] [ 2300.363649][T12214] Uninit was stored to memory at: [ 2300.363649][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2300.363649][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.363649][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.363649][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.363649][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.363649][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.363649][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.363649][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.363649][T12214] __do_fast_syscall_32+0x102/0x160 [ 2300.363649][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2300.363649][T12214] do_SYSENTER_32+0x73/0x90 [ 2300.363649][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.363649][T12214] [ 2300.363649][T12214] Uninit was stored to memory at: [ 2300.363649][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2300.363649][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.363649][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.363649][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.363649][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.363649][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.363649][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.363649][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.363649][T12214] __do_fast_syscall_32+0x102/0x160 [ 2300.363649][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2300.363649][T12214] do_SYSENTER_32+0x73/0x90 [ 2300.363649][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.363649][T12214] [ 2300.363649][T12214] Uninit was stored to memory at: [ 2300.363649][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2300.363649][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.363649][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.363649][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.363649][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.363649][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.363649][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.363649][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.363649][T12214] __do_fast_syscall_32+0x102/0x160 [ 2300.363649][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2300.363649][T12214] do_SYSENTER_32+0x73/0x90 [ 2300.363649][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.363649][T12214] [ 2300.363649][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2300.363649][T12214] do_recvmmsg+0xbf/0x22f0 [ 2300.363649][T12214] do_recvmmsg+0xbf/0x22f0 [ 2300.813683][T12214] not chained 560000 origins [ 2300.818316][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2300.818316][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.818316][T12214] Call Trace: [ 2300.818316][T12214] dump_stack+0x21c/0x280 [ 2300.818316][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2300.818316][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.818316][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2300.818316][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.818316][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2300.818316][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2300.818316][T12214] ? __wake_up+0x1fc/0x250 [ 2300.818316][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.818316][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2300.818316][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2300.818316][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.818316][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2300.818316][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2300.818316][T12214] ? _copy_from_user+0x1fd/0x300 [ 2300.818316][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.818316][T12214] __msan_chain_origin+0x57/0xa0 [ 2300.818316][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2300.818316][T12214] get_compat_msghdr+0x108/0x2b0 [ 2300.818316][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2300.818316][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.818316][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2300.996323][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2300.996323][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2300.996323][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2300.996323][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2300.996323][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2300.996323][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2301.026344][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2301.026344][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.026344][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.026344][T12214] __do_fast_syscall_32+0x102/0x160 [ 2301.026344][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2301.026344][T12214] do_SYSENTER_32+0x73/0x90 [ 2301.026344][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.026344][T12214] RIP: 0023:0xf7f01549 [ 2301.026344][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2301.026344][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2301.026344][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2301.026344][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2301.116253][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2301.116253][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2301.116253][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2301.116253][T12214] Uninit was stored to memory at: [ 2301.146414][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2301.146414][T12214] __msan_chain_origin+0x57/0xa0 [ 2301.146414][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2301.146414][T12214] get_compat_msghdr+0x108/0x2b0 [ 2301.146414][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2301.146414][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2301.146414][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.146414][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.146414][T12214] __do_fast_syscall_32+0x102/0x160 [ 2301.146414][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2301.146414][T12214] do_SYSENTER_32+0x73/0x90 [ 2301.146414][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.146414][T12214] [ 2301.146414][T12214] Uninit was stored to memory at: [ 2301.146414][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2301.146414][T12214] __msan_chain_origin+0x57/0xa0 [ 2301.146414][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2301.230879][T12188] not chained 570000 origins [ 2301.146414][T12214] get_compat_msghdr+0x108/0x2b0 [ 2301.236167][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2301.146414][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2301.236167][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2301.146414][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2301.236167][T12188] Call Trace: [ 2301.146414][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.236167][T12188] dump_stack+0x21c/0x280 [ 2301.146414][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.236167][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2301.146414][T12214] __do_fast_syscall_32+0x102/0x160 [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2301.236167][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2301.146414][T12214] do_SYSENTER_32+0x73/0x90 [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.236167][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2301.146414][T12214] [ 2301.236167][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2301.146414][T12214] Uninit was stored to memory at: [ 2301.236167][T12188] ? __wake_up+0x1fc/0x250 [ 2301.146414][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] __msan_chain_origin+0x57/0xa0 [ 2301.236167][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2301.146414][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2301.236167][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2301.146414][T12214] get_compat_msghdr+0x108/0x2b0 [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2301.236167][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2301.146414][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2301.236167][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2301.146414][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.236167][T12188] ? _copy_from_user+0x1fd/0x300 [ 2301.146414][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] __do_fast_syscall_32+0x102/0x160 [ 2301.236167][T12188] __msan_chain_origin+0x57/0xa0 [ 2301.146414][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2301.236167][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2301.146414][T12214] do_SYSENTER_32+0x73/0x90 [ 2301.236167][T12188] get_compat_msghdr+0x108/0x2b0 [ 2301.146414][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.236167][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2301.146414][T12214] [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] Uninit was stored to memory at: [ 2301.236167][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2301.146414][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] __msan_chain_origin+0x57/0xa0 [ 2301.236167][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2301.146414][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2301.236167][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2301.146414][T12214] get_compat_msghdr+0x108/0x2b0 [ 2301.236167][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2301.146414][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2301.236167][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2301.146414][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.236167][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2301.146414][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.236167][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.146414][T12214] __do_fast_syscall_32+0x102/0x160 [ 2301.236167][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.146414][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2301.236167][T12188] __do_fast_syscall_32+0x102/0x160 [ 2301.146414][T12214] do_SYSENTER_32+0x73/0x90 [ 2301.236167][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2301.146414][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.236167][T12188] do_SYSENTER_32+0x73/0x90 [ 2301.146414][T12214] [ 2301.236167][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.146414][T12214] Uninit was stored to memory at: [ 2301.236167][T12188] RIP: 0023:0xf7f01549 [ 2301.146414][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2301.236167][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2301.146414][T12214] __msan_chain_origin+0x57/0xa0 [ 2301.236167][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 [ 2301.146414][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2301.236167][T12188] ORIG_RAX: 0000000000000151 [ 2301.146414][T12214] get_compat_msghdr+0x108/0x2b0 [ 2301.236167][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2301.146414][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2301.236167][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2301.146414][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2301.236167][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2301.146414][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.236167][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2301.146414][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.236167][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2301.146414][T12214] __do_fast_syscall_32+0x102/0x160 [ 2301.236167][T12188] Uninit was stored to memory at: [ 2301.146414][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2301.236167][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2301.146414][T12214] do_SYSENTER_32+0x73/0x90 [ 2301.236167][T12188] __msan_chain_origin+0x57/0xa0 [ 2301.146414][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.236167][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2301.146414][T12214] [ 2301.236167][T12188] get_compat_msghdr+0x108/0x2b0 [ 2301.146414][T12214] Uninit was stored to memory at: [ 2301.236167][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2301.146414][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2301.236167][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2301.146414][T12214] __msan_chain_origin+0x57/0xa0 [ 2301.236167][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.146414][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2301.236167][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.146414][T12214] get_compat_msghdr+0x108/0x2b0 [ 2301.236167][T12188] __do_fast_syscall_32+0x102/0x160 [ 2301.146414][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2301.236167][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2301.146414][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2301.236167][T12188] do_SYSENTER_32+0x73/0x90 [ 2301.146414][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.236167][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.146414][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.236167][T12188] [ 2301.146414][T12214] __do_fast_syscall_32+0x102/0x160 [ 2301.236167][T12188] Uninit was stored to memory at: [ 2301.146414][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2301.236167][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2301.146414][T12214] do_SYSENTER_32+0x73/0x90 [ 2301.236167][T12188] __msan_chain_origin+0x57/0xa0 [ 2301.146414][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.236167][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2301.146414][T12214] [ 2301.236167][T12188] get_compat_msghdr+0x108/0x2b0 [ 2301.146414][T12214] Uninit was stored to memory at: [ 2301.236167][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2301.146414][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2301.236167][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2301.146414][T12214] __msan_chain_origin+0x57/0xa0 [ 2301.236167][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.146414][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2301.236167][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.146414][T12214] get_compat_msghdr+0x108/0x2b0 [ 2301.236167][T12188] __do_fast_syscall_32+0x102/0x160 [ 2301.146414][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2301.236167][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2301.146414][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2301.236167][T12188] do_SYSENTER_32+0x73/0x90 [ 2301.146414][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.236167][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.146414][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.236167][T12188] [ 2301.146414][T12214] __do_fast_syscall_32+0x102/0x160 [ 2301.236167][T12188] Uninit was stored to memory at: [ 2301.146414][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2301.236167][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2301.146414][T12214] do_SYSENTER_32+0x73/0x90 [ 2301.236167][T12188] __msan_chain_origin+0x57/0xa0 [ 2301.146414][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.236167][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2301.146414][T12214] [ 2301.236167][T12188] get_compat_msghdr+0x108/0x2b0 [ 2301.146414][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2301.236167][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2301.146414][T12214] do_recvmmsg+0xbf/0x22f0 [ 2301.236167][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2301.146414][T12214] do_recvmmsg+0xbf/0x22f0 [ 2301.236167][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.126202][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.126202][T12188] __do_fast_syscall_32+0x102/0x160 [ 2302.126202][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2302.126202][T12188] do_SYSENTER_32+0x73/0x90 [ 2302.126202][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.126202][T12188] [ 2302.126202][T12188] Uninit was stored to memory at: [ 2302.126202][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2302.126202][T12188] __msan_chain_origin+0x57/0xa0 [ 2302.126202][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2302.126202][T12188] get_compat_msghdr+0x108/0x2b0 [ 2302.126202][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2302.126202][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2302.126202][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.126202][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.126202][T12188] __do_fast_syscall_32+0x102/0x160 [ 2302.126202][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2302.126202][T12188] do_SYSENTER_32+0x73/0x90 [ 2302.126202][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.126202][T12188] [ 2302.126202][T12188] Uninit was stored to memory at: [ 2302.126202][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2302.126202][T12188] __msan_chain_origin+0x57/0xa0 [ 2302.126202][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2302.126202][T12188] get_compat_msghdr+0x108/0x2b0 [ 2302.126202][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2302.126202][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2302.126202][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.126202][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.126202][T12188] __do_fast_syscall_32+0x102/0x160 [ 2302.126202][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2302.126202][T12188] do_SYSENTER_32+0x73/0x90 [ 2302.126202][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.126202][T12188] [ 2302.126202][T12188] Uninit was stored to memory at: [ 2302.126202][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2302.126202][T12188] __msan_chain_origin+0x57/0xa0 [ 2302.126202][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2302.126202][T12188] get_compat_msghdr+0x108/0x2b0 [ 2302.126202][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2302.126202][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2302.126202][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.126202][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.126202][T12188] __do_fast_syscall_32+0x102/0x160 [ 2302.126202][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2302.126202][T12188] do_SYSENTER_32+0x73/0x90 [ 2302.126202][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.126202][T12188] [ 2302.126202][T12188] Uninit was stored to memory at: [ 2302.126202][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2302.126202][T12188] __msan_chain_origin+0x57/0xa0 [ 2302.126202][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2302.126202][T12188] get_compat_msghdr+0x108/0x2b0 [ 2302.126202][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2302.126202][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2302.126202][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.126202][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.126202][T12188] __do_fast_syscall_32+0x102/0x160 [ 2302.126202][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2302.126202][T12188] do_SYSENTER_32+0x73/0x90 [ 2302.126202][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.126202][T12188] [ 2302.126202][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2302.126202][T12188] do_recvmmsg+0xbf/0x22f0 [ 2302.126202][T12188] do_recvmmsg+0xbf/0x22f0 [ 2302.732774][T12214] not chained 580000 origins [ 2302.737296][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2302.737296][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2302.737296][T12214] Call Trace: [ 2302.737296][T12214] dump_stack+0x21c/0x280 [ 2302.737296][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2302.737296][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2302.737296][T12214] ? __wake_up+0x1fc/0x250 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2302.737296][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2302.737296][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2302.737296][T12214] ? _copy_from_user+0x1fd/0x300 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] __msan_chain_origin+0x57/0xa0 [ 2302.737296][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2302.737296][T12214] get_compat_msghdr+0x108/0x2b0 [ 2302.737296][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2302.737296][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2302.737296][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2302.737296][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2302.737296][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.737296][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.737296][T12214] __do_fast_syscall_32+0x102/0x160 [ 2302.737296][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2302.737296][T12214] do_SYSENTER_32+0x73/0x90 [ 2302.737296][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.737296][T12214] RIP: 0023:0xf7f01549 [ 2302.737296][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2302.737296][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2302.737296][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2302.737296][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2302.737296][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2302.737296][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2302.737296][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2302.737296][T12214] Uninit was stored to memory at: [ 2302.737296][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2302.737296][T12214] __msan_chain_origin+0x57/0xa0 [ 2302.737296][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2302.737296][T12214] get_compat_msghdr+0x108/0x2b0 [ 2302.737296][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2302.737296][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2302.737296][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.737296][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.737296][T12214] __do_fast_syscall_32+0x102/0x160 [ 2302.737296][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2302.737296][T12214] do_SYSENTER_32+0x73/0x90 [ 2302.737296][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.737296][T12214] [ 2302.737296][T12214] Uninit was stored to memory at: [ 2302.737296][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2302.737296][T12214] __msan_chain_origin+0x57/0xa0 [ 2302.737296][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2302.737296][T12214] get_compat_msghdr+0x108/0x2b0 [ 2302.737296][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2302.737296][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2302.737296][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.737296][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.737296][T12214] __do_fast_syscall_32+0x102/0x160 [ 2302.737296][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2302.737296][T12214] do_SYSENTER_32+0x73/0x90 [ 2302.737296][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.737296][T12214] [ 2302.737296][T12214] Uninit was stored to memory at: [ 2302.737296][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2302.737296][T12214] __msan_chain_origin+0x57/0xa0 [ 2302.737296][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2302.737296][T12214] get_compat_msghdr+0x108/0x2b0 [ 2302.737296][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2302.737296][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2302.737296][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.737296][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.737296][T12214] __do_fast_syscall_32+0x102/0x160 [ 2302.737296][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2302.737296][T12214] do_SYSENTER_32+0x73/0x90 [ 2302.737296][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.737296][T12214] [ 2302.737296][T12214] Uninit was stored to memory at: [ 2302.737296][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2302.737296][T12214] __msan_chain_origin+0x57/0xa0 [ 2302.737296][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2302.737296][T12214] get_compat_msghdr+0x108/0x2b0 [ 2302.737296][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2302.737296][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2302.737296][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.737296][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.737296][T12214] __do_fast_syscall_32+0x102/0x160 [ 2302.737296][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2302.737296][T12214] do_SYSENTER_32+0x73/0x90 [ 2302.737296][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.737296][T12214] [ 2302.737296][T12214] Uninit was stored to memory at: [ 2302.737296][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2302.737296][T12214] __msan_chain_origin+0x57/0xa0 [ 2302.737296][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2302.737296][T12214] get_compat_msghdr+0x108/0x2b0 [ 2302.737296][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2302.737296][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2302.737296][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.737296][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.737296][T12214] __do_fast_syscall_32+0x102/0x160 [ 2302.737296][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2302.737296][T12214] do_SYSENTER_32+0x73/0x90 [ 2302.737296][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.737296][T12214] [ 2302.737296][T12214] Uninit was stored to memory at: [ 2302.737296][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2302.737296][T12214] __msan_chain_origin+0x57/0xa0 [ 2302.737296][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2302.737296][T12214] get_compat_msghdr+0x108/0x2b0 [ 2302.737296][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2302.737296][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2302.737296][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.737296][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.737296][T12214] __do_fast_syscall_32+0x102/0x160 [ 2302.737296][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2302.737296][T12214] do_SYSENTER_32+0x73/0x90 [ 2302.737296][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.737296][T12214] [ 2302.737296][T12214] Uninit was stored to memory at: [ 2302.737296][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2302.737296][T12214] __msan_chain_origin+0x57/0xa0 [ 2302.737296][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2302.737296][T12214] get_compat_msghdr+0x108/0x2b0 [ 2302.737296][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2302.737296][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2302.737296][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.737296][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.737296][T12214] __do_fast_syscall_32+0x102/0x160 [ 2302.737296][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2302.737296][T12214] do_SYSENTER_32+0x73/0x90 [ 2302.737296][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.737296][T12214] [ 2302.737296][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2302.737296][T12214] do_recvmmsg+0xbf/0x22f0 [ 2302.737296][T12214] do_recvmmsg+0xbf/0x22f0 [ 2303.820898][T12214] not chained 590000 origins [ 2303.826127][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2303.827478][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.827478][T12214] Call Trace: [ 2303.846383][T12214] dump_stack+0x21c/0x280 [ 2303.846383][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2303.846383][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2303.846383][T12214] ? __wake_up+0x1fc/0x250 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2303.846383][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2303.846383][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2303.846383][T12214] ? _copy_from_user+0x1fd/0x300 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] __msan_chain_origin+0x57/0xa0 [ 2303.846383][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2303.846383][T12214] get_compat_msghdr+0x108/0x2b0 [ 2303.846383][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2303.846383][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2303.846383][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2303.846383][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2303.846383][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.846383][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.846383][T12214] __do_fast_syscall_32+0x102/0x160 [ 2303.846383][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2303.846383][T12214] do_SYSENTER_32+0x73/0x90 [ 2303.846383][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.846383][T12214] RIP: 0023:0xf7f01549 [ 2303.846383][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2303.846383][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2303.846383][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2303.846383][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2303.846383][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2303.846383][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2303.846383][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2303.846383][T12214] Uninit was stored to memory at: [ 2303.846383][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2303.846383][T12214] __msan_chain_origin+0x57/0xa0 [ 2303.846383][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2303.846383][T12214] get_compat_msghdr+0x108/0x2b0 [ 2303.846383][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2303.846383][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2303.846383][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.846383][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.846383][T12214] __do_fast_syscall_32+0x102/0x160 [ 2303.846383][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2303.846383][T12214] do_SYSENTER_32+0x73/0x90 [ 2303.846383][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.846383][T12214] [ 2303.846383][T12214] Uninit was stored to memory at: [ 2303.846383][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2303.846383][T12214] __msan_chain_origin+0x57/0xa0 [ 2303.846383][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2303.846383][T12214] get_compat_msghdr+0x108/0x2b0 [ 2303.846383][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2303.846383][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2303.846383][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.846383][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.846383][T12214] __do_fast_syscall_32+0x102/0x160 [ 2303.846383][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2303.846383][T12214] do_SYSENTER_32+0x73/0x90 [ 2303.846383][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.846383][T12214] [ 2303.846383][T12214] Uninit was stored to memory at: [ 2303.846383][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2303.846383][T12214] __msan_chain_origin+0x57/0xa0 [ 2303.846383][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2303.846383][T12214] get_compat_msghdr+0x108/0x2b0 [ 2303.846383][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2303.846383][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2303.846383][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.846383][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.846383][T12214] __do_fast_syscall_32+0x102/0x160 [ 2303.846383][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2303.846383][T12214] do_SYSENTER_32+0x73/0x90 [ 2303.846383][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.846383][T12214] [ 2303.846383][T12214] Uninit was stored to memory at: [ 2303.846383][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2303.846383][T12214] __msan_chain_origin+0x57/0xa0 [ 2303.846383][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2303.846383][T12214] get_compat_msghdr+0x108/0x2b0 [ 2303.846383][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2303.846383][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2303.846383][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.846383][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.846383][T12214] __do_fast_syscall_32+0x102/0x160 [ 2303.846383][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2303.846383][T12214] do_SYSENTER_32+0x73/0x90 [ 2303.846383][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.846383][T12214] [ 2303.846383][T12214] Uninit was stored to memory at: [ 2303.846383][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2303.846383][T12214] __msan_chain_origin+0x57/0xa0 [ 2303.846383][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2303.846383][T12214] get_compat_msghdr+0x108/0x2b0 [ 2303.846383][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2303.846383][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2303.846383][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.846383][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.846383][T12214] __do_fast_syscall_32+0x102/0x160 [ 2303.846383][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2303.846383][T12214] do_SYSENTER_32+0x73/0x90 [ 2303.846383][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.846383][T12214] [ 2303.846383][T12214] Uninit was stored to memory at: [ 2303.846383][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2303.846383][T12214] __msan_chain_origin+0x57/0xa0 [ 2303.846383][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2303.846383][T12214] get_compat_msghdr+0x108/0x2b0 [ 2303.846383][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2303.846383][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2303.846383][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.846383][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2304.566313][T12214] __do_fast_syscall_32+0x102/0x160 [ 2304.566313][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2304.566313][T12214] do_SYSENTER_32+0x73/0x90 [ 2304.566313][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.566313][T12214] [ 2304.566313][T12214] Uninit was stored to memory at: [ 2304.566313][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2304.566313][T12214] __msan_chain_origin+0x57/0xa0 [ 2304.566313][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2304.566313][T12214] get_compat_msghdr+0x108/0x2b0 [ 2304.566313][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2304.566313][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2304.566313][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2304.566313][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2304.566313][T12214] __do_fast_syscall_32+0x102/0x160 [ 2304.566313][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2304.566313][T12214] do_SYSENTER_32+0x73/0x90 [ 2304.566313][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2304.566313][T12214] [ 2304.566313][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2304.566313][T12214] do_recvmmsg+0xbf/0x22f0 [ 2304.566313][T12214] do_recvmmsg+0xbf/0x22f0 [ 2304.887952][T12188] not chained 600000 origins [ 2304.893723][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2304.896470][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2304.907856][T12188] Call Trace: [ 2304.907856][T12188] dump_stack+0x21c/0x280 [ 2304.907856][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2304.926786][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2304.926786][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2304.926786][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2304.926786][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2304.926786][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2304.956367][T12188] ? __wake_up+0x1fc/0x250 [ 2304.956367][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2304.956367][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2304.956367][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2304.956367][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2304.986287][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2304.986287][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2304.986287][T12188] ? _copy_from_user+0x1fd/0x300 [ 2304.986287][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2304.986287][T12188] __msan_chain_origin+0x57/0xa0 [ 2305.017030][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2305.017030][T12188] get_compat_msghdr+0x108/0x2b0 [ 2305.017030][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2305.017030][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2305.017030][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2305.017030][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2305.017030][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2305.017030][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2305.017030][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2305.017030][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2305.017030][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2305.017030][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2305.017030][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2305.017030][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2305.017030][T12188] __do_fast_syscall_32+0x102/0x160 [ 2305.017030][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2305.017030][T12188] do_SYSENTER_32+0x73/0x90 [ 2305.017030][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.017030][T12188] RIP: 0023:0xf7f01549 [ 2305.017030][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2305.017030][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2305.017030][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2305.017030][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2305.017030][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2305.017030][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2305.017030][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2305.017030][T12188] Uninit was stored to memory at: [ 2305.017030][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2305.017030][T12188] __msan_chain_origin+0x57/0xa0 [ 2305.017030][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2305.017030][T12188] get_compat_msghdr+0x108/0x2b0 [ 2305.017030][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2305.017030][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2305.017030][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2305.017030][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2305.017030][T12188] __do_fast_syscall_32+0x102/0x160 [ 2305.017030][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2305.017030][T12188] do_SYSENTER_32+0x73/0x90 [ 2305.017030][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.017030][T12188] [ 2305.017030][T12188] Uninit was stored to memory at: [ 2305.017030][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2305.017030][T12188] __msan_chain_origin+0x57/0xa0 [ 2305.017030][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2305.017030][T12188] get_compat_msghdr+0x108/0x2b0 [ 2305.017030][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2305.017030][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2305.017030][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2305.017030][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2305.017030][T12188] __do_fast_syscall_32+0x102/0x160 [ 2305.017030][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2305.017030][T12188] do_SYSENTER_32+0x73/0x90 [ 2305.017030][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.017030][T12188] [ 2305.017030][T12188] Uninit was stored to memory at: [ 2305.017030][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2305.017030][T12188] __msan_chain_origin+0x57/0xa0 [ 2305.017030][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2305.017030][T12188] get_compat_msghdr+0x108/0x2b0 [ 2305.017030][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2305.017030][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2305.017030][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2305.017030][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2305.017030][T12188] __do_fast_syscall_32+0x102/0x160 [ 2305.017030][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2305.017030][T12188] do_SYSENTER_32+0x73/0x90 [ 2305.017030][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.017030][T12188] [ 2305.017030][T12188] Uninit was stored to memory at: [ 2305.017030][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2305.017030][T12188] __msan_chain_origin+0x57/0xa0 [ 2305.017030][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2305.017030][T12188] get_compat_msghdr+0x108/0x2b0 [ 2305.017030][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2305.017030][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2305.017030][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2305.017030][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2305.017030][T12188] __do_fast_syscall_32+0x102/0x160 [ 2305.017030][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2305.017030][T12188] do_SYSENTER_32+0x73/0x90 [ 2305.481848][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.481848][T12188] [ 2305.481848][T12188] Uninit was stored to memory at: [ 2305.481848][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2305.481848][T12188] __msan_chain_origin+0x57/0xa0 [ 2305.481848][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2305.481848][T12188] get_compat_msghdr+0x108/0x2b0 [ 2305.481848][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2305.481848][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2305.481848][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2305.526822][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2305.526822][T12188] __do_fast_syscall_32+0x102/0x160 [ 2305.526822][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2305.526822][T12188] do_SYSENTER_32+0x73/0x90 [ 2305.526822][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.526822][T12188] [ 2305.526822][T12188] Uninit was stored to memory at: [ 2305.526822][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2305.526822][T12188] __msan_chain_origin+0x57/0xa0 [ 2305.526822][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2305.526822][T12188] get_compat_msghdr+0x108/0x2b0 [ 2305.526822][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2305.526822][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2305.526822][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2305.526822][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2305.526822][T12188] __do_fast_syscall_32+0x102/0x160 [ 2305.526822][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2305.526822][T12188] do_SYSENTER_32+0x73/0x90 [ 2305.526822][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.526822][T12188] [ 2305.526822][T12188] Uninit was stored to memory at: [ 2305.526822][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2305.526822][T12188] __msan_chain_origin+0x57/0xa0 [ 2305.526822][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2305.526822][T12188] get_compat_msghdr+0x108/0x2b0 [ 2305.526822][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2305.526822][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2305.526822][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2305.526822][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2305.526822][T12188] __do_fast_syscall_32+0x102/0x160 [ 2305.686381][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2305.686381][T12188] do_SYSENTER_32+0x73/0x90 [ 2305.686381][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2305.686381][T12188] [ 2305.686381][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2305.686381][T12188] do_recvmmsg+0xbf/0x22f0 [ 2305.686381][T12188] do_recvmmsg+0xbf/0x22f0 [ 2305.985532][T12188] not chained 610000 origins [ 2305.986131][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2305.986131][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2306.006445][T12188] Call Trace: [ 2306.006445][T12188] dump_stack+0x21c/0x280 [ 2306.006445][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2306.006445][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2306.006445][T12188] ? __wake_up+0x1fc/0x250 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2306.006445][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2306.006445][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2306.006445][T12188] ? _copy_from_user+0x1fd/0x300 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] __msan_chain_origin+0x57/0xa0 [ 2306.006445][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2306.006445][T12188] get_compat_msghdr+0x108/0x2b0 [ 2306.006445][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2306.006445][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2306.006445][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2306.006445][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2306.006445][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.006445][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.006445][T12188] __do_fast_syscall_32+0x102/0x160 [ 2306.006445][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2306.006445][T12188] do_SYSENTER_32+0x73/0x90 [ 2306.006445][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.006445][T12188] RIP: 0023:0xf7f01549 [ 2306.006445][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2306.006445][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2306.006445][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2306.006445][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2306.006445][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2306.006445][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2306.006445][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2306.006445][T12188] Uninit was stored to memory at: [ 2306.006445][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2306.006445][T12188] __msan_chain_origin+0x57/0xa0 [ 2306.006445][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2306.006445][T12188] get_compat_msghdr+0x108/0x2b0 [ 2306.006445][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2306.006445][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2306.006445][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.006445][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.006445][T12188] __do_fast_syscall_32+0x102/0x160 [ 2306.006445][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2306.006445][T12188] do_SYSENTER_32+0x73/0x90 [ 2306.006445][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.006445][T12188] [ 2306.006445][T12188] Uninit was stored to memory at: [ 2306.006445][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2306.006445][T12188] __msan_chain_origin+0x57/0xa0 [ 2306.006445][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2306.006445][T12188] get_compat_msghdr+0x108/0x2b0 [ 2306.006445][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2306.006445][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2306.006445][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.006445][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.006445][T12188] __do_fast_syscall_32+0x102/0x160 [ 2306.006445][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2306.006445][T12188] do_SYSENTER_32+0x73/0x90 [ 2306.006445][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.006445][T12188] [ 2306.006445][T12188] Uninit was stored to memory at: [ 2306.006445][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2306.006445][T12188] __msan_chain_origin+0x57/0xa0 [ 2306.006445][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2306.006445][T12188] get_compat_msghdr+0x108/0x2b0 [ 2306.006445][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2306.006445][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2306.006445][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.006445][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.006445][T12188] __do_fast_syscall_32+0x102/0x160 [ 2306.006445][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2306.006445][T12188] do_SYSENTER_32+0x73/0x90 [ 2306.006445][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.006445][T12188] [ 2306.006445][T12188] Uninit was stored to memory at: [ 2306.006445][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2306.006445][T12188] __msan_chain_origin+0x57/0xa0 [ 2306.006445][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2306.006445][T12188] get_compat_msghdr+0x108/0x2b0 [ 2306.006445][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2306.006445][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2306.006445][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.006445][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.006445][T12188] __do_fast_syscall_32+0x102/0x160 [ 2306.006445][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2306.006445][T12188] do_SYSENTER_32+0x73/0x90 [ 2306.006445][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.006445][T12188] [ 2306.006445][T12188] Uninit was stored to memory at: [ 2306.006445][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2306.006445][T12188] __msan_chain_origin+0x57/0xa0 [ 2306.006445][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2306.006445][T12188] get_compat_msghdr+0x108/0x2b0 [ 2306.006445][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2306.006445][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2306.006445][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.006445][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.006445][T12188] __do_fast_syscall_32+0x102/0x160 [ 2306.006445][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2306.006445][T12188] do_SYSENTER_32+0x73/0x90 [ 2306.006445][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.006445][T12188] [ 2306.006445][T12188] Uninit was stored to memory at: [ 2306.006445][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2306.006445][T12188] __msan_chain_origin+0x57/0xa0 [ 2306.006445][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2306.006445][T12188] get_compat_msghdr+0x108/0x2b0 [ 2306.006445][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2306.006445][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2306.006445][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.006445][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.006445][T12188] __do_fast_syscall_32+0x102/0x160 [ 2306.006445][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2306.006445][T12188] do_SYSENTER_32+0x73/0x90 [ 2306.006445][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.006445][T12188] [ 2306.006445][T12188] Uninit was stored to memory at: [ 2306.006445][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2306.006445][T12188] __msan_chain_origin+0x57/0xa0 [ 2306.006445][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2306.006445][T12188] get_compat_msghdr+0x108/0x2b0 [ 2306.006445][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2306.006445][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2306.006445][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.006445][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.006445][T12188] __do_fast_syscall_32+0x102/0x160 [ 2306.006445][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2306.006445][T12188] do_SYSENTER_32+0x73/0x90 [ 2306.006445][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.006445][T12188] [ 2306.006445][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2306.006445][T12188] do_recvmmsg+0xbf/0x22f0 [ 2306.006445][T12188] do_recvmmsg+0xbf/0x22f0 [ 2306.992190][T12214] not chained 620000 origins [ 2306.996159][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2306.996159][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2306.996159][T12214] Call Trace: [ 2306.996159][T12214] dump_stack+0x21c/0x280 [ 2306.996159][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2306.996159][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2306.996159][T12214] ? __wake_up+0x1fc/0x250 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2306.996159][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2306.996159][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2306.996159][T12214] ? _copy_from_user+0x1fd/0x300 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] __msan_chain_origin+0x57/0xa0 [ 2306.996159][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2306.996159][T12214] get_compat_msghdr+0x108/0x2b0 [ 2306.996159][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2306.996159][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2306.996159][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2306.996159][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2306.996159][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.996159][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.996159][T12214] __do_fast_syscall_32+0x102/0x160 [ 2306.996159][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2306.996159][T12214] do_SYSENTER_32+0x73/0x90 [ 2306.996159][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.996159][T12214] RIP: 0023:0xf7f01549 [ 2306.996159][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2306.996159][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2306.996159][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2306.996159][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2306.996159][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2306.996159][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2306.996159][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2306.996159][T12214] Uninit was stored to memory at: [ 2306.996159][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2306.996159][T12214] __msan_chain_origin+0x57/0xa0 [ 2306.996159][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2306.996159][T12214] get_compat_msghdr+0x108/0x2b0 [ 2306.996159][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2306.996159][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2306.996159][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.996159][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.996159][T12214] __do_fast_syscall_32+0x102/0x160 [ 2306.996159][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2306.996159][T12214] do_SYSENTER_32+0x73/0x90 [ 2306.996159][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.996159][T12214] [ 2306.996159][T12214] Uninit was stored to memory at: [ 2306.996159][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2306.996159][T12214] __msan_chain_origin+0x57/0xa0 [ 2306.996159][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2306.996159][T12214] get_compat_msghdr+0x108/0x2b0 [ 2306.996159][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2306.996159][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2306.996159][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.996159][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.996159][T12214] __do_fast_syscall_32+0x102/0x160 [ 2306.996159][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2306.996159][T12214] do_SYSENTER_32+0x73/0x90 [ 2306.996159][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.996159][T12214] [ 2306.996159][T12214] Uninit was stored to memory at: [ 2306.996159][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2306.996159][T12214] __msan_chain_origin+0x57/0xa0 [ 2306.996159][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2306.996159][T12214] get_compat_msghdr+0x108/0x2b0 [ 2306.996159][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2306.996159][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2306.996159][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.996159][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.996159][T12214] __do_fast_syscall_32+0x102/0x160 [ 2306.996159][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2306.996159][T12214] do_SYSENTER_32+0x73/0x90 [ 2306.996159][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.996159][T12214] [ 2306.996159][T12214] Uninit was stored to memory at: [ 2306.996159][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2306.996159][T12214] __msan_chain_origin+0x57/0xa0 [ 2306.996159][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2306.996159][T12214] get_compat_msghdr+0x108/0x2b0 [ 2306.996159][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2306.996159][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2306.996159][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.996159][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.996159][T12214] __do_fast_syscall_32+0x102/0x160 [ 2306.996159][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2306.996159][T12214] do_SYSENTER_32+0x73/0x90 [ 2306.996159][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.996159][T12214] [ 2306.996159][T12214] Uninit was stored to memory at: [ 2306.996159][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2306.996159][T12214] __msan_chain_origin+0x57/0xa0 [ 2306.996159][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2306.996159][T12214] get_compat_msghdr+0x108/0x2b0 [ 2306.996159][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2306.996159][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2306.996159][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.996159][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.996159][T12214] __do_fast_syscall_32+0x102/0x160 [ 2306.996159][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2306.996159][T12214] do_SYSENTER_32+0x73/0x90 [ 2306.996159][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.996159][T12214] [ 2306.996159][T12214] Uninit was stored to memory at: [ 2306.996159][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2306.996159][T12214] __msan_chain_origin+0x57/0xa0 [ 2306.996159][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2306.996159][T12214] get_compat_msghdr+0x108/0x2b0 [ 2306.996159][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2306.996159][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2306.996159][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.996159][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.996159][T12214] __do_fast_syscall_32+0x102/0x160 [ 2306.996159][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2306.996159][T12214] do_SYSENTER_32+0x73/0x90 [ 2306.996159][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.996159][T12214] [ 2306.996159][T12214] Uninit was stored to memory at: [ 2306.996159][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2306.996159][T12214] __msan_chain_origin+0x57/0xa0 [ 2306.996159][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2306.996159][T12214] get_compat_msghdr+0x108/0x2b0 [ 2306.996159][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2306.996159][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2306.996159][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.996159][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.996159][T12214] __do_fast_syscall_32+0x102/0x160 [ 2306.996159][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2306.996159][T12214] do_SYSENTER_32+0x73/0x90 [ 2306.996159][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.996159][T12214] [ 2306.996159][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2306.996159][T12214] do_recvmmsg+0xbf/0x22f0 [ 2306.996159][T12214] do_recvmmsg+0xbf/0x22f0 [ 2308.108911][T12188] not chained 630000 origins [ 2308.113712][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2308.116149][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2308.116149][T12188] Call Trace: [ 2308.116149][T12188] dump_stack+0x21c/0x280 [ 2308.116149][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2308.116149][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2308.116149][T12188] ? __wake_up+0x1fc/0x250 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2308.116149][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2308.116149][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2308.116149][T12188] ? _copy_from_user+0x1fd/0x300 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] __msan_chain_origin+0x57/0xa0 [ 2308.116149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2308.116149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2308.116149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2308.116149][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2308.116149][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2308.116149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2308.116149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.116149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.116149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2308.116149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2308.116149][T12188] do_SYSENTER_32+0x73/0x90 [ 2308.116149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.116149][T12188] RIP: 0023:0xf7f01549 [ 2308.116149][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2308.116149][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2308.116149][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2308.116149][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2308.116149][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2308.116149][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2308.116149][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2308.116149][T12188] Uninit was stored to memory at: [ 2308.116149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2308.116149][T12188] __msan_chain_origin+0x57/0xa0 [ 2308.116149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2308.116149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2308.116149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2308.116149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2308.116149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.116149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.116149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2308.116149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2308.116149][T12188] do_SYSENTER_32+0x73/0x90 [ 2308.116149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.116149][T12188] [ 2308.116149][T12188] Uninit was stored to memory at: [ 2308.116149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2308.116149][T12188] __msan_chain_origin+0x57/0xa0 [ 2308.116149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2308.116149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2308.116149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2308.116149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2308.116149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.116149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.116149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2308.116149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2308.116149][T12188] do_SYSENTER_32+0x73/0x90 [ 2308.116149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.116149][T12188] [ 2308.116149][T12188] Uninit was stored to memory at: [ 2308.116149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2308.116149][T12188] __msan_chain_origin+0x57/0xa0 [ 2308.116149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2308.116149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2308.116149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2308.116149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2308.116149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.116149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.116149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2308.116149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2308.116149][T12188] do_SYSENTER_32+0x73/0x90 [ 2308.116149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.116149][T12188] [ 2308.116149][T12188] Uninit was stored to memory at: [ 2308.116149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2308.116149][T12188] __msan_chain_origin+0x57/0xa0 [ 2308.116149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2308.116149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2308.116149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2308.116149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2308.116149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.116149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.116149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2308.116149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2308.116149][T12188] do_SYSENTER_32+0x73/0x90 [ 2308.116149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.116149][T12188] [ 2308.116149][T12188] Uninit was stored to memory at: [ 2308.116149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2308.116149][T12188] __msan_chain_origin+0x57/0xa0 [ 2308.116149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2308.116149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2308.116149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2308.116149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2308.116149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.116149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.116149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2308.116149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2308.116149][T12188] do_SYSENTER_32+0x73/0x90 [ 2308.116149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.116149][T12188] [ 2308.116149][T12188] Uninit was stored to memory at: [ 2308.116149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2308.116149][T12188] __msan_chain_origin+0x57/0xa0 [ 2308.116149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2308.116149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2308.116149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2308.116149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2308.116149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.116149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.116149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2308.116149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2308.116149][T12188] do_SYSENTER_32+0x73/0x90 [ 2308.116149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.116149][T12188] [ 2308.116149][T12188] Uninit was stored to memory at: [ 2308.116149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2308.116149][T12188] __msan_chain_origin+0x57/0xa0 [ 2308.116149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2308.116149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2308.116149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2308.116149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2308.116149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.116149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.116149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2308.116149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2308.116149][T12188] do_SYSENTER_32+0x73/0x90 [ 2308.116149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.116149][T12188] [ 2308.116149][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2308.116149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2308.116149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2309.120273][T12214] not chained 640000 origins [ 2309.124917][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2309.126133][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2309.126133][T12214] Call Trace: [ 2309.126133][T12214] dump_stack+0x21c/0x280 [ 2309.126133][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2309.126133][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.126133][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2309.126133][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.126133][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2309.126133][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2309.126133][T12214] ? __wake_up+0x1fc/0x250 [ 2309.126133][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.126133][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2309.126133][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2309.208386][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.208386][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2309.208386][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2309.208386][T12214] ? _copy_from_user+0x1fd/0x300 [ 2309.208386][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.208386][T12214] __msan_chain_origin+0x57/0xa0 [ 2309.208386][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2309.208386][T12214] get_compat_msghdr+0x108/0x2b0 [ 2309.208386][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2309.208386][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.208386][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2309.208386][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.208386][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2309.208386][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2309.208386][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2309.208386][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2309.208386][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.208386][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2309.208386][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.208386][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.208386][T12214] __do_fast_syscall_32+0x102/0x160 [ 2309.208386][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2309.208386][T12214] do_SYSENTER_32+0x73/0x90 [ 2309.208386][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.208386][T12214] RIP: 0023:0xf7f01549 [ 2309.208386][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2309.208386][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2309.208386][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2309.208386][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2309.208386][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2309.208386][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2309.208386][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2309.208386][T12214] Uninit was stored to memory at: [ 2309.208386][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2309.208386][T12214] __msan_chain_origin+0x57/0xa0 [ 2309.208386][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2309.208386][T12214] get_compat_msghdr+0x108/0x2b0 [ 2309.208386][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2309.208386][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2309.208386][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.208386][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.208386][T12214] __do_fast_syscall_32+0x102/0x160 [ 2309.208386][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2309.208386][T12214] do_SYSENTER_32+0x73/0x90 [ 2309.208386][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.208386][T12214] [ 2309.208386][T12214] Uninit was stored to memory at: [ 2309.208386][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2309.208386][T12214] __msan_chain_origin+0x57/0xa0 [ 2309.208386][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2309.208386][T12214] get_compat_msghdr+0x108/0x2b0 [ 2309.208386][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2309.208386][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2309.208386][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.208386][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.526374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2309.526374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2309.526374][T12214] do_SYSENTER_32+0x73/0x90 [ 2309.526374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.526374][T12214] [ 2309.526374][T12214] Uninit was stored to memory at: [ 2309.526374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2309.526374][T12214] __msan_chain_origin+0x57/0xa0 [ 2309.526374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2309.526374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2309.526374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2309.526374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2309.526374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.526374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.526374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2309.526374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2309.526374][T12214] do_SYSENTER_32+0x73/0x90 [ 2309.526374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.526374][T12214] [ 2309.526374][T12214] Uninit was stored to memory at: [ 2309.526374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2309.526374][T12214] __msan_chain_origin+0x57/0xa0 [ 2309.526374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2309.526374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2309.526374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2309.526374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2309.526374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.526374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.526374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2309.526374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2309.526374][T12214] do_SYSENTER_32+0x73/0x90 [ 2309.526374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.526374][T12214] [ 2309.526374][T12214] Uninit was stored to memory at: [ 2309.526374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2309.526374][T12214] __msan_chain_origin+0x57/0xa0 [ 2309.526374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2309.526374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2309.526374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2309.526374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2309.526374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.526374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.526374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2309.526374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2309.526374][T12214] do_SYSENTER_32+0x73/0x90 [ 2309.526374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.526374][T12214] [ 2309.526374][T12214] Uninit was stored to memory at: [ 2309.526374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2309.526374][T12214] __msan_chain_origin+0x57/0xa0 [ 2309.526374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2309.526374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2309.526374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2309.526374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2309.526374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.526374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.526374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2309.526374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2309.526374][T12214] do_SYSENTER_32+0x73/0x90 [ 2309.526374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.526374][T12214] [ 2309.526374][T12214] Uninit was stored to memory at: [ 2309.526374][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2309.526374][T12214] __msan_chain_origin+0x57/0xa0 [ 2309.526374][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2309.526374][T12214] get_compat_msghdr+0x108/0x2b0 [ 2309.526374][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2309.526374][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2309.526374][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.526374][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.526374][T12214] __do_fast_syscall_32+0x102/0x160 [ 2309.526374][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2309.526374][T12214] do_SYSENTER_32+0x73/0x90 [ 2309.526374][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.526374][T12214] [ 2309.526374][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2309.526374][T12214] do_recvmmsg+0xbf/0x22f0 [ 2309.526374][T12214] do_recvmmsg+0xbf/0x22f0 [ 2310.115486][T12188] not chained 650000 origins [ 2310.116138][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2310.116138][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.116138][T12188] Call Trace: [ 2310.116138][T12188] dump_stack+0x21c/0x280 [ 2310.116138][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2310.116138][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2310.116138][T12188] ? __wake_up+0x1fc/0x250 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2310.116138][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2310.116138][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2310.116138][T12188] ? _copy_from_user+0x1fd/0x300 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] __msan_chain_origin+0x57/0xa0 [ 2310.116138][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2310.116138][T12188] get_compat_msghdr+0x108/0x2b0 [ 2310.116138][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2310.116138][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2310.116138][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2310.116138][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2310.116138][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.116138][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.116138][T12188] __do_fast_syscall_32+0x102/0x160 [ 2310.116138][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2310.116138][T12188] do_SYSENTER_32+0x73/0x90 [ 2310.116138][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.116138][T12188] RIP: 0023:0xf7f01549 [ 2310.116138][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2310.116138][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2310.116138][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2310.116138][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2310.116138][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2310.116138][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2310.116138][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2310.116138][T12188] Uninit was stored to memory at: [ 2310.116138][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2310.116138][T12188] __msan_chain_origin+0x57/0xa0 [ 2310.116138][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2310.116138][T12188] get_compat_msghdr+0x108/0x2b0 [ 2310.116138][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2310.116138][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2310.116138][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.116138][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.116138][T12188] __do_fast_syscall_32+0x102/0x160 [ 2310.116138][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2310.116138][T12188] do_SYSENTER_32+0x73/0x90 [ 2310.116138][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.116138][T12188] [ 2310.116138][T12188] Uninit was stored to memory at: [ 2310.116138][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2310.116138][T12188] __msan_chain_origin+0x57/0xa0 [ 2310.116138][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2310.116138][T12188] get_compat_msghdr+0x108/0x2b0 [ 2310.116138][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2310.116138][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2310.116138][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.116138][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.116138][T12188] __do_fast_syscall_32+0x102/0x160 [ 2310.116138][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2310.116138][T12188] do_SYSENTER_32+0x73/0x90 [ 2310.116138][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.116138][T12188] [ 2310.116138][T12188] Uninit was stored to memory at: [ 2310.116138][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2310.116138][T12188] __msan_chain_origin+0x57/0xa0 [ 2310.116138][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2310.116138][T12188] get_compat_msghdr+0x108/0x2b0 [ 2310.116138][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2310.116138][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2310.116138][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.116138][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.116138][T12188] __do_fast_syscall_32+0x102/0x160 [ 2310.116138][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2310.116138][T12188] do_SYSENTER_32+0x73/0x90 [ 2310.116138][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.116138][T12188] [ 2310.116138][T12188] Uninit was stored to memory at: [ 2310.116138][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2310.116138][T12188] __msan_chain_origin+0x57/0xa0 [ 2310.116138][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2310.116138][T12188] get_compat_msghdr+0x108/0x2b0 [ 2310.116138][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2310.116138][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2310.116138][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.116138][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.116138][T12188] __do_fast_syscall_32+0x102/0x160 [ 2310.116138][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2310.116138][T12188] do_SYSENTER_32+0x73/0x90 [ 2310.116138][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.116138][T12188] [ 2310.116138][T12188] Uninit was stored to memory at: [ 2310.116138][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2310.116138][T12188] __msan_chain_origin+0x57/0xa0 [ 2310.116138][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2310.116138][T12188] get_compat_msghdr+0x108/0x2b0 [ 2310.116138][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2310.116138][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2310.116138][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.116138][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.116138][T12188] __do_fast_syscall_32+0x102/0x160 [ 2310.116138][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2310.116138][T12188] do_SYSENTER_32+0x73/0x90 [ 2310.116138][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.116138][T12188] [ 2310.116138][T12188] Uninit was stored to memory at: [ 2310.116138][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2310.116138][T12188] __msan_chain_origin+0x57/0xa0 [ 2310.116138][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2310.116138][T12188] get_compat_msghdr+0x108/0x2b0 [ 2310.116138][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2310.116138][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2310.116138][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.116138][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.116138][T12188] __do_fast_syscall_32+0x102/0x160 [ 2310.116138][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2310.116138][T12188] do_SYSENTER_32+0x73/0x90 [ 2310.116138][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.116138][T12188] [ 2310.116138][T12188] Uninit was stored to memory at: [ 2310.116138][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2310.116138][T12188] __msan_chain_origin+0x57/0xa0 [ 2310.116138][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2310.116138][T12188] get_compat_msghdr+0x108/0x2b0 [ 2310.116138][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2310.116138][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2310.116138][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.116138][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.116138][T12188] __do_fast_syscall_32+0x102/0x160 [ 2310.116138][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2310.116138][T12188] do_SYSENTER_32+0x73/0x90 [ 2310.116138][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.116138][T12188] [ 2310.116138][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2310.116138][T12188] do_recvmmsg+0xbf/0x22f0 [ 2310.116138][T12188] do_recvmmsg+0xbf/0x22f0 [ 2311.206842][T12214] not chained 660000 origins [ 2311.211495][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2311.216154][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2311.222734][T12214] Call Trace: [ 2311.222734][T12214] dump_stack+0x21c/0x280 [ 2311.222734][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2311.222734][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2311.222734][T12214] ? __wake_up+0x1fc/0x250 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2311.222734][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2311.222734][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2311.222734][T12214] ? _copy_from_user+0x1fd/0x300 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] __msan_chain_origin+0x57/0xa0 [ 2311.222734][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2311.222734][T12214] get_compat_msghdr+0x108/0x2b0 [ 2311.222734][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2311.222734][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2311.222734][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2311.222734][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2311.222734][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.222734][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.222734][T12214] __do_fast_syscall_32+0x102/0x160 [ 2311.222734][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2311.222734][T12214] do_SYSENTER_32+0x73/0x90 [ 2311.222734][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.222734][T12214] RIP: 0023:0xf7f01549 [ 2311.222734][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2311.222734][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2311.222734][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2311.222734][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2311.222734][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2311.222734][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2311.222734][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2311.222734][T12214] Uninit was stored to memory at: [ 2311.222734][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2311.222734][T12214] __msan_chain_origin+0x57/0xa0 [ 2311.222734][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2311.222734][T12214] get_compat_msghdr+0x108/0x2b0 [ 2311.222734][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2311.222734][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2311.222734][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.222734][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.222734][T12214] __do_fast_syscall_32+0x102/0x160 [ 2311.222734][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2311.222734][T12214] do_SYSENTER_32+0x73/0x90 [ 2311.222734][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.222734][T12214] [ 2311.222734][T12214] Uninit was stored to memory at: [ 2311.222734][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2311.222734][T12214] __msan_chain_origin+0x57/0xa0 [ 2311.222734][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2311.222734][T12214] get_compat_msghdr+0x108/0x2b0 [ 2311.222734][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2311.222734][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2311.222734][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.222734][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.222734][T12214] __do_fast_syscall_32+0x102/0x160 [ 2311.222734][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2311.222734][T12214] do_SYSENTER_32+0x73/0x90 [ 2311.222734][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.222734][T12214] [ 2311.222734][T12214] Uninit was stored to memory at: [ 2311.222734][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2311.222734][T12214] __msan_chain_origin+0x57/0xa0 [ 2311.222734][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2311.222734][T12214] get_compat_msghdr+0x108/0x2b0 [ 2311.222734][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2311.222734][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2311.222734][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.222734][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.222734][T12214] __do_fast_syscall_32+0x102/0x160 [ 2311.222734][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2311.222734][T12214] do_SYSENTER_32+0x73/0x90 [ 2311.222734][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.222734][T12214] [ 2311.222734][T12214] Uninit was stored to memory at: [ 2311.222734][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2311.222734][T12214] __msan_chain_origin+0x57/0xa0 [ 2311.222734][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2311.222734][T12214] get_compat_msghdr+0x108/0x2b0 [ 2311.222734][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2311.222734][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2311.222734][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.222734][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.222734][T12214] __do_fast_syscall_32+0x102/0x160 [ 2311.222734][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2311.222734][T12214] do_SYSENTER_32+0x73/0x90 [ 2311.222734][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.222734][T12214] [ 2311.222734][T12214] Uninit was stored to memory at: [ 2311.222734][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2311.222734][T12214] __msan_chain_origin+0x57/0xa0 [ 2311.222734][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2311.222734][T12214] get_compat_msghdr+0x108/0x2b0 [ 2311.222734][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2311.222734][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2311.222734][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.222734][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.222734][T12214] __do_fast_syscall_32+0x102/0x160 [ 2311.222734][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2311.222734][T12214] do_SYSENTER_32+0x73/0x90 [ 2311.222734][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.222734][T12214] [ 2311.222734][T12214] Uninit was stored to memory at: [ 2311.222734][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2311.222734][T12214] __msan_chain_origin+0x57/0xa0 [ 2311.222734][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2311.222734][T12214] get_compat_msghdr+0x108/0x2b0 [ 2311.222734][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2311.222734][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2311.222734][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.222734][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.222734][T12214] __do_fast_syscall_32+0x102/0x160 [ 2311.222734][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2311.222734][T12214] do_SYSENTER_32+0x73/0x90 [ 2311.222734][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.222734][T12214] [ 2311.222734][T12214] Uninit was stored to memory at: [ 2311.222734][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2311.222734][T12214] __msan_chain_origin+0x57/0xa0 [ 2311.222734][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2311.222734][T12214] get_compat_msghdr+0x108/0x2b0 [ 2311.222734][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2311.222734][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2311.222734][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.222734][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.222734][T12214] __do_fast_syscall_32+0x102/0x160 [ 2311.222734][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2311.222734][T12214] do_SYSENTER_32+0x73/0x90 [ 2311.222734][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.222734][T12214] [ 2311.222734][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2311.222734][T12214] do_recvmmsg+0xbf/0x22f0 [ 2311.222734][T12214] do_recvmmsg+0xbf/0x22f0 [ 2312.243124][T12214] not chained 670000 origins [ 2312.246149][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2312.246149][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.246149][T12214] Call Trace: [ 2312.246149][T12214] dump_stack+0x21c/0x280 [ 2312.246149][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2312.246149][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2312.246149][T12214] ? __wake_up+0x1fc/0x250 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2312.246149][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2312.246149][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2312.246149][T12214] ? _copy_from_user+0x1fd/0x300 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] __msan_chain_origin+0x57/0xa0 [ 2312.246149][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2312.246149][T12214] get_compat_msghdr+0x108/0x2b0 [ 2312.246149][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2312.246149][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2312.246149][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2312.246149][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2312.246149][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.246149][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.246149][T12214] __do_fast_syscall_32+0x102/0x160 [ 2312.246149][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2312.246149][T12214] do_SYSENTER_32+0x73/0x90 [ 2312.246149][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.246149][T12214] RIP: 0023:0xf7f01549 [ 2312.246149][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2312.246149][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2312.246149][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2312.246149][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2312.246149][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2312.246149][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2312.246149][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2312.246149][T12214] Uninit was stored to memory at: [ 2312.246149][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2312.246149][T12214] __msan_chain_origin+0x57/0xa0 [ 2312.246149][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2312.246149][T12214] get_compat_msghdr+0x108/0x2b0 [ 2312.246149][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2312.246149][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2312.246149][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.246149][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.246149][T12214] __do_fast_syscall_32+0x102/0x160 [ 2312.246149][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2312.246149][T12214] do_SYSENTER_32+0x73/0x90 [ 2312.246149][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.246149][T12214] [ 2312.246149][T12214] Uninit was stored to memory at: [ 2312.246149][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2312.246149][T12214] __msan_chain_origin+0x57/0xa0 [ 2312.246149][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2312.246149][T12214] get_compat_msghdr+0x108/0x2b0 [ 2312.246149][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2312.246149][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2312.246149][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.246149][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.246149][T12214] __do_fast_syscall_32+0x102/0x160 [ 2312.246149][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2312.246149][T12214] do_SYSENTER_32+0x73/0x90 [ 2312.246149][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.246149][T12214] [ 2312.246149][T12214] Uninit was stored to memory at: [ 2312.246149][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2312.246149][T12214] __msan_chain_origin+0x57/0xa0 [ 2312.246149][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2312.246149][T12214] get_compat_msghdr+0x108/0x2b0 [ 2312.246149][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2312.246149][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2312.246149][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.246149][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.246149][T12214] __do_fast_syscall_32+0x102/0x160 [ 2312.246149][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2312.246149][T12214] do_SYSENTER_32+0x73/0x90 [ 2312.246149][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.246149][T12214] [ 2312.246149][T12214] Uninit was stored to memory at: [ 2312.246149][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2312.246149][T12214] __msan_chain_origin+0x57/0xa0 [ 2312.246149][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2312.246149][T12214] get_compat_msghdr+0x108/0x2b0 [ 2312.246149][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2312.246149][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2312.246149][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.246149][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.246149][T12214] __do_fast_syscall_32+0x102/0x160 [ 2312.246149][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2312.246149][T12214] do_SYSENTER_32+0x73/0x90 [ 2312.246149][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.246149][T12214] [ 2312.246149][T12214] Uninit was stored to memory at: [ 2312.246149][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2312.246149][T12214] __msan_chain_origin+0x57/0xa0 [ 2312.246149][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2312.246149][T12214] get_compat_msghdr+0x108/0x2b0 [ 2312.246149][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2312.246149][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2312.246149][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.246149][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.246149][T12214] __do_fast_syscall_32+0x102/0x160 [ 2312.246149][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2312.246149][T12214] do_SYSENTER_32+0x73/0x90 [ 2312.246149][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.246149][T12214] [ 2312.246149][T12214] Uninit was stored to memory at: [ 2312.246149][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2312.246149][T12214] __msan_chain_origin+0x57/0xa0 [ 2312.246149][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2312.246149][T12214] get_compat_msghdr+0x108/0x2b0 [ 2312.246149][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2312.246149][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2312.246149][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.246149][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.246149][T12214] __do_fast_syscall_32+0x102/0x160 [ 2312.246149][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2312.246149][T12214] do_SYSENTER_32+0x73/0x90 [ 2312.246149][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.246149][T12214] [ 2312.246149][T12214] Uninit was stored to memory at: [ 2312.246149][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2312.246149][T12214] __msan_chain_origin+0x57/0xa0 [ 2312.246149][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2312.246149][T12214] get_compat_msghdr+0x108/0x2b0 [ 2312.246149][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2312.246149][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2312.246149][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.246149][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.246149][T12214] __do_fast_syscall_32+0x102/0x160 [ 2312.246149][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2312.246149][T12214] do_SYSENTER_32+0x73/0x90 [ 2312.246149][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.246149][T12214] [ 2312.246149][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2312.246149][T12214] do_recvmmsg+0xbf/0x22f0 [ 2312.246149][T12214] do_recvmmsg+0xbf/0x22f0 [ 2313.265067][T12188] not chained 680000 origins [ 2313.266144][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2313.266144][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2313.266144][T12188] Call Trace: [ 2313.266144][T12188] dump_stack+0x21c/0x280 [ 2313.266144][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2313.266144][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2313.266144][T12188] ? __wake_up+0x1fc/0x250 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2313.266144][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2313.266144][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2313.266144][T12188] ? _copy_from_user+0x1fd/0x300 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] __msan_chain_origin+0x57/0xa0 [ 2313.266144][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2313.266144][T12188] get_compat_msghdr+0x108/0x2b0 [ 2313.266144][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2313.266144][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2313.266144][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2313.266144][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2313.266144][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.266144][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.266144][T12188] __do_fast_syscall_32+0x102/0x160 [ 2313.266144][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2313.266144][T12188] do_SYSENTER_32+0x73/0x90 [ 2313.266144][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.266144][T12188] RIP: 0023:0xf7f01549 [ 2313.266144][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2313.266144][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2313.266144][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2313.266144][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2313.266144][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2313.266144][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2313.266144][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2313.266144][T12188] Uninit was stored to memory at: [ 2313.266144][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2313.266144][T12188] __msan_chain_origin+0x57/0xa0 [ 2313.266144][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2313.266144][T12188] get_compat_msghdr+0x108/0x2b0 [ 2313.266144][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2313.266144][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2313.266144][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.266144][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.266144][T12188] __do_fast_syscall_32+0x102/0x160 [ 2313.266144][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2313.266144][T12188] do_SYSENTER_32+0x73/0x90 [ 2313.266144][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.266144][T12188] [ 2313.266144][T12188] Uninit was stored to memory at: [ 2313.266144][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2313.266144][T12188] __msan_chain_origin+0x57/0xa0 [ 2313.266144][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2313.266144][T12188] get_compat_msghdr+0x108/0x2b0 [ 2313.266144][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2313.266144][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2313.266144][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.266144][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.266144][T12188] __do_fast_syscall_32+0x102/0x160 [ 2313.266144][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2313.266144][T12188] do_SYSENTER_32+0x73/0x90 [ 2313.266144][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.266144][T12188] [ 2313.266144][T12188] Uninit was stored to memory at: [ 2313.266144][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2313.266144][T12188] __msan_chain_origin+0x57/0xa0 [ 2313.266144][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2313.266144][T12188] get_compat_msghdr+0x108/0x2b0 [ 2313.266144][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2313.266144][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2313.266144][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.266144][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.266144][T12188] __do_fast_syscall_32+0x102/0x160 [ 2313.266144][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2313.266144][T12188] do_SYSENTER_32+0x73/0x90 [ 2313.266144][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.266144][T12188] [ 2313.266144][T12188] Uninit was stored to memory at: [ 2313.266144][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2313.266144][T12188] __msan_chain_origin+0x57/0xa0 [ 2313.266144][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2313.266144][T12188] get_compat_msghdr+0x108/0x2b0 [ 2313.266144][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2313.266144][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2313.266144][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.266144][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.266144][T12188] __do_fast_syscall_32+0x102/0x160 [ 2313.266144][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2313.266144][T12188] do_SYSENTER_32+0x73/0x90 [ 2313.266144][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.266144][T12188] [ 2313.266144][T12188] Uninit was stored to memory at: [ 2313.266144][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2313.266144][T12188] __msan_chain_origin+0x57/0xa0 [ 2313.266144][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2313.266144][T12188] get_compat_msghdr+0x108/0x2b0 [ 2313.266144][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2313.266144][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2313.266144][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.266144][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.266144][T12188] __do_fast_syscall_32+0x102/0x160 [ 2313.266144][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2313.266144][T12188] do_SYSENTER_32+0x73/0x90 [ 2313.266144][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.266144][T12188] [ 2313.266144][T12188] Uninit was stored to memory at: [ 2313.266144][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2313.266144][T12188] __msan_chain_origin+0x57/0xa0 [ 2313.266144][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2313.266144][T12188] get_compat_msghdr+0x108/0x2b0 [ 2313.266144][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2313.266144][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2313.266144][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.266144][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.266144][T12188] __do_fast_syscall_32+0x102/0x160 [ 2313.266144][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2313.266144][T12188] do_SYSENTER_32+0x73/0x90 [ 2313.266144][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.266144][T12188] [ 2313.266144][T12188] Uninit was stored to memory at: [ 2313.266144][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2313.266144][T12188] __msan_chain_origin+0x57/0xa0 [ 2313.266144][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2313.266144][T12188] get_compat_msghdr+0x108/0x2b0 [ 2313.266144][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2313.266144][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2313.266144][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.266144][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.266144][T12188] __do_fast_syscall_32+0x102/0x160 [ 2313.266144][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2313.266144][T12188] do_SYSENTER_32+0x73/0x90 [ 2313.266144][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.266144][T12188] [ 2313.266144][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2313.266144][T12188] do_recvmmsg+0xbf/0x22f0 [ 2313.266144][T12188] do_recvmmsg+0xbf/0x22f0 [ 2314.358911][T12214] not chained 690000 origins [ 2314.363838][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2314.366151][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2314.366151][T12214] Call Trace: [ 2314.366151][T12214] dump_stack+0x21c/0x280 [ 2314.366151][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2314.366151][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2314.366151][T12214] ? __wake_up+0x1fc/0x250 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2314.366151][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2314.366151][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2314.366151][T12214] ? _copy_from_user+0x1fd/0x300 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] __msan_chain_origin+0x57/0xa0 [ 2314.366151][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2314.366151][T12214] get_compat_msghdr+0x108/0x2b0 [ 2314.366151][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2314.366151][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2314.366151][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2314.366151][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2314.366151][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.366151][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.366151][T12214] __do_fast_syscall_32+0x102/0x160 [ 2314.366151][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2314.366151][T12214] do_SYSENTER_32+0x73/0x90 [ 2314.366151][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.366151][T12214] RIP: 0023:0xf7f01549 [ 2314.366151][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2314.366151][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2314.366151][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2314.366151][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2314.366151][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2314.366151][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2314.366151][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2314.366151][T12214] Uninit was stored to memory at: [ 2314.366151][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2314.366151][T12214] __msan_chain_origin+0x57/0xa0 [ 2314.366151][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2314.366151][T12214] get_compat_msghdr+0x108/0x2b0 [ 2314.366151][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2314.366151][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2314.366151][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.366151][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.366151][T12214] __do_fast_syscall_32+0x102/0x160 [ 2314.366151][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2314.366151][T12214] do_SYSENTER_32+0x73/0x90 [ 2314.366151][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.366151][T12214] [ 2314.366151][T12214] Uninit was stored to memory at: [ 2314.366151][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2314.366151][T12214] __msan_chain_origin+0x57/0xa0 [ 2314.366151][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2314.366151][T12214] get_compat_msghdr+0x108/0x2b0 [ 2314.366151][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2314.366151][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2314.366151][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.366151][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.366151][T12214] __do_fast_syscall_32+0x102/0x160 [ 2314.366151][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2314.366151][T12214] do_SYSENTER_32+0x73/0x90 [ 2314.366151][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.366151][T12214] [ 2314.366151][T12214] Uninit was stored to memory at: [ 2314.366151][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2314.366151][T12214] __msan_chain_origin+0x57/0xa0 [ 2314.366151][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2314.366151][T12214] get_compat_msghdr+0x108/0x2b0 [ 2314.366151][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2314.366151][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2314.366151][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.366151][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.366151][T12214] __do_fast_syscall_32+0x102/0x160 [ 2314.366151][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2314.366151][T12214] do_SYSENTER_32+0x73/0x90 [ 2314.366151][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.366151][T12214] [ 2314.366151][T12214] Uninit was stored to memory at: [ 2314.366151][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2314.366151][T12214] __msan_chain_origin+0x57/0xa0 [ 2314.366151][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2314.366151][T12214] get_compat_msghdr+0x108/0x2b0 [ 2314.366151][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2314.366151][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2314.366151][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.366151][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.366151][T12214] __do_fast_syscall_32+0x102/0x160 [ 2314.366151][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2314.366151][T12214] do_SYSENTER_32+0x73/0x90 [ 2314.366151][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.366151][T12214] [ 2314.366151][T12214] Uninit was stored to memory at: [ 2314.366151][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2314.366151][T12214] __msan_chain_origin+0x57/0xa0 [ 2314.366151][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2314.366151][T12214] get_compat_msghdr+0x108/0x2b0 [ 2314.366151][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2314.366151][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2314.366151][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.366151][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.366151][T12214] __do_fast_syscall_32+0x102/0x160 [ 2314.366151][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2314.366151][T12214] do_SYSENTER_32+0x73/0x90 [ 2314.366151][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.366151][T12214] [ 2314.366151][T12214] Uninit was stored to memory at: [ 2314.366151][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2314.366151][T12214] __msan_chain_origin+0x57/0xa0 [ 2314.366151][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2314.366151][T12214] get_compat_msghdr+0x108/0x2b0 [ 2314.366151][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2314.366151][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2314.366151][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.366151][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.366151][T12214] __do_fast_syscall_32+0x102/0x160 [ 2314.366151][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2314.366151][T12214] do_SYSENTER_32+0x73/0x90 [ 2314.366151][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.366151][T12214] [ 2314.366151][T12214] Uninit was stored to memory at: [ 2314.366151][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2314.366151][T12214] __msan_chain_origin+0x57/0xa0 [ 2314.366151][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2314.366151][T12214] get_compat_msghdr+0x108/0x2b0 [ 2314.366151][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2314.366151][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2314.366151][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.366151][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.366151][T12214] __do_fast_syscall_32+0x102/0x160 [ 2314.366151][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2314.366151][T12214] do_SYSENTER_32+0x73/0x90 [ 2314.366151][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.366151][T12214] [ 2314.366151][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2314.366151][T12214] do_recvmmsg+0xbf/0x22f0 [ 2314.366151][T12214] do_recvmmsg+0xbf/0x22f0 [ 2315.376605][T12188] not chained 700000 origins [ 2315.381272][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2315.386140][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2315.386140][T12188] Call Trace: [ 2315.386140][T12188] dump_stack+0x21c/0x280 [ 2315.386140][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2315.386140][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2315.386140][T12188] ? __wake_up+0x1fc/0x250 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2315.386140][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2315.386140][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2315.386140][T12188] ? _copy_from_user+0x1fd/0x300 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] __msan_chain_origin+0x57/0xa0 [ 2315.386140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2315.386140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2315.386140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2315.386140][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2315.386140][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2315.386140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2315.386140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.386140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.386140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2315.386140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2315.386140][T12188] do_SYSENTER_32+0x73/0x90 [ 2315.386140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.386140][T12188] RIP: 0023:0xf7f01549 [ 2315.386140][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2315.386140][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2315.386140][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2315.386140][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2315.386140][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2315.386140][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2315.386140][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2315.386140][T12188] Uninit was stored to memory at: [ 2315.386140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2315.386140][T12188] __msan_chain_origin+0x57/0xa0 [ 2315.386140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2315.386140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2315.386140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2315.386140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2315.386140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.386140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.386140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2315.386140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2315.386140][T12188] do_SYSENTER_32+0x73/0x90 [ 2315.386140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.386140][T12188] [ 2315.386140][T12188] Uninit was stored to memory at: [ 2315.386140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2315.386140][T12188] __msan_chain_origin+0x57/0xa0 [ 2315.386140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2315.386140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2315.386140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2315.386140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2315.386140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.386140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.386140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2315.386140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2315.386140][T12188] do_SYSENTER_32+0x73/0x90 [ 2315.386140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.386140][T12188] [ 2315.386140][T12188] Uninit was stored to memory at: [ 2315.386140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2315.386140][T12188] __msan_chain_origin+0x57/0xa0 [ 2315.386140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2315.386140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2315.386140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2315.386140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2315.386140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.386140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.386140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2315.386140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2315.386140][T12188] do_SYSENTER_32+0x73/0x90 [ 2315.386140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.386140][T12188] [ 2315.386140][T12188] Uninit was stored to memory at: [ 2315.386140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2315.386140][T12188] __msan_chain_origin+0x57/0xa0 [ 2315.386140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2315.386140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2315.386140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2315.386140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2315.386140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.386140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.386140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2315.386140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2315.386140][T12188] do_SYSENTER_32+0x73/0x90 [ 2315.386140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.386140][T12188] [ 2315.386140][T12188] Uninit was stored to memory at: [ 2315.386140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2315.386140][T12188] __msan_chain_origin+0x57/0xa0 [ 2315.386140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2315.386140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2315.386140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2315.386140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2315.386140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.386140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.386140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2315.386140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2315.386140][T12188] do_SYSENTER_32+0x73/0x90 [ 2315.386140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.386140][T12188] [ 2315.386140][T12188] Uninit was stored to memory at: [ 2315.386140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2315.386140][T12188] __msan_chain_origin+0x57/0xa0 [ 2315.386140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2315.386140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2315.386140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2315.386140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2315.386140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.386140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.386140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2315.386140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2315.386140][T12188] do_SYSENTER_32+0x73/0x90 [ 2315.386140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.386140][T12188] [ 2315.386140][T12188] Uninit was stored to memory at: [ 2315.386140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2315.386140][T12188] __msan_chain_origin+0x57/0xa0 [ 2315.386140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2315.386140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2315.386140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2315.386140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2315.386140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.386140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.386140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2315.386140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2315.386140][T12188] do_SYSENTER_32+0x73/0x90 [ 2315.386140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.386140][T12188] [ 2315.386140][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2315.386140][T12188] do_recvmmsg+0xbf/0x22f0 [ 2315.386140][T12188] do_recvmmsg+0xbf/0x22f0 [ 2316.514054][T12188] not chained 710000 origins [ 2316.516154][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2316.516154][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2316.516154][T12188] Call Trace: [ 2316.516154][T12188] dump_stack+0x21c/0x280 [ 2316.516154][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2316.516154][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2316.516154][T12188] ? __wake_up+0x1fc/0x250 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2316.516154][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2316.516154][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2316.516154][T12188] ? _copy_from_user+0x1fd/0x300 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] __msan_chain_origin+0x57/0xa0 [ 2316.516154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2316.516154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2316.516154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2316.516154][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2316.516154][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2316.516154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2316.516154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.516154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.516154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2316.516154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2316.516154][T12188] do_SYSENTER_32+0x73/0x90 [ 2316.516154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.516154][T12188] RIP: 0023:0xf7f01549 [ 2316.516154][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2316.516154][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2316.516154][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2316.516154][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2316.516154][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2316.516154][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2316.516154][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2316.516154][T12188] Uninit was stored to memory at: [ 2316.516154][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2316.516154][T12188] __msan_chain_origin+0x57/0xa0 [ 2316.516154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2316.516154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2316.516154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2316.516154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2316.516154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.516154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.516154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2316.516154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2316.516154][T12188] do_SYSENTER_32+0x73/0x90 [ 2316.516154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.516154][T12188] [ 2316.516154][T12188] Uninit was stored to memory at: [ 2316.516154][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2316.516154][T12188] __msan_chain_origin+0x57/0xa0 [ 2316.516154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2316.516154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2316.516154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2316.516154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2316.516154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.516154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.516154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2316.516154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2316.516154][T12188] do_SYSENTER_32+0x73/0x90 [ 2316.516154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.516154][T12188] [ 2316.516154][T12188] Uninit was stored to memory at: [ 2316.516154][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2316.516154][T12188] __msan_chain_origin+0x57/0xa0 [ 2316.516154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2316.516154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2316.516154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2316.516154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2316.516154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.516154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.516154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2316.516154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2316.516154][T12188] do_SYSENTER_32+0x73/0x90 [ 2316.516154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.516154][T12188] [ 2316.516154][T12188] Uninit was stored to memory at: [ 2316.516154][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2316.516154][T12188] __msan_chain_origin+0x57/0xa0 [ 2316.516154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2316.516154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2316.516154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2316.516154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2316.516154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.516154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.516154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2316.516154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2316.516154][T12188] do_SYSENTER_32+0x73/0x90 [ 2316.516154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.516154][T12188] [ 2316.516154][T12188] Uninit was stored to memory at: [ 2316.516154][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2316.516154][T12188] __msan_chain_origin+0x57/0xa0 [ 2316.516154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2316.516154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2316.516154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2316.516154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2316.516154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.516154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.516154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2316.516154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2316.516154][T12188] do_SYSENTER_32+0x73/0x90 [ 2316.516154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.516154][T12188] [ 2316.516154][T12188] Uninit was stored to memory at: [ 2316.516154][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2316.516154][T12188] __msan_chain_origin+0x57/0xa0 [ 2316.516154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2316.516154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2316.516154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2316.516154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2316.516154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.516154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.516154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2316.516154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2316.516154][T12188] do_SYSENTER_32+0x73/0x90 [ 2316.516154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.516154][T12188] [ 2316.516154][T12188] Uninit was stored to memory at: [ 2316.516154][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2316.516154][T12188] __msan_chain_origin+0x57/0xa0 [ 2316.516154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2316.516154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2316.516154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2316.516154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2316.516154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.516154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.516154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2316.516154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2316.516154][T12188] do_SYSENTER_32+0x73/0x90 [ 2316.516154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.516154][T12188] [ 2316.516154][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2316.516154][T12188] do_recvmmsg+0xbf/0x22f0 [ 2316.516154][T12188] do_recvmmsg+0xbf/0x22f0 [ 2317.634152][T12214] not chained 720000 origins [ 2317.636135][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2317.636135][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2317.656288][T12214] Call Trace: [ 2317.656288][T12214] dump_stack+0x21c/0x280 [ 2317.656288][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2317.656288][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2317.656288][T12214] ? __wake_up+0x1fc/0x250 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2317.656288][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2317.656288][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2317.656288][T12214] ? _copy_from_user+0x1fd/0x300 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] __msan_chain_origin+0x57/0xa0 [ 2317.656288][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2317.656288][T12214] get_compat_msghdr+0x108/0x2b0 [ 2317.656288][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2317.656288][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2317.656288][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2317.656288][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.656288][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.656288][T12214] __do_fast_syscall_32+0x102/0x160 [ 2317.656288][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2317.656288][T12214] do_SYSENTER_32+0x73/0x90 [ 2317.656288][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.656288][T12214] RIP: 0023:0xf7f01549 [ 2317.656288][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2317.656288][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2317.656288][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2317.656288][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2317.656288][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2317.656288][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2317.656288][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.656288][T12214] Uninit was stored to memory at: [ 2317.656288][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2317.656288][T12214] __msan_chain_origin+0x57/0xa0 [ 2317.656288][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2317.656288][T12214] get_compat_msghdr+0x108/0x2b0 [ 2317.656288][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2317.656288][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2317.656288][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.656288][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.656288][T12214] __do_fast_syscall_32+0x102/0x160 [ 2317.656288][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2317.656288][T12214] do_SYSENTER_32+0x73/0x90 [ 2317.656288][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.656288][T12214] [ 2317.656288][T12214] Uninit was stored to memory at: [ 2317.656288][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2317.656288][T12214] __msan_chain_origin+0x57/0xa0 [ 2317.656288][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2317.656288][T12214] get_compat_msghdr+0x108/0x2b0 [ 2317.656288][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2317.656288][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2317.656288][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.656288][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.656288][T12214] __do_fast_syscall_32+0x102/0x160 [ 2317.656288][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2317.656288][T12214] do_SYSENTER_32+0x73/0x90 [ 2317.656288][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.656288][T12214] [ 2317.656288][T12214] Uninit was stored to memory at: [ 2317.656288][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2317.656288][T12214] __msan_chain_origin+0x57/0xa0 [ 2317.656288][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2317.656288][T12214] get_compat_msghdr+0x108/0x2b0 [ 2317.656288][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2317.656288][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2317.656288][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.656288][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.656288][T12214] __do_fast_syscall_32+0x102/0x160 [ 2317.656288][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2317.656288][T12214] do_SYSENTER_32+0x73/0x90 [ 2317.656288][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.656288][T12214] [ 2317.656288][T12214] Uninit was stored to memory at: [ 2317.656288][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2317.656288][T12214] __msan_chain_origin+0x57/0xa0 [ 2317.656288][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2317.656288][T12214] get_compat_msghdr+0x108/0x2b0 [ 2317.656288][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2317.656288][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2317.656288][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.181676][T12188] not chained 730000 origins [ 2317.656288][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.186154][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2317.656288][T12214] __do_fast_syscall_32+0x102/0x160 [ 2318.186154][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2317.656288][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2318.186154][T12188] Call Trace: [ 2317.656288][T12214] do_SYSENTER_32+0x73/0x90 [ 2318.186154][T12188] dump_stack+0x21c/0x280 [ 2317.656288][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.186154][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2317.656288][T12214] [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] Uninit was stored to memory at: [ 2318.186154][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2317.656288][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] __msan_chain_origin+0x57/0xa0 [ 2318.186154][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2317.656288][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2318.186154][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2317.656288][T12214] get_compat_msghdr+0x108/0x2b0 [ 2318.186154][T12188] ? __wake_up+0x1fc/0x250 [ 2317.656288][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2318.186154][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2317.656288][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.186154][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2317.656288][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] __do_fast_syscall_32+0x102/0x160 [ 2318.186154][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2317.656288][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2318.186154][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2317.656288][T12214] do_SYSENTER_32+0x73/0x90 [ 2318.186154][T12188] ? _copy_from_user+0x1fd/0x300 [ 2317.656288][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] [ 2318.186154][T12188] __msan_chain_origin+0x57/0xa0 [ 2317.656288][T12214] Uninit was stored to memory at: [ 2318.186154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2317.656288][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2318.186154][T12188] get_compat_msghdr+0x108/0x2b0 [ 2317.656288][T12214] __msan_chain_origin+0x57/0xa0 [ 2318.186154][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2317.656288][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] get_compat_msghdr+0x108/0x2b0 [ 2318.186154][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2317.656288][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2318.186154][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2317.656288][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.186154][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2317.656288][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.186154][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2317.656288][T12214] __do_fast_syscall_32+0x102/0x160 [ 2318.186154][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2317.656288][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] do_SYSENTER_32+0x73/0x90 [ 2318.186154][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2317.656288][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.186154][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.656288][T12214] [ 2318.186154][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.656288][T12214] Uninit was stored to memory at: [ 2318.186154][T12188] __do_fast_syscall_32+0x102/0x160 [ 2317.656288][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2318.186154][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2317.656288][T12214] __msan_chain_origin+0x57/0xa0 [ 2318.186154][T12188] do_SYSENTER_32+0x73/0x90 [ 2317.656288][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2318.186154][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.656288][T12214] get_compat_msghdr+0x108/0x2b0 [ 2318.186154][T12188] RIP: 0023:0xf7f01549 [ 2317.656288][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2318.186154][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2317.656288][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2318.186154][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 [ 2317.656288][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.186154][T12188] ORIG_RAX: 0000000000000151 [ 2317.656288][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.186154][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2317.656288][T12214] __do_fast_syscall_32+0x102/0x160 [ 2318.186154][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2317.656288][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2318.186154][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2317.656288][T12214] do_SYSENTER_32+0x73/0x90 [ 2318.186154][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2317.656288][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.186154][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.656288][T12214] [ 2318.186154][T12188] Uninit was stored to memory at: [ 2317.656288][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2318.186154][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2317.656288][T12214] do_recvmmsg+0xbf/0x22f0 [ 2318.186154][T12188] __msan_chain_origin+0x57/0xa0 [ 2317.656288][T12214] do_recvmmsg+0xbf/0x22f0 [ 2318.186154][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2318.756206][T12188] get_compat_msghdr+0x108/0x2b0 [ 2318.756206][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2318.756206][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2318.756206][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.756206][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.756206][T12188] __do_fast_syscall_32+0x102/0x160 [ 2318.756206][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2318.756206][T12188] do_SYSENTER_32+0x73/0x90 [ 2318.756206][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.756206][T12188] [ 2318.756206][T12188] Uninit was stored to memory at: [ 2318.756206][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2318.756206][T12188] __msan_chain_origin+0x57/0xa0 [ 2318.756206][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2318.756206][T12188] get_compat_msghdr+0x108/0x2b0 [ 2318.756206][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2318.756206][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2318.756206][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.756206][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.756206][T12188] __do_fast_syscall_32+0x102/0x160 [ 2318.756206][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2318.756206][T12188] do_SYSENTER_32+0x73/0x90 [ 2318.756206][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.756206][T12188] [ 2318.756206][T12188] Uninit was stored to memory at: [ 2318.756206][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2318.756206][T12188] __msan_chain_origin+0x57/0xa0 [ 2318.756206][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2318.756206][T12188] get_compat_msghdr+0x108/0x2b0 [ 2318.756206][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2318.756206][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2318.756206][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.756206][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.756206][T12188] __do_fast_syscall_32+0x102/0x160 [ 2318.756206][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2318.756206][T12188] do_SYSENTER_32+0x73/0x90 [ 2318.756206][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.756206][T12188] [ 2318.756206][T12188] Uninit was stored to memory at: [ 2318.756206][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2318.756206][T12188] __msan_chain_origin+0x57/0xa0 [ 2318.756206][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2318.756206][T12188] get_compat_msghdr+0x108/0x2b0 [ 2318.756206][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2318.756206][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2318.756206][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.756206][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.756206][T12188] __do_fast_syscall_32+0x102/0x160 [ 2318.756206][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2318.756206][T12188] do_SYSENTER_32+0x73/0x90 [ 2318.756206][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.756206][T12188] [ 2318.756206][T12188] Uninit was stored to memory at: [ 2318.756206][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2318.756206][T12188] __msan_chain_origin+0x57/0xa0 [ 2318.756206][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2318.756206][T12188] get_compat_msghdr+0x108/0x2b0 [ 2318.756206][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2318.756206][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2318.756206][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.756206][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.756206][T12188] __do_fast_syscall_32+0x102/0x160 [ 2318.756206][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2318.756206][T12188] do_SYSENTER_32+0x73/0x90 [ 2318.756206][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.756206][T12188] [ 2318.756206][T12188] Uninit was stored to memory at: [ 2318.756206][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2318.756206][T12188] __msan_chain_origin+0x57/0xa0 [ 2318.756206][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2318.756206][T12188] get_compat_msghdr+0x108/0x2b0 [ 2318.756206][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2318.756206][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2318.756206][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.756206][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.756206][T12188] __do_fast_syscall_32+0x102/0x160 [ 2318.756206][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2318.756206][T12188] do_SYSENTER_32+0x73/0x90 [ 2318.756206][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.756206][T12188] [ 2318.756206][T12188] Uninit was stored to memory at: [ 2318.756206][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2318.756206][T12188] __msan_chain_origin+0x57/0xa0 [ 2318.756206][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2318.756206][T12188] get_compat_msghdr+0x108/0x2b0 [ 2318.756206][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2318.756206][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2318.756206][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.756206][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.756206][T12188] __do_fast_syscall_32+0x102/0x160 [ 2318.756206][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2318.756206][T12188] do_SYSENTER_32+0x73/0x90 [ 2318.756206][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.756206][T12188] [ 2318.756206][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2318.756206][T12188] do_recvmmsg+0xbf/0x22f0 [ 2318.756206][T12188] do_recvmmsg+0xbf/0x22f0 [ 2319.782720][T12214] not chained 740000 origins [ 2319.786137][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2319.786137][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2319.786137][T12214] Call Trace: [ 2319.786137][T12214] dump_stack+0x21c/0x280 [ 2319.786137][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2319.786137][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2319.786137][T12214] ? __wake_up+0x1fc/0x250 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2319.786137][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2319.786137][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2319.786137][T12214] ? _copy_from_user+0x1fd/0x300 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] __msan_chain_origin+0x57/0xa0 [ 2319.786137][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2319.786137][T12214] get_compat_msghdr+0x108/0x2b0 [ 2319.786137][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2319.786137][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2319.786137][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2319.786137][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.786137][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.786137][T12214] __do_fast_syscall_32+0x102/0x160 [ 2319.786137][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2319.786137][T12214] do_SYSENTER_32+0x73/0x90 [ 2319.786137][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.786137][T12214] RIP: 0023:0xf7f01549 [ 2319.786137][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2319.786137][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2319.786137][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2319.786137][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2319.786137][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2319.786137][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2319.786137][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2319.786137][T12214] Uninit was stored to memory at: [ 2319.786137][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2319.786137][T12214] __msan_chain_origin+0x57/0xa0 [ 2319.786137][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2319.786137][T12214] get_compat_msghdr+0x108/0x2b0 [ 2319.786137][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2319.786137][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2319.786137][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.786137][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.786137][T12214] __do_fast_syscall_32+0x102/0x160 [ 2319.786137][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2319.786137][T12214] do_SYSENTER_32+0x73/0x90 [ 2319.786137][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.786137][T12214] [ 2319.786137][T12214] Uninit was stored to memory at: [ 2319.786137][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2319.786137][T12214] __msan_chain_origin+0x57/0xa0 [ 2319.786137][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2319.786137][T12214] get_compat_msghdr+0x108/0x2b0 [ 2319.786137][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2319.786137][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2319.786137][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.786137][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.786137][T12214] __do_fast_syscall_32+0x102/0x160 [ 2319.786137][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2319.786137][T12214] do_SYSENTER_32+0x73/0x90 [ 2319.786137][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.786137][T12214] [ 2319.786137][T12214] Uninit was stored to memory at: [ 2319.786137][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2319.786137][T12214] __msan_chain_origin+0x57/0xa0 [ 2319.786137][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2319.786137][T12214] get_compat_msghdr+0x108/0x2b0 [ 2319.786137][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2319.786137][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2319.786137][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.786137][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.786137][T12214] __do_fast_syscall_32+0x102/0x160 [ 2319.786137][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2319.786137][T12214] do_SYSENTER_32+0x73/0x90 [ 2319.786137][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.786137][T12214] [ 2319.786137][T12214] Uninit was stored to memory at: [ 2319.786137][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2319.786137][T12214] __msan_chain_origin+0x57/0xa0 [ 2319.786137][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2319.786137][T12214] get_compat_msghdr+0x108/0x2b0 [ 2319.786137][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2319.786137][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2319.786137][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.786137][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.786137][T12214] __do_fast_syscall_32+0x102/0x160 [ 2319.786137][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2319.786137][T12214] do_SYSENTER_32+0x73/0x90 [ 2319.786137][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.786137][T12214] [ 2319.786137][T12214] Uninit was stored to memory at: [ 2319.786137][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2319.786137][T12214] __msan_chain_origin+0x57/0xa0 [ 2319.786137][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2319.786137][T12214] get_compat_msghdr+0x108/0x2b0 [ 2319.786137][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2319.786137][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2319.786137][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.786137][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.786137][T12214] __do_fast_syscall_32+0x102/0x160 [ 2319.786137][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2319.786137][T12214] do_SYSENTER_32+0x73/0x90 [ 2319.786137][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.786137][T12214] [ 2319.786137][T12214] Uninit was stored to memory at: [ 2319.786137][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2319.786137][T12214] __msan_chain_origin+0x57/0xa0 [ 2320.448914][T12188] not chained 750000 origins [ 2319.786137][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2320.454457][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2319.786137][T12214] get_compat_msghdr+0x108/0x2b0 [ 2320.456125][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2319.786137][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2320.456125][T12188] Call Trace: [ 2319.786137][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2320.456125][T12188] dump_stack+0x21c/0x280 [ 2319.786137][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.456125][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2319.786137][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.456125][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] __do_fast_syscall_32+0x102/0x160 [ 2320.456125][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2319.786137][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2320.456125][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] do_SYSENTER_32+0x73/0x90 [ 2320.456125][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2319.786137][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.456125][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2319.786137][T12214] [ 2320.456125][T12188] ? __wake_up+0x1fc/0x250 [ 2319.786137][T12214] Uninit was stored to memory at: [ 2320.456125][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2320.456125][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2319.786137][T12214] __msan_chain_origin+0x57/0xa0 [ 2320.456125][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2319.786137][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2320.456125][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] get_compat_msghdr+0x108/0x2b0 [ 2320.456125][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2319.786137][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2320.456125][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2319.786137][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2320.456125][T12188] ? _copy_from_user+0x1fd/0x300 [ 2319.786137][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.456125][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.456125][T12188] __msan_chain_origin+0x57/0xa0 [ 2319.786137][T12214] __do_fast_syscall_32+0x102/0x160 [ 2320.456125][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2319.786137][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2320.456125][T12188] get_compat_msghdr+0x108/0x2b0 [ 2319.786137][T12214] do_SYSENTER_32+0x73/0x90 [ 2320.456125][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2319.786137][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.456125][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] [ 2320.456125][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2319.786137][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2320.456125][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2319.786137][T12214] do_recvmmsg+0xbf/0x22f0 [ 2320.456125][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2319.786137][T12214] do_recvmmsg+0xbf/0x22f0 [ 2320.456125][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2320.750368][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2320.750368][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2320.750368][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2320.766325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2320.766325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.766325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.766325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2320.766325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2320.797661][T12188] do_SYSENTER_32+0x73/0x90 [ 2320.797661][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.797661][T12188] RIP: 0023:0xf7f01549 [ 2320.797661][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2320.797661][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2320.797661][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2320.797661][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2320.797661][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2320.797661][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2320.797661][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2320.797661][T12188] Uninit was stored to memory at: [ 2320.797661][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2320.797661][T12188] __msan_chain_origin+0x57/0xa0 [ 2320.797661][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2320.797661][T12188] get_compat_msghdr+0x108/0x2b0 [ 2320.797661][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2320.797661][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2320.797661][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.797661][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.797661][T12188] __do_fast_syscall_32+0x102/0x160 [ 2320.797661][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2320.797661][T12188] do_SYSENTER_32+0x73/0x90 [ 2320.797661][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.797661][T12188] [ 2320.797661][T12188] Uninit was stored to memory at: [ 2320.797661][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2320.797661][T12188] __msan_chain_origin+0x57/0xa0 [ 2320.797661][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2320.797661][T12188] get_compat_msghdr+0x108/0x2b0 [ 2320.797661][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2320.797661][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2320.797661][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.797661][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.797661][T12188] __do_fast_syscall_32+0x102/0x160 [ 2320.797661][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2320.797661][T12188] do_SYSENTER_32+0x73/0x90 [ 2320.797661][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.797661][T12188] [ 2320.797661][T12188] Uninit was stored to memory at: [ 2320.797661][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2320.797661][T12188] __msan_chain_origin+0x57/0xa0 [ 2320.797661][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2320.797661][T12188] get_compat_msghdr+0x108/0x2b0 [ 2320.797661][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2320.797661][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2320.797661][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.797661][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.797661][T12188] __do_fast_syscall_32+0x102/0x160 [ 2320.797661][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2320.797661][T12188] do_SYSENTER_32+0x73/0x90 [ 2320.797661][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.797661][T12188] [ 2320.797661][T12188] Uninit was stored to memory at: [ 2320.797661][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2320.797661][T12188] __msan_chain_origin+0x57/0xa0 [ 2320.797661][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2320.797661][T12188] get_compat_msghdr+0x108/0x2b0 [ 2320.797661][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2320.797661][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2320.797661][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.797661][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.797661][T12188] __do_fast_syscall_32+0x102/0x160 [ 2320.797661][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2320.797661][T12188] do_SYSENTER_32+0x73/0x90 [ 2320.797661][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.797661][T12188] [ 2320.797661][T12188] Uninit was stored to memory at: [ 2320.797661][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2320.797661][T12188] __msan_chain_origin+0x57/0xa0 [ 2320.797661][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2320.797661][T12188] get_compat_msghdr+0x108/0x2b0 [ 2320.797661][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2320.797661][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2320.797661][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.797661][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.797661][T12188] __do_fast_syscall_32+0x102/0x160 [ 2320.797661][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2320.797661][T12188] do_SYSENTER_32+0x73/0x90 [ 2320.797661][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.797661][T12188] [ 2320.797661][T12188] Uninit was stored to memory at: [ 2320.797661][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2320.797661][T12188] __msan_chain_origin+0x57/0xa0 [ 2320.797661][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2320.797661][T12188] get_compat_msghdr+0x108/0x2b0 [ 2320.797661][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2320.797661][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2320.797661][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.797661][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.797661][T12188] __do_fast_syscall_32+0x102/0x160 [ 2320.797661][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2320.797661][T12188] do_SYSENTER_32+0x73/0x90 [ 2320.797661][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.797661][T12188] [ 2320.797661][T12188] Uninit was stored to memory at: [ 2320.797661][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2320.797661][T12188] __msan_chain_origin+0x57/0xa0 [ 2320.797661][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2320.797661][T12188] get_compat_msghdr+0x108/0x2b0 [ 2320.797661][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2320.797661][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2320.797661][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.797661][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.797661][T12188] __do_fast_syscall_32+0x102/0x160 [ 2320.797661][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2320.797661][T12188] do_SYSENTER_32+0x73/0x90 [ 2320.797661][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.797661][T12188] [ 2320.797661][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2320.797661][T12188] do_recvmmsg+0xbf/0x22f0 [ 2320.797661][T12188] do_recvmmsg+0xbf/0x22f0 [ 2321.619545][T12188] not chained 760000 origins [ 2321.625159][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2321.626140][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.626140][T12188] Call Trace: [ 2321.626140][T12188] dump_stack+0x21c/0x280 [ 2321.626140][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2321.626140][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2321.626140][T12188] ? __wake_up+0x1fc/0x250 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2321.626140][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2321.626140][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2321.626140][T12188] ? _copy_from_user+0x1fd/0x300 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] __msan_chain_origin+0x57/0xa0 [ 2321.626140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2321.626140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2321.626140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2321.626140][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2321.626140][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2321.626140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2321.626140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.626140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.626140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2321.626140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2321.626140][T12188] do_SYSENTER_32+0x73/0x90 [ 2321.626140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.626140][T12188] RIP: 0023:0xf7f01549 [ 2321.626140][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2321.626140][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2321.626140][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2321.626140][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2321.626140][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2321.626140][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2321.626140][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2321.626140][T12188] Uninit was stored to memory at: [ 2321.626140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2321.626140][T12188] __msan_chain_origin+0x57/0xa0 [ 2321.626140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2321.626140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2321.626140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2321.626140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2321.626140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.626140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.626140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2321.626140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2321.626140][T12188] do_SYSENTER_32+0x73/0x90 [ 2321.626140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.626140][T12188] [ 2321.626140][T12188] Uninit was stored to memory at: [ 2321.626140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2321.626140][T12188] __msan_chain_origin+0x57/0xa0 [ 2321.626140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2321.626140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2321.626140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2321.626140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2321.626140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.626140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.626140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2321.626140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2321.626140][T12188] do_SYSENTER_32+0x73/0x90 [ 2321.626140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.626140][T12188] [ 2321.626140][T12188] Uninit was stored to memory at: [ 2321.626140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2321.626140][T12188] __msan_chain_origin+0x57/0xa0 [ 2321.626140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2321.626140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2321.626140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2321.626140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2321.626140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.626140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.626140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2321.626140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2321.626140][T12188] do_SYSENTER_32+0x73/0x90 [ 2321.626140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.626140][T12188] [ 2321.626140][T12188] Uninit was stored to memory at: [ 2321.626140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2321.626140][T12188] __msan_chain_origin+0x57/0xa0 [ 2321.626140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2321.626140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2321.626140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2321.626140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2321.626140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.626140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.626140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2321.626140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2321.626140][T12188] do_SYSENTER_32+0x73/0x90 [ 2321.626140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.626140][T12188] [ 2321.626140][T12188] Uninit was stored to memory at: [ 2321.626140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2321.626140][T12188] __msan_chain_origin+0x57/0xa0 [ 2321.626140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2321.626140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2321.626140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2321.626140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2321.626140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.626140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.626140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2321.626140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2321.626140][T12188] do_SYSENTER_32+0x73/0x90 [ 2321.626140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.626140][T12188] [ 2321.626140][T12188] Uninit was stored to memory at: [ 2321.626140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2321.626140][T12188] __msan_chain_origin+0x57/0xa0 [ 2321.626140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2321.626140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2321.626140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2321.626140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2321.626140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.626140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.626140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2321.626140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2321.626140][T12188] do_SYSENTER_32+0x73/0x90 [ 2321.626140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.626140][T12188] [ 2321.626140][T12188] Uninit was stored to memory at: [ 2321.626140][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2321.626140][T12188] __msan_chain_origin+0x57/0xa0 [ 2321.626140][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2321.626140][T12188] get_compat_msghdr+0x108/0x2b0 [ 2321.626140][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2321.626140][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2321.626140][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.626140][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.626140][T12188] __do_fast_syscall_32+0x102/0x160 [ 2321.626140][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2321.626140][T12188] do_SYSENTER_32+0x73/0x90 [ 2321.626140][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.626140][T12188] [ 2321.626140][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2321.626140][T12188] do_recvmmsg+0xbf/0x22f0 [ 2321.626140][T12188] do_recvmmsg+0xbf/0x22f0 [ 2322.718632][T12188] not chained 770000 origins [ 2322.723282][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2322.726150][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2322.726150][T12188] Call Trace: [ 2322.726150][T12188] dump_stack+0x21c/0x280 [ 2322.726150][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2322.726150][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2322.726150][T12188] ? __wake_up+0x1fc/0x250 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2322.726150][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2322.726150][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2322.726150][T12188] ? _copy_from_user+0x1fd/0x300 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] __msan_chain_origin+0x57/0xa0 [ 2322.726150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2322.726150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2322.726150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2322.726150][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2322.726150][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2322.726150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2322.726150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.726150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.726150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2322.726150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2322.726150][T12188] do_SYSENTER_32+0x73/0x90 [ 2322.726150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.726150][T12188] RIP: 0023:0xf7f01549 [ 2322.726150][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2322.726150][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2322.726150][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2322.726150][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2322.726150][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2322.726150][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2322.726150][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2322.726150][T12188] Uninit was stored to memory at: [ 2322.726150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2322.726150][T12188] __msan_chain_origin+0x57/0xa0 [ 2322.726150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2322.726150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2322.726150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2322.726150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2322.726150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.726150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.726150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2322.726150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2322.726150][T12188] do_SYSENTER_32+0x73/0x90 [ 2322.726150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.726150][T12188] [ 2322.726150][T12188] Uninit was stored to memory at: [ 2322.726150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2322.726150][T12188] __msan_chain_origin+0x57/0xa0 [ 2322.726150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2322.726150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2322.726150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2322.726150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2322.726150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.726150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.726150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2322.726150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2322.726150][T12188] do_SYSENTER_32+0x73/0x90 [ 2322.726150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.726150][T12188] [ 2322.726150][T12188] Uninit was stored to memory at: [ 2322.726150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2322.726150][T12188] __msan_chain_origin+0x57/0xa0 [ 2322.726150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2322.726150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2322.726150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2322.726150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2322.726150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.726150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.726150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2322.726150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2322.726150][T12188] do_SYSENTER_32+0x73/0x90 [ 2322.726150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.726150][T12188] [ 2322.726150][T12188] Uninit was stored to memory at: [ 2322.726150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2322.726150][T12188] __msan_chain_origin+0x57/0xa0 [ 2322.726150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2322.726150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2322.726150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2322.726150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2322.726150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.726150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.726150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2322.726150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2322.726150][T12188] do_SYSENTER_32+0x73/0x90 [ 2322.726150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.726150][T12188] [ 2322.726150][T12188] Uninit was stored to memory at: [ 2322.726150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2322.726150][T12188] __msan_chain_origin+0x57/0xa0 [ 2322.726150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2322.726150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2322.726150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2322.726150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2322.726150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.726150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.726150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2322.726150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2322.726150][T12188] do_SYSENTER_32+0x73/0x90 [ 2322.726150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.726150][T12188] [ 2322.726150][T12188] Uninit was stored to memory at: [ 2322.726150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2322.726150][T12188] __msan_chain_origin+0x57/0xa0 [ 2322.726150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2322.726150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2322.726150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2322.726150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2322.726150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.726150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.726150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2322.726150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2322.726150][T12188] do_SYSENTER_32+0x73/0x90 [ 2322.726150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.726150][T12188] [ 2322.726150][T12188] Uninit was stored to memory at: [ 2322.726150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2322.726150][T12188] __msan_chain_origin+0x57/0xa0 [ 2322.726150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2322.726150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2322.726150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2322.726150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2322.726150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.726150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.726150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2322.726150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2322.726150][T12188] do_SYSENTER_32+0x73/0x90 [ 2322.726150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.726150][T12188] [ 2322.726150][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2322.726150][T12188] do_recvmmsg+0xbf/0x22f0 [ 2322.726150][T12188] do_recvmmsg+0xbf/0x22f0 [ 2323.752323][T12188] not chained 780000 origins [ 2323.756137][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2323.756137][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2323.756137][T12188] Call Trace: [ 2323.776458][T12188] dump_stack+0x21c/0x280 [ 2323.776458][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2323.776458][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.776458][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2323.776458][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.806317][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2323.806317][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2323.806317][T12188] ? __wake_up+0x1fc/0x250 [ 2323.806317][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.806317][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2323.806317][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2323.806317][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.806317][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2323.806317][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2323.806317][T12188] ? _copy_from_user+0x1fd/0x300 [ 2323.806317][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.806317][T12188] __msan_chain_origin+0x57/0xa0 [ 2323.806317][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2323.806317][T12188] get_compat_msghdr+0x108/0x2b0 [ 2323.806317][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2323.806317][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.806317][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2323.806317][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.806317][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2323.806317][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2323.806317][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2323.806317][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2323.806317][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.806317][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2323.806317][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.806317][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.806317][T12188] __do_fast_syscall_32+0x102/0x160 [ 2323.806317][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2323.806317][T12188] do_SYSENTER_32+0x73/0x90 [ 2323.806317][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.806317][T12188] RIP: 0023:0xf7f01549 [ 2323.806317][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2323.806317][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2323.806317][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2323.806317][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2323.806317][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2323.806317][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2323.806317][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2323.806317][T12188] Uninit was stored to memory at: [ 2323.806317][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2323.806317][T12188] __msan_chain_origin+0x57/0xa0 [ 2323.806317][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2323.806317][T12188] get_compat_msghdr+0x108/0x2b0 [ 2323.806317][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2323.806317][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2323.806317][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.806317][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.806317][T12188] __do_fast_syscall_32+0x102/0x160 [ 2323.806317][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2323.806317][T12188] do_SYSENTER_32+0x73/0x90 [ 2323.806317][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.806317][T12188] [ 2323.806317][T12188] Uninit was stored to memory at: [ 2323.806317][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2323.806317][T12188] __msan_chain_origin+0x57/0xa0 [ 2323.806317][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2323.806317][T12188] get_compat_msghdr+0x108/0x2b0 [ 2323.806317][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2323.806317][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2323.806317][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.806317][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.806317][T12188] __do_fast_syscall_32+0x102/0x160 [ 2323.806317][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2323.806317][T12188] do_SYSENTER_32+0x73/0x90 [ 2323.806317][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.806317][T12188] [ 2323.806317][T12188] Uninit was stored to memory at: [ 2323.806317][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2323.806317][T12188] __msan_chain_origin+0x57/0xa0 [ 2323.806317][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2323.806317][T12188] get_compat_msghdr+0x108/0x2b0 [ 2323.806317][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2323.806317][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2323.806317][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.806317][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.806317][T12188] __do_fast_syscall_32+0x102/0x160 [ 2323.806317][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2323.806317][T12188] do_SYSENTER_32+0x73/0x90 [ 2323.806317][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.806317][T12188] [ 2323.806317][T12188] Uninit was stored to memory at: [ 2323.806317][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2323.806317][T12188] __msan_chain_origin+0x57/0xa0 [ 2323.806317][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2323.806317][T12188] get_compat_msghdr+0x108/0x2b0 [ 2323.806317][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2323.806317][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2323.806317][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.806317][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.806317][T12188] __do_fast_syscall_32+0x102/0x160 [ 2323.806317][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2323.806317][T12188] do_SYSENTER_32+0x73/0x90 [ 2323.806317][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.806317][T12188] [ 2323.806317][T12188] Uninit was stored to memory at: [ 2323.806317][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2323.806317][T12188] __msan_chain_origin+0x57/0xa0 [ 2323.806317][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2323.806317][T12188] get_compat_msghdr+0x108/0x2b0 [ 2323.806317][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2323.806317][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2323.806317][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.806317][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.806317][T12188] __do_fast_syscall_32+0x102/0x160 [ 2323.806317][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2323.806317][T12188] do_SYSENTER_32+0x73/0x90 [ 2323.806317][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.806317][T12188] [ 2323.806317][T12188] Uninit was stored to memory at: [ 2323.806317][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2323.806317][T12188] __msan_chain_origin+0x57/0xa0 [ 2323.806317][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2323.806317][T12188] get_compat_msghdr+0x108/0x2b0 [ 2323.806317][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2323.806317][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2323.806317][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.806317][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.806317][T12188] __do_fast_syscall_32+0x102/0x160 [ 2323.806317][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2323.806317][T12188] do_SYSENTER_32+0x73/0x90 [ 2323.806317][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.806317][T12188] [ 2323.806317][T12188] Uninit was stored to memory at: [ 2323.806317][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2323.806317][T12188] __msan_chain_origin+0x57/0xa0 [ 2323.806317][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2323.806317][T12188] get_compat_msghdr+0x108/0x2b0 [ 2323.806317][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2323.806317][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2323.806317][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.806317][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.806317][T12188] __do_fast_syscall_32+0x102/0x160 [ 2323.806317][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2323.806317][T12188] do_SYSENTER_32+0x73/0x90 [ 2323.806317][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.806317][T12188] [ 2323.806317][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2323.806317][T12188] do_recvmmsg+0xbf/0x22f0 [ 2323.806317][T12188] do_recvmmsg+0xbf/0x22f0 [ 2324.718496][T12214] not chained 790000 origins [ 2324.723160][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2324.726229][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2324.726229][T12214] Call Trace: [ 2324.726229][T12214] dump_stack+0x21c/0x280 [ 2324.726229][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2324.726229][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2324.726229][T12214] ? __wake_up+0x1fc/0x250 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2324.726229][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2324.726229][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2324.726229][T12214] ? _copy_from_user+0x1fd/0x300 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] __msan_chain_origin+0x57/0xa0 [ 2324.726229][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2324.726229][T12214] get_compat_msghdr+0x108/0x2b0 [ 2324.726229][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2324.726229][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2324.726229][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2324.726229][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2324.726229][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.726229][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.726229][T12214] __do_fast_syscall_32+0x102/0x160 [ 2324.726229][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2324.726229][T12214] do_SYSENTER_32+0x73/0x90 [ 2324.726229][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.726229][T12214] RIP: 0023:0xf7f01549 [ 2324.726229][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2324.726229][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2324.726229][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2324.726229][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2324.726229][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2324.726229][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2324.726229][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2324.726229][T12214] Uninit was stored to memory at: [ 2324.726229][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2324.726229][T12214] __msan_chain_origin+0x57/0xa0 [ 2324.726229][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2324.726229][T12214] get_compat_msghdr+0x108/0x2b0 [ 2324.726229][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2324.726229][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2324.726229][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.726229][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.726229][T12214] __do_fast_syscall_32+0x102/0x160 [ 2324.726229][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2324.726229][T12214] do_SYSENTER_32+0x73/0x90 [ 2324.726229][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.726229][T12214] [ 2324.726229][T12214] Uninit was stored to memory at: [ 2324.726229][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2324.726229][T12214] __msan_chain_origin+0x57/0xa0 [ 2324.726229][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2324.726229][T12214] get_compat_msghdr+0x108/0x2b0 [ 2324.726229][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2324.726229][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2324.726229][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.726229][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.726229][T12214] __do_fast_syscall_32+0x102/0x160 [ 2324.726229][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2324.726229][T12214] do_SYSENTER_32+0x73/0x90 [ 2324.726229][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.726229][T12214] [ 2324.726229][T12214] Uninit was stored to memory at: [ 2324.726229][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2324.726229][T12214] __msan_chain_origin+0x57/0xa0 [ 2324.726229][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2324.726229][T12214] get_compat_msghdr+0x108/0x2b0 [ 2324.726229][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2324.726229][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2324.726229][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.726229][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.726229][T12214] __do_fast_syscall_32+0x102/0x160 [ 2324.726229][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2324.726229][T12214] do_SYSENTER_32+0x73/0x90 [ 2324.726229][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.726229][T12214] [ 2324.726229][T12214] Uninit was stored to memory at: [ 2324.726229][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2324.726229][T12214] __msan_chain_origin+0x57/0xa0 [ 2324.726229][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2324.726229][T12214] get_compat_msghdr+0x108/0x2b0 [ 2324.726229][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2324.726229][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2324.726229][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.726229][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.726229][T12214] __do_fast_syscall_32+0x102/0x160 [ 2324.726229][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2324.726229][T12214] do_SYSENTER_32+0x73/0x90 [ 2324.726229][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.726229][T12214] [ 2324.726229][T12214] Uninit was stored to memory at: [ 2324.726229][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2324.726229][T12214] __msan_chain_origin+0x57/0xa0 [ 2324.726229][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2324.726229][T12214] get_compat_msghdr+0x108/0x2b0 [ 2324.726229][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2324.726229][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2324.726229][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.726229][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.726229][T12214] __do_fast_syscall_32+0x102/0x160 [ 2324.726229][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2324.726229][T12214] do_SYSENTER_32+0x73/0x90 [ 2324.726229][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.726229][T12214] [ 2324.726229][T12214] Uninit was stored to memory at: [ 2324.726229][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2324.726229][T12214] __msan_chain_origin+0x57/0xa0 [ 2324.726229][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2324.726229][T12214] get_compat_msghdr+0x108/0x2b0 [ 2324.726229][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2324.726229][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2324.726229][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.726229][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.726229][T12214] __do_fast_syscall_32+0x102/0x160 [ 2324.726229][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2324.726229][T12214] do_SYSENTER_32+0x73/0x90 [ 2324.726229][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.726229][T12214] [ 2324.726229][T12214] Uninit was stored to memory at: [ 2324.726229][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2324.726229][T12214] __msan_chain_origin+0x57/0xa0 [ 2324.726229][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2324.726229][T12214] get_compat_msghdr+0x108/0x2b0 [ 2324.726229][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2324.726229][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2324.726229][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.726229][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.726229][T12214] __do_fast_syscall_32+0x102/0x160 [ 2324.726229][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2324.726229][T12214] do_SYSENTER_32+0x73/0x90 [ 2324.726229][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.726229][T12214] [ 2324.726229][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2324.726229][T12214] do_recvmmsg+0xbf/0x22f0 [ 2324.726229][T12214] do_recvmmsg+0xbf/0x22f0 [ 2325.751283][T12188] not chained 800000 origins [ 2325.755987][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2325.756151][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2325.756151][T12188] Call Trace: [ 2325.756151][T12188] dump_stack+0x21c/0x280 [ 2325.756151][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2325.756151][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2325.756151][T12188] ? __wake_up+0x1fc/0x250 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2325.756151][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2325.756151][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2325.756151][T12188] ? _copy_from_user+0x1fd/0x300 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] __msan_chain_origin+0x57/0xa0 [ 2325.756151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2325.756151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2325.756151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2325.756151][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2325.756151][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2325.756151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2325.756151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.756151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.756151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2325.756151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2325.756151][T12188] do_SYSENTER_32+0x73/0x90 [ 2325.756151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.756151][T12188] RIP: 0023:0xf7f01549 [ 2325.756151][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2325.756151][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2325.756151][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2325.756151][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2325.756151][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2325.756151][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2325.756151][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2325.756151][T12188] Uninit was stored to memory at: [ 2325.756151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2325.756151][T12188] __msan_chain_origin+0x57/0xa0 [ 2325.756151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2325.756151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2325.756151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2325.756151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2325.756151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.756151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.756151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2325.756151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2325.756151][T12188] do_SYSENTER_32+0x73/0x90 [ 2325.756151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.756151][T12188] [ 2325.756151][T12188] Uninit was stored to memory at: [ 2325.756151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2325.756151][T12188] __msan_chain_origin+0x57/0xa0 [ 2325.756151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2325.756151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2325.756151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2325.756151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2325.756151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.756151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.756151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2325.756151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2325.756151][T12188] do_SYSENTER_32+0x73/0x90 [ 2325.756151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.756151][T12188] [ 2325.756151][T12188] Uninit was stored to memory at: [ 2325.756151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2325.756151][T12188] __msan_chain_origin+0x57/0xa0 [ 2325.756151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2325.756151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2325.756151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2325.756151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2325.756151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.756151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.756151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2325.756151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2325.756151][T12188] do_SYSENTER_32+0x73/0x90 [ 2325.756151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.756151][T12188] [ 2325.756151][T12188] Uninit was stored to memory at: [ 2325.756151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2325.756151][T12188] __msan_chain_origin+0x57/0xa0 [ 2325.756151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2325.756151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2325.756151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2325.756151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2325.756151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.756151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.756151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2325.756151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2325.756151][T12188] do_SYSENTER_32+0x73/0x90 [ 2325.756151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.756151][T12188] [ 2325.756151][T12188] Uninit was stored to memory at: [ 2325.756151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2325.756151][T12188] __msan_chain_origin+0x57/0xa0 [ 2325.756151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2325.756151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2325.756151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2325.756151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2325.756151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.756151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.756151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2325.756151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2325.756151][T12188] do_SYSENTER_32+0x73/0x90 [ 2325.756151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.756151][T12188] [ 2325.756151][T12188] Uninit was stored to memory at: [ 2325.756151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2325.756151][T12188] __msan_chain_origin+0x57/0xa0 [ 2325.756151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2325.756151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2325.756151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2325.756151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2325.756151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.756151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.756151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2325.756151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2325.756151][T12188] do_SYSENTER_32+0x73/0x90 [ 2325.756151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.756151][T12188] [ 2325.756151][T12188] Uninit was stored to memory at: [ 2325.756151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2325.756151][T12188] __msan_chain_origin+0x57/0xa0 [ 2325.756151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2325.756151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2325.756151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2325.756151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2325.756151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.756151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.756151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2325.756151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2325.756151][T12188] do_SYSENTER_32+0x73/0x90 [ 2325.756151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.756151][T12188] [ 2325.756151][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2325.756151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2325.756151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2326.832025][T12188] not chained 810000 origins [ 2326.836149][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2326.836149][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2326.836149][T12188] Call Trace: [ 2326.836149][T12188] dump_stack+0x21c/0x280 [ 2326.836149][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2326.836149][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2326.836149][T12188] ? __wake_up+0x1fc/0x250 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2326.836149][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2326.836149][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2326.836149][T12188] ? _copy_from_user+0x1fd/0x300 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] __msan_chain_origin+0x57/0xa0 [ 2326.836149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2326.836149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2326.836149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2326.836149][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2326.836149][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2326.836149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2326.836149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.836149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.836149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2326.836149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2326.836149][T12188] do_SYSENTER_32+0x73/0x90 [ 2326.836149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.836149][T12188] RIP: 0023:0xf7f01549 [ 2326.836149][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2326.836149][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2326.836149][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2326.836149][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2326.836149][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2326.836149][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2326.836149][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2326.836149][T12188] Uninit was stored to memory at: [ 2326.836149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2326.836149][T12188] __msan_chain_origin+0x57/0xa0 [ 2326.836149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2326.836149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2326.836149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2326.836149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2326.836149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.836149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.836149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2326.836149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2326.836149][T12188] do_SYSENTER_32+0x73/0x90 [ 2326.836149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.836149][T12188] [ 2326.836149][T12188] Uninit was stored to memory at: [ 2326.836149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2326.836149][T12188] __msan_chain_origin+0x57/0xa0 [ 2326.836149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2326.836149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2326.836149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2326.836149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2326.836149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.836149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.836149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2326.836149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2326.836149][T12188] do_SYSENTER_32+0x73/0x90 [ 2326.836149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.836149][T12188] [ 2326.836149][T12188] Uninit was stored to memory at: [ 2326.836149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2326.836149][T12188] __msan_chain_origin+0x57/0xa0 [ 2326.836149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2326.836149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2326.836149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2326.836149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2326.836149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.836149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.836149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2326.836149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2326.836149][T12188] do_SYSENTER_32+0x73/0x90 [ 2326.836149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.836149][T12188] [ 2326.836149][T12188] Uninit was stored to memory at: [ 2326.836149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2326.836149][T12188] __msan_chain_origin+0x57/0xa0 [ 2326.836149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2326.836149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2326.836149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2326.836149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2326.836149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.836149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.836149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2326.836149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2326.836149][T12188] do_SYSENTER_32+0x73/0x90 [ 2326.836149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.836149][T12188] [ 2326.836149][T12188] Uninit was stored to memory at: [ 2326.836149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2326.836149][T12188] __msan_chain_origin+0x57/0xa0 [ 2326.836149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2326.836149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2326.836149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2326.836149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2326.836149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.836149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.836149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2326.836149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2326.836149][T12188] do_SYSENTER_32+0x73/0x90 [ 2326.836149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.836149][T12188] [ 2326.836149][T12188] Uninit was stored to memory at: [ 2326.836149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2326.836149][T12188] __msan_chain_origin+0x57/0xa0 [ 2326.836149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2326.836149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2326.836149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2326.836149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2326.836149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.836149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.836149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2326.836149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2326.836149][T12188] do_SYSENTER_32+0x73/0x90 [ 2326.836149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.836149][T12188] [ 2326.836149][T12188] Uninit was stored to memory at: [ 2326.836149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2326.836149][T12188] __msan_chain_origin+0x57/0xa0 [ 2326.836149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2326.836149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2326.836149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2326.836149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2326.836149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.836149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.836149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2326.836149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2326.836149][T12188] do_SYSENTER_32+0x73/0x90 [ 2326.836149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.836149][T12188] [ 2326.836149][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2326.836149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2326.836149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2327.913049][T12214] not chained 820000 origins [ 2327.916155][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2327.916155][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.916155][T12214] Call Trace: [ 2327.916155][T12214] dump_stack+0x21c/0x280 [ 2327.916155][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2327.916155][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2327.916155][T12214] ? __wake_up+0x1fc/0x250 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2327.916155][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2327.916155][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2327.916155][T12214] ? _copy_from_user+0x1fd/0x300 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] __msan_chain_origin+0x57/0xa0 [ 2327.916155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2327.916155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2327.916155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2327.916155][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2327.916155][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2327.916155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2327.916155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.916155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.916155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2327.916155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2327.916155][T12214] do_SYSENTER_32+0x73/0x90 [ 2327.916155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.916155][T12214] RIP: 0023:0xf7f01549 [ 2327.916155][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2327.916155][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2327.916155][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2327.916155][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2327.916155][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2327.916155][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2327.916155][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2327.916155][T12214] Uninit was stored to memory at: [ 2327.916155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2327.916155][T12214] __msan_chain_origin+0x57/0xa0 [ 2327.916155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2327.916155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2327.916155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2327.916155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2327.916155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.916155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.916155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2327.916155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2327.916155][T12214] do_SYSENTER_32+0x73/0x90 [ 2327.916155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.916155][T12214] [ 2327.916155][T12214] Uninit was stored to memory at: [ 2327.916155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2327.916155][T12214] __msan_chain_origin+0x57/0xa0 [ 2327.916155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2327.916155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2327.916155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2327.916155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2327.916155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.916155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.916155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2327.916155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2327.916155][T12214] do_SYSENTER_32+0x73/0x90 [ 2327.916155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.916155][T12214] [ 2327.916155][T12214] Uninit was stored to memory at: [ 2327.916155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2327.916155][T12214] __msan_chain_origin+0x57/0xa0 [ 2327.916155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2327.916155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2327.916155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2327.916155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2327.916155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.916155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.916155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2327.916155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2327.916155][T12214] do_SYSENTER_32+0x73/0x90 [ 2327.916155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.916155][T12214] [ 2327.916155][T12214] Uninit was stored to memory at: [ 2327.916155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2327.916155][T12214] __msan_chain_origin+0x57/0xa0 [ 2327.916155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2327.916155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2327.916155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2327.916155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2327.916155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.916155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.916155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2327.916155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2327.916155][T12214] do_SYSENTER_32+0x73/0x90 [ 2327.916155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.916155][T12214] [ 2327.916155][T12214] Uninit was stored to memory at: [ 2327.916155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2327.916155][T12214] __msan_chain_origin+0x57/0xa0 [ 2327.916155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2327.916155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2327.916155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2327.916155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2327.916155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.916155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.916155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2327.916155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2327.916155][T12214] do_SYSENTER_32+0x73/0x90 [ 2327.916155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.916155][T12214] [ 2327.916155][T12214] Uninit was stored to memory at: [ 2327.916155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2327.916155][T12214] __msan_chain_origin+0x57/0xa0 [ 2327.916155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2327.916155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2327.916155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2327.916155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2327.916155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.916155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.916155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2327.916155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2327.916155][T12214] do_SYSENTER_32+0x73/0x90 [ 2327.916155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.916155][T12214] [ 2327.916155][T12214] Uninit was stored to memory at: [ 2327.916155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2327.916155][T12214] __msan_chain_origin+0x57/0xa0 [ 2327.916155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2327.916155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2327.916155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2327.916155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2327.916155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.916155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.916155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2327.916155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2327.916155][T12214] do_SYSENTER_32+0x73/0x90 [ 2327.916155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.916155][T12214] [ 2327.916155][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2327.916155][T12214] do_recvmmsg+0xbf/0x22f0 [ 2327.916155][T12214] do_recvmmsg+0xbf/0x22f0 [ 2328.970554][T12214] not chained 830000 origins [ 2328.975290][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2328.976150][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2328.976150][T12214] Call Trace: [ 2328.976150][T12214] dump_stack+0x21c/0x280 [ 2328.976150][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2328.976150][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2328.976150][T12214] ? __wake_up+0x1fc/0x250 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2328.976150][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2328.976150][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2328.976150][T12214] ? _copy_from_user+0x1fd/0x300 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] __msan_chain_origin+0x57/0xa0 [ 2328.976150][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2328.976150][T12214] get_compat_msghdr+0x108/0x2b0 [ 2328.976150][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2328.976150][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2328.976150][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2328.976150][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2328.976150][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.976150][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.976150][T12214] __do_fast_syscall_32+0x102/0x160 [ 2328.976150][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2328.976150][T12214] do_SYSENTER_32+0x73/0x90 [ 2328.976150][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.976150][T12214] RIP: 0023:0xf7f01549 [ 2328.976150][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2328.976150][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2328.976150][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2328.976150][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2328.976150][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2328.976150][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2328.976150][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2328.976150][T12214] Uninit was stored to memory at: [ 2328.976150][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2328.976150][T12214] __msan_chain_origin+0x57/0xa0 [ 2328.976150][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2328.976150][T12214] get_compat_msghdr+0x108/0x2b0 [ 2328.976150][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2328.976150][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2328.976150][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.976150][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.976150][T12214] __do_fast_syscall_32+0x102/0x160 [ 2328.976150][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2328.976150][T12214] do_SYSENTER_32+0x73/0x90 [ 2328.976150][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.976150][T12214] [ 2328.976150][T12214] Uninit was stored to memory at: [ 2328.976150][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2328.976150][T12214] __msan_chain_origin+0x57/0xa0 [ 2328.976150][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2328.976150][T12214] get_compat_msghdr+0x108/0x2b0 [ 2328.976150][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2328.976150][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2328.976150][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.976150][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.976150][T12214] __do_fast_syscall_32+0x102/0x160 [ 2328.976150][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2328.976150][T12214] do_SYSENTER_32+0x73/0x90 [ 2328.976150][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.976150][T12214] [ 2328.976150][T12214] Uninit was stored to memory at: [ 2328.976150][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2328.976150][T12214] __msan_chain_origin+0x57/0xa0 [ 2329.423310][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2329.423310][T12214] get_compat_msghdr+0x108/0x2b0 [ 2329.423310][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2329.423310][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2329.423310][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.423310][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.423310][T12214] __do_fast_syscall_32+0x102/0x160 [ 2329.423310][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2329.423310][T12214] do_SYSENTER_32+0x73/0x90 [ 2329.423310][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.423310][T12214] [ 2329.423310][T12214] Uninit was stored to memory at: [ 2329.423310][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2329.423310][T12214] __msan_chain_origin+0x57/0xa0 [ 2329.423310][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2329.423310][T12214] get_compat_msghdr+0x108/0x2b0 [ 2329.423310][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2329.423310][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2329.423310][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.423310][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.423310][T12214] __do_fast_syscall_32+0x102/0x160 [ 2329.423310][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2329.423310][T12214] do_SYSENTER_32+0x73/0x90 [ 2329.423310][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.423310][T12214] [ 2329.423310][T12214] Uninit was stored to memory at: [ 2329.423310][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2329.423310][T12214] __msan_chain_origin+0x57/0xa0 [ 2329.423310][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2329.423310][T12214] get_compat_msghdr+0x108/0x2b0 [ 2329.423310][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2329.423310][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2329.423310][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.423310][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.423310][T12214] __do_fast_syscall_32+0x102/0x160 [ 2329.423310][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2329.423310][T12214] do_SYSENTER_32+0x73/0x90 [ 2329.423310][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.423310][T12214] [ 2329.423310][T12214] Uninit was stored to memory at: [ 2329.423310][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2329.423310][T12214] __msan_chain_origin+0x57/0xa0 [ 2329.423310][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2329.423310][T12214] get_compat_msghdr+0x108/0x2b0 [ 2329.423310][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2329.423310][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2329.423310][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.423310][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.423310][T12214] __do_fast_syscall_32+0x102/0x160 [ 2329.423310][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2329.423310][T12214] do_SYSENTER_32+0x73/0x90 [ 2329.423310][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.423310][T12214] [ 2329.423310][T12214] Uninit was stored to memory at: [ 2329.423310][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2329.423310][T12214] __msan_chain_origin+0x57/0xa0 [ 2329.423310][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2329.423310][T12214] get_compat_msghdr+0x108/0x2b0 [ 2329.423310][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2329.423310][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2329.423310][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.423310][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.423310][T12214] __do_fast_syscall_32+0x102/0x160 [ 2329.423310][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2329.423310][T12214] do_SYSENTER_32+0x73/0x90 [ 2329.423310][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.423310][T12214] [ 2329.423310][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2329.423310][T12214] do_recvmmsg+0xbf/0x22f0 [ 2329.423310][T12214] do_recvmmsg+0xbf/0x22f0 [ 2330.155391][T12214] not chained 840000 origins [ 2330.156154][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2330.156154][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2330.156154][T12214] Call Trace: [ 2330.156154][T12214] dump_stack+0x21c/0x280 [ 2330.156154][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2330.156154][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2330.156154][T12214] ? __wake_up+0x1fc/0x250 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2330.156154][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2330.156154][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2330.156154][T12214] ? _copy_from_user+0x1fd/0x300 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] __msan_chain_origin+0x57/0xa0 [ 2330.156154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2330.156154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2330.156154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2330.156154][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2330.156154][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2330.156154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2330.156154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.156154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.156154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2330.156154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2330.156154][T12214] do_SYSENTER_32+0x73/0x90 [ 2330.156154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.156154][T12214] RIP: 0023:0xf7f01549 [ 2330.156154][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2330.156154][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2330.156154][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2330.156154][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2330.156154][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2330.156154][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2330.156154][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2330.156154][T12214] Uninit was stored to memory at: [ 2330.156154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2330.156154][T12214] __msan_chain_origin+0x57/0xa0 [ 2330.156154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2330.156154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2330.156154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2330.156154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2330.156154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.156154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.156154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2330.156154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2330.156154][T12214] do_SYSENTER_32+0x73/0x90 [ 2330.156154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.156154][T12214] [ 2330.156154][T12214] Uninit was stored to memory at: [ 2330.156154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2330.156154][T12214] __msan_chain_origin+0x57/0xa0 [ 2330.156154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2330.156154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2330.156154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2330.156154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2330.156154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.156154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.156154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2330.156154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2330.156154][T12214] do_SYSENTER_32+0x73/0x90 [ 2330.156154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.156154][T12214] [ 2330.156154][T12214] Uninit was stored to memory at: [ 2330.156154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2330.156154][T12214] __msan_chain_origin+0x57/0xa0 [ 2330.156154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2330.156154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2330.156154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2330.156154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2330.156154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.156154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.156154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2330.156154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2330.156154][T12214] do_SYSENTER_32+0x73/0x90 [ 2330.156154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.156154][T12214] [ 2330.156154][T12214] Uninit was stored to memory at: [ 2330.156154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2330.156154][T12214] __msan_chain_origin+0x57/0xa0 [ 2330.156154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2330.156154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2330.156154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2330.156154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2330.156154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.156154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.156154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2330.156154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2330.156154][T12214] do_SYSENTER_32+0x73/0x90 [ 2330.156154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.156154][T12214] [ 2330.156154][T12214] Uninit was stored to memory at: [ 2330.156154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2330.156154][T12214] __msan_chain_origin+0x57/0xa0 [ 2330.156154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2330.156154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2330.156154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2330.156154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2330.156154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.156154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.156154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2330.156154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2330.156154][T12214] do_SYSENTER_32+0x73/0x90 [ 2330.156154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.156154][T12214] [ 2330.156154][T12214] Uninit was stored to memory at: [ 2330.156154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2330.156154][T12214] __msan_chain_origin+0x57/0xa0 [ 2330.156154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2330.156154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2330.156154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2330.156154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2330.156154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.156154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.156154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2330.156154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2330.156154][T12214] do_SYSENTER_32+0x73/0x90 [ 2330.156154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.156154][T12214] [ 2330.156154][T12214] Uninit was stored to memory at: [ 2330.156154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2330.156154][T12214] __msan_chain_origin+0x57/0xa0 [ 2330.156154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2330.156154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2330.156154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2330.156154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2330.156154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.156154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.156154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2330.156154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2330.156154][T12214] do_SYSENTER_32+0x73/0x90 [ 2330.156154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.156154][T12214] [ 2330.156154][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2330.156154][T12214] do_recvmmsg+0xbf/0x22f0 [ 2330.156154][T12214] do_recvmmsg+0xbf/0x22f0 [ 2331.258283][T12188] not chained 850000 origins [ 2331.262934][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2331.266149][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2331.266149][T12188] Call Trace: [ 2331.266149][T12188] dump_stack+0x21c/0x280 [ 2331.266149][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2331.266149][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2331.266149][T12188] ? __wake_up+0x1fc/0x250 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2331.266149][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2331.266149][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2331.266149][T12188] ? _copy_from_user+0x1fd/0x300 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] __msan_chain_origin+0x57/0xa0 [ 2331.266149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2331.266149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2331.266149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2331.266149][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2331.266149][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2331.266149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2331.266149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.266149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.266149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2331.266149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2331.266149][T12188] do_SYSENTER_32+0x73/0x90 [ 2331.266149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.266149][T12188] RIP: 0023:0xf7f01549 [ 2331.266149][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2331.266149][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2331.266149][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2331.266149][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2331.266149][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2331.266149][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2331.266149][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2331.266149][T12188] Uninit was stored to memory at: [ 2331.266149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2331.266149][T12188] __msan_chain_origin+0x57/0xa0 [ 2331.266149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2331.266149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2331.266149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2331.266149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2331.266149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.266149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.266149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2331.266149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2331.266149][T12188] do_SYSENTER_32+0x73/0x90 [ 2331.266149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.266149][T12188] [ 2331.266149][T12188] Uninit was stored to memory at: [ 2331.266149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2331.266149][T12188] __msan_chain_origin+0x57/0xa0 [ 2331.266149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2331.266149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2331.266149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2331.266149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2331.266149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.266149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.266149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2331.266149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2331.266149][T12188] do_SYSENTER_32+0x73/0x90 [ 2331.266149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.266149][T12188] [ 2331.266149][T12188] Uninit was stored to memory at: [ 2331.266149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2331.266149][T12188] __msan_chain_origin+0x57/0xa0 [ 2331.266149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2331.266149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2331.266149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2331.266149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2331.266149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.266149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.266149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2331.266149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2331.266149][T12188] do_SYSENTER_32+0x73/0x90 [ 2331.266149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.266149][T12188] [ 2331.266149][T12188] Uninit was stored to memory at: [ 2331.266149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2331.266149][T12188] __msan_chain_origin+0x57/0xa0 [ 2331.266149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2331.266149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2331.266149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2331.266149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2331.266149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.266149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.266149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2331.266149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2331.266149][T12188] do_SYSENTER_32+0x73/0x90 [ 2331.266149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.266149][T12188] [ 2331.266149][T12188] Uninit was stored to memory at: [ 2331.266149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2331.266149][T12188] __msan_chain_origin+0x57/0xa0 [ 2331.266149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2331.266149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2331.266149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2331.266149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2331.266149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.266149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.266149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2331.266149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2331.266149][T12188] do_SYSENTER_32+0x73/0x90 [ 2331.266149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.266149][T12188] [ 2331.266149][T12188] Uninit was stored to memory at: [ 2331.266149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2331.266149][T12188] __msan_chain_origin+0x57/0xa0 [ 2331.266149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2331.266149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2331.266149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2331.266149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2331.266149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.266149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.266149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2331.266149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2331.266149][T12188] do_SYSENTER_32+0x73/0x90 [ 2331.266149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.266149][T12188] [ 2331.266149][T12188] Uninit was stored to memory at: [ 2331.266149][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2331.266149][T12188] __msan_chain_origin+0x57/0xa0 [ 2331.266149][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2331.266149][T12188] get_compat_msghdr+0x108/0x2b0 [ 2331.266149][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2331.266149][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2331.266149][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.266149][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.266149][T12188] __do_fast_syscall_32+0x102/0x160 [ 2331.266149][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2331.266149][T12188] do_SYSENTER_32+0x73/0x90 [ 2331.266149][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.266149][T12188] [ 2331.266149][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2331.266149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2331.266149][T12188] do_recvmmsg+0xbf/0x22f0 [ 2332.430910][T12214] not chained 860000 origins [ 2332.436266][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2332.436266][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2332.436266][T12214] Call Trace: [ 2332.436266][T12214] dump_stack+0x21c/0x280 [ 2332.436266][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2332.436266][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2332.436266][T12214] ? __wake_up+0x1fc/0x250 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2332.436266][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2332.436266][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2332.436266][T12214] ? _copy_from_user+0x1fd/0x300 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] __msan_chain_origin+0x57/0xa0 [ 2332.436266][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2332.436266][T12214] get_compat_msghdr+0x108/0x2b0 [ 2332.436266][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2332.436266][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2332.436266][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2332.436266][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2332.436266][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.436266][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.436266][T12214] __do_fast_syscall_32+0x102/0x160 [ 2332.436266][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2332.436266][T12214] do_SYSENTER_32+0x73/0x90 [ 2332.436266][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.436266][T12214] RIP: 0023:0xf7f01549 [ 2332.436266][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2332.436266][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2332.436266][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2332.436266][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2332.436266][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2332.436266][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2332.436266][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2332.436266][T12214] Uninit was stored to memory at: [ 2332.436266][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2332.436266][T12214] __msan_chain_origin+0x57/0xa0 [ 2332.436266][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2332.436266][T12214] get_compat_msghdr+0x108/0x2b0 [ 2332.436266][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2332.436266][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2332.436266][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.436266][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.436266][T12214] __do_fast_syscall_32+0x102/0x160 [ 2332.436266][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2332.436266][T12214] do_SYSENTER_32+0x73/0x90 [ 2332.436266][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.797492][T12214] [ 2332.797492][T12214] Uninit was stored to memory at: [ 2332.797492][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2332.797492][T12214] __msan_chain_origin+0x57/0xa0 [ 2332.797492][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2332.797492][T12214] get_compat_msghdr+0x108/0x2b0 [ 2332.797492][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2332.797492][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2332.797492][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.797492][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.797492][T12214] __do_fast_syscall_32+0x102/0x160 [ 2332.797492][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2332.797492][T12214] do_SYSENTER_32+0x73/0x90 [ 2332.797492][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.797492][T12214] [ 2332.797492][T12214] Uninit was stored to memory at: [ 2332.797492][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2332.797492][T12214] __msan_chain_origin+0x57/0xa0 [ 2332.797492][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2332.797492][T12214] get_compat_msghdr+0x108/0x2b0 [ 2332.797492][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2332.797492][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2332.797492][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.797492][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.797492][T12214] __do_fast_syscall_32+0x102/0x160 [ 2332.797492][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2332.797492][T12214] do_SYSENTER_32+0x73/0x90 [ 2332.797492][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.797492][T12214] [ 2332.797492][T12214] Uninit was stored to memory at: [ 2332.797492][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2332.797492][T12214] __msan_chain_origin+0x57/0xa0 [ 2332.797492][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2332.797492][T12214] get_compat_msghdr+0x108/0x2b0 [ 2332.797492][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2332.797492][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2332.797492][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.797492][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.797492][T12214] __do_fast_syscall_32+0x102/0x160 [ 2332.797492][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2332.797492][T12214] do_SYSENTER_32+0x73/0x90 [ 2332.797492][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.797492][T12214] [ 2332.797492][T12214] Uninit was stored to memory at: [ 2332.797492][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2332.797492][T12214] __msan_chain_origin+0x57/0xa0 [ 2332.797492][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2332.797492][T12214] get_compat_msghdr+0x108/0x2b0 [ 2332.797492][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2332.797492][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2332.797492][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.797492][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.797492][T12214] __do_fast_syscall_32+0x102/0x160 [ 2332.797492][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2332.797492][T12214] do_SYSENTER_32+0x73/0x90 [ 2332.797492][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.797492][T12214] [ 2332.797492][T12214] Uninit was stored to memory at: [ 2332.797492][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2332.797492][T12214] __msan_chain_origin+0x57/0xa0 [ 2332.797492][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2332.797492][T12214] get_compat_msghdr+0x108/0x2b0 [ 2332.797492][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2332.797492][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2332.797492][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.797492][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.797492][T12214] __do_fast_syscall_32+0x102/0x160 [ 2332.797492][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2332.797492][T12214] do_SYSENTER_32+0x73/0x90 [ 2332.797492][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.797492][T12214] [ 2332.797492][T12214] Uninit was stored to memory at: [ 2332.797492][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2332.797492][T12214] __msan_chain_origin+0x57/0xa0 [ 2332.797492][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2332.797492][T12214] get_compat_msghdr+0x108/0x2b0 [ 2332.797492][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2332.797492][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2332.797492][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.797492][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.797492][T12214] __do_fast_syscall_32+0x102/0x160 [ 2332.797492][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2332.797492][T12214] do_SYSENTER_32+0x73/0x90 [ 2332.797492][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.797492][T12214] [ 2332.797492][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2332.797492][T12214] do_recvmmsg+0xbf/0x22f0 [ 2332.797492][T12214] do_recvmmsg+0xbf/0x22f0 [ 2333.345617][T12188] not chained 870000 origins [ 2333.346157][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2333.346157][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2333.346157][T12188] Call Trace: [ 2333.346157][T12188] dump_stack+0x21c/0x280 [ 2333.346157][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2333.346157][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2333.346157][T12188] ? __wake_up+0x1fc/0x250 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2333.346157][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2333.346157][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2333.346157][T12188] ? _copy_from_user+0x1fd/0x300 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] __msan_chain_origin+0x57/0xa0 [ 2333.346157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2333.346157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2333.346157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2333.346157][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2333.346157][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2333.346157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2333.346157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.346157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.346157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2333.346157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2333.346157][T12188] do_SYSENTER_32+0x73/0x90 [ 2333.346157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.346157][T12188] RIP: 0023:0xf7f01549 [ 2333.346157][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2333.346157][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2333.346157][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2333.346157][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2333.346157][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2333.346157][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2333.346157][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2333.346157][T12188] Uninit was stored to memory at: [ 2333.346157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2333.346157][T12188] __msan_chain_origin+0x57/0xa0 [ 2333.346157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2333.346157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2333.346157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2333.346157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2333.346157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.346157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.346157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2333.346157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2333.346157][T12188] do_SYSENTER_32+0x73/0x90 [ 2333.346157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.346157][T12188] [ 2333.346157][T12188] Uninit was stored to memory at: [ 2333.346157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2333.346157][T12188] __msan_chain_origin+0x57/0xa0 [ 2333.346157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2333.346157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2333.346157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2333.346157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2333.346157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.346157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.346157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2333.346157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2333.346157][T12188] do_SYSENTER_32+0x73/0x90 [ 2333.346157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.346157][T12188] [ 2333.346157][T12188] Uninit was stored to memory at: [ 2333.346157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2333.346157][T12188] __msan_chain_origin+0x57/0xa0 [ 2333.346157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2333.346157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2333.346157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2333.346157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2333.346157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.346157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.346157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2333.346157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2333.346157][T12188] do_SYSENTER_32+0x73/0x90 [ 2333.346157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.346157][T12188] [ 2333.346157][T12188] Uninit was stored to memory at: [ 2333.346157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2333.346157][T12188] __msan_chain_origin+0x57/0xa0 [ 2333.346157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2333.346157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2333.346157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2333.346157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2333.346157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.346157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.346157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2333.346157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2333.346157][T12188] do_SYSENTER_32+0x73/0x90 [ 2333.346157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.346157][T12188] [ 2333.346157][T12188] Uninit was stored to memory at: [ 2333.346157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2333.346157][T12188] __msan_chain_origin+0x57/0xa0 [ 2333.346157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2333.346157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2333.346157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2333.346157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2333.346157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.346157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.346157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2333.346157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2333.346157][T12188] do_SYSENTER_32+0x73/0x90 [ 2333.346157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.346157][T12188] [ 2333.346157][T12188] Uninit was stored to memory at: [ 2333.346157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2333.346157][T12188] __msan_chain_origin+0x57/0xa0 [ 2333.346157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2333.346157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2333.346157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2333.346157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2333.346157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.346157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.346157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2333.346157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2333.346157][T12188] do_SYSENTER_32+0x73/0x90 [ 2333.346157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.346157][T12188] [ 2333.346157][T12188] Uninit was stored to memory at: [ 2333.346157][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2333.346157][T12188] __msan_chain_origin+0x57/0xa0 [ 2333.346157][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2333.346157][T12188] get_compat_msghdr+0x108/0x2b0 [ 2333.346157][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2333.346157][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2333.346157][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.346157][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.346157][T12188] __do_fast_syscall_32+0x102/0x160 [ 2333.346157][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2333.346157][T12188] do_SYSENTER_32+0x73/0x90 [ 2333.346157][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.346157][T12188] [ 2333.346157][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2333.346157][T12188] do_recvmmsg+0xbf/0x22f0 [ 2333.346157][T12188] do_recvmmsg+0xbf/0x22f0 [ 2334.439540][T12214] not chained 880000 origins [ 2334.444574][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2334.446135][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2334.456299][T12214] Call Trace: [ 2334.456299][T12214] dump_stack+0x21c/0x280 [ 2334.456299][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2334.456299][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2334.456299][T12214] ? __wake_up+0x1fc/0x250 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2334.456299][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2334.456299][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2334.456299][T12214] ? _copy_from_user+0x1fd/0x300 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] __msan_chain_origin+0x57/0xa0 [ 2334.456299][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2334.456299][T12214] get_compat_msghdr+0x108/0x2b0 [ 2334.456299][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2334.456299][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2334.456299][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2334.456299][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.456299][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.456299][T12214] __do_fast_syscall_32+0x102/0x160 [ 2334.456299][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2334.456299][T12214] do_SYSENTER_32+0x73/0x90 [ 2334.456299][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.456299][T12214] RIP: 0023:0xf7f01549 [ 2334.456299][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2334.456299][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2334.456299][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2334.456299][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2334.456299][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2334.456299][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2334.456299][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2334.456299][T12214] Uninit was stored to memory at: [ 2334.456299][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2334.456299][T12214] __msan_chain_origin+0x57/0xa0 [ 2334.456299][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2334.456299][T12214] get_compat_msghdr+0x108/0x2b0 [ 2334.456299][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2334.456299][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2334.456299][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.456299][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.456299][T12214] __do_fast_syscall_32+0x102/0x160 [ 2334.456299][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2334.456299][T12214] do_SYSENTER_32+0x73/0x90 [ 2334.456299][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.801188][T12188] not chained 890000 origins [ 2334.456299][T12214] [ 2334.806155][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2334.456299][T12214] Uninit was stored to memory at: [ 2334.806155][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2334.456299][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2334.806155][T12188] Call Trace: [ 2334.456299][T12214] __msan_chain_origin+0x57/0xa0 [ 2334.806155][T12188] dump_stack+0x21c/0x280 [ 2334.456299][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2334.806155][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2334.456299][T12214] get_compat_msghdr+0x108/0x2b0 [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2334.806155][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2334.456299][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.806155][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2334.456299][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.806155][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2334.456299][T12214] __do_fast_syscall_32+0x102/0x160 [ 2334.806155][T12188] ? __wake_up+0x1fc/0x250 [ 2334.456299][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] do_SYSENTER_32+0x73/0x90 [ 2334.806155][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2334.456299][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.806155][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2334.456299][T12214] [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] Uninit was stored to memory at: [ 2334.806155][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2334.456299][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2334.806155][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2334.456299][T12214] __msan_chain_origin+0x57/0xa0 [ 2334.806155][T12188] ? _copy_from_user+0x1fd/0x300 [ 2334.456299][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] get_compat_msghdr+0x108/0x2b0 [ 2334.806155][T12188] __msan_chain_origin+0x57/0xa0 [ 2334.456299][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2334.806155][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2334.456299][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2334.806155][T12188] get_compat_msghdr+0x108/0x2b0 [ 2334.456299][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.806155][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2334.456299][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] __do_fast_syscall_32+0x102/0x160 [ 2334.806155][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2334.456299][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] do_SYSENTER_32+0x73/0x90 [ 2334.806155][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2334.456299][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.806155][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2334.456299][T12214] [ 2334.806155][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2334.456299][T12214] Uninit was stored to memory at: [ 2334.806155][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2334.456299][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] __msan_chain_origin+0x57/0xa0 [ 2334.806155][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2334.456299][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2334.806155][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.456299][T12214] get_compat_msghdr+0x108/0x2b0 [ 2334.806155][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.456299][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2334.806155][T12188] __do_fast_syscall_32+0x102/0x160 [ 2334.456299][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2334.806155][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2334.456299][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.806155][T12188] do_SYSENTER_32+0x73/0x90 [ 2334.456299][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.806155][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.456299][T12214] __do_fast_syscall_32+0x102/0x160 [ 2334.806155][T12188] RIP: 0023:0xf7f01549 [ 2334.456299][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2334.806155][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2334.456299][T12214] do_SYSENTER_32+0x73/0x90 [ 2334.806155][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 [ 2334.456299][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.806155][T12188] ORIG_RAX: 0000000000000151 [ 2334.456299][T12214] [ 2334.806155][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2334.456299][T12214] Uninit was stored to memory at: [ 2334.806155][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2334.456299][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2334.806155][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2334.456299][T12214] __msan_chain_origin+0x57/0xa0 [ 2334.806155][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2334.456299][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2334.806155][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2334.456299][T12214] get_compat_msghdr+0x108/0x2b0 [ 2334.806155][T12188] Uninit was stored to memory at: [ 2334.456299][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2334.806155][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2334.456299][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2334.806155][T12188] __msan_chain_origin+0x57/0xa0 [ 2334.456299][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.806155][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2334.456299][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.806155][T12188] get_compat_msghdr+0x108/0x2b0 [ 2334.456299][T12214] __do_fast_syscall_32+0x102/0x160 [ 2334.806155][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2334.456299][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2334.806155][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2334.456299][T12214] do_SYSENTER_32+0x73/0x90 [ 2334.806155][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.456299][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.806155][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.456299][T12214] [ 2334.806155][T12188] __do_fast_syscall_32+0x102/0x160 [ 2334.456299][T12214] Uninit was stored to memory at: [ 2334.806155][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2334.456299][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2334.806155][T12188] do_SYSENTER_32+0x73/0x90 [ 2334.456299][T12214] __msan_chain_origin+0x57/0xa0 [ 2334.806155][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.456299][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2334.806155][T12188] [ 2334.456299][T12214] get_compat_msghdr+0x108/0x2b0 [ 2334.806155][T12188] Uninit was stored to memory at: [ 2334.456299][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2334.806155][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2334.456299][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2334.806155][T12188] __msan_chain_origin+0x57/0xa0 [ 2334.456299][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.806155][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2334.456299][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.806155][T12188] get_compat_msghdr+0x108/0x2b0 [ 2334.456299][T12214] __do_fast_syscall_32+0x102/0x160 [ 2334.806155][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2334.456299][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2334.806155][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2334.456299][T12214] do_SYSENTER_32+0x73/0x90 [ 2334.806155][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.456299][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.806155][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.806155][T12188] __do_fast_syscall_32+0x102/0x160 [ 2334.456299][T12214] [ 2334.806155][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2334.456299][T12214] Uninit was stored to memory at: [ 2334.806155][T12188] do_SYSENTER_32+0x73/0x90 [ 2334.456299][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2334.806155][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.456299][T12214] __msan_chain_origin+0x57/0xa0 [ 2334.806155][T12188] [ 2334.456299][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2334.806155][T12188] Uninit was stored to memory at: [ 2334.456299][T12214] get_compat_msghdr+0x108/0x2b0 [ 2334.806155][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2334.456299][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2334.806155][T12188] __msan_chain_origin+0x57/0xa0 [ 2334.456299][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2334.806155][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2334.456299][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.806155][T12188] get_compat_msghdr+0x108/0x2b0 [ 2334.456299][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.806155][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2334.456299][T12214] __do_fast_syscall_32+0x102/0x160 [ 2334.806155][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2334.456299][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2334.806155][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.456299][T12214] do_SYSENTER_32+0x73/0x90 [ 2334.806155][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.456299][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.806155][T12188] __do_fast_syscall_32+0x102/0x160 [ 2334.456299][T12214] [ 2334.806155][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2334.456299][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2334.806155][T12188] do_SYSENTER_32+0x73/0x90 [ 2334.456299][T12214] do_recvmmsg+0xbf/0x22f0 [ 2334.806155][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.456299][T12214] do_recvmmsg+0xbf/0x22f0 [ 2334.806155][T12188] [ 2334.806155][T12188] Uninit was stored to memory at: [ 2334.806155][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2335.797384][T12188] __msan_chain_origin+0x57/0xa0 [ 2335.797384][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2335.797384][T12188] get_compat_msghdr+0x108/0x2b0 [ 2335.797384][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2335.797384][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2335.797384][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.797384][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.797384][T12188] __do_fast_syscall_32+0x102/0x160 [ 2335.797384][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2335.797384][T12188] do_SYSENTER_32+0x73/0x90 [ 2335.797384][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.797384][T12188] [ 2335.797384][T12188] Uninit was stored to memory at: [ 2335.797384][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2335.797384][T12188] __msan_chain_origin+0x57/0xa0 [ 2335.797384][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2335.797384][T12188] get_compat_msghdr+0x108/0x2b0 [ 2335.797384][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2335.797384][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2335.797384][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.797384][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.797384][T12188] __do_fast_syscall_32+0x102/0x160 [ 2335.797384][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2335.797384][T12188] do_SYSENTER_32+0x73/0x90 [ 2335.797384][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.797384][T12188] [ 2335.797384][T12188] Uninit was stored to memory at: [ 2335.797384][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2335.797384][T12188] __msan_chain_origin+0x57/0xa0 [ 2335.797384][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2335.797384][T12188] get_compat_msghdr+0x108/0x2b0 [ 2335.797384][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2335.797384][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2335.797384][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.797384][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.797384][T12188] __do_fast_syscall_32+0x102/0x160 [ 2335.797384][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2335.797384][T12188] do_SYSENTER_32+0x73/0x90 [ 2335.797384][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.797384][T12188] [ 2335.797384][T12188] Uninit was stored to memory at: [ 2335.797384][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2335.797384][T12188] __msan_chain_origin+0x57/0xa0 [ 2335.797384][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2335.797384][T12188] get_compat_msghdr+0x108/0x2b0 [ 2335.797384][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2335.797384][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2335.797384][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.797384][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.797384][T12188] __do_fast_syscall_32+0x102/0x160 [ 2335.797384][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2335.797384][T12188] do_SYSENTER_32+0x73/0x90 [ 2335.797384][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.797384][T12188] [ 2335.797384][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2335.797384][T12188] do_recvmmsg+0xbf/0x22f0 [ 2335.797384][T12188] do_recvmmsg+0xbf/0x22f0 [ 2336.481618][T12214] not chained 900000 origins [ 2336.486160][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2336.486160][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2336.486160][T12214] Call Trace: [ 2336.486160][T12214] dump_stack+0x21c/0x280 [ 2336.486160][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2336.486160][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2336.486160][T12214] ? __wake_up+0x1fc/0x250 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2336.486160][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2336.486160][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2336.486160][T12214] ? _copy_from_user+0x1fd/0x300 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] __msan_chain_origin+0x57/0xa0 [ 2336.486160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2336.486160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2336.486160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2336.486160][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2336.486160][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2336.486160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2336.486160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.486160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.486160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2336.486160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2336.486160][T12214] do_SYSENTER_32+0x73/0x90 [ 2336.486160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.486160][T12214] RIP: 0023:0xf7f01549 [ 2336.486160][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2336.486160][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2336.486160][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2336.486160][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2336.486160][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2336.486160][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2336.486160][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2336.486160][T12214] Uninit was stored to memory at: [ 2336.486160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2336.486160][T12214] __msan_chain_origin+0x57/0xa0 [ 2336.486160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2336.486160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2336.486160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2336.486160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2336.486160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.486160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.486160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2336.486160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2336.486160][T12214] do_SYSENTER_32+0x73/0x90 [ 2336.486160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.486160][T12214] [ 2336.486160][T12214] Uninit was stored to memory at: [ 2336.486160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2336.486160][T12214] __msan_chain_origin+0x57/0xa0 [ 2336.486160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2336.486160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2336.486160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2336.486160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2336.486160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.486160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.486160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2336.486160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2336.486160][T12214] do_SYSENTER_32+0x73/0x90 [ 2336.486160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.486160][T12214] [ 2336.486160][T12214] Uninit was stored to memory at: [ 2336.486160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2336.486160][T12214] __msan_chain_origin+0x57/0xa0 [ 2336.486160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2336.486160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2336.486160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2336.486160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2336.486160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.486160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.486160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2336.486160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2336.486160][T12214] do_SYSENTER_32+0x73/0x90 [ 2336.486160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.486160][T12214] [ 2336.486160][T12214] Uninit was stored to memory at: [ 2336.486160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2336.486160][T12214] __msan_chain_origin+0x57/0xa0 [ 2336.486160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2336.486160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2336.486160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2336.486160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2336.486160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.486160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.486160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2336.486160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2336.486160][T12214] do_SYSENTER_32+0x73/0x90 [ 2336.486160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.486160][T12214] [ 2336.486160][T12214] Uninit was stored to memory at: [ 2336.486160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2336.486160][T12214] __msan_chain_origin+0x57/0xa0 [ 2336.486160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2336.486160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2336.486160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2336.486160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2336.486160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.486160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.486160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2336.486160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2336.486160][T12214] do_SYSENTER_32+0x73/0x90 [ 2336.486160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.486160][T12214] [ 2336.486160][T12214] Uninit was stored to memory at: [ 2336.486160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2336.486160][T12214] __msan_chain_origin+0x57/0xa0 [ 2336.486160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2336.486160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2336.486160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2336.486160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2336.486160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.486160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.486160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2336.486160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2336.486160][T12214] do_SYSENTER_32+0x73/0x90 [ 2336.486160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.486160][T12214] [ 2336.486160][T12214] Uninit was stored to memory at: [ 2336.486160][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2336.486160][T12214] __msan_chain_origin+0x57/0xa0 [ 2336.486160][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2336.486160][T12214] get_compat_msghdr+0x108/0x2b0 [ 2336.486160][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2336.486160][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2336.486160][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.486160][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.486160][T12214] __do_fast_syscall_32+0x102/0x160 [ 2336.486160][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2336.486160][T12214] do_SYSENTER_32+0x73/0x90 [ 2336.486160][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.486160][T12214] [ 2336.486160][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2336.486160][T12214] do_recvmmsg+0xbf/0x22f0 [ 2336.486160][T12214] do_recvmmsg+0xbf/0x22f0 [ 2337.607097][T12188] not chained 910000 origins [ 2337.611839][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2337.616217][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2337.616217][T12188] Call Trace: [ 2337.616217][T12188] dump_stack+0x21c/0x280 [ 2337.616217][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2337.616217][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2337.616217][T12188] ? __wake_up+0x1fc/0x250 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2337.616217][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2337.616217][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2337.616217][T12188] ? _copy_from_user+0x1fd/0x300 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] __msan_chain_origin+0x57/0xa0 [ 2337.616217][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2337.616217][T12188] get_compat_msghdr+0x108/0x2b0 [ 2337.616217][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2337.616217][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2337.616217][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2337.616217][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2337.616217][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.616217][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.616217][T12188] __do_fast_syscall_32+0x102/0x160 [ 2337.616217][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2337.616217][T12188] do_SYSENTER_32+0x73/0x90 [ 2337.616217][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.616217][T12188] RIP: 0023:0xf7f01549 [ 2337.616217][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2337.616217][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2337.616217][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2337.616217][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2337.616217][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2337.616217][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2337.616217][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2337.616217][T12188] Uninit was stored to memory at: [ 2337.616217][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2337.616217][T12188] __msan_chain_origin+0x57/0xa0 [ 2337.616217][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2337.616217][T12188] get_compat_msghdr+0x108/0x2b0 [ 2337.616217][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2337.616217][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2337.616217][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.616217][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.616217][T12188] __do_fast_syscall_32+0x102/0x160 [ 2337.616217][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2337.616217][T12188] do_SYSENTER_32+0x73/0x90 [ 2337.616217][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.616217][T12188] [ 2337.616217][T12188] Uninit was stored to memory at: [ 2337.616217][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2337.616217][T12188] __msan_chain_origin+0x57/0xa0 [ 2337.616217][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2337.616217][T12188] get_compat_msghdr+0x108/0x2b0 [ 2337.616217][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2337.616217][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2337.616217][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.616217][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.616217][T12188] __do_fast_syscall_32+0x102/0x160 [ 2337.616217][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2337.616217][T12188] do_SYSENTER_32+0x73/0x90 [ 2337.616217][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.616217][T12188] [ 2337.616217][T12188] Uninit was stored to memory at: [ 2337.616217][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2337.616217][T12188] __msan_chain_origin+0x57/0xa0 [ 2337.616217][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2337.616217][T12188] get_compat_msghdr+0x108/0x2b0 [ 2337.616217][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2337.616217][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2337.616217][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.616217][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.616217][T12188] __do_fast_syscall_32+0x102/0x160 [ 2337.616217][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2337.616217][T12188] do_SYSENTER_32+0x73/0x90 [ 2337.616217][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.616217][T12188] [ 2337.616217][T12188] Uninit was stored to memory at: [ 2337.616217][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2337.616217][T12188] __msan_chain_origin+0x57/0xa0 [ 2337.616217][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2337.616217][T12188] get_compat_msghdr+0x108/0x2b0 [ 2337.616217][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2337.616217][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2337.616217][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.616217][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.616217][T12188] __do_fast_syscall_32+0x102/0x160 [ 2337.616217][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2337.616217][T12188] do_SYSENTER_32+0x73/0x90 [ 2337.616217][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.616217][T12188] [ 2337.616217][T12188] Uninit was stored to memory at: [ 2337.616217][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2337.616217][T12188] __msan_chain_origin+0x57/0xa0 [ 2337.616217][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2337.616217][T12188] get_compat_msghdr+0x108/0x2b0 [ 2337.616217][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2337.616217][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2337.616217][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.616217][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.616217][T12188] __do_fast_syscall_32+0x102/0x160 [ 2337.616217][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2337.616217][T12188] do_SYSENTER_32+0x73/0x90 [ 2337.616217][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.616217][T12188] [ 2337.616217][T12188] Uninit was stored to memory at: [ 2337.616217][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2337.616217][T12188] __msan_chain_origin+0x57/0xa0 [ 2337.616217][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2337.616217][T12188] get_compat_msghdr+0x108/0x2b0 [ 2337.616217][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2337.616217][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2337.616217][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.616217][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.616217][T12188] __do_fast_syscall_32+0x102/0x160 [ 2337.616217][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2337.616217][T12188] do_SYSENTER_32+0x73/0x90 [ 2337.616217][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.616217][T12188] [ 2337.616217][T12188] Uninit was stored to memory at: [ 2337.616217][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2337.616217][T12188] __msan_chain_origin+0x57/0xa0 [ 2337.616217][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2337.616217][T12188] get_compat_msghdr+0x108/0x2b0 [ 2337.616217][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2337.616217][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2337.616217][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.616217][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.616217][T12188] __do_fast_syscall_32+0x102/0x160 [ 2337.616217][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2337.616217][T12188] do_SYSENTER_32+0x73/0x90 [ 2337.616217][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.616217][T12188] [ 2337.616217][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2337.616217][T12188] do_recvmmsg+0xbf/0x22f0 [ 2337.616217][T12188] do_recvmmsg+0xbf/0x22f0 [ 2338.628787][T12214] not chained 920000 origins [ 2338.633476][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2338.636146][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2338.636146][T12214] Call Trace: [ 2338.636146][T12214] dump_stack+0x21c/0x280 [ 2338.636146][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2338.636146][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2338.636146][T12214] ? __wake_up+0x1fc/0x250 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2338.636146][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2338.636146][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2338.636146][T12214] ? _copy_from_user+0x1fd/0x300 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] __msan_chain_origin+0x57/0xa0 [ 2338.636146][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2338.636146][T12214] get_compat_msghdr+0x108/0x2b0 [ 2338.636146][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2338.636146][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2338.636146][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2338.636146][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2338.636146][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.636146][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.636146][T12214] __do_fast_syscall_32+0x102/0x160 [ 2338.636146][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2338.636146][T12214] do_SYSENTER_32+0x73/0x90 [ 2338.636146][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.636146][T12214] RIP: 0023:0xf7f01549 [ 2338.636146][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2338.636146][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2338.636146][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2338.636146][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2338.636146][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2338.636146][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2338.636146][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2338.636146][T12214] Uninit was stored to memory at: [ 2338.636146][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2338.636146][T12214] __msan_chain_origin+0x57/0xa0 [ 2338.636146][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2338.636146][T12214] get_compat_msghdr+0x108/0x2b0 [ 2338.636146][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2338.636146][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2338.636146][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.636146][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.636146][T12214] __do_fast_syscall_32+0x102/0x160 [ 2338.636146][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2338.636146][T12214] do_SYSENTER_32+0x73/0x90 [ 2338.636146][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.636146][T12214] [ 2338.636146][T12214] Uninit was stored to memory at: [ 2338.636146][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2338.636146][T12214] __msan_chain_origin+0x57/0xa0 [ 2338.636146][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2338.636146][T12214] get_compat_msghdr+0x108/0x2b0 [ 2338.636146][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2338.636146][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2338.636146][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.636146][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.636146][T12214] __do_fast_syscall_32+0x102/0x160 [ 2338.636146][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2338.636146][T12214] do_SYSENTER_32+0x73/0x90 [ 2338.636146][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.636146][T12214] [ 2338.636146][T12214] Uninit was stored to memory at: [ 2338.636146][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2338.636146][T12214] __msan_chain_origin+0x57/0xa0 [ 2338.636146][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2338.636146][T12214] get_compat_msghdr+0x108/0x2b0 [ 2338.636146][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2338.636146][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2338.636146][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.636146][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.636146][T12214] __do_fast_syscall_32+0x102/0x160 [ 2338.636146][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2338.636146][T12214] do_SYSENTER_32+0x73/0x90 [ 2338.636146][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.636146][T12214] [ 2338.636146][T12214] Uninit was stored to memory at: [ 2338.636146][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2338.636146][T12214] __msan_chain_origin+0x57/0xa0 [ 2338.636146][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2338.636146][T12214] get_compat_msghdr+0x108/0x2b0 [ 2338.636146][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2338.636146][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2338.636146][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.636146][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.636146][T12214] __do_fast_syscall_32+0x102/0x160 [ 2338.636146][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2338.636146][T12214] do_SYSENTER_32+0x73/0x90 [ 2338.636146][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.636146][T12214] [ 2338.636146][T12214] Uninit was stored to memory at: [ 2338.636146][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2338.636146][T12214] __msan_chain_origin+0x57/0xa0 [ 2338.636146][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2338.636146][T12214] get_compat_msghdr+0x108/0x2b0 [ 2338.636146][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2338.636146][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2338.636146][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.636146][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.636146][T12214] __do_fast_syscall_32+0x102/0x160 [ 2338.636146][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2338.636146][T12214] do_SYSENTER_32+0x73/0x90 [ 2338.636146][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.636146][T12214] [ 2338.636146][T12214] Uninit was stored to memory at: [ 2338.636146][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2338.636146][T12214] __msan_chain_origin+0x57/0xa0 [ 2338.636146][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2338.636146][T12214] get_compat_msghdr+0x108/0x2b0 [ 2338.636146][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2338.636146][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2338.636146][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.636146][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.636146][T12214] __do_fast_syscall_32+0x102/0x160 [ 2338.636146][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2338.636146][T12214] do_SYSENTER_32+0x73/0x90 [ 2338.636146][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.636146][T12214] [ 2338.636146][T12214] Uninit was stored to memory at: [ 2338.636146][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2338.636146][T12214] __msan_chain_origin+0x57/0xa0 [ 2338.636146][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2338.636146][T12214] get_compat_msghdr+0x108/0x2b0 [ 2338.636146][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2338.636146][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2338.636146][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.636146][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.636146][T12214] __do_fast_syscall_32+0x102/0x160 [ 2338.636146][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2338.636146][T12214] do_SYSENTER_32+0x73/0x90 [ 2338.636146][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.636146][T12214] [ 2338.636146][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2338.636146][T12214] do_recvmmsg+0xbf/0x22f0 [ 2338.636146][T12214] do_recvmmsg+0xbf/0x22f0 [ 2339.850384][T12188] not chained 930000 origins [ 2339.855048][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2339.856131][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2339.856131][T12188] Call Trace: [ 2339.876333][T12188] dump_stack+0x21c/0x280 [ 2339.876333][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2339.876333][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.876333][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2339.876333][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.876333][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2339.876333][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2339.876333][T12188] ? __wake_up+0x1fc/0x250 [ 2339.876333][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.876333][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2339.928420][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2339.928420][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.928420][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2339.928420][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2339.928420][T12188] ? _copy_from_user+0x1fd/0x300 [ 2339.928420][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.928420][T12188] __msan_chain_origin+0x57/0xa0 [ 2339.928420][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2339.928420][T12188] get_compat_msghdr+0x108/0x2b0 [ 2339.928420][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2339.928420][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.928420][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2339.928420][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.928420][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2339.928420][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2339.928420][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2339.928420][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2339.928420][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.928420][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2339.928420][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.928420][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.928420][T12188] __do_fast_syscall_32+0x102/0x160 [ 2339.928420][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2339.928420][T12188] do_SYSENTER_32+0x73/0x90 [ 2339.928420][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.928420][T12188] RIP: 0023:0xf7f01549 [ 2339.928420][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2339.928420][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2339.928420][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2339.928420][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2339.928420][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2339.928420][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2339.928420][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2339.928420][T12188] Uninit was stored to memory at: [ 2339.928420][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2339.928420][T12188] __msan_chain_origin+0x57/0xa0 [ 2339.928420][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2339.928420][T12188] get_compat_msghdr+0x108/0x2b0 [ 2339.928420][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2339.928420][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2339.928420][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.928420][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.928420][T12188] __do_fast_syscall_32+0x102/0x160 [ 2339.928420][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2339.928420][T12188] do_SYSENTER_32+0x73/0x90 [ 2339.928420][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.928420][T12188] [ 2339.928420][T12188] Uninit was stored to memory at: [ 2339.928420][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2339.928420][T12188] __msan_chain_origin+0x57/0xa0 [ 2339.928420][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2339.928420][T12188] get_compat_msghdr+0x108/0x2b0 [ 2339.928420][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2339.928420][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2339.928420][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.928420][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.928420][T12188] __do_fast_syscall_32+0x102/0x160 [ 2339.928420][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2339.928420][T12188] do_SYSENTER_32+0x73/0x90 [ 2339.928420][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.928420][T12188] [ 2339.928420][T12188] Uninit was stored to memory at: [ 2339.928420][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2339.928420][T12188] __msan_chain_origin+0x57/0xa0 [ 2339.928420][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2339.928420][T12188] get_compat_msghdr+0x108/0x2b0 [ 2339.928420][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2339.928420][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2339.928420][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.928420][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.928420][T12188] __do_fast_syscall_32+0x102/0x160 [ 2339.928420][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2339.928420][T12188] do_SYSENTER_32+0x73/0x90 [ 2339.928420][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.928420][T12188] [ 2339.928420][T12188] Uninit was stored to memory at: [ 2339.928420][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2339.928420][T12188] __msan_chain_origin+0x57/0xa0 [ 2339.928420][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2339.928420][T12188] get_compat_msghdr+0x108/0x2b0 [ 2339.928420][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2339.928420][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2339.928420][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.928420][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.928420][T12188] __do_fast_syscall_32+0x102/0x160 [ 2339.928420][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2339.928420][T12188] do_SYSENTER_32+0x73/0x90 [ 2339.928420][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.928420][T12188] [ 2339.928420][T12188] Uninit was stored to memory at: [ 2339.928420][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2339.928420][T12188] __msan_chain_origin+0x57/0xa0 [ 2339.928420][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2339.928420][T12188] get_compat_msghdr+0x108/0x2b0 [ 2339.928420][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2339.928420][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2339.928420][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.928420][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.928420][T12188] __do_fast_syscall_32+0x102/0x160 [ 2339.928420][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2339.928420][T12188] do_SYSENTER_32+0x73/0x90 [ 2339.928420][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.928420][T12188] [ 2339.928420][T12188] Uninit was stored to memory at: [ 2339.928420][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2339.928420][T12188] __msan_chain_origin+0x57/0xa0 [ 2339.928420][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2339.928420][T12188] get_compat_msghdr+0x108/0x2b0 [ 2339.928420][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2339.928420][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2339.928420][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.928420][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.928420][T12188] __do_fast_syscall_32+0x102/0x160 [ 2339.928420][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2340.567774][T12188] do_SYSENTER_32+0x73/0x90 [ 2340.567774][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.567774][T12188] [ 2340.567774][T12188] Uninit was stored to memory at: [ 2340.567774][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2340.567774][T12188] __msan_chain_origin+0x57/0xa0 [ 2340.567774][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2340.567774][T12188] get_compat_msghdr+0x108/0x2b0 [ 2340.567774][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2340.567774][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2340.567774][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.567774][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.567774][T12188] __do_fast_syscall_32+0x102/0x160 [ 2340.567774][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2340.567774][T12188] do_SYSENTER_32+0x73/0x90 [ 2340.567774][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.567774][T12188] [ 2340.567774][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2340.567774][T12188] do_recvmmsg+0xbf/0x22f0 [ 2340.567774][T12188] do_recvmmsg+0xbf/0x22f0 [ 2340.801908][T12188] not chained 940000 origins [ 2340.806346][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2340.806346][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2340.806346][T12188] Call Trace: [ 2340.806346][T12188] dump_stack+0x21c/0x280 [ 2340.806346][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2340.806346][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.806346][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.849990][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.849990][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2340.849990][T12188] ? __wake_up+0x1fc/0x250 [ 2340.849990][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.849990][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2340.849990][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.849990][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2340.849990][T12188] ? _copy_from_user+0x1fd/0x300 [ 2340.849990][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] __msan_chain_origin+0x57/0xa0 [ 2340.849990][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2340.849990][T12188] get_compat_msghdr+0x108/0x2b0 [ 2340.849990][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2340.849990][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2340.849990][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.849990][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2340.849990][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2340.849990][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2340.849990][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.849990][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.849990][T12188] __do_fast_syscall_32+0x102/0x160 [ 2340.849990][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2340.849990][T12188] do_SYSENTER_32+0x73/0x90 [ 2340.849990][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.849990][T12188] RIP: 0023:0xf7f01549 [ 2340.849990][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2340.849990][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2340.849990][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2340.849990][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2340.849990][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2340.849990][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2340.849990][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2340.849990][T12188] Uninit was stored to memory at: [ 2340.849990][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2340.849990][T12188] __msan_chain_origin+0x57/0xa0 [ 2340.849990][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2340.849990][T12188] get_compat_msghdr+0x108/0x2b0 [ 2340.849990][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2340.849990][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2340.849990][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.849990][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.849990][T12188] __do_fast_syscall_32+0x102/0x160 [ 2340.849990][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2340.849990][T12188] do_SYSENTER_32+0x73/0x90 [ 2340.849990][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.163639][T12214] not chained 950000 origins [ 2340.849990][T12188] [ 2341.166363][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2340.849990][T12188] Uninit was stored to memory at: [ 2341.166363][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2340.849990][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2341.166363][T12214] Call Trace: [ 2340.849990][T12188] __msan_chain_origin+0x57/0xa0 [ 2341.166363][T12214] dump_stack+0x21c/0x280 [ 2340.849990][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2341.166363][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2340.849990][T12188] get_compat_msghdr+0x108/0x2b0 [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2341.166363][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.849990][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.166363][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.849990][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.166363][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2340.849990][T12188] __do_fast_syscall_32+0x102/0x160 [ 2341.166363][T12214] ? __wake_up+0x1fc/0x250 [ 2340.849990][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2340.849990][T12188] do_SYSENTER_32+0x73/0x90 [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.166363][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.849990][T12188] [ 2341.166363][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2340.849990][T12188] Uninit was stored to memory at: [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2341.166363][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.849990][T12188] __msan_chain_origin+0x57/0xa0 [ 2341.166363][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2340.849990][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2341.166363][T12214] ? _copy_from_user+0x1fd/0x300 [ 2340.849990][T12188] get_compat_msghdr+0x108/0x2b0 [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2341.166363][T12214] __msan_chain_origin+0x57/0xa0 [ 2340.849990][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2341.166363][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2340.849990][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.166363][T12214] get_compat_msghdr+0x108/0x2b0 [ 2340.849990][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.166363][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2340.849990][T12188] __do_fast_syscall_32+0x102/0x160 [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2341.166363][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2340.849990][T12188] do_SYSENTER_32+0x73/0x90 [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.166363][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.849990][T12188] [ 2341.166363][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2340.849990][T12188] Uninit was stored to memory at: [ 2341.166363][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2340.849990][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2341.166363][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2340.849990][T12188] __msan_chain_origin+0x57/0xa0 [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2341.166363][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2340.849990][T12188] get_compat_msghdr+0x108/0x2b0 [ 2341.166363][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.849990][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2341.166363][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.849990][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2341.166363][T12214] __do_fast_syscall_32+0x102/0x160 [ 2340.849990][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.166363][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2340.849990][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.166363][T12214] do_SYSENTER_32+0x73/0x90 [ 2340.849990][T12188] __do_fast_syscall_32+0x102/0x160 [ 2341.166363][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.849990][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2341.166363][T12214] RIP: 0023:0xf7f01549 [ 2340.849990][T12188] do_SYSENTER_32+0x73/0x90 [ 2341.166363][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2340.849990][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.166363][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 [ 2340.849990][T12188] [ 2341.166363][T12214] ORIG_RAX: 0000000000000151 [ 2340.849990][T12188] Uninit was stored to memory at: [ 2341.166363][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2340.849990][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2341.166363][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2340.849990][T12188] __msan_chain_origin+0x57/0xa0 [ 2341.166363][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2340.849990][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2341.166363][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2340.849990][T12188] get_compat_msghdr+0x108/0x2b0 [ 2341.166363][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2340.849990][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2341.166363][T12214] Uninit was stored to memory at: [ 2340.849990][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2341.166363][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2340.849990][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.166363][T12214] __msan_chain_origin+0x57/0xa0 [ 2340.849990][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.166363][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2340.849990][T12188] __do_fast_syscall_32+0x102/0x160 [ 2341.166363][T12214] get_compat_msghdr+0x108/0x2b0 [ 2340.849990][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2341.166363][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2340.849990][T12188] do_SYSENTER_32+0x73/0x90 [ 2341.166363][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2340.849990][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.166363][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.849990][T12188] [ 2341.166363][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.849990][T12188] Uninit was stored to memory at: [ 2341.166363][T12214] __do_fast_syscall_32+0x102/0x160 [ 2340.849990][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2341.166363][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2340.849990][T12188] __msan_chain_origin+0x57/0xa0 [ 2341.166363][T12214] do_SYSENTER_32+0x73/0x90 [ 2340.849990][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2341.166363][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.849990][T12188] get_compat_msghdr+0x108/0x2b0 [ 2341.166363][T12214] [ 2340.849990][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2341.166363][T12214] Uninit was stored to memory at: [ 2340.849990][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2341.166363][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2340.849990][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.166363][T12214] __msan_chain_origin+0x57/0xa0 [ 2340.849990][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.166363][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2340.849990][T12188] __do_fast_syscall_32+0x102/0x160 [ 2340.849990][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2341.166363][T12214] get_compat_msghdr+0x108/0x2b0 [ 2340.849990][T12188] do_SYSENTER_32+0x73/0x90 [ 2340.849990][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.166363][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2340.849990][T12188] [ 2341.166363][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2340.849990][T12188] Uninit was stored to memory at: [ 2341.166363][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.849990][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2341.166363][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.849990][T12188] __msan_chain_origin+0x57/0xa0 [ 2341.166363][T12214] __do_fast_syscall_32+0x102/0x160 [ 2340.849990][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2341.166363][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2340.849990][T12188] get_compat_msghdr+0x108/0x2b0 [ 2341.166363][T12214] do_SYSENTER_32+0x73/0x90 [ 2340.849990][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2341.166363][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.849990][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2341.166363][T12214] [ 2340.849990][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.166363][T12214] Uninit was stored to memory at: [ 2340.849990][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.849990][T12188] __do_fast_syscall_32+0x102/0x160 [ 2341.166363][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2340.849990][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2341.166363][T12214] __msan_chain_origin+0x57/0xa0 [ 2340.849990][T12188] do_SYSENTER_32+0x73/0x90 [ 2341.166363][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2340.849990][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.166363][T12214] get_compat_msghdr+0x108/0x2b0 [ 2340.849990][T12188] [ 2341.166363][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2340.849990][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2341.166363][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2340.849990][T12188] do_recvmmsg+0xbf/0x22f0 [ 2341.166363][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.849990][T12188] do_recvmmsg+0xbf/0x22f0 [ 2341.166363][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.093115][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.093115][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.093115][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.093115][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.093115][T12214] [ 2342.093115][T12214] Uninit was stored to memory at: [ 2342.093115][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.093115][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.093115][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.093115][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.093115][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.093115][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.093115][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.093115][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.093115][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.093115][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.093115][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.093115][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.093115][T12214] [ 2342.093115][T12214] Uninit was stored to memory at: [ 2342.093115][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.093115][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.093115][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.093115][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.093115][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.093115][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.093115][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.093115][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.093115][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.093115][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.093115][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.093115][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.093115][T12214] [ 2342.093115][T12214] Uninit was stored to memory at: [ 2342.093115][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.093115][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.093115][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.093115][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.093115][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.093115][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.093115][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.093115][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.093115][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.093115][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.093115][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.093115][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.093115][T12214] [ 2342.093115][T12214] Uninit was stored to memory at: [ 2342.093115][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.093115][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.093115][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.093115][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.093115][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.093115][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.093115][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.093115][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.093115][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.093115][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.093115][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.093115][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.093115][T12214] [ 2342.093115][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2342.093115][T12214] do_recvmmsg+0xbf/0x22f0 [ 2342.093115][T12214] do_recvmmsg+0xbf/0x22f0 [ 2342.838834][T12214] not chained 960000 origins [ 2342.843500][T12214] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2342.846129][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2342.846129][T12214] Call Trace: [ 2342.846129][T12214] dump_stack+0x21c/0x280 [ 2342.866344][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2342.866344][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.866344][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2342.866344][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.866344][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2342.896495][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2342.896495][T12214] ? __wake_up+0x1fc/0x250 [ 2342.896495][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.896495][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2342.896495][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2342.896495][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.896495][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2342.896495][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2342.896495][T12214] ? _copy_from_user+0x1fd/0x300 [ 2342.896495][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.896495][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.896495][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.896495][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.896495][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.896495][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.896495][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2342.896495][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.896495][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2342.896495][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2342.896495][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2342.896495][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.896495][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.896495][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2342.896495][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.896495][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.896495][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.896495][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.896495][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.896495][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.896495][T12214] RIP: 0023:0xf7f01549 [ 2342.896495][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2342.896495][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2342.896495][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2342.896495][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2342.896495][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2342.896495][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2342.896495][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2342.896495][T12214] Uninit was stored to memory at: [ 2342.896495][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.896495][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.896495][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.896495][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.896495][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.896495][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.896495][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.896495][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.896495][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.896495][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.896495][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.896495][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.896495][T12214] [ 2342.896495][T12214] Uninit was stored to memory at: [ 2342.896495][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.896495][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.896495][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.896495][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.896495][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.896495][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.896495][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.896495][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.896495][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.896495][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.896495][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.896495][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.896495][T12214] [ 2342.896495][T12214] Uninit was stored to memory at: [ 2342.896495][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.896495][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.896495][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.896495][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.896495][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.896495][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.896495][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.896495][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.896495][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.896495][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.896495][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.896495][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.896495][T12214] [ 2342.896495][T12214] Uninit was stored to memory at: [ 2342.896495][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.896495][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.896495][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.896495][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.896495][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.896495][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.896495][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.896495][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.896495][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.896495][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.896495][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.896495][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.896495][T12214] [ 2342.896495][T12214] Uninit was stored to memory at: [ 2342.896495][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.896495][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.896495][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.896495][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.896495][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.896495][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.896495][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.896495][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.896495][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.896495][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.896495][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.896495][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.896495][T12214] [ 2342.896495][T12214] Uninit was stored to memory at: [ 2342.896495][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.896495][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.896495][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.896495][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.896495][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.896495][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.896495][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.896495][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.896495][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.896495][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.896495][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.896495][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.896495][T12214] [ 2342.896495][T12214] Uninit was stored to memory at: [ 2342.896495][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2342.896495][T12214] __msan_chain_origin+0x57/0xa0 [ 2342.896495][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2342.896495][T12214] get_compat_msghdr+0x108/0x2b0 [ 2342.896495][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2342.896495][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2342.896495][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.896495][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.896495][T12214] __do_fast_syscall_32+0x102/0x160 [ 2342.896495][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2342.896495][T12214] do_SYSENTER_32+0x73/0x90 [ 2342.896495][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.896495][T12214] [ 2342.896495][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2342.896495][T12214] do_recvmmsg+0xbf/0x22f0 [ 2342.896495][T12214] do_recvmmsg+0xbf/0x22f0 [ 2343.861809][T12188] not chained 970000 origins [ 2343.866152][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2343.866152][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2343.866152][T12188] Call Trace: [ 2343.866152][T12188] dump_stack+0x21c/0x280 [ 2343.866152][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2343.866152][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2343.866152][T12188] ? __wake_up+0x1fc/0x250 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2343.866152][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2343.866152][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2343.866152][T12188] ? _copy_from_user+0x1fd/0x300 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] __msan_chain_origin+0x57/0xa0 [ 2343.866152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2343.866152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2343.866152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2343.866152][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2343.866152][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2343.866152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2343.866152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.866152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.866152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2343.866152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2343.866152][T12188] do_SYSENTER_32+0x73/0x90 [ 2343.866152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.866152][T12188] RIP: 0023:0xf7f01549 [ 2343.866152][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2343.866152][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2343.866152][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2343.866152][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2343.866152][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2343.866152][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2343.866152][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2343.866152][T12188] Uninit was stored to memory at: [ 2343.866152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2343.866152][T12188] __msan_chain_origin+0x57/0xa0 [ 2343.866152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2343.866152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2343.866152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2343.866152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2343.866152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.866152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.866152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2343.866152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2343.866152][T12188] do_SYSENTER_32+0x73/0x90 [ 2343.866152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.866152][T12188] [ 2343.866152][T12188] Uninit was stored to memory at: [ 2343.866152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2343.866152][T12188] __msan_chain_origin+0x57/0xa0 [ 2343.866152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2343.866152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2343.866152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2343.866152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2343.866152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.866152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.866152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2343.866152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2343.866152][T12188] do_SYSENTER_32+0x73/0x90 [ 2343.866152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.866152][T12188] [ 2343.866152][T12188] Uninit was stored to memory at: [ 2343.866152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2343.866152][T12188] __msan_chain_origin+0x57/0xa0 [ 2343.866152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2343.866152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2343.866152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2343.866152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2343.866152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.866152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.866152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2343.866152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2343.866152][T12188] do_SYSENTER_32+0x73/0x90 [ 2343.866152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.866152][T12188] [ 2343.866152][T12188] Uninit was stored to memory at: [ 2343.866152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2343.866152][T12188] __msan_chain_origin+0x57/0xa0 [ 2343.866152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2343.866152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2343.866152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2343.866152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2343.866152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.866152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.866152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2343.866152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2343.866152][T12188] do_SYSENTER_32+0x73/0x90 [ 2343.866152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.866152][T12188] [ 2343.866152][T12188] Uninit was stored to memory at: [ 2343.866152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2343.866152][T12188] __msan_chain_origin+0x57/0xa0 [ 2343.866152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2343.866152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2343.866152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2343.866152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2343.866152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.866152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.866152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2343.866152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2343.866152][T12188] do_SYSENTER_32+0x73/0x90 [ 2343.866152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.866152][T12188] [ 2343.866152][T12188] Uninit was stored to memory at: [ 2343.866152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2343.866152][T12188] __msan_chain_origin+0x57/0xa0 [ 2343.866152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2343.866152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2343.866152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2343.866152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2343.866152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.866152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.866152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2343.866152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2343.866152][T12188] do_SYSENTER_32+0x73/0x90 [ 2343.866152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.866152][T12188] [ 2343.866152][T12188] Uninit was stored to memory at: [ 2343.866152][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2343.866152][T12188] __msan_chain_origin+0x57/0xa0 [ 2343.866152][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2343.866152][T12188] get_compat_msghdr+0x108/0x2b0 [ 2343.866152][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2343.866152][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2343.866152][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2343.866152][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2343.866152][T12188] __do_fast_syscall_32+0x102/0x160 [ 2343.866152][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2343.866152][T12188] do_SYSENTER_32+0x73/0x90 [ 2343.866152][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2343.866152][T12188] [ 2343.866152][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2343.866152][T12188] do_recvmmsg+0xbf/0x22f0 [ 2343.866152][T12188] do_recvmmsg+0xbf/0x22f0 [ 2344.935804][T12214] not chained 980000 origins [ 2344.936152][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2344.936152][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2344.936152][T12214] Call Trace: [ 2344.936152][T12214] dump_stack+0x21c/0x280 [ 2344.936152][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2344.936152][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2344.936152][T12214] ? __wake_up+0x1fc/0x250 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2344.936152][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2344.936152][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2344.936152][T12214] ? _copy_from_user+0x1fd/0x300 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] __msan_chain_origin+0x57/0xa0 [ 2344.936152][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2344.936152][T12214] get_compat_msghdr+0x108/0x2b0 [ 2344.936152][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2344.936152][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2344.936152][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2344.936152][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2344.936152][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.936152][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.936152][T12214] __do_fast_syscall_32+0x102/0x160 [ 2344.936152][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2344.936152][T12214] do_SYSENTER_32+0x73/0x90 [ 2344.936152][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.936152][T12214] RIP: 0023:0xf7f01549 [ 2344.936152][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2344.936152][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2344.936152][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2344.936152][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2344.936152][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2344.936152][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2344.936152][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2344.936152][T12214] Uninit was stored to memory at: [ 2344.936152][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2344.936152][T12214] __msan_chain_origin+0x57/0xa0 [ 2344.936152][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2344.936152][T12214] get_compat_msghdr+0x108/0x2b0 [ 2344.936152][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2344.936152][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2344.936152][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.936152][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.936152][T12214] __do_fast_syscall_32+0x102/0x160 [ 2344.936152][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2344.936152][T12214] do_SYSENTER_32+0x73/0x90 [ 2344.936152][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.936152][T12214] [ 2344.936152][T12214] Uninit was stored to memory at: [ 2344.936152][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2344.936152][T12214] __msan_chain_origin+0x57/0xa0 [ 2344.936152][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2344.936152][T12214] get_compat_msghdr+0x108/0x2b0 [ 2344.936152][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2344.936152][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2344.936152][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.936152][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.936152][T12214] __do_fast_syscall_32+0x102/0x160 [ 2344.936152][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2344.936152][T12214] do_SYSENTER_32+0x73/0x90 [ 2344.936152][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.936152][T12214] [ 2344.936152][T12214] Uninit was stored to memory at: [ 2344.936152][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2344.936152][T12214] __msan_chain_origin+0x57/0xa0 [ 2344.936152][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2344.936152][T12214] get_compat_msghdr+0x108/0x2b0 [ 2344.936152][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2344.936152][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2344.936152][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.936152][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.936152][T12214] __do_fast_syscall_32+0x102/0x160 [ 2344.936152][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2344.936152][T12214] do_SYSENTER_32+0x73/0x90 [ 2344.936152][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.936152][T12214] [ 2344.936152][T12214] Uninit was stored to memory at: [ 2344.936152][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2344.936152][T12214] __msan_chain_origin+0x57/0xa0 [ 2344.936152][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2344.936152][T12214] get_compat_msghdr+0x108/0x2b0 [ 2344.936152][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2344.936152][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2344.936152][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.936152][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.936152][T12214] __do_fast_syscall_32+0x102/0x160 [ 2344.936152][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2344.936152][T12214] do_SYSENTER_32+0x73/0x90 [ 2344.936152][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.936152][T12214] [ 2344.936152][T12214] Uninit was stored to memory at: [ 2344.936152][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2344.936152][T12214] __msan_chain_origin+0x57/0xa0 [ 2344.936152][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2344.936152][T12214] get_compat_msghdr+0x108/0x2b0 [ 2344.936152][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2344.936152][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2344.936152][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.936152][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.936152][T12214] __do_fast_syscall_32+0x102/0x160 [ 2344.936152][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2344.936152][T12214] do_SYSENTER_32+0x73/0x90 [ 2344.936152][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.936152][T12214] [ 2344.936152][T12214] Uninit was stored to memory at: [ 2344.936152][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2344.936152][T12214] __msan_chain_origin+0x57/0xa0 [ 2344.936152][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2344.936152][T12214] get_compat_msghdr+0x108/0x2b0 [ 2344.936152][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2344.936152][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2344.936152][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.936152][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.936152][T12214] __do_fast_syscall_32+0x102/0x160 [ 2344.936152][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2344.936152][T12214] do_SYSENTER_32+0x73/0x90 [ 2344.936152][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.936152][T12214] [ 2344.936152][T12214] Uninit was stored to memory at: [ 2344.936152][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2344.936152][T12214] __msan_chain_origin+0x57/0xa0 [ 2344.936152][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2344.936152][T12214] get_compat_msghdr+0x108/0x2b0 [ 2344.936152][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2344.936152][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2344.936152][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2344.936152][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2344.936152][T12214] __do_fast_syscall_32+0x102/0x160 [ 2344.936152][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2344.936152][T12214] do_SYSENTER_32+0x73/0x90 [ 2344.936152][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2344.936152][T12214] [ 2344.936152][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2344.936152][T12214] do_recvmmsg+0xbf/0x22f0 [ 2344.936152][T12214] do_recvmmsg+0xbf/0x22f0 [ 2346.089288][T12188] not chained 990000 origins [ 2346.093973][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2346.096151][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2346.096151][T12188] Call Trace: [ 2346.096151][T12188] dump_stack+0x21c/0x280 [ 2346.096151][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2346.096151][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2346.096151][T12188] ? __wake_up+0x1fc/0x250 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2346.096151][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2346.096151][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2346.096151][T12188] ? _copy_from_user+0x1fd/0x300 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] __msan_chain_origin+0x57/0xa0 [ 2346.096151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2346.096151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2346.096151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2346.096151][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2346.096151][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2346.096151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2346.096151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.096151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.096151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2346.096151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2346.096151][T12188] do_SYSENTER_32+0x73/0x90 [ 2346.096151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.096151][T12188] RIP: 0023:0xf7f01549 [ 2346.096151][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2346.096151][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2346.096151][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2346.096151][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2346.096151][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2346.096151][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2346.096151][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2346.096151][T12188] Uninit was stored to memory at: [ 2346.096151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2346.096151][T12188] __msan_chain_origin+0x57/0xa0 [ 2346.096151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2346.096151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2346.096151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2346.096151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2346.096151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.096151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.096151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2346.096151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2346.096151][T12188] do_SYSENTER_32+0x73/0x90 [ 2346.096151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.096151][T12188] [ 2346.096151][T12188] Uninit was stored to memory at: [ 2346.096151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2346.096151][T12188] __msan_chain_origin+0x57/0xa0 [ 2346.096151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2346.096151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2346.096151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2346.096151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2346.096151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.096151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.096151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2346.096151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2346.096151][T12188] do_SYSENTER_32+0x73/0x90 [ 2346.096151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.096151][T12188] [ 2346.096151][T12188] Uninit was stored to memory at: [ 2346.096151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2346.096151][T12188] __msan_chain_origin+0x57/0xa0 [ 2346.096151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2346.096151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2346.096151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2346.096151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2346.096151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.096151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.096151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2346.096151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2346.096151][T12188] do_SYSENTER_32+0x73/0x90 [ 2346.096151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.096151][T12188] [ 2346.096151][T12188] Uninit was stored to memory at: [ 2346.096151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2346.096151][T12188] __msan_chain_origin+0x57/0xa0 [ 2346.096151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2346.096151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2346.096151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2346.096151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2346.096151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.096151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.096151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2346.096151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2346.096151][T12188] do_SYSENTER_32+0x73/0x90 [ 2346.096151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.096151][T12188] [ 2346.096151][T12188] Uninit was stored to memory at: [ 2346.096151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2346.096151][T12188] __msan_chain_origin+0x57/0xa0 [ 2346.096151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2346.096151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2346.096151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2346.096151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2346.096151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.096151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.096151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2346.096151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2346.096151][T12188] do_SYSENTER_32+0x73/0x90 [ 2346.096151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.096151][T12188] [ 2346.096151][T12188] Uninit was stored to memory at: [ 2346.096151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2346.096151][T12188] __msan_chain_origin+0x57/0xa0 [ 2346.096151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2346.096151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2346.096151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2346.096151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2346.096151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.096151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.096151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2346.096151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2346.096151][T12188] do_SYSENTER_32+0x73/0x90 [ 2346.096151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.096151][T12188] [ 2346.096151][T12188] Uninit was stored to memory at: [ 2346.096151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2346.096151][T12188] __msan_chain_origin+0x57/0xa0 [ 2346.096151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2346.096151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2346.096151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2346.096151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2346.096151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2346.096151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2346.096151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2346.096151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2346.096151][T12188] do_SYSENTER_32+0x73/0x90 [ 2346.096151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2346.096151][T12188] [ 2346.096151][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2346.096151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2346.096151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2347.345494][T12214] not chained 1000000 origins [ 2347.346221][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2347.346221][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2347.346221][T12214] Call Trace: [ 2347.346221][T12214] dump_stack+0x21c/0x280 [ 2347.346221][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2347.346221][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2347.346221][T12214] ? __wake_up+0x1fc/0x250 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2347.346221][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2347.346221][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2347.346221][T12214] ? _copy_from_user+0x1fd/0x300 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] __msan_chain_origin+0x57/0xa0 [ 2347.346221][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2347.346221][T12214] get_compat_msghdr+0x108/0x2b0 [ 2347.346221][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2347.346221][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2347.346221][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2347.346221][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2347.346221][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.346221][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.346221][T12214] __do_fast_syscall_32+0x102/0x160 [ 2347.346221][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2347.346221][T12214] do_SYSENTER_32+0x73/0x90 [ 2347.346221][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.346221][T12214] RIP: 0023:0xf7f01549 [ 2347.346221][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2347.346221][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2347.346221][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2347.346221][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2347.346221][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2347.346221][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2347.346221][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2347.346221][T12214] Uninit was stored to memory at: [ 2347.346221][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2347.346221][T12214] __msan_chain_origin+0x57/0xa0 [ 2347.346221][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2347.346221][T12214] get_compat_msghdr+0x108/0x2b0 [ 2347.346221][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2347.346221][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2347.346221][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.346221][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.346221][T12214] __do_fast_syscall_32+0x102/0x160 [ 2347.346221][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2347.346221][T12214] do_SYSENTER_32+0x73/0x90 [ 2347.346221][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.346221][T12214] [ 2347.346221][T12214] Uninit was stored to memory at: [ 2347.346221][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2347.346221][T12214] __msan_chain_origin+0x57/0xa0 [ 2347.346221][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2347.346221][T12214] get_compat_msghdr+0x108/0x2b0 [ 2347.346221][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2347.346221][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2347.346221][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.346221][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.346221][T12214] __do_fast_syscall_32+0x102/0x160 [ 2347.346221][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2347.346221][T12214] do_SYSENTER_32+0x73/0x90 [ 2347.346221][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.346221][T12214] [ 2347.346221][T12214] Uninit was stored to memory at: [ 2347.346221][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2347.346221][T12214] __msan_chain_origin+0x57/0xa0 [ 2347.346221][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2347.346221][T12214] get_compat_msghdr+0x108/0x2b0 [ 2347.346221][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2347.346221][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2347.346221][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.346221][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.346221][T12214] __do_fast_syscall_32+0x102/0x160 [ 2347.346221][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2347.346221][T12214] do_SYSENTER_32+0x73/0x90 [ 2347.346221][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.346221][T12214] [ 2347.346221][T12214] Uninit was stored to memory at: [ 2347.346221][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2347.346221][T12214] __msan_chain_origin+0x57/0xa0 [ 2347.346221][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2347.346221][T12214] get_compat_msghdr+0x108/0x2b0 [ 2347.346221][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2347.346221][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2347.346221][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.346221][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.346221][T12214] __do_fast_syscall_32+0x102/0x160 [ 2347.346221][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2347.346221][T12214] do_SYSENTER_32+0x73/0x90 [ 2347.346221][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.346221][T12214] [ 2347.346221][T12214] Uninit was stored to memory at: [ 2347.346221][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2347.346221][T12214] __msan_chain_origin+0x57/0xa0 [ 2347.346221][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2347.346221][T12214] get_compat_msghdr+0x108/0x2b0 [ 2347.346221][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2347.346221][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2347.346221][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.346221][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.346221][T12214] __do_fast_syscall_32+0x102/0x160 [ 2347.346221][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2347.346221][T12214] do_SYSENTER_32+0x73/0x90 [ 2347.346221][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.346221][T12214] [ 2347.346221][T12214] Uninit was stored to memory at: [ 2347.346221][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2347.346221][T12214] __msan_chain_origin+0x57/0xa0 [ 2347.346221][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2347.346221][T12214] get_compat_msghdr+0x108/0x2b0 [ 2347.346221][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2347.346221][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2347.346221][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.346221][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.346221][T12214] __do_fast_syscall_32+0x102/0x160 [ 2347.346221][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2347.346221][T12214] do_SYSENTER_32+0x73/0x90 [ 2347.346221][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.346221][T12214] [ 2347.346221][T12214] Uninit was stored to memory at: [ 2347.346221][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2347.346221][T12214] __msan_chain_origin+0x57/0xa0 [ 2347.346221][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2347.346221][T12214] get_compat_msghdr+0x108/0x2b0 [ 2347.346221][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2347.346221][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2347.346221][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2347.346221][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2347.346221][T12214] __do_fast_syscall_32+0x102/0x160 [ 2347.346221][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2347.346221][T12214] do_SYSENTER_32+0x73/0x90 [ 2347.346221][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2347.346221][T12214] [ 2347.346221][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2347.346221][T12214] do_recvmmsg+0xbf/0x22f0 [ 2347.346221][T12214] do_recvmmsg+0xbf/0x22f0 [ 2348.216605][ T8473] kworker/dying (8473) used greatest stack depth: 3144 bytes left [ 2348.394025][T12188] not chained 1010000 origins [ 2348.396154][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2348.406710][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2348.406710][T12188] Call Trace: [ 2348.418480][T12188] dump_stack+0x21c/0x280 [ 2348.418480][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2348.418480][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.436323][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2348.436323][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.436323][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2348.436323][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2348.436323][T12188] ? __wake_up+0x1fc/0x250 [ 2348.466462][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.466462][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2348.466462][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2348.466462][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.466462][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2348.466462][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2348.466462][T12188] ? _copy_from_user+0x1fd/0x300 [ 2348.466462][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.466462][T12188] __msan_chain_origin+0x57/0xa0 [ 2348.466462][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2348.466462][T12188] get_compat_msghdr+0x108/0x2b0 [ 2348.466462][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2348.466462][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.466462][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2348.466462][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.466462][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2348.466462][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2348.556405][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2348.556405][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2348.556405][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.556405][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2348.556405][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.556405][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.556405][T12188] __do_fast_syscall_32+0x102/0x160 [ 2348.556405][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2348.556405][T12188] do_SYSENTER_32+0x73/0x90 [ 2348.556405][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.556405][T12188] RIP: 0023:0xf7f01549 [ 2348.556405][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2348.556405][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2348.556405][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2348.646422][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2348.646422][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2348.646422][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2348.676312][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2348.676312][T12188] Uninit was stored to memory at: [ 2348.676312][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2348.676312][T12188] __msan_chain_origin+0x57/0xa0 [ 2348.676312][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2348.706466][T12188] get_compat_msghdr+0x108/0x2b0 [ 2348.706466][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2348.706466][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2348.706466][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.706466][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.706466][T12188] __do_fast_syscall_32+0x102/0x160 [ 2348.706466][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2348.706466][T12188] do_SYSENTER_32+0x73/0x90 [ 2348.706466][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.706466][T12188] [ 2348.706466][T12188] Uninit was stored to memory at: [ 2348.706466][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2348.706466][T12188] __msan_chain_origin+0x57/0xa0 [ 2348.706466][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2348.706466][T12188] get_compat_msghdr+0x108/0x2b0 [ 2348.706466][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2348.706466][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2348.706466][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.706466][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.706466][T12188] __do_fast_syscall_32+0x102/0x160 [ 2348.706466][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2348.706466][T12188] do_SYSENTER_32+0x73/0x90 [ 2348.706466][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.706466][T12188] [ 2348.706466][T12188] Uninit was stored to memory at: [ 2348.706466][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2348.706466][T12188] __msan_chain_origin+0x57/0xa0 [ 2348.706466][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2348.706466][T12188] get_compat_msghdr+0x108/0x2b0 [ 2348.706466][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2348.706466][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2348.706466][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.706466][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.706466][T12188] __do_fast_syscall_32+0x102/0x160 [ 2348.706466][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2348.706466][T12188] do_SYSENTER_32+0x73/0x90 [ 2348.706466][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.706466][T12188] [ 2348.706466][T12188] Uninit was stored to memory at: [ 2348.706466][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2348.706466][T12188] __msan_chain_origin+0x57/0xa0 [ 2348.706466][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2348.706466][T12188] get_compat_msghdr+0x108/0x2b0 [ 2348.706466][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2348.706466][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2348.706466][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.706466][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.706466][T12188] __do_fast_syscall_32+0x102/0x160 [ 2348.706466][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2348.706466][T12188] do_SYSENTER_32+0x73/0x90 [ 2348.706466][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.706466][T12188] [ 2348.706466][T12188] Uninit was stored to memory at: [ 2348.984285][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2348.984285][T12188] __msan_chain_origin+0x57/0xa0 [ 2348.984285][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2348.984285][T12188] get_compat_msghdr+0x108/0x2b0 [ 2348.984285][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2348.984285][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2348.984285][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.984285][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.984285][T12188] __do_fast_syscall_32+0x102/0x160 [ 2348.984285][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2348.984285][T12188] do_SYSENTER_32+0x73/0x90 [ 2348.984285][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.984285][T12188] [ 2348.984285][T12188] Uninit was stored to memory at: [ 2348.984285][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2348.984285][T12188] __msan_chain_origin+0x57/0xa0 [ 2348.984285][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2348.984285][T12188] get_compat_msghdr+0x108/0x2b0 [ 2348.984285][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2348.984285][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2348.984285][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.984285][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.984285][T12188] __do_fast_syscall_32+0x102/0x160 [ 2348.984285][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2348.984285][T12188] do_SYSENTER_32+0x73/0x90 [ 2348.984285][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.984285][T12188] [ 2348.984285][T12188] Uninit was stored to memory at: [ 2348.984285][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2348.984285][T12188] __msan_chain_origin+0x57/0xa0 [ 2348.984285][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2348.984285][T12188] get_compat_msghdr+0x108/0x2b0 [ 2348.984285][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2348.984285][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2348.984285][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2348.984285][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2348.984285][T12188] __do_fast_syscall_32+0x102/0x160 [ 2348.984285][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2348.984285][T12188] do_SYSENTER_32+0x73/0x90 [ 2348.984285][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2348.984285][T12188] [ 2348.984285][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2348.984285][T12188] do_recvmmsg+0xbf/0x22f0 [ 2348.984285][T12188] do_recvmmsg+0xbf/0x22f0 [ 2349.444549][T12188] not chained 1020000 origins [ 2349.446267][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2349.446267][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2349.446267][T12188] Call Trace: [ 2349.446267][T12188] dump_stack+0x21c/0x280 [ 2349.446267][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2349.446267][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2349.446267][T12188] ? __wake_up+0x1fc/0x250 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2349.446267][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2349.446267][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2349.446267][T12188] ? _copy_from_user+0x1fd/0x300 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] __msan_chain_origin+0x57/0xa0 [ 2349.446267][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2349.446267][T12188] get_compat_msghdr+0x108/0x2b0 [ 2349.446267][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2349.446267][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2349.446267][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2349.446267][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.446267][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.446267][T12188] __do_fast_syscall_32+0x102/0x160 [ 2349.446267][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2349.446267][T12188] do_SYSENTER_32+0x73/0x90 [ 2349.446267][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.446267][T12188] RIP: 0023:0xf7f01549 [ 2349.446267][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2349.446267][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2349.446267][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2349.446267][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2349.446267][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2349.446267][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2349.446267][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2349.446267][T12188] Uninit was stored to memory at: [ 2349.446267][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2349.446267][T12188] __msan_chain_origin+0x57/0xa0 [ 2349.446267][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2349.446267][T12188] get_compat_msghdr+0x108/0x2b0 [ 2349.446267][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2349.446267][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2349.446267][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.446267][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.446267][T12188] __do_fast_syscall_32+0x102/0x160 [ 2349.446267][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2349.795463][T12214] not chained 1030000 origins [ 2349.446267][T12188] do_SYSENTER_32+0x73/0x90 [ 2349.796155][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2349.446267][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.796155][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2349.446267][T12188] [ 2349.796155][T12214] Call Trace: [ 2349.446267][T12188] Uninit was stored to memory at: [ 2349.796155][T12214] dump_stack+0x21c/0x280 [ 2349.446267][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2349.796155][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2349.446267][T12188] __msan_chain_origin+0x57/0xa0 [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2349.796155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2349.446267][T12188] get_compat_msghdr+0x108/0x2b0 [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2349.796155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2349.446267][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2349.796155][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2349.446267][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.796155][T12214] ? __wake_up+0x1fc/0x250 [ 2349.446267][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] __do_fast_syscall_32+0x102/0x160 [ 2349.796155][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2349.446267][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2349.796155][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2349.446267][T12188] do_SYSENTER_32+0x73/0x90 [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.796155][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2349.446267][T12188] [ 2349.796155][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2349.446267][T12188] Uninit was stored to memory at: [ 2349.796155][T12214] ? _copy_from_user+0x1fd/0x300 [ 2349.446267][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] __msan_chain_origin+0x57/0xa0 [ 2349.796155][T12214] __msan_chain_origin+0x57/0xa0 [ 2349.446267][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2349.796155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2349.446267][T12188] get_compat_msghdr+0x108/0x2b0 [ 2349.796155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2349.446267][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2349.796155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2349.446267][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.796155][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2349.446267][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] __do_fast_syscall_32+0x102/0x160 [ 2349.796155][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2349.446267][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2349.796155][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2349.446267][T12188] do_SYSENTER_32+0x73/0x90 [ 2349.796155][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2349.446267][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.796155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2349.446267][T12188] [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] Uninit was stored to memory at: [ 2349.796155][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2349.446267][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2349.796155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.446267][T12188] __msan_chain_origin+0x57/0xa0 [ 2349.796155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.446267][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2349.796155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2349.446267][T12188] get_compat_msghdr+0x108/0x2b0 [ 2349.796155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2349.446267][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2349.796155][T12214] do_SYSENTER_32+0x73/0x90 [ 2349.446267][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2349.796155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.446267][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.796155][T12214] RIP: 0023:0xf7f01549 [ 2349.446267][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.796155][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2349.446267][T12188] __do_fast_syscall_32+0x102/0x160 [ 2349.796155][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 [ 2349.446267][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2349.796155][T12214] ORIG_RAX: 0000000000000151 [ 2349.796155][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2349.446267][T12188] do_SYSENTER_32+0x73/0x90 [ 2349.796155][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2349.446267][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.796155][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2349.446267][T12188] [ 2349.796155][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2349.446267][T12188] Uninit was stored to memory at: [ 2349.796155][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2349.446267][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2349.796155][T12214] Uninit was stored to memory at: [ 2349.446267][T12188] __msan_chain_origin+0x57/0xa0 [ 2349.796155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2349.446267][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2349.796155][T12214] __msan_chain_origin+0x57/0xa0 [ 2349.446267][T12188] get_compat_msghdr+0x108/0x2b0 [ 2349.796155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2349.446267][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2349.796155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2349.446267][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2349.796155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2349.446267][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.796155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2349.446267][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.796155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.446267][T12188] __do_fast_syscall_32+0x102/0x160 [ 2349.796155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.446267][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2349.796155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2349.446267][T12188] do_SYSENTER_32+0x73/0x90 [ 2349.796155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2349.446267][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.796155][T12214] do_SYSENTER_32+0x73/0x90 [ 2349.446267][T12188] [ 2349.796155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.446267][T12188] Uninit was stored to memory at: [ 2349.796155][T12214] [ 2349.446267][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2349.796155][T12214] Uninit was stored to memory at: [ 2349.796155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2349.796155][T12214] __msan_chain_origin+0x57/0xa0 [ 2349.446267][T12188] __msan_chain_origin+0x57/0xa0 [ 2349.796155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2349.446267][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2349.796155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2349.446267][T12188] get_compat_msghdr+0x108/0x2b0 [ 2349.796155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2349.446267][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2349.796155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2349.446267][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2349.796155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.446267][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.796155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.446267][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.796155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2349.446267][T12188] __do_fast_syscall_32+0x102/0x160 [ 2349.796155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2349.446267][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2349.796155][T12214] do_SYSENTER_32+0x73/0x90 [ 2349.446267][T12188] do_SYSENTER_32+0x73/0x90 [ 2349.796155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.446267][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.796155][T12214] [ 2349.446267][T12188] [ 2349.796155][T12214] Uninit was stored to memory at: [ 2349.446267][T12188] Uninit was stored to memory at: [ 2349.796155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2349.446267][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2349.796155][T12214] __msan_chain_origin+0x57/0xa0 [ 2349.446267][T12188] __msan_chain_origin+0x57/0xa0 [ 2349.796155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2349.446267][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2349.796155][T12214] get_compat_msghdr+0x108/0x2b0 [ 2349.446267][T12188] get_compat_msghdr+0x108/0x2b0 [ 2349.796155][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2349.446267][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2349.796155][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2349.446267][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2349.796155][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.446267][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2349.796155][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.446267][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2349.796155][T12214] __do_fast_syscall_32+0x102/0x160 [ 2349.446267][T12188] __do_fast_syscall_32+0x102/0x160 [ 2349.796155][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2349.446267][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2349.796155][T12214] do_SYSENTER_32+0x73/0x90 [ 2349.446267][T12188] do_SYSENTER_32+0x73/0x90 [ 2349.796155][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.446267][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2349.796155][T12214] [ 2349.446267][T12188] [ 2349.796155][T12214] Uninit was stored to memory at: [ 2349.446267][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2349.796155][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2349.446267][T12188] do_recvmmsg+0xbf/0x22f0 [ 2349.796155][T12214] __msan_chain_origin+0x57/0xa0 [ 2349.446267][T12188] do_recvmmsg+0xbf/0x22f0 [ 2349.796155][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2350.781433][T12214] get_compat_msghdr+0x108/0x2b0 [ 2350.781433][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2350.781433][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2350.781433][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.781433][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.781433][T12214] __do_fast_syscall_32+0x102/0x160 [ 2350.781433][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2350.781433][T12214] do_SYSENTER_32+0x73/0x90 [ 2350.781433][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.781433][T12214] [ 2350.781433][T12214] Uninit was stored to memory at: [ 2350.781433][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2350.781433][T12214] __msan_chain_origin+0x57/0xa0 [ 2350.781433][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2350.781433][T12214] get_compat_msghdr+0x108/0x2b0 [ 2350.781433][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2350.781433][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2350.781433][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.781433][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.781433][T12214] __do_fast_syscall_32+0x102/0x160 [ 2350.781433][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2350.781433][T12214] do_SYSENTER_32+0x73/0x90 [ 2350.781433][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.781433][T12214] [ 2350.781433][T12214] Uninit was stored to memory at: [ 2350.781433][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2350.781433][T12214] __msan_chain_origin+0x57/0xa0 [ 2350.781433][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2350.781433][T12214] get_compat_msghdr+0x108/0x2b0 [ 2350.781433][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2350.781433][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2350.781433][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.781433][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.781433][T12214] __do_fast_syscall_32+0x102/0x160 [ 2350.781433][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2350.781433][T12214] do_SYSENTER_32+0x73/0x90 [ 2350.781433][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.781433][T12214] [ 2350.781433][T12214] Uninit was stored to memory at: [ 2350.781433][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2350.781433][T12214] __msan_chain_origin+0x57/0xa0 [ 2350.781433][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2350.781433][T12214] get_compat_msghdr+0x108/0x2b0 [ 2350.781433][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2350.781433][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2350.781433][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2350.781433][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2350.781433][T12214] __do_fast_syscall_32+0x102/0x160 [ 2350.781433][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2350.781433][T12214] do_SYSENTER_32+0x73/0x90 [ 2350.781433][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2350.781433][T12214] [ 2350.781433][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2350.781433][T12214] do_recvmmsg+0xbf/0x22f0 [ 2350.781433][T12214] do_recvmmsg+0xbf/0x22f0 [ 2351.390186][T12214] not chained 1040000 origins [ 2351.394942][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2351.396158][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2351.396158][T12214] Call Trace: [ 2351.396158][T12214] dump_stack+0x21c/0x280 [ 2351.396158][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2351.396158][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2351.396158][T12214] ? __wake_up+0x1fc/0x250 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2351.396158][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2351.396158][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2351.396158][T12214] ? _copy_from_user+0x1fd/0x300 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] __msan_chain_origin+0x57/0xa0 [ 2351.396158][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2351.396158][T12214] get_compat_msghdr+0x108/0x2b0 [ 2351.396158][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2351.396158][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2351.396158][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2351.396158][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2351.396158][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.396158][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.396158][T12214] __do_fast_syscall_32+0x102/0x160 [ 2351.396158][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2351.396158][T12214] do_SYSENTER_32+0x73/0x90 [ 2351.396158][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.396158][T12214] RIP: 0023:0xf7f01549 [ 2351.396158][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2351.396158][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2351.396158][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2351.396158][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2351.396158][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2351.396158][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2351.396158][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2351.396158][T12214] Uninit was stored to memory at: [ 2351.396158][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2351.396158][T12214] __msan_chain_origin+0x57/0xa0 [ 2351.396158][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2351.396158][T12214] get_compat_msghdr+0x108/0x2b0 [ 2351.396158][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2351.396158][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2351.396158][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.396158][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.396158][T12214] __do_fast_syscall_32+0x102/0x160 [ 2351.396158][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2351.396158][T12214] do_SYSENTER_32+0x73/0x90 [ 2351.396158][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.396158][T12214] [ 2351.396158][T12214] Uninit was stored to memory at: [ 2351.396158][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2351.396158][T12214] __msan_chain_origin+0x57/0xa0 [ 2351.396158][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2351.396158][T12214] get_compat_msghdr+0x108/0x2b0 [ 2351.396158][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2351.396158][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2351.396158][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.396158][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.396158][T12214] __do_fast_syscall_32+0x102/0x160 [ 2351.396158][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2351.396158][T12214] do_SYSENTER_32+0x73/0x90 [ 2351.396158][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.396158][T12214] [ 2351.396158][T12214] Uninit was stored to memory at: [ 2351.396158][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2351.396158][T12214] __msan_chain_origin+0x57/0xa0 [ 2351.396158][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2351.396158][T12214] get_compat_msghdr+0x108/0x2b0 [ 2351.396158][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2351.396158][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2351.396158][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.396158][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.396158][T12214] __do_fast_syscall_32+0x102/0x160 [ 2351.396158][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2351.396158][T12214] do_SYSENTER_32+0x73/0x90 [ 2351.396158][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.396158][T12214] [ 2351.396158][T12214] Uninit was stored to memory at: [ 2351.396158][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2351.396158][T12214] __msan_chain_origin+0x57/0xa0 [ 2351.396158][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2351.396158][T12214] get_compat_msghdr+0x108/0x2b0 [ 2351.396158][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2351.396158][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2351.396158][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.396158][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.396158][T12214] __do_fast_syscall_32+0x102/0x160 [ 2351.396158][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2351.396158][T12214] do_SYSENTER_32+0x73/0x90 [ 2351.396158][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.396158][T12214] [ 2351.396158][T12214] Uninit was stored to memory at: [ 2351.396158][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2351.396158][T12214] __msan_chain_origin+0x57/0xa0 [ 2351.396158][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2351.396158][T12214] get_compat_msghdr+0x108/0x2b0 [ 2351.396158][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2351.396158][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2351.396158][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.396158][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.396158][T12214] __do_fast_syscall_32+0x102/0x160 [ 2351.396158][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2351.396158][T12214] do_SYSENTER_32+0x73/0x90 [ 2351.396158][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.396158][T12214] [ 2351.396158][T12214] Uninit was stored to memory at: [ 2351.396158][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2351.396158][T12214] __msan_chain_origin+0x57/0xa0 [ 2351.396158][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2351.396158][T12214] get_compat_msghdr+0x108/0x2b0 [ 2351.396158][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2351.396158][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2351.396158][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.396158][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.396158][T12214] __do_fast_syscall_32+0x102/0x160 [ 2351.396158][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2351.396158][T12214] do_SYSENTER_32+0x73/0x90 [ 2351.396158][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.396158][T12214] [ 2351.396158][T12214] Uninit was stored to memory at: [ 2351.396158][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2351.396158][T12214] __msan_chain_origin+0x57/0xa0 [ 2351.396158][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2351.396158][T12214] get_compat_msghdr+0x108/0x2b0 [ 2351.396158][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2351.396158][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2351.396158][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2351.396158][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2351.396158][T12214] __do_fast_syscall_32+0x102/0x160 [ 2351.396158][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2351.396158][T12214] do_SYSENTER_32+0x73/0x90 [ 2351.396158][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2351.396158][T12214] [ 2351.396158][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2351.396158][T12214] do_recvmmsg+0xbf/0x22f0 [ 2351.396158][T12214] do_recvmmsg+0xbf/0x22f0 [ 2352.481844][T12214] not chained 1050000 origins [ 2352.486182][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2352.486182][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2352.486182][T12214] Call Trace: [ 2352.486182][T12214] dump_stack+0x21c/0x280 [ 2352.486182][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2352.486182][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2352.486182][T12214] ? __wake_up+0x1fc/0x250 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2352.486182][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2352.486182][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2352.486182][T12214] ? _copy_from_user+0x1fd/0x300 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] __msan_chain_origin+0x57/0xa0 [ 2352.486182][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2352.486182][T12214] get_compat_msghdr+0x108/0x2b0 [ 2352.486182][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2352.486182][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2352.486182][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2352.486182][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2352.486182][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.486182][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.486182][T12214] __do_fast_syscall_32+0x102/0x160 [ 2352.486182][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2352.486182][T12214] do_SYSENTER_32+0x73/0x90 [ 2352.486182][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.486182][T12214] RIP: 0023:0xf7f01549 [ 2352.486182][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2352.486182][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2352.486182][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2352.486182][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2352.486182][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2352.486182][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2352.486182][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2352.486182][T12214] Uninit was stored to memory at: [ 2352.486182][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2352.486182][T12214] __msan_chain_origin+0x57/0xa0 [ 2352.486182][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2352.486182][T12214] get_compat_msghdr+0x108/0x2b0 [ 2352.486182][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2352.486182][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2352.486182][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.486182][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.486182][T12214] __do_fast_syscall_32+0x102/0x160 [ 2352.486182][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2352.486182][T12214] do_SYSENTER_32+0x73/0x90 [ 2352.486182][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.486182][T12214] [ 2352.486182][T12214] Uninit was stored to memory at: [ 2352.486182][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2352.486182][T12214] __msan_chain_origin+0x57/0xa0 [ 2352.486182][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2352.486182][T12214] get_compat_msghdr+0x108/0x2b0 [ 2352.486182][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2352.486182][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2352.486182][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.486182][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.486182][T12214] __do_fast_syscall_32+0x102/0x160 [ 2352.486182][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2352.486182][T12214] do_SYSENTER_32+0x73/0x90 [ 2352.486182][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.486182][T12214] [ 2352.486182][T12214] Uninit was stored to memory at: [ 2352.486182][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2352.486182][T12214] __msan_chain_origin+0x57/0xa0 [ 2352.486182][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2352.486182][T12214] get_compat_msghdr+0x108/0x2b0 [ 2352.486182][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2352.486182][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2352.486182][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.486182][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.486182][T12214] __do_fast_syscall_32+0x102/0x160 [ 2352.486182][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2352.486182][T12214] do_SYSENTER_32+0x73/0x90 [ 2352.486182][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.486182][T12214] [ 2352.486182][T12214] Uninit was stored to memory at: [ 2352.486182][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2352.486182][T12214] __msan_chain_origin+0x57/0xa0 [ 2352.486182][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2352.486182][T12214] get_compat_msghdr+0x108/0x2b0 [ 2352.486182][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2352.486182][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2352.486182][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.486182][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.486182][T12214] __do_fast_syscall_32+0x102/0x160 [ 2352.486182][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2352.486182][T12214] do_SYSENTER_32+0x73/0x90 [ 2352.486182][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.486182][T12214] [ 2352.486182][T12214] Uninit was stored to memory at: [ 2352.486182][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2352.486182][T12214] __msan_chain_origin+0x57/0xa0 [ 2352.486182][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2352.486182][T12214] get_compat_msghdr+0x108/0x2b0 [ 2352.486182][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2352.486182][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2352.486182][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.486182][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.486182][T12214] __do_fast_syscall_32+0x102/0x160 [ 2352.486182][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2352.486182][T12214] do_SYSENTER_32+0x73/0x90 [ 2352.486182][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.486182][T12214] [ 2352.486182][T12214] Uninit was stored to memory at: [ 2352.486182][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2352.486182][T12214] __msan_chain_origin+0x57/0xa0 [ 2352.486182][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2352.486182][T12214] get_compat_msghdr+0x108/0x2b0 [ 2352.486182][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2352.486182][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2352.486182][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.486182][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.486182][T12214] __do_fast_syscall_32+0x102/0x160 [ 2352.486182][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2352.486182][T12214] do_SYSENTER_32+0x73/0x90 [ 2352.486182][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.486182][T12214] [ 2352.486182][T12214] Uninit was stored to memory at: [ 2352.486182][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2352.486182][T12214] __msan_chain_origin+0x57/0xa0 [ 2352.486182][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2352.486182][T12214] get_compat_msghdr+0x108/0x2b0 [ 2352.486182][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2352.486182][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2352.486182][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2352.486182][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2352.486182][T12214] __do_fast_syscall_32+0x102/0x160 [ 2352.486182][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2352.486182][T12214] do_SYSENTER_32+0x73/0x90 [ 2352.486182][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2352.486182][T12214] [ 2352.486182][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2352.486182][T12214] do_recvmmsg+0xbf/0x22f0 [ 2352.486182][T12214] do_recvmmsg+0xbf/0x22f0 [ 2353.557783][T12188] not chained 1060000 origins [ 2353.562528][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2353.566629][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2353.576276][T12188] Call Trace: [ 2353.576276][T12188] dump_stack+0x21c/0x280 [ 2353.576276][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2353.576276][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2353.576276][T12188] ? __wake_up+0x1fc/0x250 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2353.576276][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2353.576276][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2353.576276][T12188] ? _copy_from_user+0x1fd/0x300 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] __msan_chain_origin+0x57/0xa0 [ 2353.576276][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2353.576276][T12188] get_compat_msghdr+0x108/0x2b0 [ 2353.576276][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2353.576276][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2353.576276][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2353.576276][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2353.576276][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.576276][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.576276][T12188] __do_fast_syscall_32+0x102/0x160 [ 2353.576276][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2353.576276][T12188] do_SYSENTER_32+0x73/0x90 [ 2353.576276][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.576276][T12188] RIP: 0023:0xf7f01549 [ 2353.576276][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2353.576276][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2353.576276][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2353.576276][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2353.576276][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2353.576276][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2353.576276][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2353.576276][T12188] Uninit was stored to memory at: [ 2353.576276][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2353.576276][T12188] __msan_chain_origin+0x57/0xa0 [ 2353.576276][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2353.576276][T12188] get_compat_msghdr+0x108/0x2b0 [ 2353.576276][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2353.576276][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2353.576276][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.576276][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.576276][T12188] __do_fast_syscall_32+0x102/0x160 [ 2353.576276][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2353.576276][T12188] do_SYSENTER_32+0x73/0x90 [ 2353.576276][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.576276][T12188] [ 2353.576276][T12188] Uninit was stored to memory at: [ 2353.576276][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2353.576276][T12188] __msan_chain_origin+0x57/0xa0 [ 2353.576276][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2353.576276][T12188] get_compat_msghdr+0x108/0x2b0 [ 2353.576276][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2353.576276][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2353.576276][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.576276][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.576276][T12188] __do_fast_syscall_32+0x102/0x160 [ 2353.576276][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2353.576276][T12188] do_SYSENTER_32+0x73/0x90 [ 2353.576276][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.576276][T12188] [ 2353.576276][T12188] Uninit was stored to memory at: [ 2353.576276][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2353.576276][T12188] __msan_chain_origin+0x57/0xa0 [ 2353.576276][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2353.576276][T12188] get_compat_msghdr+0x108/0x2b0 [ 2353.576276][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2353.576276][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2353.576276][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.576276][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.576276][T12188] __do_fast_syscall_32+0x102/0x160 [ 2353.576276][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2353.576276][T12188] do_SYSENTER_32+0x73/0x90 [ 2353.576276][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.576276][T12188] [ 2353.576276][T12188] Uninit was stored to memory at: [ 2353.576276][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2353.576276][T12188] __msan_chain_origin+0x57/0xa0 [ 2353.576276][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2353.576276][T12188] get_compat_msghdr+0x108/0x2b0 [ 2353.576276][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2353.576276][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2353.576276][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.576276][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.576276][T12188] __do_fast_syscall_32+0x102/0x160 [ 2353.576276][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2353.576276][T12188] do_SYSENTER_32+0x73/0x90 [ 2353.576276][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.576276][T12188] [ 2353.576276][T12188] Uninit was stored to memory at: [ 2353.576276][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2353.576276][T12188] __msan_chain_origin+0x57/0xa0 [ 2353.576276][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2353.576276][T12188] get_compat_msghdr+0x108/0x2b0 [ 2353.576276][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2353.576276][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2353.576276][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.576276][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.576276][T12188] __do_fast_syscall_32+0x102/0x160 [ 2353.576276][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2353.576276][T12188] do_SYSENTER_32+0x73/0x90 [ 2353.576276][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.576276][T12188] [ 2353.576276][T12188] Uninit was stored to memory at: [ 2353.576276][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2353.576276][T12188] __msan_chain_origin+0x57/0xa0 [ 2353.576276][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2353.576276][T12188] get_compat_msghdr+0x108/0x2b0 [ 2353.576276][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2353.576276][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2353.576276][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.576276][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.576276][T12188] __do_fast_syscall_32+0x102/0x160 [ 2353.576276][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2353.576276][T12188] do_SYSENTER_32+0x73/0x90 [ 2353.576276][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.576276][T12188] [ 2353.576276][T12188] Uninit was stored to memory at: [ 2353.576276][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2353.576276][T12188] __msan_chain_origin+0x57/0xa0 [ 2353.576276][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2353.576276][T12188] get_compat_msghdr+0x108/0x2b0 [ 2353.576276][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2353.576276][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2353.576276][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2353.576276][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2353.576276][T12188] __do_fast_syscall_32+0x102/0x160 [ 2353.576276][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2353.576276][T12188] do_SYSENTER_32+0x73/0x90 [ 2353.576276][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2353.576276][T12188] [ 2353.576276][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2353.576276][T12188] do_recvmmsg+0xbf/0x22f0 [ 2353.576276][T12188] do_recvmmsg+0xbf/0x22f0 [ 2354.610110][T12188] not chained 1070000 origins [ 2354.614863][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2354.616150][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2354.616150][T12188] Call Trace: [ 2354.616150][T12188] dump_stack+0x21c/0x280 [ 2354.616150][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2354.616150][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2354.616150][T12188] ? __wake_up+0x1fc/0x250 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2354.616150][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2354.616150][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2354.616150][T12188] ? _copy_from_user+0x1fd/0x300 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] __msan_chain_origin+0x57/0xa0 [ 2354.616150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2354.616150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2354.616150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2354.616150][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2354.616150][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2354.616150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2354.616150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.616150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.616150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2354.616150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2354.616150][T12188] do_SYSENTER_32+0x73/0x90 [ 2354.616150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.616150][T12188] RIP: 0023:0xf7f01549 [ 2354.616150][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2354.616150][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2354.616150][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2354.616150][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2354.616150][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2354.616150][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2354.616150][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2354.616150][T12188] Uninit was stored to memory at: [ 2354.616150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2354.616150][T12188] __msan_chain_origin+0x57/0xa0 [ 2354.616150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2354.616150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2354.616150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2354.616150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2354.616150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.616150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.616150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2354.616150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2354.616150][T12188] do_SYSENTER_32+0x73/0x90 [ 2354.616150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.616150][T12188] [ 2354.616150][T12188] Uninit was stored to memory at: [ 2354.616150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2354.616150][T12188] __msan_chain_origin+0x57/0xa0 [ 2354.616150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2354.616150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2354.616150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2354.616150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2354.616150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.616150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.616150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2354.616150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2354.616150][T12188] do_SYSENTER_32+0x73/0x90 [ 2354.616150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.616150][T12188] [ 2354.616150][T12188] Uninit was stored to memory at: [ 2354.616150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2354.616150][T12188] __msan_chain_origin+0x57/0xa0 [ 2354.616150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2354.616150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2354.616150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2354.616150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2354.616150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.616150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.616150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2354.616150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2354.616150][T12188] do_SYSENTER_32+0x73/0x90 [ 2354.616150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.616150][T12188] [ 2354.616150][T12188] Uninit was stored to memory at: [ 2354.616150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2354.616150][T12188] __msan_chain_origin+0x57/0xa0 [ 2354.616150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2354.616150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2354.616150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2354.616150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2354.616150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.616150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.616150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2354.616150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2354.616150][T12188] do_SYSENTER_32+0x73/0x90 [ 2354.616150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.616150][T12188] [ 2354.616150][T12188] Uninit was stored to memory at: [ 2354.616150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2354.616150][T12188] __msan_chain_origin+0x57/0xa0 [ 2354.616150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2354.616150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2354.616150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2354.616150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2354.616150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.616150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.616150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2354.616150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2354.616150][T12188] do_SYSENTER_32+0x73/0x90 [ 2354.616150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.616150][T12188] [ 2354.616150][T12188] Uninit was stored to memory at: [ 2354.616150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2354.616150][T12188] __msan_chain_origin+0x57/0xa0 [ 2354.616150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2354.616150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2354.616150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2354.616150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2354.616150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.616150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.616150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2354.616150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2354.616150][T12188] do_SYSENTER_32+0x73/0x90 [ 2354.616150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.616150][T12188] [ 2354.616150][T12188] Uninit was stored to memory at: [ 2354.616150][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2354.616150][T12188] __msan_chain_origin+0x57/0xa0 [ 2354.616150][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2354.616150][T12188] get_compat_msghdr+0x108/0x2b0 [ 2354.616150][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2354.616150][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2354.616150][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2354.616150][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2354.616150][T12188] __do_fast_syscall_32+0x102/0x160 [ 2354.616150][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2354.616150][T12188] do_SYSENTER_32+0x73/0x90 [ 2354.616150][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2354.616150][T12188] [ 2354.616150][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2354.616150][T12188] do_recvmmsg+0xbf/0x22f0 [ 2354.616150][T12188] do_recvmmsg+0xbf/0x22f0 [ 2355.664434][T12188] not chained 1080000 origins [ 2355.666135][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2355.666135][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2355.686387][T12188] Call Trace: [ 2355.686387][T12188] dump_stack+0x21c/0x280 [ 2355.686387][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2355.696325][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2355.696325][T12188] ? __wake_up+0x1fc/0x250 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2355.696325][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2355.696325][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2355.696325][T12188] ? _copy_from_user+0x1fd/0x300 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] __msan_chain_origin+0x57/0xa0 [ 2355.696325][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2355.696325][T12188] get_compat_msghdr+0x108/0x2b0 [ 2355.696325][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2355.696325][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2355.696325][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2355.696325][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2355.696325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.696325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.696325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2355.696325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2355.696325][T12188] do_SYSENTER_32+0x73/0x90 [ 2355.696325][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.696325][T12188] RIP: 0023:0xf7f01549 [ 2355.696325][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2355.696325][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2355.696325][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2355.696325][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2355.696325][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2355.696325][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2355.696325][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2355.696325][T12188] Uninit was stored to memory at: [ 2355.696325][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2355.696325][T12188] __msan_chain_origin+0x57/0xa0 [ 2355.696325][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2355.696325][T12188] get_compat_msghdr+0x108/0x2b0 [ 2355.696325][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2355.696325][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2355.696325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.696325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.696325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2355.696325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2355.696325][T12188] do_SYSENTER_32+0x73/0x90 [ 2355.696325][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.696325][T12188] [ 2355.696325][T12188] Uninit was stored to memory at: [ 2355.696325][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2355.696325][T12188] __msan_chain_origin+0x57/0xa0 [ 2355.696325][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2355.696325][T12188] get_compat_msghdr+0x108/0x2b0 [ 2355.696325][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2355.696325][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2355.696325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.696325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.696325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2355.696325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2355.696325][T12188] do_SYSENTER_32+0x73/0x90 [ 2355.696325][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.696325][T12188] [ 2355.696325][T12188] Uninit was stored to memory at: [ 2355.696325][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2355.696325][T12188] __msan_chain_origin+0x57/0xa0 [ 2355.696325][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2355.696325][T12188] get_compat_msghdr+0x108/0x2b0 [ 2355.696325][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2355.696325][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2355.696325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.696325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.696325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2355.696325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2355.696325][T12188] do_SYSENTER_32+0x73/0x90 [ 2355.696325][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.696325][T12188] [ 2355.696325][T12188] Uninit was stored to memory at: [ 2355.696325][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2355.696325][T12188] __msan_chain_origin+0x57/0xa0 [ 2355.696325][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2355.696325][T12188] get_compat_msghdr+0x108/0x2b0 [ 2355.696325][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2355.696325][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2355.696325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.696325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.696325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2355.696325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2355.696325][T12188] do_SYSENTER_32+0x73/0x90 [ 2355.696325][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.696325][T12188] [ 2355.696325][T12188] Uninit was stored to memory at: [ 2355.696325][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2355.696325][T12188] __msan_chain_origin+0x57/0xa0 [ 2355.696325][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2355.696325][T12188] get_compat_msghdr+0x108/0x2b0 [ 2355.696325][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2355.696325][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2355.696325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.696325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.696325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2355.696325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2355.696325][T12188] do_SYSENTER_32+0x73/0x90 [ 2355.696325][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.696325][T12188] [ 2355.696325][T12188] Uninit was stored to memory at: [ 2355.696325][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2355.696325][T12188] __msan_chain_origin+0x57/0xa0 [ 2355.696325][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2355.696325][T12188] get_compat_msghdr+0x108/0x2b0 [ 2355.696325][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2355.696325][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2355.696325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.696325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.696325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2355.696325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2355.696325][T12188] do_SYSENTER_32+0x73/0x90 [ 2355.696325][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.696325][T12188] [ 2355.696325][T12188] Uninit was stored to memory at: [ 2355.696325][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2355.696325][T12188] __msan_chain_origin+0x57/0xa0 [ 2355.696325][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2355.696325][T12188] get_compat_msghdr+0x108/0x2b0 [ 2355.696325][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2355.696325][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2355.696325][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2355.696325][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2355.696325][T12188] __do_fast_syscall_32+0x102/0x160 [ 2355.696325][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2355.696325][T12188] do_SYSENTER_32+0x73/0x90 [ 2355.696325][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2355.696325][T12188] [ 2355.696325][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2355.696325][T12188] do_recvmmsg+0xbf/0x22f0 [ 2355.696325][T12188] do_recvmmsg+0xbf/0x22f0 [ 2356.638190][T12214] not chained 1090000 origins [ 2356.642911][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2356.646154][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2356.646154][T12214] Call Trace: [ 2356.646154][T12214] dump_stack+0x21c/0x280 [ 2356.646154][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2356.646154][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2356.646154][T12214] ? __wake_up+0x1fc/0x250 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2356.646154][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2356.646154][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2356.646154][T12214] ? _copy_from_user+0x1fd/0x300 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] __msan_chain_origin+0x57/0xa0 [ 2356.646154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2356.646154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2356.646154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2356.646154][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2356.646154][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2356.646154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2356.646154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.646154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.646154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2356.646154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2356.646154][T12214] do_SYSENTER_32+0x73/0x90 [ 2356.646154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.646154][T12214] RIP: 0023:0xf7f01549 [ 2356.646154][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2356.646154][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2356.646154][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2356.646154][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2356.646154][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2356.646154][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2356.646154][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2356.646154][T12214] Uninit was stored to memory at: [ 2356.646154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2356.646154][T12214] __msan_chain_origin+0x57/0xa0 [ 2356.646154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2356.646154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2356.646154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2356.646154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2356.646154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.646154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.646154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2356.646154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2356.646154][T12214] do_SYSENTER_32+0x73/0x90 [ 2356.646154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.646154][T12214] [ 2356.646154][T12214] Uninit was stored to memory at: [ 2356.646154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2356.646154][T12214] __msan_chain_origin+0x57/0xa0 [ 2356.646154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2356.646154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2356.646154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2356.646154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2356.646154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.646154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.646154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2356.646154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2356.646154][T12214] do_SYSENTER_32+0x73/0x90 [ 2356.646154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.646154][T12214] [ 2356.646154][T12214] Uninit was stored to memory at: [ 2356.646154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2356.646154][T12214] __msan_chain_origin+0x57/0xa0 [ 2356.646154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2356.646154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2356.646154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2356.646154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2356.646154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.646154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.646154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2356.646154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2356.646154][T12214] do_SYSENTER_32+0x73/0x90 [ 2356.646154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.646154][T12214] [ 2356.646154][T12214] Uninit was stored to memory at: [ 2356.646154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2356.646154][T12214] __msan_chain_origin+0x57/0xa0 [ 2356.646154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2356.646154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2356.646154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2356.646154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2356.646154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.646154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.646154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2356.646154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2356.646154][T12214] do_SYSENTER_32+0x73/0x90 [ 2356.646154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.646154][T12214] [ 2356.646154][T12214] Uninit was stored to memory at: [ 2356.646154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2356.646154][T12214] __msan_chain_origin+0x57/0xa0 [ 2356.646154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2356.646154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2356.646154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2356.646154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2356.646154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.646154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.646154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2356.646154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2356.646154][T12214] do_SYSENTER_32+0x73/0x90 [ 2356.646154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.646154][T12214] [ 2356.646154][T12214] Uninit was stored to memory at: [ 2356.646154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2356.646154][T12214] __msan_chain_origin+0x57/0xa0 [ 2356.646154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2356.646154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2356.646154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2356.646154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2356.646154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.646154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.646154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2356.646154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2356.646154][T12214] do_SYSENTER_32+0x73/0x90 [ 2356.646154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.646154][T12214] [ 2356.646154][T12214] Uninit was stored to memory at: [ 2356.646154][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2356.646154][T12214] __msan_chain_origin+0x57/0xa0 [ 2356.646154][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2356.646154][T12214] get_compat_msghdr+0x108/0x2b0 [ 2356.646154][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2356.646154][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2356.646154][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2356.646154][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2356.646154][T12214] __do_fast_syscall_32+0x102/0x160 [ 2356.646154][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2356.646154][T12214] do_SYSENTER_32+0x73/0x90 [ 2356.646154][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2356.646154][T12214] [ 2356.646154][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2356.646154][T12214] do_recvmmsg+0xbf/0x22f0 [ 2356.646154][T12214] do_recvmmsg+0xbf/0x22f0 [ 2357.669950][T12214] not chained 1100000 origins [ 2357.675154][T12214] CPU: 1 PID: 12214 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2357.676226][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2357.676226][T12214] Call Trace: [ 2357.676226][T12214] dump_stack+0x21c/0x280 [ 2357.676226][T12214] kmsan_internal_chain_origin+0x6f/0x130 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2357.676226][T12214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2357.676226][T12214] ? __wake_up+0x1fc/0x250 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2357.676226][T12214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2357.676226][T12214] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2357.676226][T12214] ? _copy_from_user+0x1fd/0x300 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] __msan_chain_origin+0x57/0xa0 [ 2357.676226][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2357.676226][T12214] get_compat_msghdr+0x108/0x2b0 [ 2357.676226][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] ? kmsan_internal_check_memory+0xb1/0x520 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] ? kmsan_internal_set_origin+0x85/0xc0 [ 2357.676226][T12214] ? __msan_poison_alloca+0xe9/0x110 [ 2357.676226][T12214] ? __sys_recvmmsg+0xb5/0x6f0 [ 2357.676226][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] ? kmsan_get_metadata+0x116/0x180 [ 2357.676226][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.676226][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.676226][T12214] __do_fast_syscall_32+0x102/0x160 [ 2357.676226][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2357.676226][T12214] do_SYSENTER_32+0x73/0x90 [ 2357.676226][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.676226][T12214] RIP: 0023:0xf7f01549 [ 2357.676226][T12214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2357.676226][T12214] RSP: 002b:00000000f54b90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2357.676226][T12214] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2357.676226][T12214] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2357.676226][T12214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2357.676226][T12214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2357.676226][T12214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2357.676226][T12214] Uninit was stored to memory at: [ 2357.676226][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2357.676226][T12214] __msan_chain_origin+0x57/0xa0 [ 2357.676226][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2357.676226][T12214] get_compat_msghdr+0x108/0x2b0 [ 2357.676226][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2357.676226][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2357.676226][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.676226][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.676226][T12214] __do_fast_syscall_32+0x102/0x160 [ 2357.676226][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2357.676226][T12214] do_SYSENTER_32+0x73/0x90 [ 2357.676226][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.676226][T12214] [ 2357.676226][T12214] Uninit was stored to memory at: [ 2357.676226][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2357.676226][T12214] __msan_chain_origin+0x57/0xa0 [ 2357.676226][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2357.676226][T12214] get_compat_msghdr+0x108/0x2b0 [ 2357.676226][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2357.676226][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2357.676226][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.676226][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.676226][T12214] __do_fast_syscall_32+0x102/0x160 [ 2357.676226][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2357.676226][T12214] do_SYSENTER_32+0x73/0x90 [ 2357.676226][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.676226][T12214] [ 2357.676226][T12214] Uninit was stored to memory at: [ 2357.676226][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2357.676226][T12214] __msan_chain_origin+0x57/0xa0 [ 2357.676226][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2357.676226][T12214] get_compat_msghdr+0x108/0x2b0 [ 2357.676226][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2357.676226][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2357.676226][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.676226][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.676226][T12214] __do_fast_syscall_32+0x102/0x160 [ 2357.676226][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2357.676226][T12214] do_SYSENTER_32+0x73/0x90 [ 2357.676226][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.676226][T12214] [ 2357.676226][T12214] Uninit was stored to memory at: [ 2357.676226][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2357.676226][T12214] __msan_chain_origin+0x57/0xa0 [ 2357.676226][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2357.676226][T12214] get_compat_msghdr+0x108/0x2b0 [ 2357.676226][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2357.676226][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2357.676226][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.676226][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.676226][T12214] __do_fast_syscall_32+0x102/0x160 [ 2357.676226][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2357.676226][T12214] do_SYSENTER_32+0x73/0x90 [ 2357.676226][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.676226][T12214] [ 2357.676226][T12214] Uninit was stored to memory at: [ 2357.676226][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2357.676226][T12214] __msan_chain_origin+0x57/0xa0 [ 2357.676226][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2357.676226][T12214] get_compat_msghdr+0x108/0x2b0 [ 2357.676226][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2357.676226][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2357.676226][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.676226][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.676226][T12214] __do_fast_syscall_32+0x102/0x160 [ 2357.676226][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2357.676226][T12214] do_SYSENTER_32+0x73/0x90 [ 2357.676226][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.676226][T12214] [ 2357.676226][T12214] Uninit was stored to memory at: [ 2357.676226][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2357.676226][T12214] __msan_chain_origin+0x57/0xa0 [ 2357.676226][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2357.676226][T12214] get_compat_msghdr+0x108/0x2b0 [ 2357.676226][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2357.676226][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2357.676226][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.676226][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.676226][T12214] __do_fast_syscall_32+0x102/0x160 [ 2357.676226][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2357.676226][T12214] do_SYSENTER_32+0x73/0x90 [ 2357.676226][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.676226][T12214] [ 2357.676226][T12214] Uninit was stored to memory at: [ 2357.676226][T12214] kmsan_internal_chain_origin+0xad/0x130 [ 2357.676226][T12214] __msan_chain_origin+0x57/0xa0 [ 2357.676226][T12214] __get_compat_msghdr+0x6db/0x9d0 [ 2357.676226][T12214] get_compat_msghdr+0x108/0x2b0 [ 2357.676226][T12214] do_recvmmsg+0xdd1/0x22f0 [ 2357.676226][T12214] __sys_recvmmsg+0x519/0x6f0 [ 2357.676226][T12214] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2357.676226][T12214] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2357.676226][T12214] __do_fast_syscall_32+0x102/0x160 [ 2357.676226][T12214] do_fast_syscall_32+0x6a/0xc0 [ 2357.676226][T12214] do_SYSENTER_32+0x73/0x90 [ 2357.676226][T12214] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2357.676226][T12214] [ 2357.676226][T12214] Local variable ----msg_sys@do_recvmmsg created at: [ 2357.676226][T12214] do_recvmmsg+0xbf/0x22f0 [ 2357.676226][T12214] do_recvmmsg+0xbf/0x22f0 [ 2358.801599][T12188] not chained 1110000 origins [ 2358.806134][T12188] CPU: 0 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2358.806134][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2358.806134][T12188] Call Trace: [ 2358.826421][T12188] dump_stack+0x21c/0x280 [ 2358.826421][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2358.826421][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.826421][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2358.826421][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.856385][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2358.856385][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2358.856385][T12188] ? __wake_up+0x1fc/0x250 [ 2358.872606][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.872606][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2358.872606][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2358.886351][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.886351][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2358.886351][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2358.886351][T12188] ? _copy_from_user+0x1fd/0x300 [ 2358.886351][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.886351][T12188] __msan_chain_origin+0x57/0xa0 [ 2358.886351][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2358.886351][T12188] get_compat_msghdr+0x108/0x2b0 [ 2358.886351][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2358.886351][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.886351][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2358.886351][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.886351][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2358.886351][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2358.886351][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2358.886351][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2358.886351][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.886351][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2358.886351][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.886351][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.886351][T12188] __do_fast_syscall_32+0x102/0x160 [ 2358.886351][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2358.886351][T12188] do_SYSENTER_32+0x73/0x90 [ 2358.886351][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.886351][T12188] RIP: 0023:0xf7f01549 [ 2358.886351][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2358.886351][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2358.886351][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2358.886351][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2358.886351][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2358.886351][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2358.886351][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2358.886351][T12188] Uninit was stored to memory at: [ 2358.886351][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2358.886351][T12188] __msan_chain_origin+0x57/0xa0 [ 2358.886351][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2358.886351][T12188] get_compat_msghdr+0x108/0x2b0 [ 2358.886351][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2358.886351][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2358.886351][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.886351][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.886351][T12188] __do_fast_syscall_32+0x102/0x160 [ 2358.886351][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2358.886351][T12188] do_SYSENTER_32+0x73/0x90 [ 2358.886351][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.886351][T12188] [ 2358.886351][T12188] Uninit was stored to memory at: [ 2358.886351][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2358.886351][T12188] __msan_chain_origin+0x57/0xa0 [ 2358.886351][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2358.886351][T12188] get_compat_msghdr+0x108/0x2b0 [ 2358.886351][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2358.886351][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2358.886351][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.886351][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.886351][T12188] __do_fast_syscall_32+0x102/0x160 [ 2358.886351][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2358.886351][T12188] do_SYSENTER_32+0x73/0x90 [ 2358.886351][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.886351][T12188] [ 2358.886351][T12188] Uninit was stored to memory at: [ 2358.886351][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2358.886351][T12188] __msan_chain_origin+0x57/0xa0 [ 2358.886351][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2358.886351][T12188] get_compat_msghdr+0x108/0x2b0 [ 2358.886351][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2358.886351][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2358.886351][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.886351][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.886351][T12188] __do_fast_syscall_32+0x102/0x160 [ 2358.886351][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2358.886351][T12188] do_SYSENTER_32+0x73/0x90 [ 2358.886351][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.886351][T12188] [ 2358.886351][T12188] Uninit was stored to memory at: [ 2358.886351][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2358.886351][T12188] __msan_chain_origin+0x57/0xa0 [ 2358.886351][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2358.886351][T12188] get_compat_msghdr+0x108/0x2b0 [ 2358.886351][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2358.886351][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2358.886351][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.886351][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.886351][T12188] __do_fast_syscall_32+0x102/0x160 [ 2358.886351][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2358.886351][T12188] do_SYSENTER_32+0x73/0x90 [ 2358.886351][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.886351][T12188] [ 2358.886351][T12188] Uninit was stored to memory at: [ 2358.886351][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2358.886351][T12188] __msan_chain_origin+0x57/0xa0 [ 2358.886351][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2358.886351][T12188] get_compat_msghdr+0x108/0x2b0 [ 2358.886351][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2358.886351][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2358.886351][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.886351][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.886351][T12188] __do_fast_syscall_32+0x102/0x160 [ 2358.886351][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2358.886351][T12188] do_SYSENTER_32+0x73/0x90 [ 2358.886351][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.886351][T12188] [ 2358.886351][T12188] Uninit was stored to memory at: [ 2358.886351][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2358.886351][T12188] __msan_chain_origin+0x57/0xa0 [ 2358.886351][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2358.886351][T12188] get_compat_msghdr+0x108/0x2b0 [ 2358.886351][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2358.886351][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2358.886351][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.886351][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.886351][T12188] __do_fast_syscall_32+0x102/0x160 [ 2358.886351][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2358.886351][T12188] do_SYSENTER_32+0x73/0x90 [ 2358.886351][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.886351][T12188] [ 2358.886351][T12188] Uninit was stored to memory at: [ 2358.886351][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2358.886351][T12188] __msan_chain_origin+0x57/0xa0 [ 2358.886351][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2358.886351][T12188] get_compat_msghdr+0x108/0x2b0 [ 2358.886351][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2358.886351][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2358.886351][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2358.886351][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2358.886351][T12188] __do_fast_syscall_32+0x102/0x160 [ 2358.886351][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2358.886351][T12188] do_SYSENTER_32+0x73/0x90 [ 2358.886351][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2358.886351][T12188] [ 2358.886351][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2358.886351][T12188] do_recvmmsg+0xbf/0x22f0 [ 2358.886351][T12188] do_recvmmsg+0xbf/0x22f0 [ 2359.764578][T12188] not chained 1120000 origins [ 2359.766151][T12188] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 2359.766151][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.766151][T12188] Call Trace: [ 2359.766151][T12188] dump_stack+0x21c/0x280 [ 2359.766151][T12188] kmsan_internal_chain_origin+0x6f/0x130 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2359.766151][T12188] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2359.766151][T12188] ? __wake_up+0x1fc/0x250 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2359.766151][T12188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2359.766151][T12188] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2359.766151][T12188] ? _copy_from_user+0x1fd/0x300 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] __msan_chain_origin+0x57/0xa0 [ 2359.766151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2359.766151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2359.766151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] ? kmsan_internal_check_memory+0xb1/0x520 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] ? kmsan_internal_set_origin+0x85/0xc0 [ 2359.766151][T12188] ? __msan_poison_alloca+0xe9/0x110 [ 2359.766151][T12188] ? __sys_recvmmsg+0xb5/0x6f0 [ 2359.766151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] ? kmsan_get_metadata+0x116/0x180 [ 2359.766151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.766151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.766151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2359.766151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2359.766151][T12188] do_SYSENTER_32+0x73/0x90 [ 2359.766151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.766151][T12188] RIP: 0023:0xf7f01549 [ 2359.766151][T12188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2359.766151][T12188] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2359.766151][T12188] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020004d80 [ 2359.766151][T12188] RDX: 00000000ffffffff RSI: 000000000000000a RDI: 0000000000000000 [ 2359.766151][T12188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2359.766151][T12188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2359.766151][T12188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2359.766151][T12188] Uninit was stored to memory at: [ 2359.766151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2359.766151][T12188] __msan_chain_origin+0x57/0xa0 [ 2359.766151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2359.766151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2359.766151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2359.766151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2359.766151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.766151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.766151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2359.766151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2359.766151][T12188] do_SYSENTER_32+0x73/0x90 [ 2359.766151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.766151][T12188] [ 2359.766151][T12188] Uninit was stored to memory at: [ 2359.766151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2359.766151][T12188] __msan_chain_origin+0x57/0xa0 [ 2359.766151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2359.766151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2359.766151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2359.766151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2359.766151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.766151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.766151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2359.766151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2359.766151][T12188] do_SYSENTER_32+0x73/0x90 [ 2359.766151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.766151][T12188] [ 2359.766151][T12188] Uninit was stored to memory at: [ 2359.766151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2359.766151][T12188] __msan_chain_origin+0x57/0xa0 [ 2359.766151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2359.766151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2359.766151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2359.766151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2359.766151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.766151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.766151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2359.766151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2359.766151][T12188] do_SYSENTER_32+0x73/0x90 [ 2359.766151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.766151][T12188] [ 2359.766151][T12188] Uninit was stored to memory at: [ 2359.766151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2359.766151][T12188] __msan_chain_origin+0x57/0xa0 [ 2359.766151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2359.766151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2359.766151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2359.766151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2359.766151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.766151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.766151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2359.766151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2359.766151][T12188] do_SYSENTER_32+0x73/0x90 [ 2359.766151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.766151][T12188] [ 2359.766151][T12188] Uninit was stored to memory at: [ 2359.766151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2359.766151][T12188] __msan_chain_origin+0x57/0xa0 [ 2359.766151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2359.766151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2359.766151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2359.766151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2359.766151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.766151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.766151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2359.766151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2359.766151][T12188] do_SYSENTER_32+0x73/0x90 [ 2359.766151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.766151][T12188] [ 2359.766151][T12188] Uninit was stored to memory at: [ 2359.766151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2359.766151][T12188] __msan_chain_origin+0x57/0xa0 [ 2359.766151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2359.766151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2359.766151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2359.766151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2359.766151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.766151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.766151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2359.766151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2359.766151][T12188] do_SYSENTER_32+0x73/0x90 [ 2359.766151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.766151][T12188] [ 2359.766151][T12188] Uninit was stored to memory at: [ 2359.766151][T12188] kmsan_internal_chain_origin+0xad/0x130 [ 2359.766151][T12188] __msan_chain_origin+0x57/0xa0 [ 2359.766151][T12188] __get_compat_msghdr+0x6db/0x9d0 [ 2359.766151][T12188] get_compat_msghdr+0x108/0x2b0 [ 2359.766151][T12188] do_recvmmsg+0xdd1/0x22f0 [ 2359.766151][T12188] __sys_recvmmsg+0x519/0x6f0 [ 2359.766151][T12188] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2359.766151][T12188] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2359.766151][T12188] __do_fast_syscall_32+0x102/0x160 [ 2359.766151][T12188] do_fast_syscall_32+0x6a/0xc0 [ 2359.766151][T12188] do_SYSENTER_32+0x73/0x90 [ 2359.766151][T12188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2359.766151][T12188] [ 2359.766151][T12188] Local variable ----msg_sys@do_recvmmsg created at: [ 2359.766151][T12188] do_recvmmsg+0xbf/0x22f0 [ 2359.766151][T12188] do_recvmmsg+0xbf/0x22f0 04:07:42 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='sbsector=0xf']) 04:07:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x9, {0x0, 0xffffffff, 0x3, 0x0, 0x1}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:07:42 executing program 4: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000200)="f9", 0x1}], 0x2, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x12b0}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r4, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x0, 0x20, 0xf3, 0x1, 0x20, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, 0x7800, 0x7, 0x9, 0x3ff}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8918, &(0x7f0000000000)={@private2, 0x0, r9}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0xd4}, 0x9ba09d9f9c8bfd48) 04:07:42 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e00e05", 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @remote}}}}}}, 0x0) 04:07:42 executing program 5: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="00040000000001080000440000000000ffffff7f800000005a4d", 0x1a, 0x400}], 0x8040, &(0x7f0000000040)=ANY=[]) 04:07:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x1, 0x4000, 0xa1, 0x0, 0xffffffffffffffff, 0x0, [0x34, 0x7]}, 0x40) [ 2361.788514][T12256] input: syz1 as /devices/virtual/input/input346 04:07:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x6ee2, 0x100}}) 04:07:43 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) lseek(r0, 0x14, 0x0) 04:07:43 executing program 0: prctl$PR_SET_TIMERSLACK(0x1d, 0x7b) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "40177a", 0x18, 0x11, 0x0, @local, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "4cc475", 0x0, 'G6O'}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@loopback={0xff00000000000000}}, 0x20) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x38, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x3}]}}]}, 0x38}}, 0x0) 04:07:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x1, 0x4000, 0xa1, 0x0, 0xffffffffffffffff, 0x0, [0x34, 0x7]}, 0x40) [ 2362.913666][T12281] =====================================================