nt80_syscall_32+0x1d/0x30 [ 1298.609845][T23774] entry_INT80_compat+0x71/0x76 [ 1298.609845][T23774] [ 1298.609845][T23774] Uninit was stored to memory at: [ 1298.609845][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1298.609845][T23774] __msan_chain_origin+0x50/0x90 [ 1298.609845][T23774] __get_compat_msghdr+0x5be/0x890 [ 1298.609845][T23774] get_compat_msghdr+0x108/0x270 [ 1298.609845][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1298.609845][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1298.609845][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1298.609845][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1298.609845][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1298.609845][T23774] do_int80_syscall_32+0x1d/0x30 [ 1298.609845][T23774] entry_INT80_compat+0x71/0x76 [ 1298.609845][T23774] [ 1298.609845][T23774] Uninit was stored to memory at: [ 1298.609845][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1298.609845][T23774] __msan_chain_origin+0x50/0x90 [ 1298.609845][T23774] __get_compat_msghdr+0x5be/0x890 [ 1298.609845][T23774] get_compat_msghdr+0x108/0x270 [ 1298.609845][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1298.609845][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1298.609845][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1298.609845][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1298.609845][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1298.609845][T23774] do_int80_syscall_32+0x1d/0x30 [ 1298.609845][T23774] entry_INT80_compat+0x71/0x76 [ 1298.609845][T23774] [ 1298.609845][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1298.609845][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1298.609845][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1299.154934][T23768] not chained 3230000 origins [ 1299.159651][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1299.162598][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.162598][T23768] Call Trace: [ 1299.162598][T23768] dump_stack+0x1df/0x240 [ 1299.162598][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1299.162598][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1299.162598][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1299.162598][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1299.162598][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1299.162598][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1299.162598][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1299.162598][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1299.162598][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1299.162598][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1299.162598][T23768] ? _copy_from_user+0x15b/0x260 [ 1299.162598][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1299.162598][T23768] __msan_chain_origin+0x50/0x90 [ 1299.162598][T23768] __get_compat_msghdr+0x5be/0x890 [ 1299.162598][T23768] get_compat_msghdr+0x108/0x270 [ 1299.263642][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1299.263642][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1299.263642][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1299.263642][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1299.263642][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1299.263642][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1299.263642][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1299.263642][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1299.263642][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1299.263642][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1299.263642][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1299.263642][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1299.263642][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1299.263642][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1299.263642][T23768] do_int80_syscall_32+0x1d/0x30 [ 1299.263642][T23768] entry_INT80_compat+0x71/0x76 [ 1299.263642][T23768] RIP: 0023:0xf7f11549 [ 1299.263642][T23768] Code: Bad RIP value. [ 1299.263642][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1299.263642][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1299.263642][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1299.263642][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1299.263642][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1299.263642][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1299.263642][T23768] Uninit was stored to memory at: [ 1299.263642][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1299.263642][T23768] __msan_chain_origin+0x50/0x90 [ 1299.263642][T23768] __get_compat_msghdr+0x5be/0x890 [ 1299.263642][T23768] get_compat_msghdr+0x108/0x270 [ 1299.263642][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1299.263642][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1299.263642][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1299.263642][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1299.263642][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1299.263642][T23768] do_int80_syscall_32+0x1d/0x30 [ 1299.263642][T23768] entry_INT80_compat+0x71/0x76 [ 1299.263642][T23768] [ 1299.263642][T23768] Uninit was stored to memory at: [ 1299.263642][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1299.263642][T23768] __msan_chain_origin+0x50/0x90 [ 1299.263642][T23768] __get_compat_msghdr+0x5be/0x890 [ 1299.263642][T23768] get_compat_msghdr+0x108/0x270 [ 1299.263642][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1299.263642][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1299.263642][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1299.263642][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1299.263642][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1299.263642][T23768] do_int80_syscall_32+0x1d/0x30 [ 1299.263642][T23768] entry_INT80_compat+0x71/0x76 [ 1299.263642][T23768] [ 1299.263642][T23768] Uninit was stored to memory at: [ 1299.263642][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1299.263642][T23768] __msan_chain_origin+0x50/0x90 [ 1299.263642][T23768] __get_compat_msghdr+0x5be/0x890 [ 1299.263642][T23768] get_compat_msghdr+0x108/0x270 [ 1299.263642][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1299.263642][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1299.263642][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1299.263642][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1299.263642][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1299.263642][T23768] do_int80_syscall_32+0x1d/0x30 [ 1299.263642][T23768] entry_INT80_compat+0x71/0x76 [ 1299.263642][T23768] [ 1299.263642][T23768] Uninit was stored to memory at: [ 1299.263642][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1299.263642][T23768] __msan_chain_origin+0x50/0x90 [ 1299.263642][T23768] __get_compat_msghdr+0x5be/0x890 [ 1299.263642][T23768] get_compat_msghdr+0x108/0x270 [ 1299.263642][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1299.263642][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1299.263642][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1299.263642][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1299.263642][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1299.263642][T23768] do_int80_syscall_32+0x1d/0x30 [ 1299.263642][T23768] entry_INT80_compat+0x71/0x76 [ 1299.263642][T23768] [ 1299.263642][T23768] Uninit was stored to memory at: [ 1299.263642][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1299.263642][T23768] __msan_chain_origin+0x50/0x90 [ 1299.263642][T23768] __get_compat_msghdr+0x5be/0x890 [ 1299.263642][T23768] get_compat_msghdr+0x108/0x270 [ 1299.263642][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1299.263642][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1299.263642][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1299.263642][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1299.263642][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1299.263642][T23768] do_int80_syscall_32+0x1d/0x30 [ 1299.263642][T23768] entry_INT80_compat+0x71/0x76 [ 1299.263642][T23768] [ 1299.263642][T23768] Uninit was stored to memory at: [ 1299.263642][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1299.263642][T23768] __msan_chain_origin+0x50/0x90 [ 1299.263642][T23768] __get_compat_msghdr+0x5be/0x890 [ 1299.263642][T23768] get_compat_msghdr+0x108/0x270 [ 1299.263642][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1299.263642][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1299.263642][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1299.263642][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1299.263642][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1299.263642][T23768] do_int80_syscall_32+0x1d/0x30 [ 1299.263642][T23768] entry_INT80_compat+0x71/0x76 [ 1299.263642][T23768] [ 1299.263642][T23768] Uninit was stored to memory at: [ 1299.263642][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1299.263642][T23768] __msan_chain_origin+0x50/0x90 [ 1299.263642][T23768] __get_compat_msghdr+0x5be/0x890 [ 1299.263642][T23768] get_compat_msghdr+0x108/0x270 [ 1299.263642][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1299.263642][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1299.263642][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1299.263642][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1299.263642][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1299.263642][T23768] do_int80_syscall_32+0x1d/0x30 [ 1299.263642][T23768] entry_INT80_compat+0x71/0x76 [ 1299.263642][T23768] [ 1299.263642][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1299.263642][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1299.263642][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1300.062491][T23768] not chained 3240000 origins [ 1300.062603][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1300.062603][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.062603][T23768] Call Trace: [ 1300.062603][T23768] dump_stack+0x1df/0x240 [ 1300.093044][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1300.093044][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1300.093044][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1300.093044][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1300.093044][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1300.093044][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1300.093044][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1300.093044][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1300.093044][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1300.093044][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1300.093044][T23768] ? _copy_from_user+0x15b/0x260 [ 1300.093044][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1300.093044][T23768] __msan_chain_origin+0x50/0x90 [ 1300.093044][T23768] __get_compat_msghdr+0x5be/0x890 [ 1300.093044][T23768] get_compat_msghdr+0x108/0x270 [ 1300.093044][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1300.093044][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1300.093044][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1300.093044][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1300.093044][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1300.093044][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1300.093044][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1300.093044][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1300.093044][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1300.093044][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1300.093044][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1300.093044][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1300.093044][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1300.093044][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1300.093044][T23768] do_int80_syscall_32+0x1d/0x30 [ 1300.093044][T23768] entry_INT80_compat+0x71/0x76 [ 1300.093044][T23768] RIP: 0023:0xf7f11549 [ 1300.093044][T23768] Code: Bad RIP value. [ 1300.093044][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1300.093044][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1300.093044][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1300.093044][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1300.093044][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1300.093044][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1300.093044][T23768] Uninit was stored to memory at: [ 1300.093044][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1300.093044][T23768] __msan_chain_origin+0x50/0x90 [ 1300.093044][T23768] __get_compat_msghdr+0x5be/0x890 [ 1300.093044][T23768] get_compat_msghdr+0x108/0x270 [ 1300.093044][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1300.093044][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1300.093044][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1300.093044][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1300.093044][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1300.093044][T23768] do_int80_syscall_32+0x1d/0x30 [ 1300.093044][T23768] entry_INT80_compat+0x71/0x76 [ 1300.093044][T23768] [ 1300.093044][T23768] Uninit was stored to memory at: [ 1300.093044][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1300.093044][T23768] __msan_chain_origin+0x50/0x90 [ 1300.093044][T23768] __get_compat_msghdr+0x5be/0x890 [ 1300.093044][T23768] get_compat_msghdr+0x108/0x270 [ 1300.093044][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1300.093044][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1300.093044][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1300.093044][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1300.093044][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1300.093044][T23768] do_int80_syscall_32+0x1d/0x30 [ 1300.093044][T23768] entry_INT80_compat+0x71/0x76 [ 1300.093044][T23768] [ 1300.093044][T23768] Uninit was stored to memory at: [ 1300.093044][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1300.093044][T23768] __msan_chain_origin+0x50/0x90 [ 1300.093044][T23768] __get_compat_msghdr+0x5be/0x890 [ 1300.093044][T23768] get_compat_msghdr+0x108/0x270 [ 1300.093044][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1300.093044][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1300.093044][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1300.093044][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1300.093044][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1300.093044][T23768] do_int80_syscall_32+0x1d/0x30 [ 1300.093044][T23768] entry_INT80_compat+0x71/0x76 [ 1300.093044][T23768] [ 1300.093044][T23768] Uninit was stored to memory at: [ 1300.093044][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1300.093044][T23768] __msan_chain_origin+0x50/0x90 [ 1300.093044][T23768] __get_compat_msghdr+0x5be/0x890 [ 1300.093044][T23768] get_compat_msghdr+0x108/0x270 [ 1300.093044][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1300.093044][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1300.093044][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1300.093044][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1300.093044][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1300.093044][T23768] do_int80_syscall_32+0x1d/0x30 [ 1300.093044][T23768] entry_INT80_compat+0x71/0x76 [ 1300.093044][T23768] [ 1300.093044][T23768] Uninit was stored to memory at: [ 1300.093044][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1300.093044][T23768] __msan_chain_origin+0x50/0x90 [ 1300.093044][T23768] __get_compat_msghdr+0x5be/0x890 [ 1300.093044][T23768] get_compat_msghdr+0x108/0x270 [ 1300.093044][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1300.093044][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1300.093044][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1300.093044][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1300.093044][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1300.093044][T23768] do_int80_syscall_32+0x1d/0x30 [ 1300.093044][T23768] entry_INT80_compat+0x71/0x76 [ 1300.093044][T23768] [ 1300.093044][T23768] Uninit was stored to memory at: [ 1300.093044][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1300.093044][T23768] __msan_chain_origin+0x50/0x90 [ 1300.093044][T23768] __get_compat_msghdr+0x5be/0x890 [ 1300.093044][T23768] get_compat_msghdr+0x108/0x270 [ 1300.093044][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1300.093044][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1300.093044][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1300.093044][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1300.093044][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1300.093044][T23768] do_int80_syscall_32+0x1d/0x30 [ 1300.093044][T23768] entry_INT80_compat+0x71/0x76 [ 1300.093044][T23768] [ 1300.093044][T23768] Uninit was stored to memory at: [ 1300.093044][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1300.093044][T23768] __msan_chain_origin+0x50/0x90 [ 1300.093044][T23768] __get_compat_msghdr+0x5be/0x890 [ 1300.093044][T23768] get_compat_msghdr+0x108/0x270 [ 1300.093044][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1300.093044][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1300.093044][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1300.093044][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1300.093044][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1300.093044][T23768] do_int80_syscall_32+0x1d/0x30 [ 1300.093044][T23768] entry_INT80_compat+0x71/0x76 [ 1300.093044][T23768] [ 1300.093044][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1300.093044][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1300.093044][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1301.127547][T23774] not chained 3250000 origins [ 1301.132278][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1301.132592][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.132592][T23774] Call Trace: [ 1301.132592][T23774] dump_stack+0x1df/0x240 [ 1301.132592][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1301.132592][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1301.132592][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1301.132592][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1301.132592][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1301.132592][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1301.132592][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1301.132592][T23774] ? psi_group_change+0x1007/0x13c0 [ 1301.132592][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1301.132592][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1301.132592][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1301.132592][T23774] ? _copy_from_user+0x15b/0x260 [ 1301.132592][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1301.132592][T23774] __msan_chain_origin+0x50/0x90 [ 1301.132592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1301.132592][T23774] get_compat_msghdr+0x108/0x270 [ 1301.132592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1301.132592][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1301.132592][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1301.132592][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1301.132592][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1301.132592][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1301.132592][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1301.132592][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1301.132592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1301.132592][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1301.132592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1301.132592][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1301.132592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1301.132592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1301.132592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1301.132592][T23774] entry_INT80_compat+0x71/0x76 [ 1301.132592][T23774] RIP: 0023:0xf7f11549 [ 1301.132592][T23774] Code: Bad RIP value. [ 1301.132592][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1301.132592][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1301.132592][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.132592][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1301.132592][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1301.132592][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1301.132592][T23774] Uninit was stored to memory at: [ 1301.132592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1301.132592][T23774] __msan_chain_origin+0x50/0x90 [ 1301.132592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1301.132592][T23774] get_compat_msghdr+0x108/0x270 [ 1301.132592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1301.132592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1301.132592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1301.132592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1301.132592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1301.132592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1301.132592][T23774] entry_INT80_compat+0x71/0x76 [ 1301.132592][T23774] [ 1301.132592][T23774] Uninit was stored to memory at: [ 1301.132592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1301.132592][T23774] __msan_chain_origin+0x50/0x90 [ 1301.132592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1301.132592][T23774] get_compat_msghdr+0x108/0x270 [ 1301.132592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1301.132592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1301.132592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1301.132592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1301.132592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1301.132592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1301.132592][T23774] entry_INT80_compat+0x71/0x76 [ 1301.132592][T23774] [ 1301.132592][T23774] Uninit was stored to memory at: [ 1301.132592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1301.132592][T23774] __msan_chain_origin+0x50/0x90 [ 1301.132592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1301.132592][T23774] get_compat_msghdr+0x108/0x270 [ 1301.132592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1301.132592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1301.132592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1301.132592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1301.132592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1301.132592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1301.132592][T23774] entry_INT80_compat+0x71/0x76 [ 1301.132592][T23774] [ 1301.132592][T23774] Uninit was stored to memory at: [ 1301.132592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1301.132592][T23774] __msan_chain_origin+0x50/0x90 [ 1301.132592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1301.132592][T23774] get_compat_msghdr+0x108/0x270 [ 1301.132592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1301.132592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1301.132592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1301.132592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1301.132592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1301.132592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1301.132592][T23774] entry_INT80_compat+0x71/0x76 [ 1301.132592][T23774] [ 1301.132592][T23774] Uninit was stored to memory at: [ 1301.132592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1301.132592][T23774] __msan_chain_origin+0x50/0x90 [ 1301.132592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1301.132592][T23774] get_compat_msghdr+0x108/0x270 [ 1301.132592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1301.132592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1301.132592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1301.132592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1301.132592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1301.132592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1301.132592][T23774] entry_INT80_compat+0x71/0x76 [ 1301.132592][T23774] [ 1301.132592][T23774] Uninit was stored to memory at: [ 1301.132592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1301.132592][T23774] __msan_chain_origin+0x50/0x90 [ 1301.132592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1301.132592][T23774] get_compat_msghdr+0x108/0x270 [ 1301.132592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1301.132592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1301.132592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1301.132592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1301.132592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1301.132592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1301.132592][T23774] entry_INT80_compat+0x71/0x76 [ 1301.132592][T23774] [ 1301.132592][T23774] Uninit was stored to memory at: [ 1301.132592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1301.132592][T23774] __msan_chain_origin+0x50/0x90 [ 1301.132592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1301.132592][T23774] get_compat_msghdr+0x108/0x270 [ 1301.132592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1301.132592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1301.132592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1301.132592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1301.132592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1301.132592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1301.132592][T23774] entry_INT80_compat+0x71/0x76 [ 1301.132592][T23774] [ 1301.132592][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1301.132592][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1301.132592][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1302.384664][T23768] not chained 3260000 origins [ 1302.389390][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1302.392595][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.402749][T23768] Call Trace: [ 1302.402749][T23768] dump_stack+0x1df/0x240 [ 1302.402749][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1302.402749][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1302.402749][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1302.402749][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1302.402749][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1302.402749][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1302.402749][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1302.402749][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1302.402749][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1302.402749][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1302.402749][T23768] ? _copy_from_user+0x15b/0x260 [ 1302.402749][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1302.402749][T23768] __msan_chain_origin+0x50/0x90 [ 1302.402749][T23768] __get_compat_msghdr+0x5be/0x890 [ 1302.402749][T23768] get_compat_msghdr+0x108/0x270 [ 1302.402749][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1302.402749][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1302.402749][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1302.402749][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1302.402749][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1302.402749][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1302.402749][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1302.402749][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1302.402749][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1302.402749][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1302.402749][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1302.402749][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1302.402749][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1302.402749][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1302.402749][T23768] do_int80_syscall_32+0x1d/0x30 [ 1302.402749][T23768] entry_INT80_compat+0x71/0x76 [ 1302.402749][T23768] RIP: 0023:0xf7f11549 [ 1302.402749][T23768] Code: Bad RIP value. [ 1302.402749][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1302.402749][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1302.402749][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1302.402749][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1302.402749][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1302.402749][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1302.402749][T23768] Uninit was stored to memory at: [ 1302.402749][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1302.402749][T23768] __msan_chain_origin+0x50/0x90 [ 1302.402749][T23768] __get_compat_msghdr+0x5be/0x890 [ 1302.402749][T23768] get_compat_msghdr+0x108/0x270 [ 1302.402749][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1302.402749][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1302.402749][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1302.402749][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1302.402749][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1302.402749][T23768] do_int80_syscall_32+0x1d/0x30 [ 1302.402749][T23768] entry_INT80_compat+0x71/0x76 [ 1302.402749][T23768] [ 1302.402749][T23768] Uninit was stored to memory at: [ 1302.402749][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1302.402749][T23768] __msan_chain_origin+0x50/0x90 [ 1302.402749][T23768] __get_compat_msghdr+0x5be/0x890 [ 1302.402749][T23768] get_compat_msghdr+0x108/0x270 [ 1302.402749][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1302.402749][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1302.402749][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1302.402749][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1302.402749][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1302.402749][T23768] do_int80_syscall_32+0x1d/0x30 [ 1302.402749][T23768] entry_INT80_compat+0x71/0x76 [ 1302.402749][T23768] [ 1302.402749][T23768] Uninit was stored to memory at: [ 1302.402749][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1302.402749][T23768] __msan_chain_origin+0x50/0x90 [ 1302.402749][T23768] __get_compat_msghdr+0x5be/0x890 [ 1302.402749][T23768] get_compat_msghdr+0x108/0x270 [ 1302.402749][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1302.402749][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1302.402749][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1302.402749][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1302.402749][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1302.402749][T23768] do_int80_syscall_32+0x1d/0x30 [ 1302.402749][T23768] entry_INT80_compat+0x71/0x76 [ 1302.402749][T23768] [ 1302.402749][T23768] Uninit was stored to memory at: [ 1302.402749][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1302.402749][T23768] __msan_chain_origin+0x50/0x90 [ 1302.402749][T23768] __get_compat_msghdr+0x5be/0x890 [ 1302.402749][T23768] get_compat_msghdr+0x108/0x270 [ 1302.402749][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1302.402749][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1302.402749][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1302.402749][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1302.402749][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1302.402749][T23768] do_int80_syscall_32+0x1d/0x30 [ 1302.402749][T23768] entry_INT80_compat+0x71/0x76 [ 1302.402749][T23768] [ 1302.402749][T23768] Uninit was stored to memory at: [ 1302.402749][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1302.402749][T23768] __msan_chain_origin+0x50/0x90 [ 1302.402749][T23768] __get_compat_msghdr+0x5be/0x890 [ 1302.402749][T23768] get_compat_msghdr+0x108/0x270 [ 1302.402749][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1302.402749][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1302.402749][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1302.402749][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1302.402749][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1302.402749][T23768] do_int80_syscall_32+0x1d/0x30 [ 1302.402749][T23768] entry_INT80_compat+0x71/0x76 [ 1302.402749][T23768] [ 1302.402749][T23768] Uninit was stored to memory at: [ 1302.402749][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1302.402749][T23768] __msan_chain_origin+0x50/0x90 [ 1302.402749][T23768] __get_compat_msghdr+0x5be/0x890 [ 1302.402749][T23768] get_compat_msghdr+0x108/0x270 [ 1302.402749][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1302.402749][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1302.402749][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1302.402749][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1302.402749][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1302.402749][T23768] do_int80_syscall_32+0x1d/0x30 [ 1302.402749][T23768] entry_INT80_compat+0x71/0x76 [ 1302.402749][T23768] [ 1302.402749][T23768] Uninit was stored to memory at: [ 1302.402749][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1302.402749][T23768] __msan_chain_origin+0x50/0x90 [ 1302.402749][T23768] __get_compat_msghdr+0x5be/0x890 [ 1302.402749][T23768] get_compat_msghdr+0x108/0x270 [ 1302.402749][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1302.402749][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1302.402749][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1302.402749][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1302.402749][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1302.402749][T23768] do_int80_syscall_32+0x1d/0x30 [ 1302.402749][T23768] entry_INT80_compat+0x71/0x76 [ 1302.402749][T23768] [ 1302.402749][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1302.402749][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1302.402749][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1303.230180][T23774] not chained 3270000 origins [ 1303.232672][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1303.232672][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.232672][T23774] Call Trace: [ 1303.232672][T23774] dump_stack+0x1df/0x240 [ 1303.232672][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1303.266038][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1303.266038][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1303.266038][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1303.266038][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1303.286944][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1303.286944][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1303.286944][T23774] ? psi_group_change+0x1007/0x13c0 [ 1303.286944][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1303.286944][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1303.286944][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1303.286944][T23774] ? _copy_from_user+0x15b/0x260 [ 1303.286944][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1303.286944][T23774] __msan_chain_origin+0x50/0x90 [ 1303.286944][T23774] __get_compat_msghdr+0x5be/0x890 [ 1303.286944][T23774] get_compat_msghdr+0x108/0x270 [ 1303.286944][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1303.286944][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1303.286944][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1303.286944][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1303.286944][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1303.286944][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1303.286944][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1303.286944][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1303.286944][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1303.286944][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1303.286944][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1303.286944][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1303.286944][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1303.286944][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1303.286944][T23774] do_int80_syscall_32+0x1d/0x30 [ 1303.286944][T23774] entry_INT80_compat+0x71/0x76 [ 1303.286944][T23774] RIP: 0023:0xf7f11549 [ 1303.286944][T23774] Code: Bad RIP value. [ 1303.286944][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1303.286944][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1303.455157][ T1] systemd[1]: systemd-journald.service: State 'stop-final-sigterm' timed out. Killing. [ 1303.286944][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1303.286944][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1303.484500][ T1] systemd[1]: systemd-journald.service: Killing process 20140 (systemd-journal) with signal SIGKILL. [ 1303.286944][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1303.286944][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1303.286944][T23774] Uninit was stored to memory at: [ 1303.286944][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1303.286944][T23774] __msan_chain_origin+0x50/0x90 [ 1303.286944][T23774] __get_compat_msghdr+0x5be/0x890 [ 1303.286944][T23774] get_compat_msghdr+0x108/0x270 [ 1303.286944][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1303.286944][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1303.286944][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1303.286944][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1303.286944][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1303.286944][T23774] do_int80_syscall_32+0x1d/0x30 [ 1303.286944][T23774] entry_INT80_compat+0x71/0x76 [ 1303.286944][T23774] [ 1303.286944][T23774] Uninit was stored to memory at: [ 1303.286944][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1303.286944][T23774] __msan_chain_origin+0x50/0x90 [ 1303.286944][T23774] __get_compat_msghdr+0x5be/0x890 [ 1303.286944][T23774] get_compat_msghdr+0x108/0x270 [ 1303.286944][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1303.286944][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1303.286944][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1303.286944][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1303.286944][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1303.286944][T23774] do_int80_syscall_32+0x1d/0x30 [ 1303.286944][T23774] entry_INT80_compat+0x71/0x76 [ 1303.286944][T23774] [ 1303.286944][T23774] Uninit was stored to memory at: [ 1303.286944][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1303.286944][T23774] __msan_chain_origin+0x50/0x90 [ 1303.286944][T23774] __get_compat_msghdr+0x5be/0x890 [ 1303.286944][T23774] get_compat_msghdr+0x108/0x270 [ 1303.286944][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1303.286944][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1303.286944][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1303.286944][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1303.286944][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1303.286944][T23774] do_int80_syscall_32+0x1d/0x30 [ 1303.286944][T23774] entry_INT80_compat+0x71/0x76 [ 1303.286944][T23774] [ 1303.286944][T23774] Uninit was stored to memory at: [ 1303.286944][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1303.286944][T23774] __msan_chain_origin+0x50/0x90 [ 1303.286944][T23774] __get_compat_msghdr+0x5be/0x890 [ 1303.286944][T23774] get_compat_msghdr+0x108/0x270 [ 1303.286944][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1303.286944][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1303.286944][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1303.286944][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1303.286944][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1303.286944][T23774] do_int80_syscall_32+0x1d/0x30 [ 1303.286944][T23774] entry_INT80_compat+0x71/0x76 [ 1303.286944][T23774] [ 1303.286944][T23774] Uninit was stored to memory at: [ 1303.286944][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1303.286944][T23774] __msan_chain_origin+0x50/0x90 [ 1303.286944][T23774] __get_compat_msghdr+0x5be/0x890 [ 1303.286944][T23774] get_compat_msghdr+0x108/0x270 [ 1303.286944][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1303.286944][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1303.286944][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1303.286944][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1303.286944][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1303.286944][T23774] do_int80_syscall_32+0x1d/0x30 [ 1303.286944][T23774] entry_INT80_compat+0x71/0x76 [ 1303.286944][T23774] [ 1303.286944][T23774] Uninit was stored to memory at: [ 1303.286944][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1303.286944][T23774] __msan_chain_origin+0x50/0x90 [ 1303.871334][T23774] __get_compat_msghdr+0x5be/0x890 [ 1303.871334][T23774] get_compat_msghdr+0x108/0x270 [ 1303.871334][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1303.871334][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1303.871334][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1303.871334][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1303.871334][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1303.871334][T23774] do_int80_syscall_32+0x1d/0x30 [ 1303.871334][T23774] entry_INT80_compat+0x71/0x76 [ 1303.871334][T23774] [ 1303.871334][T23774] Uninit was stored to memory at: [ 1303.871334][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1303.871334][T23774] __msan_chain_origin+0x50/0x90 [ 1303.871334][T23774] __get_compat_msghdr+0x5be/0x890 [ 1303.871334][T23774] get_compat_msghdr+0x108/0x270 [ 1303.871334][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1303.871334][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1303.871334][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1303.871334][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1303.871334][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1303.871334][T23774] do_int80_syscall_32+0x1d/0x30 [ 1303.871334][T23774] entry_INT80_compat+0x71/0x76 [ 1303.871334][T23774] [ 1303.871334][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1303.871334][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1303.871334][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1304.109529][ T1] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1304.142358][ T1] systemd[1]: Failed to start Journal Service. [ 1304.175790][ T1] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1304.193821][ T1] systemd[1]: systemd-journald.service: Failed with result 'timeout'. [ 1304.215526][ T1] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1304.248215][ T1] systemd[1]: Stopped Journal Service. [ 1304.291594][T23774] not chained 3280000 origins [ 1304.292600][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1304.292600][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.292600][T23774] Call Trace: [ 1304.292600][T23774] dump_stack+0x1df/0x240 [ 1304.292600][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1304.292600][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1304.292600][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1304.292600][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1304.292600][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1304.292600][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1304.292600][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1304.292600][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1304.292600][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1304.292600][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1304.292600][T23774] ? _copy_from_user+0x15b/0x260 [ 1304.292600][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1304.292600][T23774] __msan_chain_origin+0x50/0x90 [ 1304.292600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1304.292600][T23774] get_compat_msghdr+0x108/0x270 [ 1304.292600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1304.292600][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1304.292600][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1304.292600][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1304.292600][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1304.292600][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1304.292600][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1304.292600][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1304.292600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1304.292600][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1304.292600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1304.292600][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1304.292600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1304.292600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1304.292600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1304.292600][T23774] entry_INT80_compat+0x71/0x76 [ 1304.292600][T23774] RIP: 0023:0xf7f11549 [ 1304.292600][T23774] Code: Bad RIP value. [ 1304.292600][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1304.292600][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1304.292600][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1304.292600][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1304.292600][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1304.292600][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1304.292600][T23774] Uninit was stored to memory at: [ 1304.292600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1304.292600][T23774] __msan_chain_origin+0x50/0x90 [ 1304.292600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1304.292600][T23774] get_compat_msghdr+0x108/0x270 [ 1304.292600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1304.292600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1304.292600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1304.292600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1304.292600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1304.292600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1304.292600][T23774] entry_INT80_compat+0x71/0x76 [ 1304.292600][T23774] [ 1304.292600][T23774] Uninit was stored to memory at: [ 1304.292600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1304.292600][T23774] __msan_chain_origin+0x50/0x90 [ 1304.292600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1304.292600][T23774] get_compat_msghdr+0x108/0x270 [ 1304.292600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1304.292600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1304.292600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1304.292600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1304.292600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1304.292600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1304.292600][T23774] entry_INT80_compat+0x71/0x76 [ 1304.292600][T23774] [ 1304.292600][T23774] Uninit was stored to memory at: [ 1304.292600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1304.292600][T23774] __msan_chain_origin+0x50/0x90 [ 1304.292600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1304.292600][T23774] get_compat_msghdr+0x108/0x270 [ 1304.292600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1304.292600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1304.292600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1304.292600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1304.292600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1304.292600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1304.292600][T23774] entry_INT80_compat+0x71/0x76 [ 1304.292600][T23774] [ 1304.292600][T23774] Uninit was stored to memory at: [ 1304.292600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1304.292600][T23774] __msan_chain_origin+0x50/0x90 [ 1304.292600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1304.292600][T23774] get_compat_msghdr+0x108/0x270 [ 1304.292600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1304.292600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1304.292600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1304.292600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1304.292600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1304.292600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1304.292600][T23774] entry_INT80_compat+0x71/0x76 [ 1304.292600][T23774] [ 1304.292600][T23774] Uninit was stored to memory at: [ 1304.292600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1304.292600][T23774] __msan_chain_origin+0x50/0x90 [ 1304.292600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1304.292600][T23774] get_compat_msghdr+0x108/0x270 [ 1304.292600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1304.292600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1304.292600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1304.292600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1304.292600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1304.292600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1304.292600][T23774] entry_INT80_compat+0x71/0x76 [ 1304.292600][T23774] [ 1304.292600][T23774] Uninit was stored to memory at: [ 1304.292600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1304.292600][T23774] __msan_chain_origin+0x50/0x90 [ 1304.292600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1304.292600][T23774] get_compat_msghdr+0x108/0x270 [ 1304.292600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1304.292600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1304.292600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1304.292600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1304.292600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1304.292600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1304.292600][T23774] entry_INT80_compat+0x71/0x76 [ 1304.292600][T23774] [ 1304.292600][T23774] Uninit was stored to memory at: [ 1304.292600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1304.292600][T23774] __msan_chain_origin+0x50/0x90 [ 1304.292600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1304.292600][T23774] get_compat_msghdr+0x108/0x270 [ 1304.292600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1304.292600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1304.292600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1304.292600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1304.292600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1304.292600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1304.292600][T23774] entry_INT80_compat+0x71/0x76 [ 1304.292600][T23774] [ 1304.292600][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1304.292600][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1304.292600][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1305.039913][ T1] systemd[1]: Starting Journal Service... [ 1305.221483][T23768] not chained 3290000 origins [ 1305.222596][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1305.222596][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1305.222596][T23768] Call Trace: [ 1305.222596][T23768] dump_stack+0x1df/0x240 [ 1305.222596][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1305.253827][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1305.253827][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1305.253827][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1305.253827][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1305.253827][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1305.253827][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1305.253827][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1305.253827][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1305.253827][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1305.253827][T23768] ? _copy_from_user+0x15b/0x260 [ 1305.253827][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1305.253827][T23768] __msan_chain_origin+0x50/0x90 [ 1305.253827][T23768] __get_compat_msghdr+0x5be/0x890 [ 1305.253827][T23768] get_compat_msghdr+0x108/0x270 [ 1305.253827][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1305.253827][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1305.253827][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1305.253827][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1305.253827][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1305.253827][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1305.253827][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1305.253827][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1305.253827][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1305.253827][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1305.253827][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1305.253827][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1305.253827][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1305.253827][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1305.253827][T23768] do_int80_syscall_32+0x1d/0x30 [ 1305.253827][T23768] entry_INT80_compat+0x71/0x76 [ 1305.253827][T23768] RIP: 0023:0xf7f11549 [ 1305.253827][T23768] Code: Bad RIP value. [ 1305.253827][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1305.253827][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1305.253827][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1305.253827][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1305.253827][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1305.253827][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1305.253827][T23768] Uninit was stored to memory at: [ 1305.253827][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1305.253827][T23768] __msan_chain_origin+0x50/0x90 [ 1305.253827][T23768] __get_compat_msghdr+0x5be/0x890 [ 1305.253827][T23768] get_compat_msghdr+0x108/0x270 [ 1305.253827][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1305.253827][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1305.253827][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1305.253827][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1305.253827][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1305.253827][T23768] do_int80_syscall_32+0x1d/0x30 [ 1305.253827][T23768] entry_INT80_compat+0x71/0x76 [ 1305.253827][T23768] [ 1305.253827][T23768] Uninit was stored to memory at: [ 1305.253827][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1305.253827][T23768] __msan_chain_origin+0x50/0x90 [ 1305.253827][T23768] __get_compat_msghdr+0x5be/0x890 [ 1305.253827][T23768] get_compat_msghdr+0x108/0x270 [ 1305.253827][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1305.253827][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1305.253827][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1305.253827][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1305.253827][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1305.253827][T23768] do_int80_syscall_32+0x1d/0x30 [ 1305.253827][T23768] entry_INT80_compat+0x71/0x76 [ 1305.253827][T23768] [ 1305.253827][T23768] Uninit was stored to memory at: [ 1305.253827][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1305.253827][T23768] __msan_chain_origin+0x50/0x90 [ 1305.253827][T23768] __get_compat_msghdr+0x5be/0x890 [ 1305.253827][T23768] get_compat_msghdr+0x108/0x270 [ 1305.253827][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1305.665037][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1305.665037][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1305.665037][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1305.665037][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1305.665037][T23768] do_int80_syscall_32+0x1d/0x30 [ 1305.665037][T23768] entry_INT80_compat+0x71/0x76 [ 1305.665037][T23768] [ 1305.665037][T23768] Uninit was stored to memory at: [ 1305.665037][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1305.665037][T23768] __msan_chain_origin+0x50/0x90 [ 1305.665037][T23768] __get_compat_msghdr+0x5be/0x890 [ 1305.665037][T23768] get_compat_msghdr+0x108/0x270 [ 1305.665037][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1305.665037][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1305.665037][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1305.743213][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1305.743213][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1305.743213][T23768] do_int80_syscall_32+0x1d/0x30 [ 1305.743213][T23768] entry_INT80_compat+0x71/0x76 [ 1305.743213][T23768] [ 1305.743213][T23768] Uninit was stored to memory at: [ 1305.743213][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1305.743213][T23768] __msan_chain_origin+0x50/0x90 [ 1305.743213][T23768] __get_compat_msghdr+0x5be/0x890 [ 1305.743213][T23768] get_compat_msghdr+0x108/0x270 [ 1305.743213][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1305.743213][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1305.743213][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1305.743213][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1305.743213][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1305.743213][T23768] do_int80_syscall_32+0x1d/0x30 [ 1305.743213][T23768] entry_INT80_compat+0x71/0x76 [ 1305.743213][T23768] [ 1305.743213][T23768] Uninit was stored to memory at: [ 1305.743213][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1305.743213][T23768] __msan_chain_origin+0x50/0x90 [ 1305.743213][T23768] __get_compat_msghdr+0x5be/0x890 [ 1305.743213][T23768] get_compat_msghdr+0x108/0x270 [ 1305.743213][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1305.743213][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1305.743213][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1305.743213][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1305.743213][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1305.743213][T23768] do_int80_syscall_32+0x1d/0x30 [ 1305.743213][T23768] entry_INT80_compat+0x71/0x76 [ 1305.743213][T23768] [ 1305.743213][T23768] Uninit was stored to memory at: [ 1305.743213][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1305.743213][T23768] __msan_chain_origin+0x50/0x90 [ 1305.743213][T23768] __get_compat_msghdr+0x5be/0x890 [ 1305.743213][T23768] get_compat_msghdr+0x108/0x270 [ 1305.743213][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1305.743213][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1305.743213][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1305.743213][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1305.743213][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1305.743213][T23768] do_int80_syscall_32+0x1d/0x30 [ 1305.743213][T23768] entry_INT80_compat+0x71/0x76 [ 1305.743213][T23768] [ 1305.743213][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1305.743213][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1305.743213][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1306.179741][T23774] not chained 3300000 origins [ 1306.182785][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1306.182785][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.182785][T23774] Call Trace: [ 1306.182785][T23774] dump_stack+0x1df/0x240 [ 1306.182785][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1306.182785][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1306.182785][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1306.182785][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1306.182785][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1306.182785][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1306.182785][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1306.182785][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1306.182785][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1306.182785][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1306.182785][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1306.182785][T23774] ? _copy_from_user+0x15b/0x260 [ 1306.182785][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1306.182785][T23774] __msan_chain_origin+0x50/0x90 [ 1306.182785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1306.182785][T23774] get_compat_msghdr+0x108/0x270 [ 1306.182785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1306.182785][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1306.182785][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1306.182785][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1306.182785][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1306.182785][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1306.182785][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1306.182785][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1306.182785][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1306.182785][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1306.182785][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1306.182785][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1306.182785][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1306.182785][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1306.182785][T23774] do_int80_syscall_32+0x1d/0x30 [ 1306.182785][T23774] entry_INT80_compat+0x71/0x76 [ 1306.182785][T23774] RIP: 0023:0xf7f11549 [ 1306.182785][T23774] Code: Bad RIP value. [ 1306.182785][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1306.182785][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1306.182785][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.182785][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1306.182785][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1306.182785][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.182785][T23774] Uninit was stored to memory at: [ 1306.182785][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1306.182785][T23774] __msan_chain_origin+0x50/0x90 [ 1306.182785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1306.182785][T23774] get_compat_msghdr+0x108/0x270 [ 1306.182785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1306.182785][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1306.182785][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1306.182785][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1306.182785][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1306.182785][T23774] do_int80_syscall_32+0x1d/0x30 [ 1306.182785][T23774] entry_INT80_compat+0x71/0x76 [ 1306.182785][T23774] [ 1306.182785][T23774] Uninit was stored to memory at: [ 1306.182785][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1306.182785][T23774] __msan_chain_origin+0x50/0x90 [ 1306.182785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1306.182785][T23774] get_compat_msghdr+0x108/0x270 [ 1306.182785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1306.182785][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1306.182785][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1306.182785][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1306.182785][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1306.182785][T23774] do_int80_syscall_32+0x1d/0x30 [ 1306.182785][T23774] entry_INT80_compat+0x71/0x76 [ 1306.182785][T23774] [ 1306.182785][T23774] Uninit was stored to memory at: [ 1306.182785][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1306.182785][T23774] __msan_chain_origin+0x50/0x90 [ 1306.182785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1306.182785][T23774] get_compat_msghdr+0x108/0x270 [ 1306.182785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1306.182785][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1306.182785][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1306.182785][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1306.182785][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1306.182785][T23774] do_int80_syscall_32+0x1d/0x30 [ 1306.182785][T23774] entry_INT80_compat+0x71/0x76 [ 1306.182785][T23774] [ 1306.182785][T23774] Uninit was stored to memory at: [ 1306.182785][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1306.182785][T23774] __msan_chain_origin+0x50/0x90 [ 1306.182785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1306.182785][T23774] get_compat_msghdr+0x108/0x270 [ 1306.182785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1306.182785][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1306.182785][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1306.182785][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1306.182785][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1306.182785][T23774] do_int80_syscall_32+0x1d/0x30 [ 1306.182785][T23774] entry_INT80_compat+0x71/0x76 [ 1306.182785][T23774] [ 1306.182785][T23774] Uninit was stored to memory at: [ 1306.182785][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1306.182785][T23774] __msan_chain_origin+0x50/0x90 [ 1306.182785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1306.182785][T23774] get_compat_msghdr+0x108/0x270 [ 1306.182785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1306.182785][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1306.182785][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1306.182785][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1306.182785][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1306.182785][T23774] do_int80_syscall_32+0x1d/0x30 [ 1306.182785][T23774] entry_INT80_compat+0x71/0x76 [ 1306.182785][T23774] [ 1306.182785][T23774] Uninit was stored to memory at: [ 1306.182785][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1306.182785][T23774] __msan_chain_origin+0x50/0x90 [ 1306.182785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1306.182785][T23774] get_compat_msghdr+0x108/0x270 [ 1306.182785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1306.182785][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1306.182785][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1306.182785][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1306.182785][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1306.182785][T23774] do_int80_syscall_32+0x1d/0x30 [ 1306.182785][T23774] entry_INT80_compat+0x71/0x76 [ 1306.182785][T23774] [ 1306.182785][T23774] Uninit was stored to memory at: [ 1306.182785][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1306.182785][T23774] __msan_chain_origin+0x50/0x90 [ 1306.182785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1306.182785][T23774] get_compat_msghdr+0x108/0x270 [ 1306.182785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1306.182785][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1306.182785][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1306.182785][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1306.182785][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1306.182785][T23774] do_int80_syscall_32+0x1d/0x30 [ 1306.182785][T23774] entry_INT80_compat+0x71/0x76 [ 1306.182785][T23774] [ 1306.182785][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1306.182785][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1306.182785][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1307.238206][T23768] not chained 3310000 origins [ 1307.242597][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1307.242597][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1307.242597][T23768] Call Trace: [ 1307.242597][T23768] dump_stack+0x1df/0x240 [ 1307.242597][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1307.242597][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1307.242597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1307.242597][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1307.242597][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1307.242597][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1307.242597][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1307.242597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1307.242597][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1307.242597][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1307.242597][T23768] ? _copy_from_user+0x15b/0x260 [ 1307.242597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1307.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1307.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1307.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1307.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1307.242597][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1307.242597][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1307.362697][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1307.362697][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1307.362697][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1307.362697][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1307.362697][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1307.362697][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1307.362697][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1307.362697][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1307.362697][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1307.362697][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1307.362697][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1307.362697][T23768] do_int80_syscall_32+0x1d/0x30 [ 1307.432784][T23768] entry_INT80_compat+0x71/0x76 [ 1307.432784][T23768] RIP: 0023:0xf7f11549 [ 1307.432784][T23768] Code: Bad RIP value. [ 1307.432784][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1307.432784][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1307.432784][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1307.432784][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1307.432784][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1307.432784][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1307.432784][T23768] Uninit was stored to memory at: [ 1307.432784][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1307.432784][T23768] __msan_chain_origin+0x50/0x90 [ 1307.432784][T23768] __get_compat_msghdr+0x5be/0x890 [ 1307.432784][T23768] get_compat_msghdr+0x108/0x270 [ 1307.432784][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1307.432784][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1307.432784][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1307.432784][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1307.432784][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1307.432784][T23768] do_int80_syscall_32+0x1d/0x30 [ 1307.432784][T23768] entry_INT80_compat+0x71/0x76 [ 1307.432784][T23768] [ 1307.432784][T23768] Uninit was stored to memory at: [ 1307.560191][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1307.560191][T23768] __msan_chain_origin+0x50/0x90 [ 1307.560191][T23768] __get_compat_msghdr+0x5be/0x890 [ 1307.560191][T23768] get_compat_msghdr+0x108/0x270 [ 1307.560191][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1307.560191][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1307.560191][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1307.560191][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1307.603797][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1307.603797][T23768] do_int80_syscall_32+0x1d/0x30 [ 1307.603797][T23768] entry_INT80_compat+0x71/0x76 [ 1307.603797][T23768] [ 1307.603797][T23768] Uninit was stored to memory at: [ 1307.603797][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1307.603797][T23768] __msan_chain_origin+0x50/0x90 [ 1307.603797][T23768] __get_compat_msghdr+0x5be/0x890 [ 1307.603797][T23768] get_compat_msghdr+0x108/0x270 [ 1307.603797][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1307.603797][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1307.603797][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1307.603797][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1307.603797][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1307.603797][T23768] do_int80_syscall_32+0x1d/0x30 [ 1307.603797][T23768] entry_INT80_compat+0x71/0x76 [ 1307.603797][T23768] [ 1307.603797][T23768] Uninit was stored to memory at: [ 1307.603797][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1307.603797][T23768] __msan_chain_origin+0x50/0x90 [ 1307.603797][T23768] __get_compat_msghdr+0x5be/0x890 [ 1307.603797][T23768] get_compat_msghdr+0x108/0x270 [ 1307.603797][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1307.603797][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1307.603797][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1307.603797][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1307.603797][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1307.603797][T23768] do_int80_syscall_32+0x1d/0x30 [ 1307.603797][T23768] entry_INT80_compat+0x71/0x76 [ 1307.603797][T23768] [ 1307.603797][T23768] Uninit was stored to memory at: [ 1307.603797][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1307.603797][T23768] __msan_chain_origin+0x50/0x90 [ 1307.603797][T23768] __get_compat_msghdr+0x5be/0x890 [ 1307.603797][T23768] get_compat_msghdr+0x108/0x270 [ 1307.603797][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1307.603797][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1307.603797][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1307.603797][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1307.603797][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1307.603797][T23768] do_int80_syscall_32+0x1d/0x30 [ 1307.603797][T23768] entry_INT80_compat+0x71/0x76 [ 1307.603797][T23768] [ 1307.603797][T23768] Uninit was stored to memory at: [ 1307.603797][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1307.603797][T23768] __msan_chain_origin+0x50/0x90 [ 1307.603797][T23768] __get_compat_msghdr+0x5be/0x890 [ 1307.603797][T23768] get_compat_msghdr+0x108/0x270 [ 1307.603797][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1307.603797][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1307.603797][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1307.603797][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1307.603797][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1307.603797][T23768] do_int80_syscall_32+0x1d/0x30 [ 1307.603797][T23768] entry_INT80_compat+0x71/0x76 [ 1307.603797][T23768] [ 1307.603797][T23768] Uninit was stored to memory at: [ 1307.603797][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1307.603797][T23768] __msan_chain_origin+0x50/0x90 [ 1307.603797][T23768] __get_compat_msghdr+0x5be/0x890 [ 1307.603797][T23768] get_compat_msghdr+0x108/0x270 [ 1307.603797][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1307.603797][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1307.603797][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1307.603797][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1307.603797][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1307.603797][T23768] do_int80_syscall_32+0x1d/0x30 [ 1307.603797][T23768] entry_INT80_compat+0x71/0x76 [ 1307.603797][T23768] [ 1307.603797][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1307.603797][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1307.603797][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1308.003111][T23894] systemd-journald[23894]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1308.013785][T23768] not chained 3320000 origins [ 1308.022623][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1308.030609][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.030609][T23768] Call Trace: [ 1308.030609][T23768] dump_stack+0x1df/0x240 [ 1308.030609][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1308.030609][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1308.030609][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1308.030609][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1308.030609][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1308.030609][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1308.030609][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1308.030609][T23768] ? psi_group_change+0x1007/0x13c0 [ 1308.030609][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1308.030609][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1308.030609][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1308.030609][T23768] ? _copy_from_user+0x15b/0x260 [ 1308.030609][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1308.030609][T23768] __msan_chain_origin+0x50/0x90 [ 1308.030609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.030609][T23768] get_compat_msghdr+0x108/0x270 [ 1308.030609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.030609][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1308.030609][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1308.030609][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1308.030609][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1308.030609][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1308.030609][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1308.030609][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1308.030609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.030609][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1308.030609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.030609][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1308.030609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.030609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.030609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.030609][T23768] entry_INT80_compat+0x71/0x76 [ 1308.030609][T23768] RIP: 0023:0xf7f11549 [ 1308.030609][T23768] Code: Bad RIP value. [ 1308.030609][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1308.030609][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1308.030609][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1308.030609][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1308.030609][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1308.030609][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.030609][T23768] Uninit was stored to memory at: [ 1308.030609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1308.030609][T23768] __msan_chain_origin+0x50/0x90 [ 1308.030609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.030609][T23768] get_compat_msghdr+0x108/0x270 [ 1308.030609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.030609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.030609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.030609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.030609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.030609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.030609][T23768] entry_INT80_compat+0x71/0x76 [ 1308.030609][T23768] [ 1308.030609][T23768] Uninit was stored to memory at: [ 1308.030609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1308.030609][T23768] __msan_chain_origin+0x50/0x90 [ 1308.030609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.030609][T23768] get_compat_msghdr+0x108/0x270 [ 1308.030609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.030609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.030609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.030609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.030609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.030609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.030609][T23768] entry_INT80_compat+0x71/0x76 [ 1308.030609][T23768] [ 1308.030609][T23768] Uninit was stored to memory at: [ 1308.030609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1308.030609][T23768] __msan_chain_origin+0x50/0x90 [ 1308.030609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.030609][T23768] get_compat_msghdr+0x108/0x270 [ 1308.030609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.030609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.030609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.030609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.030609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.030609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.030609][T23768] entry_INT80_compat+0x71/0x76 [ 1308.030609][T23768] [ 1308.030609][T23768] Uninit was stored to memory at: [ 1308.030609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1308.030609][T23768] __msan_chain_origin+0x50/0x90 [ 1308.030609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.030609][T23768] get_compat_msghdr+0x108/0x270 [ 1308.030609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.030609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.030609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.030609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.030609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.030609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.030609][T23768] entry_INT80_compat+0x71/0x76 [ 1308.030609][T23768] [ 1308.030609][T23768] Uninit was stored to memory at: [ 1308.030609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1308.030609][T23768] __msan_chain_origin+0x50/0x90 [ 1308.030609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.030609][T23768] get_compat_msghdr+0x108/0x270 [ 1308.030609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.030609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.030609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.030609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.030609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.030609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.030609][T23768] entry_INT80_compat+0x71/0x76 [ 1308.030609][T23768] [ 1308.030609][T23768] Uninit was stored to memory at: [ 1308.030609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1308.030609][T23768] __msan_chain_origin+0x50/0x90 [ 1308.030609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.030609][T23768] get_compat_msghdr+0x108/0x270 [ 1308.030609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.030609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.030609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.030609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.030609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.030609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.030609][T23768] entry_INT80_compat+0x71/0x76 [ 1308.030609][T23768] [ 1308.030609][T23768] Uninit was stored to memory at: [ 1308.030609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1308.030609][T23768] __msan_chain_origin+0x50/0x90 [ 1308.030609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.030609][T23768] get_compat_msghdr+0x108/0x270 [ 1308.030609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.030609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.030609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.030609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.030609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.030609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.030609][T23768] entry_INT80_compat+0x71/0x76 [ 1308.030609][T23768] [ 1308.030609][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1308.030609][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1308.030609][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1308.964097][T23768] not chained 3330000 origins [ 1308.968817][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1308.972590][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.982734][T23768] Call Trace: [ 1308.982734][T23768] dump_stack+0x1df/0x240 [ 1308.982734][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1308.982734][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1308.982734][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1308.982734][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1308.982734][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1308.982734][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1308.982734][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1308.982734][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1308.982734][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1308.982734][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1308.982734][T23768] ? _copy_from_user+0x15b/0x260 [ 1308.982734][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1308.982734][T23768] __msan_chain_origin+0x50/0x90 [ 1308.982734][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.982734][T23768] get_compat_msghdr+0x108/0x270 [ 1308.982734][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1308.982734][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1308.982734][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1308.982734][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1308.982734][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1308.982734][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1308.982734][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1308.982734][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1308.982734][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1308.982734][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1308.982734][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1308.982734][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1308.982734][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1308.982734][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1308.982734][T23768] do_int80_syscall_32+0x1d/0x30 [ 1308.982734][T23768] entry_INT80_compat+0x71/0x76 [ 1308.982734][T23768] RIP: 0023:0xf7f11549 [ 1308.982734][T23768] Code: Bad RIP value. [ 1308.982734][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1308.982734][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1308.982734][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1308.982734][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1308.982734][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1308.982734][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.982734][T23768] Uninit was stored to memory at: [ 1308.982734][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1308.982734][T23768] __msan_chain_origin+0x50/0x90 [ 1309.237182][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1308.982734][T23768] __get_compat_msghdr+0x5be/0x890 [ 1308.982734][T23768] get_compat_msghdr+0x108/0x270 [ 1309.252603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.259370][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1309.252603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.252603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.252603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.252603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.252603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.252603][T23768] entry_INT80_compat+0x71/0x76 [ 1309.298937][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1309.252603][T23768] [ 1309.252603][T23768] Uninit was stored to memory at: [ 1309.252603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.252603][T23768] __msan_chain_origin+0x50/0x90 [ 1309.252603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.252603][T23768] get_compat_msghdr+0x108/0x270 [ 1309.252603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.252603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.252603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.349859][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1309.252603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.252603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.252603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.252603][T23768] entry_INT80_compat+0x71/0x76 [ 1309.252603][T23768] [ 1309.252603][T23768] Uninit was stored to memory at: [ 1309.389155][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1309.252603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.252603][T23768] __msan_chain_origin+0x50/0x90 [ 1309.252603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.252603][T23768] get_compat_msghdr+0x108/0x270 [ 1309.252603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.252603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.252603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.252603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.437261][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1309.252603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.252603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.252603][T23768] entry_INT80_compat+0x71/0x76 [ 1309.252603][T23768] [ 1309.252603][T23768] Uninit was stored to memory at: [ 1309.252603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.252603][T23768] __msan_chain_origin+0x50/0x90 [ 1309.252603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.252603][T23768] get_compat_msghdr+0x108/0x270 [ 1309.252603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.252603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.252603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.252603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.252603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.252603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.252603][T23768] entry_INT80_compat+0x71/0x76 [ 1309.252603][T23768] [ 1309.252603][T23768] Uninit was stored to memory at: [ 1309.252603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.252603][T23768] __msan_chain_origin+0x50/0x90 [ 1309.252603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.252603][T23768] get_compat_msghdr+0x108/0x270 [ 1309.252603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.558811][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1309.252603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.252603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.252603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.252603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.252603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.252603][T23768] entry_INT80_compat+0x71/0x76 [ 1309.252603][T23768] [ 1309.252603][T23768] Uninit was stored to memory at: [ 1309.252603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.252603][T23768] __msan_chain_origin+0x50/0x90 [ 1309.252603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.252603][T23768] get_compat_msghdr+0x108/0x270 [ 1309.252603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.630877][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1309.252603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.252603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.252603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.252603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.252603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.252603][T23768] entry_INT80_compat+0x71/0x76 [ 1309.252603][T23768] [ 1309.252603][T23768] Uninit was stored to memory at: [ 1309.252603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.252603][T23768] __msan_chain_origin+0x50/0x90 [ 1309.252603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.252603][T23768] get_compat_msghdr+0x108/0x270 [ 1309.252603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.252603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.252603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.252603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.252603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.252603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.252603][T23768] entry_INT80_compat+0x71/0x76 [ 1309.252603][T23768] [ 1309.252603][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1309.252603][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1309.252603][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1309.777356][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1309.922055][T23768] not chained 3340000 origins [ 1309.922702][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1309.922702][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.922702][T23768] Call Trace: [ 1309.922702][T23768] dump_stack+0x1df/0x240 [ 1309.922702][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1309.922702][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1309.922702][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1309.922702][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1309.972784][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1309.972784][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1309.972784][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1309.972784][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1309.972784][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1309.972784][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1309.972784][T23768] ? _copy_from_user+0x15b/0x260 [ 1309.972784][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1309.972784][T23768] __msan_chain_origin+0x50/0x90 [ 1309.972784][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.972784][T23768] get_compat_msghdr+0x108/0x270 [ 1309.972784][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.972784][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1309.972784][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1309.972784][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1309.972784][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1309.972784][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1309.972784][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1309.972784][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1309.972784][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.972784][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1309.972784][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.972784][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1309.972784][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.972784][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.972784][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.972784][T23768] entry_INT80_compat+0x71/0x76 [ 1309.972784][T23768] RIP: 0023:0xf7f11549 [ 1309.972784][T23768] Code: Bad RIP value. [ 1309.972784][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1309.972784][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1309.972784][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1309.972784][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1309.972784][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1309.972784][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1309.972784][T23768] Uninit was stored to memory at: [ 1309.972784][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.972784][T23768] __msan_chain_origin+0x50/0x90 [ 1309.972784][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.972784][T23768] get_compat_msghdr+0x108/0x270 [ 1309.972784][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.972784][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.972784][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.972784][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.972784][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.972784][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.972784][T23768] entry_INT80_compat+0x71/0x76 [ 1309.972784][T23768] [ 1309.972784][T23768] Uninit was stored to memory at: [ 1309.972784][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.972784][T23768] __msan_chain_origin+0x50/0x90 [ 1309.972784][T23768] __get_compat_msghdr+0x5be/0x890 [ 1309.972784][T23768] get_compat_msghdr+0x108/0x270 [ 1309.972784][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1309.972784][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1309.972784][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1309.972784][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1309.972784][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1309.972784][T23768] do_int80_syscall_32+0x1d/0x30 [ 1309.972784][T23768] entry_INT80_compat+0x71/0x76 [ 1309.972784][T23768] [ 1309.972784][T23768] Uninit was stored to memory at: [ 1309.972784][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1309.972784][T23768] __msan_chain_origin+0x50/0x90 [ 1310.324123][T23768] __get_compat_msghdr+0x5be/0x890 [ 1310.324123][T23768] get_compat_msghdr+0x108/0x270 [ 1310.324123][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1310.324123][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1310.324123][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.324123][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.324123][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.324123][T23768] do_int80_syscall_32+0x1d/0x30 [ 1310.324123][T23768] entry_INT80_compat+0x71/0x76 [ 1310.324123][T23768] [ 1310.324123][T23768] Uninit was stored to memory at: [ 1310.324123][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1310.324123][T23768] __msan_chain_origin+0x50/0x90 [ 1310.324123][T23768] __get_compat_msghdr+0x5be/0x890 [ 1310.395870][T23774] not chained 3350000 origins [ 1310.324123][T23768] get_compat_msghdr+0x108/0x270 [ 1310.401532][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1310.324123][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1310.402629][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.324123][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1310.402629][T23774] Call Trace: [ 1310.324123][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.402629][T23774] dump_stack+0x1df/0x240 [ 1310.324123][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.402629][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1310.324123][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.402629][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1310.324123][T23768] do_int80_syscall_32+0x1d/0x30 [ 1310.402629][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1310.324123][T23768] entry_INT80_compat+0x71/0x76 [ 1310.402629][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1310.324123][T23768] [ 1310.402629][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1310.324123][T23768] Uninit was stored to memory at: [ 1310.402629][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1310.324123][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1310.402629][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1310.324123][T23768] __msan_chain_origin+0x50/0x90 [ 1310.402629][T23774] ? psi_group_change+0x1007/0x13c0 [ 1310.324123][T23768] __get_compat_msghdr+0x5be/0x890 [ 1310.402629][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1310.324123][T23768] get_compat_msghdr+0x108/0x270 [ 1310.402629][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1310.324123][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1310.402629][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1310.324123][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1310.402629][T23774] ? _copy_from_user+0x15b/0x260 [ 1310.324123][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.402629][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1310.324123][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.402629][T23774] __msan_chain_origin+0x50/0x90 [ 1310.324123][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.402629][T23774] __get_compat_msghdr+0x5be/0x890 [ 1310.324123][T23768] do_int80_syscall_32+0x1d/0x30 [ 1310.402629][T23774] get_compat_msghdr+0x108/0x270 [ 1310.324123][T23768] entry_INT80_compat+0x71/0x76 [ 1310.402629][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1310.324123][T23768] [ 1310.402629][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1310.324123][T23768] Uninit was stored to memory at: [ 1310.402629][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1310.324123][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1310.402629][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1310.324123][T23768] __msan_chain_origin+0x50/0x90 [ 1310.402629][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1310.324123][T23768] __get_compat_msghdr+0x5be/0x890 [ 1310.402629][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1310.324123][T23768] get_compat_msghdr+0x108/0x270 [ 1310.402629][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1310.324123][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1310.402629][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1310.324123][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1310.402629][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1310.324123][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.402629][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1310.324123][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.402629][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.324123][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.402629][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1310.324123][T23768] do_int80_syscall_32+0x1d/0x30 [ 1310.402629][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.324123][T23768] entry_INT80_compat+0x71/0x76 [ 1310.402629][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.324123][T23768] [ 1310.324123][T23768] Uninit was stored to memory at: [ 1310.402629][T23774] do_int80_syscall_32+0x1d/0x30 [ 1310.324123][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1310.402629][T23774] entry_INT80_compat+0x71/0x76 [ 1310.324123][T23768] __msan_chain_origin+0x50/0x90 [ 1310.402629][T23774] RIP: 0023:0xf7f11549 [ 1310.324123][T23768] __get_compat_msghdr+0x5be/0x890 [ 1310.402629][T23774] Code: Bad RIP value. [ 1310.324123][T23768] get_compat_msghdr+0x108/0x270 [ 1310.402629][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1310.324123][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1310.402629][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1310.324123][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1310.402629][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1310.324123][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.402629][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1310.324123][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.402629][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1310.324123][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.402629][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1310.324123][T23768] do_int80_syscall_32+0x1d/0x30 [ 1310.402629][T23774] Uninit was stored to memory at: [ 1310.324123][T23768] entry_INT80_compat+0x71/0x76 [ 1310.402629][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1310.324123][T23768] [ 1310.402629][T23774] __msan_chain_origin+0x50/0x90 [ 1310.324123][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1310.402629][T23774] __get_compat_msghdr+0x5be/0x890 [ 1310.324123][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1310.402629][T23774] get_compat_msghdr+0x108/0x270 [ 1310.324123][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1310.927164][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1310.927164][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1310.927164][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.927164][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.954506][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.954506][T23774] do_int80_syscall_32+0x1d/0x30 [ 1310.954506][T23774] entry_INT80_compat+0x71/0x76 [ 1310.954506][T23774] [ 1310.954506][T23774] Uninit was stored to memory at: [ 1310.954506][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1310.954506][T23774] __msan_chain_origin+0x50/0x90 [ 1310.954506][T23774] __get_compat_msghdr+0x5be/0x890 [ 1310.954506][T23774] get_compat_msghdr+0x108/0x270 [ 1310.954506][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1310.954506][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1310.954506][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.954506][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.954506][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.954506][T23774] do_int80_syscall_32+0x1d/0x30 [ 1310.954506][T23774] entry_INT80_compat+0x71/0x76 [ 1310.954506][T23774] [ 1310.954506][T23774] Uninit was stored to memory at: [ 1310.954506][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1310.954506][T23774] __msan_chain_origin+0x50/0x90 [ 1310.954506][T23774] __get_compat_msghdr+0x5be/0x890 [ 1310.954506][T23774] get_compat_msghdr+0x108/0x270 [ 1310.954506][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1310.954506][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1310.954506][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.954506][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.954506][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.954506][T23774] do_int80_syscall_32+0x1d/0x30 [ 1310.954506][T23774] entry_INT80_compat+0x71/0x76 [ 1310.954506][T23774] [ 1310.954506][T23774] Uninit was stored to memory at: [ 1310.954506][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1310.954506][T23774] __msan_chain_origin+0x50/0x90 [ 1310.954506][T23774] __get_compat_msghdr+0x5be/0x890 [ 1310.954506][T23774] get_compat_msghdr+0x108/0x270 [ 1310.954506][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1310.954506][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1310.954506][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.954506][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.954506][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.954506][T23774] do_int80_syscall_32+0x1d/0x30 [ 1310.954506][T23774] entry_INT80_compat+0x71/0x76 [ 1310.954506][T23774] [ 1310.954506][T23774] Uninit was stored to memory at: [ 1310.954506][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1310.954506][T23774] __msan_chain_origin+0x50/0x90 [ 1310.954506][T23774] __get_compat_msghdr+0x5be/0x890 [ 1310.954506][T23774] get_compat_msghdr+0x108/0x270 [ 1310.954506][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1310.954506][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1310.954506][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.954506][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.954506][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.954506][T23774] do_int80_syscall_32+0x1d/0x30 [ 1310.954506][T23774] entry_INT80_compat+0x71/0x76 [ 1310.954506][T23774] [ 1310.954506][T23774] Uninit was stored to memory at: [ 1310.954506][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1310.954506][T23774] __msan_chain_origin+0x50/0x90 [ 1310.954506][T23774] __get_compat_msghdr+0x5be/0x890 [ 1310.954506][T23774] get_compat_msghdr+0x108/0x270 [ 1310.954506][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1310.954506][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1310.954506][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.954506][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.954506][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.954506][T23774] do_int80_syscall_32+0x1d/0x30 [ 1310.954506][T23774] entry_INT80_compat+0x71/0x76 [ 1310.954506][T23774] [ 1310.954506][T23774] Uninit was stored to memory at: [ 1310.954506][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1310.954506][T23774] __msan_chain_origin+0x50/0x90 [ 1310.954506][T23774] __get_compat_msghdr+0x5be/0x890 [ 1310.954506][T23774] get_compat_msghdr+0x108/0x270 [ 1310.954506][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1310.954506][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1310.954506][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1310.954506][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1310.954506][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1310.954506][T23774] do_int80_syscall_32+0x1d/0x30 [ 1310.954506][T23774] entry_INT80_compat+0x71/0x76 [ 1310.954506][T23774] [ 1310.954506][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1310.954506][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1310.954506][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1311.755260][T23768] not chained 3360000 origins [ 1311.759979][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1311.762588][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.762588][T23768] Call Trace: [ 1311.762588][T23768] dump_stack+0x1df/0x240 [ 1311.762588][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1311.762588][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1311.762588][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1311.762588][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1311.762588][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1311.762588][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1311.762588][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1311.762588][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1311.762588][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1311.762588][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1311.762588][T23768] ? _copy_from_user+0x15b/0x260 [ 1311.762588][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1311.762588][T23768] __msan_chain_origin+0x50/0x90 [ 1311.762588][T23768] __get_compat_msghdr+0x5be/0x890 [ 1311.762588][T23768] get_compat_msghdr+0x108/0x270 [ 1311.762588][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1311.762588][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1311.762588][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1311.762588][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1311.762588][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1311.762588][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1311.762588][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1311.762588][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1311.762588][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1311.762588][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1311.762588][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1311.762588][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1311.762588][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1311.762588][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1311.762588][T23768] do_int80_syscall_32+0x1d/0x30 [ 1311.762588][T23768] entry_INT80_compat+0x71/0x76 [ 1311.762588][T23768] RIP: 0023:0xf7f11549 [ 1311.762588][T23768] Code: Bad RIP value. [ 1311.762588][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1311.762588][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1311.762588][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1311.762588][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1311.762588][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1311.762588][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1311.762588][T23768] Uninit was stored to memory at: [ 1311.762588][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1311.762588][T23768] __msan_chain_origin+0x50/0x90 [ 1311.762588][T23768] __get_compat_msghdr+0x5be/0x890 [ 1311.762588][T23768] get_compat_msghdr+0x108/0x270 [ 1311.762588][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1311.762588][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1311.762588][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1311.762588][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1311.762588][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1311.762588][T23768] do_int80_syscall_32+0x1d/0x30 [ 1311.762588][T23768] entry_INT80_compat+0x71/0x76 [ 1311.762588][T23768] [ 1311.762588][T23768] Uninit was stored to memory at: [ 1311.762588][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1311.762588][T23768] __msan_chain_origin+0x50/0x90 [ 1311.762588][T23768] __get_compat_msghdr+0x5be/0x890 [ 1311.762588][T23768] get_compat_msghdr+0x108/0x270 [ 1311.762588][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1311.762588][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1311.762588][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.118227][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.121125][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.121125][T23768] do_int80_syscall_32+0x1d/0x30 [ 1312.121125][T23768] entry_INT80_compat+0x71/0x76 [ 1312.121125][T23768] [ 1312.121125][T23768] Uninit was stored to memory at: [ 1312.121125][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1312.121125][T23768] __msan_chain_origin+0x50/0x90 [ 1312.121125][T23768] __get_compat_msghdr+0x5be/0x890 [ 1312.121125][T23768] get_compat_msghdr+0x108/0x270 [ 1312.121125][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1312.121125][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1312.121125][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.121125][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.121125][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.121125][T23768] do_int80_syscall_32+0x1d/0x30 [ 1312.121125][T23768] entry_INT80_compat+0x71/0x76 [ 1312.121125][T23768] [ 1312.121125][T23768] Uninit was stored to memory at: [ 1312.121125][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1312.121125][T23768] __msan_chain_origin+0x50/0x90 [ 1312.121125][T23768] __get_compat_msghdr+0x5be/0x890 [ 1312.121125][T23768] get_compat_msghdr+0x108/0x270 [ 1312.228983][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1312.228983][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1312.228983][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.228983][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.228983][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.228983][T23768] do_int80_syscall_32+0x1d/0x30 [ 1312.228983][T23768] entry_INT80_compat+0x71/0x76 [ 1312.228983][T23768] [ 1312.228983][T23768] Uninit was stored to memory at: [ 1312.228983][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1312.282910][T23768] __msan_chain_origin+0x50/0x90 [ 1312.282910][T23768] __get_compat_msghdr+0x5be/0x890 [ 1312.282910][T23768] get_compat_msghdr+0x108/0x270 [ 1312.282910][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1312.282910][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1312.282910][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.282910][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.282910][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.282910][T23768] do_int80_syscall_32+0x1d/0x30 [ 1312.282910][T23768] entry_INT80_compat+0x71/0x76 [ 1312.282910][T23768] [ 1312.282910][T23768] Uninit was stored to memory at: [ 1312.282910][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1312.282910][T23768] __msan_chain_origin+0x50/0x90 [ 1312.282910][T23768] __get_compat_msghdr+0x5be/0x890 [ 1312.282910][T23768] get_compat_msghdr+0x108/0x270 [ 1312.282910][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1312.282910][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1312.282910][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.282910][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.282910][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.282910][T23768] do_int80_syscall_32+0x1d/0x30 [ 1312.282910][T23768] entry_INT80_compat+0x71/0x76 [ 1312.394939][T23768] [ 1312.394939][T23768] Uninit was stored to memory at: [ 1312.394939][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1312.394939][T23768] __msan_chain_origin+0x50/0x90 [ 1312.394939][T23768] __get_compat_msghdr+0x5be/0x890 [ 1312.394939][T23768] get_compat_msghdr+0x108/0x270 [ 1312.394939][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1312.394939][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1312.394939][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.394939][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.394939][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.394939][T23768] do_int80_syscall_32+0x1d/0x30 [ 1312.394939][T23768] entry_INT80_compat+0x71/0x76 [ 1312.394939][T23768] [ 1312.394939][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1312.394939][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1312.394939][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1312.756998][T23774] not chained 3370000 origins [ 1312.761722][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1312.762602][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.762602][T23774] Call Trace: [ 1312.762602][T23774] dump_stack+0x1df/0x240 [ 1312.762602][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1312.762602][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1312.762602][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1312.762602][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1312.762602][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1312.762602][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1312.762602][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1312.762602][T23774] ? psi_group_change+0x1007/0x13c0 [ 1312.762602][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1312.762602][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1312.762602][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1312.762602][T23774] ? _copy_from_user+0x15b/0x260 [ 1312.762602][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1312.762602][T23774] __msan_chain_origin+0x50/0x90 [ 1312.762602][T23774] __get_compat_msghdr+0x5be/0x890 [ 1312.762602][T23774] get_compat_msghdr+0x108/0x270 [ 1312.762602][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1312.762602][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1312.762602][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1312.762602][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1312.762602][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1312.762602][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1312.762602][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1312.762602][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1312.762602][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1312.762602][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1312.762602][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.762602][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1312.762602][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.762602][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.762602][T23774] do_int80_syscall_32+0x1d/0x30 [ 1312.762602][T23774] entry_INT80_compat+0x71/0x76 [ 1312.762602][T23774] RIP: 0023:0xf7f11549 [ 1312.762602][T23774] Code: Bad RIP value. [ 1312.762602][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1312.762602][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1312.762602][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1312.762602][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1312.762602][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1312.762602][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1312.762602][T23774] Uninit was stored to memory at: [ 1312.762602][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1312.762602][T23774] __msan_chain_origin+0x50/0x90 [ 1312.762602][T23774] __get_compat_msghdr+0x5be/0x890 [ 1312.762602][T23774] get_compat_msghdr+0x108/0x270 [ 1312.762602][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1312.762602][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1312.762602][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.762602][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.762602][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.762602][T23774] do_int80_syscall_32+0x1d/0x30 [ 1312.762602][T23774] entry_INT80_compat+0x71/0x76 [ 1312.762602][T23774] [ 1312.762602][T23774] Uninit was stored to memory at: [ 1312.762602][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1312.762602][T23774] __msan_chain_origin+0x50/0x90 [ 1312.762602][T23774] __get_compat_msghdr+0x5be/0x890 [ 1312.762602][T23774] get_compat_msghdr+0x108/0x270 [ 1312.762602][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1312.762602][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1312.762602][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.762602][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.762602][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.762602][T23774] do_int80_syscall_32+0x1d/0x30 [ 1312.762602][T23774] entry_INT80_compat+0x71/0x76 [ 1312.762602][T23774] [ 1312.762602][T23774] Uninit was stored to memory at: [ 1312.762602][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1312.762602][T23774] __msan_chain_origin+0x50/0x90 [ 1312.762602][T23774] __get_compat_msghdr+0x5be/0x890 [ 1312.762602][T23774] get_compat_msghdr+0x108/0x270 [ 1312.762602][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1312.762602][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1312.762602][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.762602][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.762602][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.762602][T23774] do_int80_syscall_32+0x1d/0x30 [ 1312.762602][T23774] entry_INT80_compat+0x71/0x76 [ 1312.762602][T23774] [ 1312.762602][T23774] Uninit was stored to memory at: [ 1312.762602][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1312.762602][T23774] __msan_chain_origin+0x50/0x90 [ 1312.762602][T23774] __get_compat_msghdr+0x5be/0x890 [ 1312.762602][T23774] get_compat_msghdr+0x108/0x270 [ 1312.762602][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1312.762602][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1312.762602][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.762602][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.762602][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.762602][T23774] do_int80_syscall_32+0x1d/0x30 [ 1312.762602][T23774] entry_INT80_compat+0x71/0x76 [ 1312.762602][T23774] [ 1312.762602][T23774] Uninit was stored to memory at: [ 1312.762602][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1312.762602][T23774] __msan_chain_origin+0x50/0x90 [ 1312.762602][T23774] __get_compat_msghdr+0x5be/0x890 [ 1312.762602][T23774] get_compat_msghdr+0x108/0x270 [ 1312.762602][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1312.762602][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1312.762602][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.762602][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.762602][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.762602][T23774] do_int80_syscall_32+0x1d/0x30 [ 1312.762602][T23774] entry_INT80_compat+0x71/0x76 [ 1312.762602][T23774] [ 1312.762602][T23774] Uninit was stored to memory at: [ 1312.762602][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1312.762602][T23774] __msan_chain_origin+0x50/0x90 [ 1312.762602][T23774] __get_compat_msghdr+0x5be/0x890 [ 1312.762602][T23774] get_compat_msghdr+0x108/0x270 [ 1312.762602][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1312.762602][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1312.762602][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.762602][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.762602][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.762602][T23774] do_int80_syscall_32+0x1d/0x30 [ 1312.762602][T23774] entry_INT80_compat+0x71/0x76 [ 1312.762602][T23774] [ 1312.762602][T23774] Uninit was stored to memory at: [ 1312.762602][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1312.762602][T23774] __msan_chain_origin+0x50/0x90 [ 1312.762602][T23774] __get_compat_msghdr+0x5be/0x890 [ 1312.762602][T23774] get_compat_msghdr+0x108/0x270 [ 1312.762602][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1312.762602][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1312.762602][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1312.762602][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1312.762602][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1312.762602][T23774] do_int80_syscall_32+0x1d/0x30 [ 1312.762602][T23774] entry_INT80_compat+0x71/0x76 [ 1312.762602][T23774] [ 1312.762602][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1312.762602][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1312.762602][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1314.211845][T23768] not chained 3380000 origins [ 1314.212621][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1314.221404][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.221404][T23768] Call Trace: [ 1314.221404][T23768] dump_stack+0x1df/0x240 [ 1314.221404][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1314.247867][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1314.247867][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1314.247867][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1314.247867][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1314.247867][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1314.247867][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1314.247867][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1314.247867][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1314.292750][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1314.292750][T23768] ? _copy_from_user+0x15b/0x260 [ 1314.292750][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1314.292750][T23768] __msan_chain_origin+0x50/0x90 [ 1314.292750][T23768] __get_compat_msghdr+0x5be/0x890 [ 1314.292750][T23768] get_compat_msghdr+0x108/0x270 [ 1314.292750][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1314.292750][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1314.292750][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1314.292750][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1314.292750][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1314.292750][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1314.292750][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1314.292750][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1314.292750][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1314.292750][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1314.292750][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1314.292750][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1314.292750][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1314.292750][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1314.292750][T23768] do_int80_syscall_32+0x1d/0x30 [ 1314.292750][T23768] entry_INT80_compat+0x71/0x76 [ 1314.292750][T23768] RIP: 0023:0xf7f11549 [ 1314.292750][T23768] Code: Bad RIP value. [ 1314.292750][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1314.292750][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1314.429850][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1314.429850][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1314.429850][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1314.429850][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1314.462840][T23768] Uninit was stored to memory at: [ 1314.462840][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1314.462840][T23768] __msan_chain_origin+0x50/0x90 [ 1314.462840][T23768] __get_compat_msghdr+0x5be/0x890 [ 1314.462840][T23768] get_compat_msghdr+0x108/0x270 [ 1314.462840][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1314.462840][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1314.462840][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1314.462840][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1314.462840][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1314.462840][T23768] do_int80_syscall_32+0x1d/0x30 [ 1314.462840][T23768] entry_INT80_compat+0x71/0x76 [ 1314.462840][T23768] [ 1314.462840][T23768] Uninit was stored to memory at: [ 1314.538531][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1314.462840][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1314.552624][T23768] __msan_chain_origin+0x50/0x90 [ 1314.552624][T23768] __get_compat_msghdr+0x5be/0x890 [ 1314.552624][T23768] get_compat_msghdr+0x108/0x270 [ 1314.552624][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1314.552624][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1314.552624][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1314.552624][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1314.552624][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1314.552624][T23768] do_int80_syscall_32+0x1d/0x30 [ 1314.552624][T23768] entry_INT80_compat+0x71/0x76 [ 1314.552624][T23768] [ 1314.552624][T23768] Uninit was stored to memory at: [ 1314.609193][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1314.552624][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1314.552624][T23768] __msan_chain_origin+0x50/0x90 [ 1314.552624][T23768] __get_compat_msghdr+0x5be/0x890 [ 1314.552624][T23768] get_compat_msghdr+0x108/0x270 [ 1314.552624][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1314.552624][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1314.552624][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1314.552624][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1314.552624][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1314.552624][T23768] do_int80_syscall_32+0x1d/0x30 [ 1314.552624][T23768] entry_INT80_compat+0x71/0x76 [ 1314.552624][T23768] [ 1314.552624][T23768] Uninit was stored to memory at: [ 1314.552624][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1314.689352][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1314.552624][T23768] __msan_chain_origin+0x50/0x90 [ 1314.552624][T23768] __get_compat_msghdr+0x5be/0x890 [ 1314.552624][T23768] get_compat_msghdr+0x108/0x270 [ 1314.552624][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1314.552624][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1314.552624][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1314.552624][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1314.552624][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1314.552624][T23768] do_int80_syscall_32+0x1d/0x30 [ 1314.552624][T23768] entry_INT80_compat+0x71/0x76 [ 1314.552624][T23768] [ 1314.552624][T23768] Uninit was stored to memory at: [ 1314.552624][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1314.552624][T23768] __msan_chain_origin+0x50/0x90 [ 1314.552624][T23768] __get_compat_msghdr+0x5be/0x890 [ 1314.769264][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1314.552624][T23768] get_compat_msghdr+0x108/0x270 [ 1314.552624][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1314.552624][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1314.552624][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1314.552624][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1314.552624][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1314.552624][T23768] do_int80_syscall_32+0x1d/0x30 [ 1314.552624][T23768] entry_INT80_compat+0x71/0x76 [ 1314.552624][T23768] [ 1314.552624][T23768] Uninit was stored to memory at: [ 1314.552624][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1314.552624][T23768] __msan_chain_origin+0x50/0x90 [ 1314.552624][T23768] __get_compat_msghdr+0x5be/0x890 [ 1314.552624][T23768] get_compat_msghdr+0x108/0x270 [ 1314.552624][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1314.552624][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1314.552624][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1314.552624][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1314.552624][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1314.552624][T23768] do_int80_syscall_32+0x1d/0x30 [ 1314.552624][T23768] entry_INT80_compat+0x71/0x76 [ 1314.552624][T23768] [ 1314.552624][T23768] Uninit was stored to memory at: [ 1314.552624][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1314.552624][T23768] __msan_chain_origin+0x50/0x90 [ 1314.552624][T23768] __get_compat_msghdr+0x5be/0x890 [ 1314.552624][T23768] get_compat_msghdr+0x108/0x270 [ 1314.552624][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1314.552624][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1314.552624][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1314.930381][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1314.552624][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1314.552624][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1314.552624][T23768] do_int80_syscall_32+0x1d/0x30 [ 1314.552624][T23768] entry_INT80_compat+0x71/0x76 [ 1314.552624][T23768] [ 1314.552624][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1314.552624][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1314.552624][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1315.679394][T23768] not chained 3390000 origins [ 1315.682608][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1315.682608][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.702758][T23768] Call Trace: [ 1315.702758][T23768] dump_stack+0x1df/0x240 [ 1315.702758][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1315.702758][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1315.702758][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1315.702758][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1315.730454][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1315.730454][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1315.730454][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1315.730454][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1315.730454][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1315.730454][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1315.730454][T23768] ? _copy_from_user+0x15b/0x260 [ 1315.730454][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1315.730454][T23768] __msan_chain_origin+0x50/0x90 [ 1315.730454][T23768] __get_compat_msghdr+0x5be/0x890 [ 1315.730454][T23768] get_compat_msghdr+0x108/0x270 [ 1315.730454][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1315.730454][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1315.730454][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1315.730454][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1315.730454][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1315.730454][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1315.730454][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1315.730454][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1315.730454][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1315.730454][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1315.730454][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1315.730454][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1315.730454][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1315.730454][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1315.730454][T23768] do_int80_syscall_32+0x1d/0x30 [ 1315.730454][T23768] entry_INT80_compat+0x71/0x76 [ 1315.730454][T23768] RIP: 0023:0xf7f11549 [ 1315.730454][T23768] Code: Bad RIP value. [ 1315.730454][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1315.730454][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1315.730454][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1315.730454][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1315.730454][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1315.730454][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1315.730454][T23768] Uninit was stored to memory at: [ 1315.730454][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1315.730454][T23768] __msan_chain_origin+0x50/0x90 [ 1315.730454][T23768] __get_compat_msghdr+0x5be/0x890 [ 1315.730454][T23768] get_compat_msghdr+0x108/0x270 [ 1315.730454][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1315.730454][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1315.730454][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1315.730454][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1315.730454][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1315.730454][T23768] do_int80_syscall_32+0x1d/0x30 [ 1315.730454][T23768] entry_INT80_compat+0x71/0x76 [ 1315.730454][T23768] [ 1315.730454][T23768] Uninit was stored to memory at: [ 1315.730454][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1315.730454][T23768] __msan_chain_origin+0x50/0x90 [ 1315.730454][T23768] __get_compat_msghdr+0x5be/0x890 [ 1315.730454][T23768] get_compat_msghdr+0x108/0x270 [ 1315.730454][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1315.730454][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1315.730454][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1315.730454][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1315.730454][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1315.730454][T23768] do_int80_syscall_32+0x1d/0x30 [ 1315.730454][T23768] entry_INT80_compat+0x71/0x76 [ 1315.730454][T23768] [ 1315.730454][T23768] Uninit was stored to memory at: [ 1315.730454][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1315.730454][T23768] __msan_chain_origin+0x50/0x90 [ 1315.730454][T23768] __get_compat_msghdr+0x5be/0x890 [ 1315.730454][T23768] get_compat_msghdr+0x108/0x270 [ 1315.730454][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1315.730454][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1315.730454][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1315.730454][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1315.730454][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1315.730454][T23768] do_int80_syscall_32+0x1d/0x30 [ 1315.730454][T23768] entry_INT80_compat+0x71/0x76 [ 1315.730454][T23768] [ 1315.730454][T23768] Uninit was stored to memory at: [ 1315.730454][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1315.730454][T23768] __msan_chain_origin+0x50/0x90 [ 1315.730454][T23768] __get_compat_msghdr+0x5be/0x890 [ 1315.730454][T23768] get_compat_msghdr+0x108/0x270 [ 1315.730454][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1315.730454][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1315.730454][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1315.730454][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1315.730454][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1315.730454][T23768] do_int80_syscall_32+0x1d/0x30 [ 1315.730454][T23768] entry_INT80_compat+0x71/0x76 [ 1315.730454][T23768] [ 1315.730454][T23768] Uninit was stored to memory at: [ 1315.730454][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1315.730454][T23768] __msan_chain_origin+0x50/0x90 [ 1315.730454][T23768] __get_compat_msghdr+0x5be/0x890 [ 1315.730454][T23768] get_compat_msghdr+0x108/0x270 [ 1315.730454][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1315.730454][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1315.730454][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1315.730454][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1315.730454][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1315.730454][T23768] do_int80_syscall_32+0x1d/0x30 [ 1315.730454][T23768] entry_INT80_compat+0x71/0x76 [ 1315.730454][T23768] [ 1315.730454][T23768] Uninit was stored to memory at: [ 1315.730454][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1315.730454][T23768] __msan_chain_origin+0x50/0x90 [ 1315.730454][T23768] __get_compat_msghdr+0x5be/0x890 [ 1315.730454][T23768] get_compat_msghdr+0x108/0x270 [ 1315.730454][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1315.730454][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1315.730454][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1315.730454][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1315.730454][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1315.730454][T23768] do_int80_syscall_32+0x1d/0x30 [ 1315.730454][T23768] entry_INT80_compat+0x71/0x76 [ 1315.730454][T23768] [ 1315.730454][T23768] Uninit was stored to memory at: [ 1315.730454][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1315.730454][T23768] __msan_chain_origin+0x50/0x90 [ 1315.730454][T23768] __get_compat_msghdr+0x5be/0x890 [ 1315.730454][T23768] get_compat_msghdr+0x108/0x270 [ 1315.730454][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1315.730454][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1315.730454][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1315.730454][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1315.730454][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1315.730454][T23768] do_int80_syscall_32+0x1d/0x30 [ 1315.730454][T23768] entry_INT80_compat+0x71/0x76 [ 1315.730454][T23768] [ 1315.730454][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1315.730454][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1315.730454][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1317.050203][T23774] not chained 3400000 origins [ 1317.052605][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1317.052605][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.052605][T23774] Call Trace: [ 1317.052605][T23774] dump_stack+0x1df/0x240 [ 1317.052605][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1317.052605][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1317.090289][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1317.090289][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1317.090289][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1317.110148][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1317.111551][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1317.111551][T23774] ? psi_group_change+0x1007/0x13c0 [ 1317.111551][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1317.111551][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1317.111551][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1317.111551][T23774] ? _copy_from_user+0x15b/0x260 [ 1317.111551][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1317.111551][T23774] __msan_chain_origin+0x50/0x90 [ 1317.111551][T23774] __get_compat_msghdr+0x5be/0x890 [ 1317.111551][T23774] get_compat_msghdr+0x108/0x270 [ 1317.111551][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1317.111551][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1317.111551][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1317.111551][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1317.111551][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1317.111551][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1317.111551][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1317.111551][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1317.111551][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1317.111551][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1317.111551][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1317.111551][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1317.111551][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1317.111551][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1317.111551][T23774] do_int80_syscall_32+0x1d/0x30 [ 1317.111551][T23774] entry_INT80_compat+0x71/0x76 [ 1317.111551][T23774] RIP: 0023:0xf7f11549 [ 1317.111551][T23774] Code: Bad RIP value. [ 1317.111551][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1317.111551][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1317.111551][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1317.111551][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1317.111551][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1317.111551][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1317.111551][T23774] Uninit was stored to memory at: [ 1317.111551][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1317.111551][T23774] __msan_chain_origin+0x50/0x90 [ 1317.111551][T23774] __get_compat_msghdr+0x5be/0x890 [ 1317.111551][T23774] get_compat_msghdr+0x108/0x270 [ 1317.337683][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1317.111551][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1317.111551][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1317.352629][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1317.352629][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1317.352629][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1317.352629][T23774] do_int80_syscall_32+0x1d/0x30 [ 1317.352629][T23774] entry_INT80_compat+0x71/0x76 [ 1317.352629][T23774] [ 1317.352629][T23774] Uninit was stored to memory at: [ 1317.388976][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1317.352629][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1317.352629][T23774] __msan_chain_origin+0x50/0x90 [ 1317.352629][T23774] __get_compat_msghdr+0x5be/0x890 [ 1317.415456][T23774] get_compat_msghdr+0x108/0x270 [ 1317.415456][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1317.415456][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1317.415456][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1317.415456][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1317.415456][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1317.415456][T23774] do_int80_syscall_32+0x1d/0x30 [ 1317.415456][T23774] entry_INT80_compat+0x71/0x76 [ 1317.415456][T23774] [ 1317.415456][T23774] Uninit was stored to memory at: [ 1317.415456][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1317.415456][T23774] __msan_chain_origin+0x50/0x90 [ 1317.415456][T23774] __get_compat_msghdr+0x5be/0x890 [ 1317.415456][T23774] get_compat_msghdr+0x108/0x270 [ 1317.415456][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1317.415456][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1317.415456][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1317.415456][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1317.415456][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1317.415456][T23774] do_int80_syscall_32+0x1d/0x30 [ 1317.415456][T23774] entry_INT80_compat+0x71/0x76 [ 1317.415456][T23774] [ 1317.415456][T23774] Uninit was stored to memory at: [ 1317.529080][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1317.415456][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1317.415456][T23774] __msan_chain_origin+0x50/0x90 [ 1317.415456][T23774] __get_compat_msghdr+0x5be/0x890 [ 1317.415456][T23774] get_compat_msghdr+0x108/0x270 [ 1317.415456][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1317.415456][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1317.415456][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1317.415456][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1317.415456][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1317.415456][T23774] do_int80_syscall_32+0x1d/0x30 [ 1317.415456][T23774] entry_INT80_compat+0x71/0x76 [ 1317.415456][T23774] [ 1317.415456][T23774] Uninit was stored to memory at: [ 1317.415456][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1317.415456][T23774] __msan_chain_origin+0x50/0x90 [ 1317.415456][T23774] __get_compat_msghdr+0x5be/0x890 [ 1317.415456][T23774] get_compat_msghdr+0x108/0x270 [ 1317.415456][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1317.415456][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1317.415456][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1317.415456][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1317.415456][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1317.415456][T23774] do_int80_syscall_32+0x1d/0x30 [ 1317.415456][T23774] entry_INT80_compat+0x71/0x76 [ 1317.415456][T23774] [ 1317.415456][T23774] Uninit was stored to memory at: [ 1317.415456][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1317.415456][T23774] __msan_chain_origin+0x50/0x90 [ 1317.415456][T23774] __get_compat_msghdr+0x5be/0x890 [ 1317.415456][T23774] get_compat_msghdr+0x108/0x270 [ 1317.683493][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1317.415456][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1317.415456][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1317.415456][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1317.415456][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1317.415456][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1317.415456][T23774] do_int80_syscall_32+0x1d/0x30 [ 1317.415456][T23774] entry_INT80_compat+0x71/0x76 [ 1317.415456][T23774] [ 1317.415456][T23774] Uninit was stored to memory at: [ 1317.415456][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1317.415456][T23774] __msan_chain_origin+0x50/0x90 [ 1317.415456][T23774] __get_compat_msghdr+0x5be/0x890 [ 1317.415456][T23774] get_compat_msghdr+0x108/0x270 [ 1317.415456][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1317.415456][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1317.415456][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1317.415456][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1317.415456][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1317.415456][T23774] do_int80_syscall_32+0x1d/0x30 [ 1317.415456][T23774] entry_INT80_compat+0x71/0x76 [ 1317.415456][T23774] [ 1317.415456][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1317.806009][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1317.415456][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1317.415456][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1318.517024][T23774] not chained 3410000 origins [ 1318.521744][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1318.522607][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.530620][T23774] Call Trace: [ 1318.530620][T23774] dump_stack+0x1df/0x240 [ 1318.530620][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1318.530620][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1318.530620][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1318.530620][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1318.530620][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1318.530620][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1318.530620][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1318.530620][T23774] ? psi_group_change+0x1007/0x13c0 [ 1318.530620][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1318.530620][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1318.530620][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1318.530620][T23774] ? _copy_from_user+0x15b/0x260 [ 1318.613275][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1318.613275][T23774] __msan_chain_origin+0x50/0x90 [ 1318.613275][T23774] __get_compat_msghdr+0x5be/0x890 [ 1318.613275][T23774] get_compat_msghdr+0x108/0x270 [ 1318.613275][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1318.613275][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1318.613275][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1318.613275][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1318.613275][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1318.613275][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1318.613275][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1318.613275][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1318.676774][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1318.676774][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1318.682779][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1318.682779][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1318.682779][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1318.682779][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1318.682779][T23774] do_int80_syscall_32+0x1d/0x30 [ 1318.682779][T23774] entry_INT80_compat+0x71/0x76 [ 1318.720097][T23774] RIP: 0023:0xf7f11549 [ 1318.720097][T23774] Code: Bad RIP value. [ 1318.720097][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1318.720097][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1318.720097][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1318.720097][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1318.720097][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1318.720097][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1318.720097][T23774] Uninit was stored to memory at: [ 1318.720097][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1318.720097][T23774] __msan_chain_origin+0x50/0x90 [ 1318.720097][T23774] __get_compat_msghdr+0x5be/0x890 [ 1318.720097][T23774] get_compat_msghdr+0x108/0x270 [ 1318.720097][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1318.720097][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1318.720097][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1318.720097][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1318.720097][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1318.720097][T23774] do_int80_syscall_32+0x1d/0x30 [ 1318.720097][T23774] entry_INT80_compat+0x71/0x76 [ 1318.720097][T23774] [ 1318.720097][T23774] Uninit was stored to memory at: [ 1318.720097][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1318.720097][T23774] __msan_chain_origin+0x50/0x90 [ 1318.720097][T23774] __get_compat_msghdr+0x5be/0x890 [ 1318.720097][T23774] get_compat_msghdr+0x108/0x270 [ 1318.720097][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1318.720097][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1318.720097][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1318.720097][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1318.720097][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1318.720097][T23774] do_int80_syscall_32+0x1d/0x30 [ 1318.720097][T23774] entry_INT80_compat+0x71/0x76 [ 1318.720097][T23774] [ 1318.720097][T23774] Uninit was stored to memory at: [ 1318.720097][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1318.720097][T23774] __msan_chain_origin+0x50/0x90 [ 1318.720097][T23774] __get_compat_msghdr+0x5be/0x890 [ 1318.720097][T23774] get_compat_msghdr+0x108/0x270 [ 1318.720097][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1318.720097][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1318.720097][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1318.720097][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1318.720097][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1318.720097][T23774] do_int80_syscall_32+0x1d/0x30 [ 1318.720097][T23774] entry_INT80_compat+0x71/0x76 [ 1318.720097][T23774] [ 1318.720097][T23774] Uninit was stored to memory at: [ 1318.720097][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1318.720097][T23774] __msan_chain_origin+0x50/0x90 [ 1318.720097][T23774] __get_compat_msghdr+0x5be/0x890 [ 1318.720097][T23774] get_compat_msghdr+0x108/0x270 [ 1318.720097][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1318.720097][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1318.720097][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1318.720097][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1318.720097][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1318.720097][T23774] do_int80_syscall_32+0x1d/0x30 [ 1318.720097][T23774] entry_INT80_compat+0x71/0x76 [ 1318.720097][T23774] [ 1318.720097][T23774] Uninit was stored to memory at: [ 1318.720097][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1318.720097][T23774] __msan_chain_origin+0x50/0x90 [ 1318.720097][T23774] __get_compat_msghdr+0x5be/0x890 [ 1318.720097][T23774] get_compat_msghdr+0x108/0x270 [ 1318.720097][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1318.720097][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1318.720097][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1318.720097][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1318.720097][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1318.720097][T23774] do_int80_syscall_32+0x1d/0x30 [ 1318.720097][T23774] entry_INT80_compat+0x71/0x76 [ 1318.720097][T23774] [ 1318.720097][T23774] Uninit was stored to memory at: [ 1318.720097][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1318.720097][T23774] __msan_chain_origin+0x50/0x90 [ 1318.720097][T23774] __get_compat_msghdr+0x5be/0x890 [ 1318.720097][T23774] get_compat_msghdr+0x108/0x270 [ 1318.720097][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1318.720097][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1318.720097][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1318.720097][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1318.720097][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1318.720097][T23774] do_int80_syscall_32+0x1d/0x30 [ 1318.720097][T23774] entry_INT80_compat+0x71/0x76 [ 1318.720097][T23774] [ 1318.720097][T23774] Uninit was stored to memory at: [ 1318.720097][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1318.720097][T23774] __msan_chain_origin+0x50/0x90 [ 1318.720097][T23774] __get_compat_msghdr+0x5be/0x890 [ 1318.720097][T23774] get_compat_msghdr+0x108/0x270 [ 1318.720097][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1318.720097][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1318.720097][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1318.720097][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1318.720097][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1318.720097][T23774] do_int80_syscall_32+0x1d/0x30 [ 1318.720097][T23774] entry_INT80_compat+0x71/0x76 [ 1318.720097][T23774] [ 1318.720097][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1318.720097][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1318.720097][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1319.555707][T23774] not chained 3420000 origins [ 1319.560420][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1319.562599][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.572899][T23774] Call Trace: [ 1319.581987][T23774] dump_stack+0x1df/0x240 [ 1319.582877][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1319.582877][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1319.582877][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1319.582877][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1319.582877][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1319.582877][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1319.582877][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1319.582877][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1319.582877][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1319.582877][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1319.582877][T23774] ? _copy_from_user+0x15b/0x260 [ 1319.582877][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1319.652775][T23774] __msan_chain_origin+0x50/0x90 [ 1319.652775][T23774] __get_compat_msghdr+0x5be/0x890 [ 1319.658984][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1319.652775][T23774] get_compat_msghdr+0x108/0x270 [ 1319.652775][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1319.652775][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1319.652775][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1319.652775][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1319.652775][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1319.652775][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1319.707208][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1319.652775][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1319.652775][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1319.722773][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1319.722773][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1319.722773][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1319.722773][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1319.722773][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1319.722773][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1319.722773][T23774] do_int80_syscall_32+0x1d/0x30 [ 1319.722773][T23774] entry_INT80_compat+0x71/0x76 [ 1319.722773][T23774] RIP: 0023:0xf7f11549 [ 1319.722773][T23774] Code: Bad RIP value. [ 1319.722773][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1319.722773][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1319.722773][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1319.722773][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1319.722773][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1319.722773][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1319.722773][T23774] Uninit was stored to memory at: [ 1319.722773][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1319.722773][T23774] __msan_chain_origin+0x50/0x90 [ 1319.722773][T23774] __get_compat_msghdr+0x5be/0x890 [ 1319.722773][T23774] get_compat_msghdr+0x108/0x270 [ 1319.722773][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1319.722773][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1319.722773][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1319.722773][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1319.722773][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1319.722773][T23774] do_int80_syscall_32+0x1d/0x30 [ 1319.722773][T23774] entry_INT80_compat+0x71/0x76 [ 1319.722773][T23774] [ 1319.722773][T23774] Uninit was stored to memory at: [ 1319.722773][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1319.722773][T23774] __msan_chain_origin+0x50/0x90 [ 1319.722773][T23774] __get_compat_msghdr+0x5be/0x890 [ 1319.722773][T23774] get_compat_msghdr+0x108/0x270 [ 1319.722773][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1319.722773][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1319.722773][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1319.722773][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1319.722773][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1319.722773][T23774] do_int80_syscall_32+0x1d/0x30 [ 1319.722773][T23774] entry_INT80_compat+0x71/0x76 [ 1319.722773][T23774] [ 1319.722773][T23774] Uninit was stored to memory at: [ 1319.722773][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1319.722773][T23774] __msan_chain_origin+0x50/0x90 [ 1319.722773][T23774] __get_compat_msghdr+0x5be/0x890 [ 1319.722773][T23774] get_compat_msghdr+0x108/0x270 [ 1319.722773][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1319.722773][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1319.722773][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1319.722773][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1319.722773][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1319.722773][T23774] do_int80_syscall_32+0x1d/0x30 [ 1319.722773][T23774] entry_INT80_compat+0x71/0x76 [ 1319.722773][T23774] [ 1319.722773][T23774] Uninit was stored to memory at: [ 1319.722773][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1319.722773][T23774] __msan_chain_origin+0x50/0x90 [ 1319.722773][T23774] __get_compat_msghdr+0x5be/0x890 [ 1319.722773][T23774] get_compat_msghdr+0x108/0x270 [ 1319.722773][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1319.722773][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1319.722773][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1319.722773][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1319.722773][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1319.722773][T23774] do_int80_syscall_32+0x1d/0x30 [ 1319.722773][T23774] entry_INT80_compat+0x71/0x76 [ 1319.722773][T23774] [ 1319.722773][T23774] Uninit was stored to memory at: [ 1319.722773][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1319.722773][T23774] __msan_chain_origin+0x50/0x90 [ 1319.722773][T23774] __get_compat_msghdr+0x5be/0x890 [ 1319.722773][T23774] get_compat_msghdr+0x108/0x270 [ 1319.722773][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1319.722773][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1319.722773][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1319.722773][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1319.722773][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1319.722773][T23774] do_int80_syscall_32+0x1d/0x30 [ 1319.722773][T23774] entry_INT80_compat+0x71/0x76 [ 1319.722773][T23774] [ 1319.722773][T23774] Uninit was stored to memory at: [ 1319.722773][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1319.722773][T23774] __msan_chain_origin+0x50/0x90 [ 1319.722773][T23774] __get_compat_msghdr+0x5be/0x890 [ 1319.722773][T23774] get_compat_msghdr+0x108/0x270 [ 1319.722773][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1319.722773][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1319.722773][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1319.722773][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1319.722773][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1319.722773][T23774] do_int80_syscall_32+0x1d/0x30 [ 1319.722773][T23774] entry_INT80_compat+0x71/0x76 [ 1319.722773][T23774] [ 1319.722773][T23774] Uninit was stored to memory at: [ 1319.722773][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1319.722773][T23774] __msan_chain_origin+0x50/0x90 [ 1319.722773][T23774] __get_compat_msghdr+0x5be/0x890 [ 1319.722773][T23774] get_compat_msghdr+0x108/0x270 [ 1319.722773][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1319.722773][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1319.722773][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1319.722773][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1319.722773][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1319.722773][T23774] do_int80_syscall_32+0x1d/0x30 [ 1319.722773][T23774] entry_INT80_compat+0x71/0x76 [ 1319.722773][T23774] [ 1319.722773][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1319.722773][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1319.722773][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1320.708806][T23768] not chained 3430000 origins [ 1320.712654][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1320.718785][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.718785][T23768] Call Trace: [ 1320.718785][T23768] dump_stack+0x1df/0x240 [ 1320.718785][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1320.718785][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1320.718785][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1320.718785][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1320.718785][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1320.718785][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1320.718785][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1320.718785][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1320.718785][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1320.718785][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1320.718785][T23768] ? _copy_from_user+0x15b/0x260 [ 1320.718785][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1320.718785][T23768] __msan_chain_origin+0x50/0x90 [ 1320.718785][T23768] __get_compat_msghdr+0x5be/0x890 [ 1320.718785][T23768] get_compat_msghdr+0x108/0x270 [ 1320.718785][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1320.718785][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1320.718785][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1320.718785][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1320.718785][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1320.718785][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1320.718785][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1320.718785][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1320.718785][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1320.718785][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1320.718785][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1320.718785][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1320.718785][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1320.718785][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1320.718785][T23768] do_int80_syscall_32+0x1d/0x30 [ 1320.718785][T23768] entry_INT80_compat+0x71/0x76 [ 1320.718785][T23768] RIP: 0023:0xf7f11549 [ 1320.718785][T23768] Code: Bad RIP value. [ 1320.718785][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1320.718785][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1320.718785][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1320.718785][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1320.718785][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1320.718785][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1320.718785][T23768] Uninit was stored to memory at: [ 1320.718785][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1320.718785][T23768] __msan_chain_origin+0x50/0x90 [ 1320.718785][T23768] __get_compat_msghdr+0x5be/0x890 [ 1320.718785][T23768] get_compat_msghdr+0x108/0x270 [ 1320.718785][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1320.718785][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1320.718785][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1320.718785][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1320.718785][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1320.718785][T23768] do_int80_syscall_32+0x1d/0x30 [ 1320.718785][T23768] entry_INT80_compat+0x71/0x76 [ 1320.718785][T23768] [ 1320.718785][T23768] Uninit was stored to memory at: [ 1320.718785][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1320.718785][T23768] __msan_chain_origin+0x50/0x90 [ 1320.718785][T23768] __get_compat_msghdr+0x5be/0x890 [ 1320.718785][T23768] get_compat_msghdr+0x108/0x270 [ 1320.718785][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1320.718785][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1320.718785][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1320.718785][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1320.718785][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1320.718785][T23768] do_int80_syscall_32+0x1d/0x30 [ 1320.718785][T23768] entry_INT80_compat+0x71/0x76 [ 1320.718785][T23768] [ 1320.718785][T23768] Uninit was stored to memory at: [ 1320.718785][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1320.718785][T23768] __msan_chain_origin+0x50/0x90 [ 1320.718785][T23768] __get_compat_msghdr+0x5be/0x890 [ 1320.718785][T23768] get_compat_msghdr+0x108/0x270 [ 1320.718785][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1320.718785][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1320.718785][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1320.718785][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1320.718785][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1320.718785][T23768] do_int80_syscall_32+0x1d/0x30 [ 1320.718785][T23768] entry_INT80_compat+0x71/0x76 [ 1320.718785][T23768] [ 1320.718785][T23768] Uninit was stored to memory at: [ 1320.718785][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1320.718785][T23768] __msan_chain_origin+0x50/0x90 [ 1320.718785][T23768] __get_compat_msghdr+0x5be/0x890 [ 1320.718785][T23768] get_compat_msghdr+0x108/0x270 [ 1320.718785][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1320.718785][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1320.718785][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1320.718785][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1320.718785][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1320.718785][T23768] do_int80_syscall_32+0x1d/0x30 [ 1320.718785][T23768] entry_INT80_compat+0x71/0x76 [ 1320.718785][T23768] [ 1320.718785][T23768] Uninit was stored to memory at: [ 1320.718785][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1320.718785][T23768] __msan_chain_origin+0x50/0x90 [ 1320.718785][T23768] __get_compat_msghdr+0x5be/0x890 [ 1320.718785][T23768] get_compat_msghdr+0x108/0x270 [ 1320.718785][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1320.718785][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1320.718785][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1320.718785][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1320.718785][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1320.718785][T23768] do_int80_syscall_32+0x1d/0x30 [ 1320.718785][T23768] entry_INT80_compat+0x71/0x76 [ 1320.718785][T23768] [ 1320.718785][T23768] Uninit was stored to memory at: [ 1320.718785][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1320.718785][T23768] __msan_chain_origin+0x50/0x90 [ 1320.718785][T23768] __get_compat_msghdr+0x5be/0x890 [ 1320.718785][T23768] get_compat_msghdr+0x108/0x270 [ 1320.718785][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1320.718785][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1320.718785][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1320.718785][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1320.718785][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1320.718785][T23768] do_int80_syscall_32+0x1d/0x30 [ 1320.718785][T23768] entry_INT80_compat+0x71/0x76 [ 1320.718785][T23768] [ 1320.718785][T23768] Uninit was stored to memory at: [ 1320.718785][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1320.718785][T23768] __msan_chain_origin+0x50/0x90 [ 1320.718785][T23768] __get_compat_msghdr+0x5be/0x890 [ 1320.718785][T23768] get_compat_msghdr+0x108/0x270 [ 1320.718785][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1320.718785][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1320.718785][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1320.718785][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1320.718785][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1320.718785][T23768] do_int80_syscall_32+0x1d/0x30 [ 1320.718785][T23768] entry_INT80_compat+0x71/0x76 [ 1320.718785][T23768] [ 1320.718785][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1320.718785][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1320.718785][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1322.250581][T23768] not chained 3440000 origins [ 1322.252608][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1322.255721][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1322.255721][T23768] Call Trace: [ 1322.255721][T23768] dump_stack+0x1df/0x240 [ 1322.255721][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1322.255721][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1322.255721][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1322.255721][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1322.255721][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1322.255721][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1322.255721][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1322.255721][T23768] ? psi_group_change+0x1007/0x13c0 [ 1322.255721][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1322.255721][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1322.255721][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1322.255721][T23768] ? _copy_from_user+0x15b/0x260 [ 1322.255721][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1322.255721][T23768] __msan_chain_origin+0x50/0x90 [ 1322.255721][T23768] __get_compat_msghdr+0x5be/0x890 [ 1322.255721][T23768] get_compat_msghdr+0x108/0x270 [ 1322.255721][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1322.255721][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1322.255721][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1322.255721][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1322.255721][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1322.255721][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1322.255721][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1322.255721][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1322.255721][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1322.255721][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1322.255721][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1322.255721][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1322.255721][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1322.255721][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1322.255721][T23768] do_int80_syscall_32+0x1d/0x30 [ 1322.255721][T23768] entry_INT80_compat+0x71/0x76 [ 1322.255721][T23768] RIP: 0023:0xf7f11549 [ 1322.255721][T23768] Code: Bad RIP value. [ 1322.255721][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1322.255721][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1322.255721][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1322.255721][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1322.255721][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1322.255721][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1322.255721][T23768] Uninit was stored to memory at: [ 1322.255721][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1322.255721][T23768] __msan_chain_origin+0x50/0x90 [ 1322.255721][T23768] __get_compat_msghdr+0x5be/0x890 [ 1322.255721][T23768] get_compat_msghdr+0x108/0x270 [ 1322.255721][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1322.255721][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1322.255721][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1322.255721][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1322.255721][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1322.255721][T23768] do_int80_syscall_32+0x1d/0x30 [ 1322.255721][T23768] entry_INT80_compat+0x71/0x76 [ 1322.255721][T23768] [ 1322.255721][T23768] Uninit was stored to memory at: [ 1322.255721][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1322.255721][T23768] __msan_chain_origin+0x50/0x90 [ 1322.255721][T23768] __get_compat_msghdr+0x5be/0x890 [ 1322.255721][T23768] get_compat_msghdr+0x108/0x270 [ 1322.255721][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1322.255721][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1322.255721][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1322.255721][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1322.255721][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1322.255721][T23768] do_int80_syscall_32+0x1d/0x30 [ 1322.255721][T23768] entry_INT80_compat+0x71/0x76 [ 1322.255721][T23768] [ 1322.255721][T23768] Uninit was stored to memory at: [ 1322.255721][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1322.255721][T23768] __msan_chain_origin+0x50/0x90 [ 1322.255721][T23768] __get_compat_msghdr+0x5be/0x890 [ 1322.255721][T23768] get_compat_msghdr+0x108/0x270 [ 1322.255721][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1322.255721][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1322.255721][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1322.255721][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1322.255721][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1322.255721][T23768] do_int80_syscall_32+0x1d/0x30 [ 1322.255721][T23768] entry_INT80_compat+0x71/0x76 [ 1322.255721][T23768] [ 1322.255721][T23768] Uninit was stored to memory at: [ 1322.255721][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1322.255721][T23768] __msan_chain_origin+0x50/0x90 [ 1322.255721][T23768] __get_compat_msghdr+0x5be/0x890 [ 1322.255721][T23768] get_compat_msghdr+0x108/0x270 [ 1322.255721][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1322.255721][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1322.255721][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1322.255721][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1322.255721][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1322.255721][T23768] do_int80_syscall_32+0x1d/0x30 [ 1322.255721][T23768] entry_INT80_compat+0x71/0x76 [ 1322.255721][T23768] [ 1322.255721][T23768] Uninit was stored to memory at: [ 1322.255721][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1322.255721][T23768] __msan_chain_origin+0x50/0x90 [ 1322.255721][T23768] __get_compat_msghdr+0x5be/0x890 [ 1322.255721][T23768] get_compat_msghdr+0x108/0x270 [ 1322.255721][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1322.255721][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1322.255721][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1322.255721][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1322.255721][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1322.255721][T23768] do_int80_syscall_32+0x1d/0x30 [ 1322.255721][T23768] entry_INT80_compat+0x71/0x76 [ 1322.255721][T23768] [ 1322.255721][T23768] Uninit was stored to memory at: [ 1322.255721][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1322.255721][T23768] __msan_chain_origin+0x50/0x90 [ 1322.255721][T23768] __get_compat_msghdr+0x5be/0x890 [ 1322.255721][T23768] get_compat_msghdr+0x108/0x270 [ 1322.255721][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1322.255721][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1322.255721][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1322.255721][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1322.255721][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1322.255721][T23768] do_int80_syscall_32+0x1d/0x30 [ 1322.255721][T23768] entry_INT80_compat+0x71/0x76 [ 1322.255721][T23768] [ 1322.255721][T23768] Uninit was stored to memory at: [ 1322.255721][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1322.255721][T23768] __msan_chain_origin+0x50/0x90 [ 1322.255721][T23768] __get_compat_msghdr+0x5be/0x890 [ 1322.255721][T23768] get_compat_msghdr+0x108/0x270 [ 1322.255721][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1322.255721][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1322.255721][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1322.255721][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1322.255721][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1322.255721][T23768] do_int80_syscall_32+0x1d/0x30 [ 1322.255721][T23768] entry_INT80_compat+0x71/0x76 [ 1322.255721][T23768] [ 1322.255721][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1322.255721][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1322.255721][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1322.998681][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1325.289781][T23768] not chained 3450000 origins [ 1325.292582][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1325.292582][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.292582][T23768] Call Trace: [ 1325.292582][T23768] dump_stack+0x1df/0x240 [ 1325.292582][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1325.292582][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1325.292582][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1325.292582][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1325.342791][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1325.342791][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1325.342791][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1325.342791][T23768] ? psi_group_change+0x1007/0x13c0 [ 1325.342791][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1325.342791][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1325.342791][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1325.342791][T23768] ? _copy_from_user+0x15b/0x260 [ 1325.342791][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1325.342791][T23768] __msan_chain_origin+0x50/0x90 [ 1325.342791][T23768] __get_compat_msghdr+0x5be/0x890 [ 1325.342791][T23768] get_compat_msghdr+0x108/0x270 [ 1325.342791][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1325.342791][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1325.342791][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1325.342791][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1325.342791][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1325.342791][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1325.342791][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1325.342791][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1325.342791][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1325.342791][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1325.342791][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1325.342791][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1325.342791][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1325.342791][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1325.342791][T23768] do_int80_syscall_32+0x1d/0x30 [ 1325.342791][T23768] entry_INT80_compat+0x71/0x76 [ 1325.342791][T23768] RIP: 0023:0xf7f11549 [ 1325.342791][T23768] Code: Bad RIP value. [ 1325.342791][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1325.342791][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1325.342791][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1325.342791][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1325.342791][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1325.342791][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1325.342791][T23768] Uninit was stored to memory at: [ 1325.342791][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1325.342791][T23768] __msan_chain_origin+0x50/0x90 [ 1325.342791][T23768] __get_compat_msghdr+0x5be/0x890 [ 1325.342791][T23768] get_compat_msghdr+0x108/0x270 [ 1325.342791][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1325.342791][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1325.342791][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1325.342791][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1325.342791][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1325.342791][T23768] do_int80_syscall_32+0x1d/0x30 [ 1325.342791][T23768] entry_INT80_compat+0x71/0x76 [ 1325.342791][T23768] [ 1325.342791][T23768] Uninit was stored to memory at: [ 1325.342791][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1325.342791][T23768] __msan_chain_origin+0x50/0x90 [ 1325.342791][T23768] __get_compat_msghdr+0x5be/0x890 [ 1325.342791][T23768] get_compat_msghdr+0x108/0x270 [ 1325.342791][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1325.342791][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1325.342791][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1325.342791][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1325.342791][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1325.342791][T23768] do_int80_syscall_32+0x1d/0x30 [ 1325.342791][T23768] entry_INT80_compat+0x71/0x76 [ 1325.342791][T23768] [ 1325.342791][T23768] Uninit was stored to memory at: [ 1325.342791][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1325.342791][T23768] __msan_chain_origin+0x50/0x90 [ 1325.342791][T23768] __get_compat_msghdr+0x5be/0x890 [ 1325.342791][T23768] get_compat_msghdr+0x108/0x270 [ 1325.342791][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1325.342791][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1325.342791][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1325.342791][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1325.342791][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1325.342791][T23768] do_int80_syscall_32+0x1d/0x30 [ 1325.342791][T23768] entry_INT80_compat+0x71/0x76 [ 1325.342791][T23768] [ 1325.342791][T23768] Uninit was stored to memory at: [ 1325.342791][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1325.342791][T23768] __msan_chain_origin+0x50/0x90 [ 1325.342791][T23768] __get_compat_msghdr+0x5be/0x890 [ 1325.342791][T23768] get_compat_msghdr+0x108/0x270 [ 1325.342791][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1325.342791][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1325.342791][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1325.342791][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1325.342791][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1325.342791][T23768] do_int80_syscall_32+0x1d/0x30 [ 1325.342791][T23768] entry_INT80_compat+0x71/0x76 [ 1325.342791][T23768] [ 1325.342791][T23768] Uninit was stored to memory at: [ 1325.342791][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1325.342791][T23768] __msan_chain_origin+0x50/0x90 [ 1325.342791][T23768] __get_compat_msghdr+0x5be/0x890 [ 1325.342791][T23768] get_compat_msghdr+0x108/0x270 [ 1325.342791][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1325.342791][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1325.342791][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1325.342791][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1325.342791][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1325.342791][T23768] do_int80_syscall_32+0x1d/0x30 [ 1325.342791][T23768] entry_INT80_compat+0x71/0x76 [ 1325.342791][T23768] [ 1325.342791][T23768] Uninit was stored to memory at: [ 1325.342791][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1325.342791][T23768] __msan_chain_origin+0x50/0x90 [ 1325.342791][T23768] __get_compat_msghdr+0x5be/0x890 [ 1325.342791][T23768] get_compat_msghdr+0x108/0x270 [ 1325.342791][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1325.342791][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1325.342791][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1325.342791][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1325.342791][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1325.342791][T23768] do_int80_syscall_32+0x1d/0x30 [ 1325.342791][T23768] entry_INT80_compat+0x71/0x76 [ 1325.342791][T23768] [ 1325.342791][T23768] Uninit was stored to memory at: [ 1325.342791][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1325.342791][T23768] __msan_chain_origin+0x50/0x90 [ 1325.342791][T23768] __get_compat_msghdr+0x5be/0x890 [ 1325.342791][T23768] get_compat_msghdr+0x108/0x270 [ 1325.342791][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1325.342791][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1325.342791][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1325.342791][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1325.342791][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1325.342791][T23768] do_int80_syscall_32+0x1d/0x30 [ 1325.342791][T23768] entry_INT80_compat+0x71/0x76 [ 1325.342791][T23768] [ 1325.342791][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1325.342791][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1325.342791][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1326.299592][T23774] not chained 3460000 origins [ 1326.302601][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1326.307311][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1326.307311][T23774] Call Trace: [ 1326.307311][T23774] dump_stack+0x1df/0x240 [ 1326.307311][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1326.307311][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1326.307311][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1326.307311][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1326.307311][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1326.307311][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1326.307311][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1326.307311][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1326.307311][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1326.307311][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1326.307311][T23774] ? _copy_from_user+0x15b/0x260 [ 1326.307311][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1326.307311][T23774] __msan_chain_origin+0x50/0x90 [ 1326.307311][T23774] __get_compat_msghdr+0x5be/0x890 [ 1326.307311][T23774] get_compat_msghdr+0x108/0x270 [ 1326.307311][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1326.307311][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1326.307311][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1326.307311][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1326.307311][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1326.307311][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1326.307311][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1326.307311][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1326.307311][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1326.307311][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1326.307311][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1326.307311][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1326.307311][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1326.307311][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1326.307311][T23774] do_int80_syscall_32+0x1d/0x30 [ 1326.307311][T23774] entry_INT80_compat+0x71/0x76 [ 1326.307311][T23774] RIP: 0023:0xf7f11549 [ 1326.307311][T23774] Code: Bad RIP value. [ 1326.307311][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1326.307311][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1326.307311][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1326.307311][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1326.307311][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1326.307311][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1326.307311][T23774] Uninit was stored to memory at: [ 1326.307311][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1326.307311][T23774] __msan_chain_origin+0x50/0x90 [ 1326.307311][T23774] __get_compat_msghdr+0x5be/0x890 [ 1326.307311][T23774] get_compat_msghdr+0x108/0x270 [ 1326.307311][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1326.307311][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1326.307311][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1326.307311][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1326.307311][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1326.307311][T23774] do_int80_syscall_32+0x1d/0x30 [ 1326.307311][T23774] entry_INT80_compat+0x71/0x76 [ 1326.307311][T23774] [ 1326.307311][T23774] Uninit was stored to memory at: [ 1326.307311][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1326.307311][T23774] __msan_chain_origin+0x50/0x90 [ 1326.307311][T23774] __get_compat_msghdr+0x5be/0x890 [ 1326.307311][T23774] get_compat_msghdr+0x108/0x270 [ 1326.307311][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1326.307311][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1326.307311][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1326.307311][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1326.307311][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1326.307311][T23774] do_int80_syscall_32+0x1d/0x30 [ 1326.307311][T23774] entry_INT80_compat+0x71/0x76 [ 1326.307311][T23774] [ 1326.307311][T23774] Uninit was stored to memory at: [ 1326.307311][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1326.307311][T23774] __msan_chain_origin+0x50/0x90 [ 1326.307311][T23774] __get_compat_msghdr+0x5be/0x890 [ 1326.307311][T23774] get_compat_msghdr+0x108/0x270 [ 1326.307311][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1326.307311][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1326.307311][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1326.307311][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1326.307311][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1326.307311][T23774] do_int80_syscall_32+0x1d/0x30 [ 1326.307311][T23774] entry_INT80_compat+0x71/0x76 [ 1326.307311][T23774] [ 1326.307311][T23774] Uninit was stored to memory at: [ 1326.307311][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1326.307311][T23774] __msan_chain_origin+0x50/0x90 [ 1326.307311][T23774] __get_compat_msghdr+0x5be/0x890 [ 1326.307311][T23774] get_compat_msghdr+0x108/0x270 [ 1326.307311][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1326.307311][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1326.307311][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1326.307311][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1326.307311][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1326.307311][T23774] do_int80_syscall_32+0x1d/0x30 [ 1326.307311][T23774] entry_INT80_compat+0x71/0x76 [ 1326.307311][T23774] [ 1326.307311][T23774] Uninit was stored to memory at: [ 1326.307311][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1326.307311][T23774] __msan_chain_origin+0x50/0x90 [ 1326.307311][T23774] __get_compat_msghdr+0x5be/0x890 [ 1326.307311][T23774] get_compat_msghdr+0x108/0x270 [ 1326.307311][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1326.307311][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1326.307311][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1326.307311][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1326.307311][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1326.307311][T23774] do_int80_syscall_32+0x1d/0x30 [ 1326.307311][T23774] entry_INT80_compat+0x71/0x76 [ 1326.307311][T23774] [ 1326.307311][T23774] Uninit was stored to memory at: [ 1326.307311][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1326.307311][T23774] __msan_chain_origin+0x50/0x90 [ 1326.307311][T23774] __get_compat_msghdr+0x5be/0x890 [ 1326.307311][T23774] get_compat_msghdr+0x108/0x270 [ 1326.307311][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1326.307311][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1326.307311][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1326.307311][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1326.307311][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1326.307311][T23774] do_int80_syscall_32+0x1d/0x30 [ 1326.307311][T23774] entry_INT80_compat+0x71/0x76 [ 1326.307311][T23774] [ 1326.307311][T23774] Uninit was stored to memory at: [ 1326.307311][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1326.307311][T23774] __msan_chain_origin+0x50/0x90 [ 1326.307311][T23774] __get_compat_msghdr+0x5be/0x890 [ 1326.307311][T23774] get_compat_msghdr+0x108/0x270 [ 1326.307311][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1326.307311][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1326.307311][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1326.307311][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1326.307311][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1326.307311][T23774] do_int80_syscall_32+0x1d/0x30 [ 1326.307311][T23774] entry_INT80_compat+0x71/0x76 [ 1326.307311][T23774] [ 1326.307311][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1326.307311][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1326.307311][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1327.262172][T23774] not chained 3470000 origins [ 1327.262598][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1327.262598][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.275943][T23774] Call Trace: [ 1327.275943][T23774] dump_stack+0x1df/0x240 [ 1327.275943][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1327.275943][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1327.275943][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1327.275943][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1327.275943][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1327.275943][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1327.275943][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1327.275943][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1327.275943][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1327.275943][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1327.275943][T23774] ? _copy_from_user+0x15b/0x260 [ 1327.275943][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1327.275943][T23774] __msan_chain_origin+0x50/0x90 [ 1327.275943][T23774] __get_compat_msghdr+0x5be/0x890 [ 1327.275943][T23774] get_compat_msghdr+0x108/0x270 [ 1327.275943][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1327.275943][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1327.275943][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1327.275943][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1327.275943][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1327.275943][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1327.275943][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1327.275943][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1327.275943][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1327.275943][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1327.275943][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1327.275943][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1327.275943][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1327.275943][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1327.275943][T23774] do_int80_syscall_32+0x1d/0x30 [ 1327.275943][T23774] entry_INT80_compat+0x71/0x76 [ 1327.275943][T23774] RIP: 0023:0xf7f11549 [ 1327.275943][T23774] Code: Bad RIP value. [ 1327.275943][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1327.275943][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1327.275943][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1327.275943][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1327.275943][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1327.275943][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.275943][T23774] Uninit was stored to memory at: [ 1327.275943][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1327.275943][T23774] __msan_chain_origin+0x50/0x90 [ 1327.275943][T23774] __get_compat_msghdr+0x5be/0x890 [ 1327.275943][T23774] get_compat_msghdr+0x108/0x270 [ 1327.275943][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1327.275943][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1327.275943][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1327.275943][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1327.275943][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1327.275943][T23774] do_int80_syscall_32+0x1d/0x30 [ 1327.275943][T23774] entry_INT80_compat+0x71/0x76 [ 1327.275943][T23774] [ 1327.275943][T23774] Uninit was stored to memory at: [ 1327.275943][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1327.275943][T23774] __msan_chain_origin+0x50/0x90 [ 1327.275943][T23774] __get_compat_msghdr+0x5be/0x890 [ 1327.275943][T23774] get_compat_msghdr+0x108/0x270 [ 1327.275943][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1327.275943][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1327.275943][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1327.275943][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1327.275943][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1327.275943][T23774] do_int80_syscall_32+0x1d/0x30 [ 1327.275943][T23774] entry_INT80_compat+0x71/0x76 [ 1327.275943][T23774] [ 1327.275943][T23774] Uninit was stored to memory at: [ 1327.275943][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1327.275943][T23774] __msan_chain_origin+0x50/0x90 [ 1327.275943][T23774] __get_compat_msghdr+0x5be/0x890 [ 1327.275943][T23774] get_compat_msghdr+0x108/0x270 [ 1327.275943][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1327.275943][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1327.275943][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1327.275943][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1327.275943][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1327.275943][T23774] do_int80_syscall_32+0x1d/0x30 [ 1327.275943][T23774] entry_INT80_compat+0x71/0x76 [ 1327.275943][T23774] [ 1327.275943][T23774] Uninit was stored to memory at: [ 1327.275943][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1327.275943][T23774] __msan_chain_origin+0x50/0x90 [ 1327.275943][T23774] __get_compat_msghdr+0x5be/0x890 [ 1327.275943][T23774] get_compat_msghdr+0x108/0x270 [ 1327.275943][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1327.275943][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1327.275943][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1327.275943][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1327.275943][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1327.275943][T23774] do_int80_syscall_32+0x1d/0x30 [ 1327.275943][T23774] entry_INT80_compat+0x71/0x76 [ 1327.275943][T23774] [ 1327.275943][T23774] Uninit was stored to memory at: [ 1327.275943][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1327.275943][T23774] __msan_chain_origin+0x50/0x90 [ 1327.275943][T23774] __get_compat_msghdr+0x5be/0x890 [ 1327.275943][T23774] get_compat_msghdr+0x108/0x270 [ 1327.275943][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1327.275943][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1327.275943][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1327.275943][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1327.275943][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1327.275943][T23774] do_int80_syscall_32+0x1d/0x30 [ 1327.275943][T23774] entry_INT80_compat+0x71/0x76 [ 1327.275943][T23774] [ 1327.275943][T23774] Uninit was stored to memory at: [ 1327.275943][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1327.275943][T23774] __msan_chain_origin+0x50/0x90 [ 1327.275943][T23774] __get_compat_msghdr+0x5be/0x890 [ 1327.275943][T23774] get_compat_msghdr+0x108/0x270 [ 1327.275943][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1327.275943][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1327.275943][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1327.275943][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1327.275943][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1327.275943][T23774] do_int80_syscall_32+0x1d/0x30 [ 1327.275943][T23774] entry_INT80_compat+0x71/0x76 [ 1327.275943][T23774] [ 1327.275943][T23774] Uninit was stored to memory at: [ 1327.275943][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1327.275943][T23774] __msan_chain_origin+0x50/0x90 [ 1327.275943][T23774] __get_compat_msghdr+0x5be/0x890 [ 1327.275943][T23774] get_compat_msghdr+0x108/0x270 [ 1327.275943][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1327.275943][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1327.275943][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1327.275943][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1327.275943][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1327.275943][T23774] do_int80_syscall_32+0x1d/0x30 [ 1327.275943][T23774] entry_INT80_compat+0x71/0x76 [ 1327.275943][T23774] [ 1327.275943][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1327.275943][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1327.275943][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1329.218769][T23768] not chained 3480000 origins [ 1329.222652][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1329.222652][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.222652][T23768] Call Trace: [ 1329.222652][T23768] dump_stack+0x1df/0x240 [ 1329.222652][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1329.222652][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1329.222652][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1329.222652][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1329.222652][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1329.222652][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1329.222652][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1329.222652][T23768] ? psi_group_change+0x1007/0x13c0 [ 1329.222652][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1329.222652][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1329.222652][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1329.222652][T23768] ? _copy_from_user+0x15b/0x260 [ 1329.222652][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1329.222652][T23768] __msan_chain_origin+0x50/0x90 [ 1329.222652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1329.222652][T23768] get_compat_msghdr+0x108/0x270 [ 1329.222652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1329.222652][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1329.222652][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1329.222652][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1329.222652][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1329.222652][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1329.222652][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1329.222652][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1329.222652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1329.222652][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1329.222652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1329.222652][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1329.222652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1329.222652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1329.222652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1329.222652][T23768] entry_INT80_compat+0x71/0x76 [ 1329.222652][T23768] RIP: 0023:0xf7f11549 [ 1329.222652][T23768] Code: Bad RIP value. [ 1329.222652][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1329.222652][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1329.222652][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1329.222652][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1329.222652][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1329.222652][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1329.222652][T23768] Uninit was stored to memory at: [ 1329.222652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1329.222652][T23768] __msan_chain_origin+0x50/0x90 [ 1329.222652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1329.222652][T23768] get_compat_msghdr+0x108/0x270 [ 1329.222652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1329.222652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1329.222652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1329.222652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1329.222652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1329.222652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1329.222652][T23768] entry_INT80_compat+0x71/0x76 [ 1329.222652][T23768] [ 1329.222652][T23768] Uninit was stored to memory at: [ 1329.222652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1329.222652][T23768] __msan_chain_origin+0x50/0x90 [ 1329.222652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1329.222652][T23768] get_compat_msghdr+0x108/0x270 [ 1329.222652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1329.222652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1329.222652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1329.222652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1329.222652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1329.222652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1329.222652][T23768] entry_INT80_compat+0x71/0x76 [ 1329.222652][T23768] [ 1329.222652][T23768] Uninit was stored to memory at: [ 1329.222652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1329.222652][T23768] __msan_chain_origin+0x50/0x90 [ 1329.222652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1329.222652][T23768] get_compat_msghdr+0x108/0x270 [ 1329.222652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1329.222652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1329.222652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1329.222652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1329.222652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1329.222652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1329.222652][T23768] entry_INT80_compat+0x71/0x76 [ 1329.222652][T23768] [ 1329.222652][T23768] Uninit was stored to memory at: [ 1329.222652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1329.222652][T23768] __msan_chain_origin+0x50/0x90 [ 1329.222652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1329.222652][T23768] get_compat_msghdr+0x108/0x270 [ 1329.222652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1329.222652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1329.222652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1329.222652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1329.222652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1329.222652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1329.222652][T23768] entry_INT80_compat+0x71/0x76 [ 1329.222652][T23768] [ 1329.222652][T23768] Uninit was stored to memory at: [ 1329.222652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1329.222652][T23768] __msan_chain_origin+0x50/0x90 [ 1329.222652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1329.222652][T23768] get_compat_msghdr+0x108/0x270 [ 1329.222652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1329.222652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1329.222652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1329.222652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1329.222652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1329.222652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1329.222652][T23768] entry_INT80_compat+0x71/0x76 [ 1329.222652][T23768] [ 1329.222652][T23768] Uninit was stored to memory at: [ 1329.222652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1329.222652][T23768] __msan_chain_origin+0x50/0x90 [ 1329.222652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1329.222652][T23768] get_compat_msghdr+0x108/0x270 [ 1329.222652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1329.222652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1329.222652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1329.222652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1329.222652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1329.222652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1329.222652][T23768] entry_INT80_compat+0x71/0x76 [ 1329.222652][T23768] [ 1329.222652][T23768] Uninit was stored to memory at: [ 1329.222652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1329.222652][T23768] __msan_chain_origin+0x50/0x90 [ 1329.222652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1329.222652][T23768] get_compat_msghdr+0x108/0x270 [ 1329.222652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1329.222652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1329.222652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1329.222652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1329.222652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1329.222652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1329.222652][T23768] entry_INT80_compat+0x71/0x76 [ 1329.222652][T23768] [ 1329.222652][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1329.222652][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1329.222652][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1330.127457][T23768] not chained 3490000 origins [ 1330.132189][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1330.132595][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.132595][T23768] Call Trace: [ 1330.132595][T23768] dump_stack+0x1df/0x240 [ 1330.132595][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1330.132595][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1330.132595][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1330.132595][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1330.132595][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1330.132595][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1330.132595][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1330.132595][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1330.132595][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1330.132595][T23768] ? _copy_from_user+0x15b/0x260 [ 1330.132595][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1330.132595][T23768] __msan_chain_origin+0x50/0x90 [ 1330.132595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.132595][T23768] get_compat_msghdr+0x108/0x270 [ 1330.132595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.132595][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1330.132595][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1330.132595][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1330.132595][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1330.132595][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1330.132595][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1330.132595][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1330.132595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.132595][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1330.132595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.132595][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1330.132595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.132595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.132595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.132595][T23768] entry_INT80_compat+0x71/0x76 [ 1330.132595][T23768] RIP: 0023:0xf7f11549 [ 1330.132595][T23768] Code: Bad RIP value. [ 1330.132595][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1330.132595][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1330.132595][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1330.132595][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1330.132595][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1330.132595][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1330.132595][T23768] Uninit was stored to memory at: [ 1330.132595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.132595][T23768] __msan_chain_origin+0x50/0x90 [ 1330.132595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.132595][T23768] get_compat_msghdr+0x108/0x270 [ 1330.132595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.132595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.132595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.132595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.132595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.132595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.132595][T23768] entry_INT80_compat+0x71/0x76 [ 1330.132595][T23768] [ 1330.132595][T23768] Uninit was stored to memory at: [ 1330.132595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.132595][T23768] __msan_chain_origin+0x50/0x90 [ 1330.132595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.132595][T23768] get_compat_msghdr+0x108/0x270 [ 1330.132595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.132595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.132595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.132595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.132595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.132595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.132595][T23768] entry_INT80_compat+0x71/0x76 [ 1330.132595][T23768] [ 1330.132595][T23768] Uninit was stored to memory at: [ 1330.132595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.132595][T23768] __msan_chain_origin+0x50/0x90 [ 1330.132595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.132595][T23768] get_compat_msghdr+0x108/0x270 [ 1330.132595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.132595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.132595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.132595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.132595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.132595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.132595][T23768] entry_INT80_compat+0x71/0x76 [ 1330.132595][T23768] [ 1330.132595][T23768] Uninit was stored to memory at: [ 1330.132595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.132595][T23768] __msan_chain_origin+0x50/0x90 [ 1330.132595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.132595][T23768] get_compat_msghdr+0x108/0x270 [ 1330.132595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.132595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.132595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.132595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.132595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.132595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.132595][T23768] entry_INT80_compat+0x71/0x76 [ 1330.132595][T23768] [ 1330.132595][T23768] Uninit was stored to memory at: [ 1330.132595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.132595][T23768] __msan_chain_origin+0x50/0x90 [ 1330.132595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.132595][T23768] get_compat_msghdr+0x108/0x270 [ 1330.132595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.132595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.132595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.132595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.132595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.132595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.132595][T23768] entry_INT80_compat+0x71/0x76 [ 1330.132595][T23768] [ 1330.132595][T23768] Uninit was stored to memory at: [ 1330.132595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.132595][T23768] __msan_chain_origin+0x50/0x90 [ 1330.132595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.132595][T23768] get_compat_msghdr+0x108/0x270 [ 1330.132595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.132595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.132595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.132595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.132595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.132595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.132595][T23768] entry_INT80_compat+0x71/0x76 [ 1330.132595][T23768] [ 1330.132595][T23768] Uninit was stored to memory at: [ 1330.132595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.132595][T23768] __msan_chain_origin+0x50/0x90 [ 1330.132595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.132595][T23768] get_compat_msghdr+0x108/0x270 [ 1330.132595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.132595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.132595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.132595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.132595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.132595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.132595][T23768] entry_INT80_compat+0x71/0x76 [ 1330.132595][T23768] [ 1330.132595][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1330.132595][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1330.132595][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1330.978023][T23768] not chained 3500000 origins [ 1330.982603][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1330.982603][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.982603][T23768] Call Trace: [ 1330.982603][T23768] dump_stack+0x1df/0x240 [ 1330.982603][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1330.982603][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1330.982603][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1330.982603][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1330.982603][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1330.982603][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1330.982603][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1330.982603][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1330.982603][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1330.982603][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1330.982603][T23768] ? _copy_from_user+0x15b/0x260 [ 1330.982603][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1330.982603][T23768] __msan_chain_origin+0x50/0x90 [ 1330.982603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.982603][T23768] get_compat_msghdr+0x108/0x270 [ 1330.982603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.982603][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1330.982603][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1330.982603][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1330.982603][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1330.982603][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1330.982603][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1330.982603][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1330.982603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.982603][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1330.982603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.982603][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1330.982603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.982603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.982603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.982603][T23768] entry_INT80_compat+0x71/0x76 [ 1330.982603][T23768] RIP: 0023:0xf7f11549 [ 1330.982603][T23768] Code: Bad RIP value. [ 1330.982603][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1330.982603][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1330.982603][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1330.982603][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1330.982603][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1330.982603][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1330.982603][T23768] Uninit was stored to memory at: [ 1330.982603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.982603][T23768] __msan_chain_origin+0x50/0x90 [ 1330.982603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.982603][T23768] get_compat_msghdr+0x108/0x270 [ 1330.982603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.982603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.982603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.982603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.982603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.982603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.982603][T23768] entry_INT80_compat+0x71/0x76 [ 1330.982603][T23768] [ 1330.982603][T23768] Uninit was stored to memory at: [ 1330.982603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.982603][T23768] __msan_chain_origin+0x50/0x90 [ 1330.982603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.982603][T23768] get_compat_msghdr+0x108/0x270 [ 1330.982603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.982603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.982603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.982603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.982603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.982603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.982603][T23768] entry_INT80_compat+0x71/0x76 [ 1330.982603][T23768] [ 1330.982603][T23768] Uninit was stored to memory at: [ 1330.982603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.982603][T23768] __msan_chain_origin+0x50/0x90 [ 1330.982603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.982603][T23768] get_compat_msghdr+0x108/0x270 [ 1330.982603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.982603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.982603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.982603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.982603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.982603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.982603][T23768] entry_INT80_compat+0x71/0x76 [ 1330.982603][T23768] [ 1330.982603][T23768] Uninit was stored to memory at: [ 1330.982603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.982603][T23768] __msan_chain_origin+0x50/0x90 [ 1330.982603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.982603][T23768] get_compat_msghdr+0x108/0x270 [ 1330.982603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.982603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.982603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.982603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.982603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.982603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.982603][T23768] entry_INT80_compat+0x71/0x76 [ 1330.982603][T23768] [ 1330.982603][T23768] Uninit was stored to memory at: [ 1330.982603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.982603][T23768] __msan_chain_origin+0x50/0x90 [ 1330.982603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.982603][T23768] get_compat_msghdr+0x108/0x270 [ 1330.982603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.982603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.982603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.982603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.982603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.982603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.982603][T23768] entry_INT80_compat+0x71/0x76 [ 1330.982603][T23768] [ 1330.982603][T23768] Uninit was stored to memory at: [ 1330.982603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.982603][T23768] __msan_chain_origin+0x50/0x90 [ 1330.982603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.982603][T23768] get_compat_msghdr+0x108/0x270 [ 1330.982603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.982603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.982603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.982603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.982603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.982603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.982603][T23768] entry_INT80_compat+0x71/0x76 [ 1330.982603][T23768] [ 1330.982603][T23768] Uninit was stored to memory at: [ 1330.982603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1330.982603][T23768] __msan_chain_origin+0x50/0x90 [ 1330.982603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1330.982603][T23768] get_compat_msghdr+0x108/0x270 [ 1330.982603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1330.982603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1330.982603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1330.982603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1330.982603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1330.982603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1330.982603][T23768] entry_INT80_compat+0x71/0x76 [ 1330.982603][T23768] [ 1330.982603][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1330.982603][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1330.982603][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1331.712503][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1331.871149][T23774] not chained 3510000 origins [ 1331.872590][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1331.872590][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.872590][T23774] Call Trace: [ 1331.872590][T23774] dump_stack+0x1df/0x240 [ 1331.872590][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1331.872590][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1331.872590][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1331.872590][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1331.872590][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1331.872590][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1331.872590][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1331.872590][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1331.872590][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1331.872590][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1331.872590][T23774] ? _copy_from_user+0x15b/0x260 [ 1331.872590][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1331.872590][T23774] __msan_chain_origin+0x50/0x90 [ 1331.872590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1331.872590][T23774] get_compat_msghdr+0x108/0x270 [ 1331.872590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1331.872590][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1331.872590][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1331.872590][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1331.872590][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1331.872590][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1331.872590][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1331.872590][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1331.872590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1331.872590][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1331.872590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1331.872590][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1332.044754][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1331.872590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.062633][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.062633][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.062633][T23774] entry_INT80_compat+0x71/0x76 [ 1332.062633][T23774] RIP: 0023:0xf7f11549 [ 1332.062633][T23774] Code: Bad RIP value. [ 1332.082719][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1332.082719][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1332.101010][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1332.082719][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.082719][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1332.082719][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1332.082719][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.082719][T23774] Uninit was stored to memory at: [ 1332.082719][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1332.082719][T23774] __msan_chain_origin+0x50/0x90 [ 1332.082719][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.082719][T23774] get_compat_msghdr+0x108/0x270 [ 1332.082719][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.082719][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.082719][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1332.082719][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.082719][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.082719][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.082719][T23774] entry_INT80_compat+0x71/0x76 [ 1332.082719][T23774] [ 1332.082719][T23774] Uninit was stored to memory at: [ 1332.082719][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1332.082719][T23774] __msan_chain_origin+0x50/0x90 [ 1332.082719][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.082719][T23774] get_compat_msghdr+0x108/0x270 [ 1332.082719][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.234217][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1332.082719][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.082719][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1332.082719][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.263182][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1332.082719][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.082719][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.082719][T23774] entry_INT80_compat+0x71/0x76 [ 1332.082719][T23774] [ 1332.082719][T23774] Uninit was stored to memory at: [ 1332.082719][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1332.082719][T23774] __msan_chain_origin+0x50/0x90 [ 1332.082719][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.082719][T23774] get_compat_msghdr+0x108/0x270 [ 1332.082719][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.082719][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.321255][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1332.082719][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1332.082719][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.082719][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.082719][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.082719][T23774] entry_INT80_compat+0x71/0x76 [ 1332.082719][T23774] [ 1332.082719][T23774] Uninit was stored to memory at: [ 1332.082719][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1332.082719][T23774] __msan_chain_origin+0x50/0x90 [ 1332.082719][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.082719][T23774] get_compat_msghdr+0x108/0x270 [ 1332.082719][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.082719][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.082719][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1332.082719][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.404420][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1332.082719][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.082719][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.082719][T23774] entry_INT80_compat+0x71/0x76 [ 1332.082719][T23774] [ 1332.082719][T23774] Uninit was stored to memory at: [ 1332.082719][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1332.082719][T23774] __msan_chain_origin+0x50/0x90 [ 1332.082719][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.082719][T23774] get_compat_msghdr+0x108/0x270 [ 1332.082719][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.082719][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.082719][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1332.082719][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.478338][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1332.082719][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.082719][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.082719][T23774] entry_INT80_compat+0x71/0x76 [ 1332.082719][T23774] [ 1332.082719][T23774] Uninit was stored to memory at: [ 1332.082719][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1332.518944][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1332.082719][T23774] __msan_chain_origin+0x50/0x90 [ 1332.082719][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.082719][T23774] get_compat_msghdr+0x108/0x270 [ 1332.082719][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.082719][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.082719][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1332.082719][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.082719][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.082719][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.569264][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1332.082719][T23774] entry_INT80_compat+0x71/0x76 [ 1332.082719][T23774] [ 1332.082719][T23774] Uninit was stored to memory at: [ 1332.082719][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1332.082719][T23774] __msan_chain_origin+0x50/0x90 [ 1332.082719][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.082719][T23774] get_compat_msghdr+0x108/0x270 [ 1332.082719][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.082719][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.082719][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1332.082719][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.082719][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.082719][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.082719][T23774] entry_INT80_compat+0x71/0x76 [ 1332.082719][T23774] [ 1332.082719][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1332.082719][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1332.082719][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1332.742077][T23774] not chained 3520000 origins [ 1332.742589][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1332.742589][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.742589][T23774] Call Trace: [ 1332.742589][T23774] dump_stack+0x1df/0x240 [ 1332.742589][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1332.742589][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1332.742589][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1332.742589][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1332.742589][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1332.742589][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1332.742589][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1332.742589][T23774] ? psi_group_change+0x1007/0x13c0 [ 1332.742589][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1332.742589][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1332.742589][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1332.742589][T23774] ? _copy_from_user+0x15b/0x260 [ 1332.742589][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1332.742589][T23774] __msan_chain_origin+0x50/0x90 [ 1332.742589][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.742589][T23774] get_compat_msghdr+0x108/0x270 [ 1332.742589][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.742589][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1332.742589][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1332.742589][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1332.742589][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1332.742589][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1332.742589][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1332.742589][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1332.742589][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.742589][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1332.742589][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1332.742589][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1332.742589][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1332.742589][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1332.742589][T23774] do_int80_syscall_32+0x1d/0x30 [ 1332.742589][T23774] entry_INT80_compat+0x71/0x76 [ 1332.742589][T23774] RIP: 0023:0xf7f11549 [ 1332.742589][T23774] Code: Bad RIP value. [ 1332.742589][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1332.742589][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1332.742589][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.742589][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1332.742589][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1332.742589][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.742589][T23774] Uninit was stored to memory at: [ 1332.742589][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1332.742589][T23774] __msan_chain_origin+0x50/0x90 [ 1332.742589][T23774] __get_compat_msghdr+0x5be/0x890 [ 1332.742589][T23774] get_compat_msghdr+0x108/0x270 [ 1332.742589][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1332.742589][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1332.742589][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.042670][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.042670][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.042670][T23774] do_int80_syscall_32+0x1d/0x30 [ 1333.042670][T23774] entry_INT80_compat+0x71/0x76 [ 1333.042670][T23774] [ 1333.042670][T23774] Uninit was stored to memory at: [ 1333.042670][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1333.042670][T23774] __msan_chain_origin+0x50/0x90 [ 1333.042670][T23774] __get_compat_msghdr+0x5be/0x890 [ 1333.042670][T23774] get_compat_msghdr+0x108/0x270 [ 1333.042670][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1333.042670][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1333.042670][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.042670][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.042670][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.042670][T23774] do_int80_syscall_32+0x1d/0x30 [ 1333.042670][T23774] entry_INT80_compat+0x71/0x76 [ 1333.042670][T23774] [ 1333.042670][T23774] Uninit was stored to memory at: [ 1333.042670][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1333.042670][T23774] __msan_chain_origin+0x50/0x90 [ 1333.042670][T23774] __get_compat_msghdr+0x5be/0x890 [ 1333.042670][T23774] get_compat_msghdr+0x108/0x270 [ 1333.042670][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1333.042670][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1333.042670][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.042670][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.042670][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.042670][T23774] do_int80_syscall_32+0x1d/0x30 [ 1333.042670][T23774] entry_INT80_compat+0x71/0x76 [ 1333.042670][T23774] [ 1333.042670][T23774] Uninit was stored to memory at: [ 1333.042670][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1333.042670][T23774] __msan_chain_origin+0x50/0x90 [ 1333.042670][T23774] __get_compat_msghdr+0x5be/0x890 [ 1333.042670][T23774] get_compat_msghdr+0x108/0x270 [ 1333.042670][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1333.042670][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1333.042670][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.042670][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.042670][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.042670][T23774] do_int80_syscall_32+0x1d/0x30 [ 1333.042670][T23774] entry_INT80_compat+0x71/0x76 [ 1333.042670][T23774] [ 1333.042670][T23774] Uninit was stored to memory at: [ 1333.042670][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1333.042670][T23774] __msan_chain_origin+0x50/0x90 [ 1333.042670][T23774] __get_compat_msghdr+0x5be/0x890 [ 1333.042670][T23774] get_compat_msghdr+0x108/0x270 [ 1333.042670][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1333.042670][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1333.042670][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.042670][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.042670][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.042670][T23774] do_int80_syscall_32+0x1d/0x30 [ 1333.042670][T23774] entry_INT80_compat+0x71/0x76 [ 1333.042670][T23774] [ 1333.042670][T23774] Uninit was stored to memory at: [ 1333.042670][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1333.042670][T23774] __msan_chain_origin+0x50/0x90 [ 1333.042670][T23774] __get_compat_msghdr+0x5be/0x890 [ 1333.042670][T23774] get_compat_msghdr+0x108/0x270 [ 1333.042670][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1333.042670][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1333.042670][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.042670][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.042670][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.042670][T23774] do_int80_syscall_32+0x1d/0x30 [ 1333.042670][T23774] entry_INT80_compat+0x71/0x76 [ 1333.042670][T23774] [ 1333.042670][T23774] Uninit was stored to memory at: [ 1333.042670][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1333.042670][T23774] __msan_chain_origin+0x50/0x90 [ 1333.042670][T23774] __get_compat_msghdr+0x5be/0x890 [ 1333.042670][T23774] get_compat_msghdr+0x108/0x270 [ 1333.042670][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1333.042670][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1333.042670][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.042670][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.042670][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.042670][T23774] do_int80_syscall_32+0x1d/0x30 [ 1333.042670][T23774] entry_INT80_compat+0x71/0x76 [ 1333.042670][T23774] [ 1333.042670][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1333.042670][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1333.042670][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1333.623500][T23768] not chained 3530000 origins [ 1333.628211][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1333.632647][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.632647][T23768] Call Trace: [ 1333.632647][T23768] dump_stack+0x1df/0x240 [ 1333.632647][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1333.632647][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1333.632647][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1333.632647][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1333.632647][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1333.632647][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1333.632647][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1333.632647][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1333.632647][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1333.632647][T23768] ? _copy_from_user+0x15b/0x260 [ 1333.632647][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1333.632647][T23768] __msan_chain_origin+0x50/0x90 [ 1333.632647][T23768] __get_compat_msghdr+0x5be/0x890 [ 1333.632647][T23768] get_compat_msghdr+0x108/0x270 [ 1333.632647][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1333.632647][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1333.632647][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1333.632647][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1333.632647][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1333.632647][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1333.632647][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1333.632647][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1333.632647][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1333.632647][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1333.632647][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.632647][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1333.632647][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.632647][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.632647][T23768] do_int80_syscall_32+0x1d/0x30 [ 1333.632647][T23768] entry_INT80_compat+0x71/0x76 [ 1333.632647][T23768] RIP: 0023:0xf7f11549 [ 1333.632647][T23768] Code: Bad RIP value. [ 1333.632647][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1333.632647][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1333.839082][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.839082][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.839082][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1333.839082][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.839082][T23768] Uninit was stored to memory at: [ 1333.839082][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1333.839082][T23768] __msan_chain_origin+0x50/0x90 [ 1333.839082][T23768] __get_compat_msghdr+0x5be/0x890 [ 1333.839082][T23768] get_compat_msghdr+0x108/0x270 [ 1333.839082][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1333.839082][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1333.839082][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.839082][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.839082][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.839082][T23768] do_int80_syscall_32+0x1d/0x30 [ 1333.839082][T23768] entry_INT80_compat+0x71/0x76 [ 1333.839082][T23768] [ 1333.839082][T23768] Uninit was stored to memory at: [ 1333.839082][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1333.839082][T23768] __msan_chain_origin+0x50/0x90 [ 1333.839082][T23768] __get_compat_msghdr+0x5be/0x890 [ 1333.839082][T23768] get_compat_msghdr+0x108/0x270 [ 1333.839082][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1333.839082][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1333.839082][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.839082][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.839082][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.839082][T23768] do_int80_syscall_32+0x1d/0x30 [ 1333.839082][T23768] entry_INT80_compat+0x71/0x76 [ 1333.839082][T23768] [ 1333.839082][T23768] Uninit was stored to memory at: [ 1333.839082][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1333.839082][T23768] __msan_chain_origin+0x50/0x90 [ 1333.839082][T23768] __get_compat_msghdr+0x5be/0x890 [ 1333.839082][T23768] get_compat_msghdr+0x108/0x270 [ 1333.839082][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1333.839082][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1333.839082][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.839082][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.839082][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.839082][T23768] do_int80_syscall_32+0x1d/0x30 [ 1333.839082][T23768] entry_INT80_compat+0x71/0x76 [ 1333.839082][T23768] [ 1333.839082][T23768] Uninit was stored to memory at: [ 1333.839082][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1333.839082][T23768] __msan_chain_origin+0x50/0x90 [ 1333.839082][T23768] __get_compat_msghdr+0x5be/0x890 [ 1333.839082][T23768] get_compat_msghdr+0x108/0x270 [ 1333.839082][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1333.839082][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1333.839082][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.839082][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.839082][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.839082][T23768] do_int80_syscall_32+0x1d/0x30 [ 1333.839082][T23768] entry_INT80_compat+0x71/0x76 [ 1333.839082][T23768] [ 1333.839082][T23768] Uninit was stored to memory at: [ 1333.839082][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1333.839082][T23768] __msan_chain_origin+0x50/0x90 [ 1333.839082][T23768] __get_compat_msghdr+0x5be/0x890 [ 1333.839082][T23768] get_compat_msghdr+0x108/0x270 [ 1333.839082][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1333.839082][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1333.839082][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.839082][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.839082][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.839082][T23768] do_int80_syscall_32+0x1d/0x30 [ 1333.839082][T23768] entry_INT80_compat+0x71/0x76 [ 1333.839082][T23768] [ 1333.839082][T23768] Uninit was stored to memory at: [ 1333.839082][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1333.839082][T23768] __msan_chain_origin+0x50/0x90 [ 1333.839082][T23768] __get_compat_msghdr+0x5be/0x890 [ 1333.839082][T23768] get_compat_msghdr+0x108/0x270 [ 1333.839082][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1333.839082][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1333.839082][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1333.839082][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1333.839082][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1333.839082][T23768] do_int80_syscall_32+0x1d/0x30 [ 1333.839082][T23768] entry_INT80_compat+0x71/0x76 [ 1333.839082][T23768] [ 1333.839082][T23768] Uninit was stored to memory at: [ 1333.839082][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1333.839082][T23768] __msan_chain_origin+0x50/0x90 [ 1333.839082][T23768] __get_compat_msghdr+0x5be/0x890 [ 1333.839082][T23768] get_compat_msghdr+0x108/0x270 [ 1333.839082][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1334.292005][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1334.292005][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.292005][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.292005][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.292005][T23768] do_int80_syscall_32+0x1d/0x30 [ 1334.292005][T23768] entry_INT80_compat+0x71/0x76 [ 1334.292005][T23768] [ 1334.292005][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1334.292005][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1334.292005][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1334.495124][T23774] not chained 3540000 origins [ 1334.499839][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1334.502603][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.502603][T23774] Call Trace: [ 1334.502603][T23774] dump_stack+0x1df/0x240 [ 1334.502603][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1334.502603][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1334.502603][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1334.502603][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1334.502603][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1334.502603][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1334.502603][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1334.502603][T23774] ? psi_group_change+0x1007/0x13c0 [ 1334.502603][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1334.502603][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1334.502603][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1334.502603][T23774] ? _copy_from_user+0x15b/0x260 [ 1334.502603][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1334.502603][T23774] __msan_chain_origin+0x50/0x90 [ 1334.502603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1334.502603][T23774] get_compat_msghdr+0x108/0x270 [ 1334.502603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1334.502603][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1334.502603][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1334.502603][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1334.502603][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1334.502603][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1334.502603][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1334.502603][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1334.502603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1334.502603][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1334.502603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.502603][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1334.502603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.502603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.502603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1334.502603][T23774] entry_INT80_compat+0x71/0x76 [ 1334.502603][T23774] RIP: 0023:0xf7f11549 [ 1334.502603][T23774] Code: Bad RIP value. [ 1334.502603][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1334.502603][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1334.502603][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1334.502603][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1334.502603][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1334.502603][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1334.502603][T23774] Uninit was stored to memory at: [ 1334.502603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1334.502603][T23774] __msan_chain_origin+0x50/0x90 [ 1334.502603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1334.502603][T23774] get_compat_msghdr+0x108/0x270 [ 1334.502603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1334.502603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1334.502603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.502603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.502603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.502603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1334.502603][T23774] entry_INT80_compat+0x71/0x76 [ 1334.502603][T23774] [ 1334.502603][T23774] Uninit was stored to memory at: [ 1334.502603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1334.502603][T23774] __msan_chain_origin+0x50/0x90 [ 1334.502603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1334.502603][T23774] get_compat_msghdr+0x108/0x270 [ 1334.502603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1334.502603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1334.502603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.502603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.502603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.502603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1334.502603][T23774] entry_INT80_compat+0x71/0x76 [ 1334.502603][T23774] [ 1334.502603][T23774] Uninit was stored to memory at: [ 1334.502603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1334.502603][T23774] __msan_chain_origin+0x50/0x90 [ 1334.502603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1334.502603][T23774] get_compat_msghdr+0x108/0x270 [ 1334.502603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1334.502603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1334.502603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.502603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.502603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.502603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1334.502603][T23774] entry_INT80_compat+0x71/0x76 [ 1334.502603][T23774] [ 1334.502603][T23774] Uninit was stored to memory at: [ 1334.502603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1334.502603][T23774] __msan_chain_origin+0x50/0x90 [ 1334.502603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1334.502603][T23774] get_compat_msghdr+0x108/0x270 [ 1334.502603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1334.502603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1334.502603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.502603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.502603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.502603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1334.502603][T23774] entry_INT80_compat+0x71/0x76 [ 1334.502603][T23774] [ 1334.502603][T23774] Uninit was stored to memory at: [ 1334.502603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1334.502603][T23774] __msan_chain_origin+0x50/0x90 [ 1334.502603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1334.502603][T23774] get_compat_msghdr+0x108/0x270 [ 1334.502603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1334.502603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1334.502603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.502603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.502603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.502603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1334.502603][T23774] entry_INT80_compat+0x71/0x76 [ 1334.502603][T23774] [ 1334.502603][T23774] Uninit was stored to memory at: [ 1334.502603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1334.502603][T23774] __msan_chain_origin+0x50/0x90 [ 1334.502603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1334.502603][T23774] get_compat_msghdr+0x108/0x270 [ 1334.502603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1334.502603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1334.502603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.502603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.502603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.502603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1334.502603][T23774] entry_INT80_compat+0x71/0x76 [ 1334.502603][T23774] [ 1334.502603][T23774] Uninit was stored to memory at: [ 1334.502603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1334.502603][T23774] __msan_chain_origin+0x50/0x90 [ 1334.502603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1334.502603][T23774] get_compat_msghdr+0x108/0x270 [ 1334.502603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1334.502603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1334.502603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1334.502603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1334.502603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1334.502603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1334.502603][T23774] entry_INT80_compat+0x71/0x76 [ 1334.502603][T23774] [ 1334.502603][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1334.502603][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1334.502603][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1335.390957][T23768] not chained 3550000 origins [ 1335.392649][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1335.392649][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.392649][T23768] Call Trace: [ 1335.392649][T23768] dump_stack+0x1df/0x240 [ 1335.392649][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1335.392649][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1335.392649][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1335.392649][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1335.392649][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1335.392649][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1335.392649][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1335.392649][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1335.392649][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1335.392649][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1335.392649][T23768] ? _copy_from_user+0x15b/0x260 [ 1335.392649][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1335.392649][T23768] __msan_chain_origin+0x50/0x90 [ 1335.392649][T23768] __get_compat_msghdr+0x5be/0x890 [ 1335.392649][T23768] get_compat_msghdr+0x108/0x270 [ 1335.392649][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1335.392649][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1335.392649][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1335.392649][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1335.392649][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1335.392649][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1335.392649][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1335.392649][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1335.392649][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1335.392649][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1335.392649][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1335.392649][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1335.392649][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1335.392649][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1335.392649][T23768] do_int80_syscall_32+0x1d/0x30 [ 1335.392649][T23768] entry_INT80_compat+0x71/0x76 [ 1335.392649][T23768] RIP: 0023:0xf7f11549 [ 1335.392649][T23768] Code: Bad RIP value. [ 1335.392649][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1335.392649][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1335.392649][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1335.392649][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1335.392649][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1335.392649][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1335.392649][T23768] Uninit was stored to memory at: [ 1335.392649][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1335.392649][T23768] __msan_chain_origin+0x50/0x90 [ 1335.392649][T23768] __get_compat_msghdr+0x5be/0x890 [ 1335.392649][T23768] get_compat_msghdr+0x108/0x270 [ 1335.392649][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1335.392649][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1335.392649][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1335.392649][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1335.392649][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1335.392649][T23768] do_int80_syscall_32+0x1d/0x30 [ 1335.392649][T23768] entry_INT80_compat+0x71/0x76 [ 1335.392649][T23768] [ 1335.392649][T23768] Uninit was stored to memory at: [ 1335.392649][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1335.392649][T23768] __msan_chain_origin+0x50/0x90 [ 1335.392649][T23768] __get_compat_msghdr+0x5be/0x890 [ 1335.392649][T23768] get_compat_msghdr+0x108/0x270 [ 1335.392649][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1335.392649][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1335.392649][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1335.392649][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1335.392649][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1335.392649][T23768] do_int80_syscall_32+0x1d/0x30 [ 1335.392649][T23768] entry_INT80_compat+0x71/0x76 [ 1335.392649][T23768] [ 1335.392649][T23768] Uninit was stored to memory at: [ 1335.392649][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1335.392649][T23768] __msan_chain_origin+0x50/0x90 [ 1335.392649][T23768] __get_compat_msghdr+0x5be/0x890 [ 1335.392649][T23768] get_compat_msghdr+0x108/0x270 [ 1335.392649][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1335.392649][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1335.392649][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1335.392649][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1335.392649][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1335.392649][T23768] do_int80_syscall_32+0x1d/0x30 [ 1335.392649][T23768] entry_INT80_compat+0x71/0x76 [ 1335.392649][T23768] [ 1335.392649][T23768] Uninit was stored to memory at: [ 1335.392649][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1335.392649][T23768] __msan_chain_origin+0x50/0x90 [ 1335.392649][T23768] __get_compat_msghdr+0x5be/0x890 [ 1335.392649][T23768] get_compat_msghdr+0x108/0x270 [ 1335.392649][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1335.392649][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1335.392649][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1335.392649][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1335.392649][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1335.392649][T23768] do_int80_syscall_32+0x1d/0x30 [ 1335.392649][T23768] entry_INT80_compat+0x71/0x76 [ 1335.392649][T23768] [ 1335.392649][T23768] Uninit was stored to memory at: [ 1335.392649][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1335.392649][T23768] __msan_chain_origin+0x50/0x90 [ 1335.392649][T23768] __get_compat_msghdr+0x5be/0x890 [ 1335.392649][T23768] get_compat_msghdr+0x108/0x270 [ 1335.392649][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1335.392649][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1335.392649][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1335.392649][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1335.392649][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1335.392649][T23768] do_int80_syscall_32+0x1d/0x30 [ 1335.392649][T23768] entry_INT80_compat+0x71/0x76 [ 1335.392649][T23768] [ 1335.392649][T23768] Uninit was stored to memory at: [ 1335.392649][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1335.392649][T23768] __msan_chain_origin+0x50/0x90 [ 1335.392649][T23768] __get_compat_msghdr+0x5be/0x890 [ 1335.392649][T23768] get_compat_msghdr+0x108/0x270 [ 1335.392649][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1335.392649][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1335.392649][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1335.392649][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1335.392649][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1335.392649][T23768] do_int80_syscall_32+0x1d/0x30 [ 1335.392649][T23768] entry_INT80_compat+0x71/0x76 [ 1335.392649][T23768] [ 1335.392649][T23768] Uninit was stored to memory at: [ 1335.392649][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1335.392649][T23768] __msan_chain_origin+0x50/0x90 [ 1335.392649][T23768] __get_compat_msghdr+0x5be/0x890 [ 1335.392649][T23768] get_compat_msghdr+0x108/0x270 [ 1335.392649][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1335.392649][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1335.392649][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1335.392649][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1335.392649][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1335.392649][T23768] do_int80_syscall_32+0x1d/0x30 [ 1335.392649][T23768] entry_INT80_compat+0x71/0x76 [ 1335.392649][T23768] [ 1335.392649][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1335.392649][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1335.392649][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1336.296947][T23774] not chained 3560000 origins [ 1336.302634][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1336.302634][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.302634][T23774] Call Trace: [ 1336.302634][T23774] dump_stack+0x1df/0x240 [ 1336.302634][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1336.302634][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1336.302634][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1336.302634][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1336.302634][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1336.302634][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1336.302634][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1336.302634][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1336.302634][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1336.302634][T23774] ? _copy_from_user+0x15b/0x260 [ 1336.302634][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1336.302634][T23774] __msan_chain_origin+0x50/0x90 [ 1336.302634][T23774] __get_compat_msghdr+0x5be/0x890 [ 1336.302634][T23774] get_compat_msghdr+0x108/0x270 [ 1336.302634][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1336.302634][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1336.302634][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1336.302634][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1336.302634][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1336.302634][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1336.302634][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1336.302634][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1336.302634][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1336.302634][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1336.302634][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1336.302634][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1336.302634][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1336.302634][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1336.302634][T23774] do_int80_syscall_32+0x1d/0x30 [ 1336.302634][T23774] entry_INT80_compat+0x71/0x76 [ 1336.302634][T23774] RIP: 0023:0xf7f11549 [ 1336.302634][T23774] Code: Bad RIP value. [ 1336.302634][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1336.302634][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1336.302634][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1336.302634][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1336.302634][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1336.302634][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1336.302634][T23774] Uninit was stored to memory at: [ 1336.302634][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1336.302634][T23774] __msan_chain_origin+0x50/0x90 [ 1336.302634][T23774] __get_compat_msghdr+0x5be/0x890 [ 1336.302634][T23774] get_compat_msghdr+0x108/0x270 [ 1336.302634][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1336.302634][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1336.302634][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1336.302634][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1336.302634][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1336.302634][T23774] do_int80_syscall_32+0x1d/0x30 [ 1336.302634][T23774] entry_INT80_compat+0x71/0x76 [ 1336.302634][T23774] [ 1336.302634][T23774] Uninit was stored to memory at: [ 1336.302634][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1336.302634][T23774] __msan_chain_origin+0x50/0x90 [ 1336.302634][T23774] __get_compat_msghdr+0x5be/0x890 [ 1336.302634][T23774] get_compat_msghdr+0x108/0x270 [ 1336.302634][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1336.302634][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1336.302634][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1336.302634][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1336.302634][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1336.302634][T23774] do_int80_syscall_32+0x1d/0x30 [ 1336.302634][T23774] entry_INT80_compat+0x71/0x76 [ 1336.302634][T23774] [ 1336.302634][T23774] Uninit was stored to memory at: [ 1336.302634][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1336.302634][T23774] __msan_chain_origin+0x50/0x90 [ 1336.302634][T23774] __get_compat_msghdr+0x5be/0x890 [ 1336.302634][T23774] get_compat_msghdr+0x108/0x270 [ 1336.302634][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1336.302634][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1336.302634][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1336.302634][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1336.302634][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1336.302634][T23774] do_int80_syscall_32+0x1d/0x30 [ 1336.302634][T23774] entry_INT80_compat+0x71/0x76 [ 1336.302634][T23774] [ 1336.302634][T23774] Uninit was stored to memory at: [ 1336.302634][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1336.302634][T23774] __msan_chain_origin+0x50/0x90 [ 1336.302634][T23774] __get_compat_msghdr+0x5be/0x890 [ 1336.302634][T23774] get_compat_msghdr+0x108/0x270 [ 1336.302634][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1336.302634][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1336.302634][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1336.302634][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1336.302634][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1336.302634][T23774] do_int80_syscall_32+0x1d/0x30 [ 1336.302634][T23774] entry_INT80_compat+0x71/0x76 [ 1336.302634][T23774] [ 1336.302634][T23774] Uninit was stored to memory at: [ 1336.302634][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1336.302634][T23774] __msan_chain_origin+0x50/0x90 [ 1336.302634][T23774] __get_compat_msghdr+0x5be/0x890 [ 1336.302634][T23774] get_compat_msghdr+0x108/0x270 [ 1336.302634][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1336.302634][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1336.302634][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1336.302634][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1336.302634][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1336.302634][T23774] do_int80_syscall_32+0x1d/0x30 [ 1336.302634][T23774] entry_INT80_compat+0x71/0x76 [ 1336.302634][T23774] [ 1336.302634][T23774] Uninit was stored to memory at: [ 1336.302634][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1336.302634][T23774] __msan_chain_origin+0x50/0x90 [ 1336.302634][T23774] __get_compat_msghdr+0x5be/0x890 [ 1336.302634][T23774] get_compat_msghdr+0x108/0x270 [ 1336.302634][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1336.302634][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1336.302634][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1336.302634][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1336.302634][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1336.302634][T23774] do_int80_syscall_32+0x1d/0x30 [ 1336.302634][T23774] entry_INT80_compat+0x71/0x76 [ 1336.302634][T23774] [ 1336.302634][T23774] Uninit was stored to memory at: [ 1336.302634][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1336.302634][T23774] __msan_chain_origin+0x50/0x90 [ 1336.302634][T23774] __get_compat_msghdr+0x5be/0x890 [ 1336.302634][T23774] get_compat_msghdr+0x108/0x270 [ 1336.302634][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1336.302634][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1336.302634][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1336.302634][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1336.302634][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1336.302634][T23774] do_int80_syscall_32+0x1d/0x30 [ 1336.302634][T23774] entry_INT80_compat+0x71/0x76 [ 1336.302634][T23774] [ 1336.302634][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1336.302634][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1336.302634][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1337.178700][T23774] not chained 3570000 origins [ 1337.182612][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1337.182612][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.182612][T23774] Call Trace: [ 1337.182612][T23774] dump_stack+0x1df/0x240 [ 1337.182612][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1337.182612][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1337.182612][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1337.182612][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1337.182612][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1337.182612][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1337.182612][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1337.182612][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1337.182612][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1337.182612][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1337.182612][T23774] ? _copy_from_user+0x15b/0x260 [ 1337.182612][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1337.278647][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] __msan_chain_origin+0x50/0x90 [ 1337.182612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1337.182612][T23774] get_compat_msghdr+0x108/0x270 [ 1337.302408][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1337.182612][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1337.182612][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1337.182612][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1337.182612][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1337.182612][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1337.182612][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1337.182612][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1337.182612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1337.356217][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1337.182612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1337.182612][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1337.182612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1337.182612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1337.182612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1337.182612][T23774] entry_INT80_compat+0x71/0x76 [ 1337.182612][T23774] RIP: 0023:0xf7f11549 [ 1337.182612][T23774] Code: Bad RIP value. [ 1337.182612][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1337.423819][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1337.182612][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.182612][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1337.182612][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1337.182612][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.182612][T23774] Uninit was stored to memory at: [ 1337.477488][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1337.182612][T23774] __msan_chain_origin+0x50/0x90 [ 1337.182612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1337.182612][T23774] get_compat_msghdr+0x108/0x270 [ 1337.182612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1337.182612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1337.182612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1337.182612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1337.182612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1337.530549][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1337.182612][T23774] entry_INT80_compat+0x71/0x76 [ 1337.182612][T23774] [ 1337.182612][T23774] Uninit was stored to memory at: [ 1337.182612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1337.182612][T23774] __msan_chain_origin+0x50/0x90 [ 1337.182612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1337.182612][T23774] get_compat_msghdr+0x108/0x270 [ 1337.182612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1337.182612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1337.586935][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1337.182612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1337.182612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1337.182612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1337.182612][T23774] entry_INT80_compat+0x71/0x76 [ 1337.182612][T23774] [ 1337.182612][T23774] Uninit was stored to memory at: [ 1337.182612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1337.182612][T23774] __msan_chain_origin+0x50/0x90 [ 1337.182612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1337.647672][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] get_compat_msghdr+0x108/0x270 [ 1337.182612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1337.182612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1337.671678][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1337.182612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1337.182612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1337.182612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1337.182612][T23774] entry_INT80_compat+0x71/0x76 [ 1337.182612][T23774] [ 1337.182612][T23774] Uninit was stored to memory at: [ 1337.182612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1337.726577][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1337.182612][T23774] __msan_chain_origin+0x50/0x90 [ 1337.182612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1337.182612][T23774] get_compat_msghdr+0x108/0x270 [ 1337.182612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1337.182612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1337.182612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1337.182612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1337.182612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1337.182612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1337.182612][T23774] entry_INT80_compat+0x71/0x76 [ 1337.182612][T23774] [ 1337.182612][T23774] Uninit was stored to memory at: [ 1337.182612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1337.182612][T23774] __msan_chain_origin+0x50/0x90 [ 1337.182612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1337.182612][T23774] get_compat_msghdr+0x108/0x270 [ 1337.182612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1337.182612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1337.182612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1337.182612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1337.182612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1337.182612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1337.182612][T23774] entry_INT80_compat+0x71/0x76 [ 1337.182612][T23774] [ 1337.182612][T23774] Uninit was stored to memory at: [ 1337.182612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1337.182612][T23774] __msan_chain_origin+0x50/0x90 [ 1337.182612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1337.182612][T23774] get_compat_msghdr+0x108/0x270 [ 1337.182612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1337.182612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1337.182612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1337.182612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1337.182612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1337.182612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1337.182612][T23774] entry_INT80_compat+0x71/0x76 [ 1337.182612][T23774] [ 1337.182612][T23774] Uninit was stored to memory at: [ 1337.182612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1337.182612][T23774] __msan_chain_origin+0x50/0x90 [ 1337.182612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1337.182612][T23774] get_compat_msghdr+0x108/0x270 [ 1337.182612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1337.182612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1337.182612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1337.182612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1337.182612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1337.182612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1337.182612][T23774] entry_INT80_compat+0x71/0x76 [ 1337.182612][T23774] [ 1337.182612][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1337.182612][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1337.182612][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1338.150835][T23768] not chained 3580000 origins [ 1338.152653][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1338.152653][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.152653][T23768] Call Trace: [ 1338.152653][T23768] dump_stack+0x1df/0x240 [ 1338.152653][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1338.152653][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1338.152653][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1338.152653][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1338.152653][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1338.152653][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1338.152653][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1338.152653][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1338.152653][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1338.152653][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1338.152653][T23768] ? _copy_from_user+0x15b/0x260 [ 1338.152653][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1338.152653][T23768] __msan_chain_origin+0x50/0x90 [ 1338.152653][T23768] __get_compat_msghdr+0x5be/0x890 [ 1338.152653][T23768] get_compat_msghdr+0x108/0x270 [ 1338.152653][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1338.152653][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1338.152653][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1338.152653][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1338.152653][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1338.152653][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1338.152653][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1338.152653][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1338.152653][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1338.152653][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1338.152653][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1338.152653][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1338.152653][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1338.152653][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1338.152653][T23768] do_int80_syscall_32+0x1d/0x30 [ 1338.152653][T23768] entry_INT80_compat+0x71/0x76 [ 1338.152653][T23768] RIP: 0023:0xf7f11549 [ 1338.152653][T23768] Code: Bad RIP value. [ 1338.152653][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1338.152653][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1338.152653][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1338.152653][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1338.152653][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1338.152653][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1338.152653][T23768] Uninit was stored to memory at: [ 1338.152653][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1338.152653][T23768] __msan_chain_origin+0x50/0x90 [ 1338.152653][T23768] __get_compat_msghdr+0x5be/0x890 [ 1338.152653][T23768] get_compat_msghdr+0x108/0x270 [ 1338.152653][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1338.152653][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1338.152653][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1338.152653][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1338.152653][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1338.152653][T23768] do_int80_syscall_32+0x1d/0x30 [ 1338.152653][T23768] entry_INT80_compat+0x71/0x76 [ 1338.152653][T23768] [ 1338.152653][T23768] Uninit was stored to memory at: [ 1338.152653][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1338.152653][T23768] __msan_chain_origin+0x50/0x90 [ 1338.152653][T23768] __get_compat_msghdr+0x5be/0x890 [ 1338.152653][T23768] get_compat_msghdr+0x108/0x270 [ 1338.152653][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1338.152653][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1338.152653][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1338.152653][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1338.152653][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1338.152653][T23768] do_int80_syscall_32+0x1d/0x30 [ 1338.152653][T23768] entry_INT80_compat+0x71/0x76 [ 1338.152653][T23768] [ 1338.152653][T23768] Uninit was stored to memory at: [ 1338.152653][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1338.152653][T23768] __msan_chain_origin+0x50/0x90 [ 1338.152653][T23768] __get_compat_msghdr+0x5be/0x890 [ 1338.152653][T23768] get_compat_msghdr+0x108/0x270 [ 1338.152653][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1338.152653][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1338.152653][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1338.152653][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1338.152653][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1338.152653][T23768] do_int80_syscall_32+0x1d/0x30 [ 1338.152653][T23768] entry_INT80_compat+0x71/0x76 [ 1338.152653][T23768] [ 1338.152653][T23768] Uninit was stored to memory at: [ 1338.152653][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1338.152653][T23768] __msan_chain_origin+0x50/0x90 [ 1338.152653][T23768] __get_compat_msghdr+0x5be/0x890 [ 1338.152653][T23768] get_compat_msghdr+0x108/0x270 [ 1338.152653][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1338.152653][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1338.152653][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1338.152653][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1338.152653][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1338.152653][T23768] do_int80_syscall_32+0x1d/0x30 [ 1338.152653][T23768] entry_INT80_compat+0x71/0x76 [ 1338.152653][T23768] [ 1338.152653][T23768] Uninit was stored to memory at: [ 1338.152653][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1338.152653][T23768] __msan_chain_origin+0x50/0x90 [ 1338.152653][T23768] __get_compat_msghdr+0x5be/0x890 [ 1338.152653][T23768] get_compat_msghdr+0x108/0x270 [ 1338.152653][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1338.152653][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1338.152653][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1338.152653][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1338.152653][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1338.152653][T23768] do_int80_syscall_32+0x1d/0x30 [ 1338.152653][T23768] entry_INT80_compat+0x71/0x76 [ 1338.152653][T23768] [ 1338.152653][T23768] Uninit was stored to memory at: [ 1338.152653][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1338.152653][T23768] __msan_chain_origin+0x50/0x90 [ 1338.152653][T23768] __get_compat_msghdr+0x5be/0x890 [ 1338.152653][T23768] get_compat_msghdr+0x108/0x270 [ 1338.152653][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1338.152653][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1338.152653][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1338.152653][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1338.152653][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1338.152653][T23768] do_int80_syscall_32+0x1d/0x30 [ 1338.152653][T23768] entry_INT80_compat+0x71/0x76 [ 1338.152653][T23768] [ 1338.152653][T23768] Uninit was stored to memory at: [ 1338.152653][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1338.152653][T23768] __msan_chain_origin+0x50/0x90 [ 1338.152653][T23768] __get_compat_msghdr+0x5be/0x890 [ 1338.152653][T23768] get_compat_msghdr+0x108/0x270 [ 1338.152653][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1338.152653][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1338.152653][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1338.152653][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1338.152653][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1338.152653][T23768] do_int80_syscall_32+0x1d/0x30 [ 1338.152653][T23768] entry_INT80_compat+0x71/0x76 [ 1338.152653][T23768] [ 1338.152653][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1338.152653][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1338.152653][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1339.034757][T23768] not chained 3590000 origins [ 1339.039581][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1339.042651][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.042651][T23768] Call Trace: [ 1339.042651][T23768] dump_stack+0x1df/0x240 [ 1339.042651][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1339.042651][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1339.042651][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1339.042651][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1339.042651][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1339.042651][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1339.042651][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1339.042651][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1339.042651][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1339.042651][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1339.042651][T23768] ? _copy_from_user+0x15b/0x260 [ 1339.042651][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1339.042651][T23768] __msan_chain_origin+0x50/0x90 [ 1339.042651][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.042651][T23768] get_compat_msghdr+0x108/0x270 [ 1339.042651][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.042651][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1339.042651][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1339.042651][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1339.042651][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1339.042651][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1339.042651][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1339.042651][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1339.042651][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.042651][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1339.042651][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.042651][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1339.042651][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.042651][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.042651][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.042651][T23768] entry_INT80_compat+0x71/0x76 [ 1339.042651][T23768] RIP: 0023:0xf7f11549 [ 1339.042651][T23768] Code: Bad RIP value. [ 1339.042651][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1339.042651][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1339.042651][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.042651][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1339.042651][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1339.042651][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.042651][T23768] Uninit was stored to memory at: [ 1339.042651][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.042651][T23768] __msan_chain_origin+0x50/0x90 [ 1339.042651][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.042651][T23768] get_compat_msghdr+0x108/0x270 [ 1339.042651][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.042651][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.042651][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.042651][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.042651][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.042651][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.042651][T23768] entry_INT80_compat+0x71/0x76 [ 1339.042651][T23768] [ 1339.042651][T23768] Uninit was stored to memory at: [ 1339.042651][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.042651][T23768] __msan_chain_origin+0x50/0x90 [ 1339.042651][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.042651][T23768] get_compat_msghdr+0x108/0x270 [ 1339.042651][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.042651][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.042651][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.042651][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.042651][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.042651][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.042651][T23768] entry_INT80_compat+0x71/0x76 [ 1339.042651][T23768] [ 1339.042651][T23768] Uninit was stored to memory at: [ 1339.042651][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.042651][T23768] __msan_chain_origin+0x50/0x90 [ 1339.042651][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.042651][T23768] get_compat_msghdr+0x108/0x270 [ 1339.042651][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.042651][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.042651][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.042651][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.042651][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.042651][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.042651][T23768] entry_INT80_compat+0x71/0x76 [ 1339.042651][T23768] [ 1339.042651][T23768] Uninit was stored to memory at: [ 1339.042651][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.042651][T23768] __msan_chain_origin+0x50/0x90 [ 1339.042651][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.042651][T23768] get_compat_msghdr+0x108/0x270 [ 1339.042651][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.042651][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.042651][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.042651][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.042651][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.042651][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.042651][T23768] entry_INT80_compat+0x71/0x76 [ 1339.042651][T23768] [ 1339.042651][T23768] Uninit was stored to memory at: [ 1339.042651][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.042651][T23768] __msan_chain_origin+0x50/0x90 [ 1339.042651][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.042651][T23768] get_compat_msghdr+0x108/0x270 [ 1339.042651][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.042651][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.042651][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.042651][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.042651][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.042651][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.042651][T23768] entry_INT80_compat+0x71/0x76 [ 1339.042651][T23768] [ 1339.042651][T23768] Uninit was stored to memory at: [ 1339.042651][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.042651][T23768] __msan_chain_origin+0x50/0x90 [ 1339.042651][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.042651][T23768] get_compat_msghdr+0x108/0x270 [ 1339.042651][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.042651][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.042651][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.042651][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.042651][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.042651][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.042651][T23768] entry_INT80_compat+0x71/0x76 [ 1339.042651][T23768] [ 1339.042651][T23768] Uninit was stored to memory at: [ 1339.042651][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.042651][T23768] __msan_chain_origin+0x50/0x90 [ 1339.042651][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.042651][T23768] get_compat_msghdr+0x108/0x270 [ 1339.042651][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.042651][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.042651][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.042651][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.042651][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.042651][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.042651][T23768] entry_INT80_compat+0x71/0x76 [ 1339.042651][T23768] [ 1339.042651][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1339.042651][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1339.042651][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1339.921373][T23768] not chained 3600000 origins [ 1339.922602][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1339.922602][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.922602][T23768] Call Trace: [ 1339.922602][T23768] dump_stack+0x1df/0x240 [ 1339.922602][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1339.922602][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1339.922602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1339.922602][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1339.922602][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1339.922602][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1339.922602][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1339.922602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1339.922602][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1339.922602][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1339.922602][T23768] ? _copy_from_user+0x15b/0x260 [ 1339.922602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1339.922602][T23768] __msan_chain_origin+0x50/0x90 [ 1339.922602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.922602][T23768] get_compat_msghdr+0x108/0x270 [ 1339.922602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.922602][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1339.922602][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1339.922602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1339.922602][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1339.922602][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1339.922602][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1339.922602][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1339.922602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.922602][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1339.922602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.922602][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1339.922602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.922602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.922602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.922602][T23768] entry_INT80_compat+0x71/0x76 [ 1339.922602][T23768] RIP: 0023:0xf7f11549 [ 1339.922602][T23768] Code: Bad RIP value. [ 1339.922602][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1339.922602][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1339.922602][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.922602][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1339.922602][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1339.922602][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.922602][T23768] Uninit was stored to memory at: [ 1339.922602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.922602][T23768] __msan_chain_origin+0x50/0x90 [ 1339.922602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.922602][T23768] get_compat_msghdr+0x108/0x270 [ 1339.922602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.922602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.922602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.922602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.922602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.922602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.922602][T23768] entry_INT80_compat+0x71/0x76 [ 1339.922602][T23768] [ 1339.922602][T23768] Uninit was stored to memory at: [ 1339.922602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.922602][T23768] __msan_chain_origin+0x50/0x90 [ 1339.922602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.922602][T23768] get_compat_msghdr+0x108/0x270 [ 1339.922602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.922602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.922602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.922602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.922602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.922602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.922602][T23768] entry_INT80_compat+0x71/0x76 [ 1339.922602][T23768] [ 1339.922602][T23768] Uninit was stored to memory at: [ 1339.922602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.922602][T23768] __msan_chain_origin+0x50/0x90 [ 1339.922602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.922602][T23768] get_compat_msghdr+0x108/0x270 [ 1339.922602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.922602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.922602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.922602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.922602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.922602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.922602][T23768] entry_INT80_compat+0x71/0x76 [ 1339.922602][T23768] [ 1339.922602][T23768] Uninit was stored to memory at: [ 1339.922602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.922602][T23768] __msan_chain_origin+0x50/0x90 [ 1339.922602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.922602][T23768] get_compat_msghdr+0x108/0x270 [ 1339.922602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.922602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.922602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.922602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.922602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.922602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.922602][T23768] entry_INT80_compat+0x71/0x76 [ 1339.922602][T23768] [ 1339.922602][T23768] Uninit was stored to memory at: [ 1339.922602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.922602][T23768] __msan_chain_origin+0x50/0x90 [ 1339.922602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.922602][T23768] get_compat_msghdr+0x108/0x270 [ 1339.922602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.922602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.922602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.922602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.922602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.922602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.922602][T23768] entry_INT80_compat+0x71/0x76 [ 1339.922602][T23768] [ 1339.922602][T23768] Uninit was stored to memory at: [ 1339.922602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.922602][T23768] __msan_chain_origin+0x50/0x90 [ 1339.922602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.922602][T23768] get_compat_msghdr+0x108/0x270 [ 1339.922602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.922602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.922602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.922602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.922602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.922602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.922602][T23768] entry_INT80_compat+0x71/0x76 [ 1339.922602][T23768] [ 1339.922602][T23768] Uninit was stored to memory at: [ 1339.922602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1339.922602][T23768] __msan_chain_origin+0x50/0x90 [ 1339.922602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1339.922602][T23768] get_compat_msghdr+0x108/0x270 [ 1339.922602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1339.922602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1339.922602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1339.922602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1339.922602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1339.922602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1339.922602][T23768] entry_INT80_compat+0x71/0x76 [ 1339.922602][T23768] [ 1339.922602][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1339.922602][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1339.922602][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1340.796756][T23774] not chained 3610000 origins [ 1340.801495][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1340.802596][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.802596][T23774] Call Trace: [ 1340.802596][T23774] dump_stack+0x1df/0x240 [ 1340.802596][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1340.802596][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1340.802596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1340.802596][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1340.802596][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1340.802596][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1340.802596][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1340.802596][T23774] ? psi_group_change+0x1007/0x13c0 [ 1340.802596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1340.802596][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1340.802596][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1340.802596][T23774] ? _copy_from_user+0x15b/0x260 [ 1340.802596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1340.802596][T23774] __msan_chain_origin+0x50/0x90 [ 1340.802596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1340.802596][T23774] get_compat_msghdr+0x108/0x270 [ 1340.802596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1340.802596][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1340.802596][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1340.802596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1340.802596][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1340.802596][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1340.802596][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1340.802596][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1340.802596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1340.802596][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1340.802596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1340.802596][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1340.802596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1340.802596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1340.802596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1340.802596][T23774] entry_INT80_compat+0x71/0x76 [ 1340.802596][T23774] RIP: 0023:0xf7f11549 [ 1340.802596][T23774] Code: Bad RIP value. [ 1340.802596][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1340.802596][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1340.802596][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1340.802596][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1340.802596][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1340.802596][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1340.802596][T23774] Uninit was stored to memory at: [ 1340.802596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1340.802596][T23774] __msan_chain_origin+0x50/0x90 [ 1340.802596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1340.802596][T23774] get_compat_msghdr+0x108/0x270 [ 1340.802596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1340.802596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1340.802596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1340.802596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1340.802596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1340.802596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1340.802596][T23774] entry_INT80_compat+0x71/0x76 [ 1340.802596][T23774] [ 1340.802596][T23774] Uninit was stored to memory at: [ 1340.802596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1340.802596][T23774] __msan_chain_origin+0x50/0x90 [ 1340.802596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1340.802596][T23774] get_compat_msghdr+0x108/0x270 [ 1340.802596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1340.802596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1340.802596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1340.802596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1340.802596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1340.802596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1340.802596][T23774] entry_INT80_compat+0x71/0x76 [ 1340.802596][T23774] [ 1340.802596][T23774] Uninit was stored to memory at: [ 1340.802596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1340.802596][T23774] __msan_chain_origin+0x50/0x90 [ 1340.802596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1340.802596][T23774] get_compat_msghdr+0x108/0x270 [ 1340.802596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1340.802596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1340.802596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1340.802596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1340.802596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1340.802596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1340.802596][T23774] entry_INT80_compat+0x71/0x76 [ 1340.802596][T23774] [ 1340.802596][T23774] Uninit was stored to memory at: [ 1340.802596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1340.802596][T23774] __msan_chain_origin+0x50/0x90 [ 1340.802596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1340.802596][T23774] get_compat_msghdr+0x108/0x270 [ 1340.802596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1340.802596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1340.802596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1340.802596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1340.802596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1340.802596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1340.802596][T23774] entry_INT80_compat+0x71/0x76 [ 1340.802596][T23774] [ 1340.802596][T23774] Uninit was stored to memory at: [ 1340.802596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1340.802596][T23774] __msan_chain_origin+0x50/0x90 [ 1340.802596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1340.802596][T23774] get_compat_msghdr+0x108/0x270 [ 1340.802596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1340.802596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1340.802596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1340.802596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1340.802596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1340.802596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1340.802596][T23774] entry_INT80_compat+0x71/0x76 [ 1340.802596][T23774] [ 1340.802596][T23774] Uninit was stored to memory at: [ 1340.802596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1340.802596][T23774] __msan_chain_origin+0x50/0x90 [ 1340.802596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1340.802596][T23774] get_compat_msghdr+0x108/0x270 [ 1340.802596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1340.802596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1340.802596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1340.802596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1340.802596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1340.802596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1340.802596][T23774] entry_INT80_compat+0x71/0x76 [ 1340.802596][T23774] [ 1340.802596][T23774] Uninit was stored to memory at: [ 1340.802596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1340.802596][T23774] __msan_chain_origin+0x50/0x90 [ 1340.802596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1340.802596][T23774] get_compat_msghdr+0x108/0x270 [ 1340.802596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1340.802596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1340.802596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1340.802596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1340.802596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1340.802596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1340.802596][T23774] entry_INT80_compat+0x71/0x76 [ 1340.802596][T23774] [ 1340.802596][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1340.802596][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1340.802596][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1341.692304][T23768] not chained 3620000 origins [ 1341.692646][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1341.692646][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.692646][T23768] Call Trace: [ 1341.692646][T23768] dump_stack+0x1df/0x240 [ 1341.692646][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1341.692646][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1341.692646][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1341.692646][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1341.692646][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1341.692646][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1341.692646][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1341.692646][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1341.692646][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1341.692646][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1341.692646][T23768] ? _copy_from_user+0x15b/0x260 [ 1341.692646][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1341.692646][T23768] __msan_chain_origin+0x50/0x90 [ 1341.692646][T23768] __get_compat_msghdr+0x5be/0x890 [ 1341.692646][T23768] get_compat_msghdr+0x108/0x270 [ 1341.692646][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1341.692646][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1341.692646][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1341.692646][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1341.692646][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1341.692646][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1341.692646][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1341.692646][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1341.692646][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1341.692646][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1341.692646][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1341.692646][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1341.692646][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1341.692646][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1341.692646][T23768] do_int80_syscall_32+0x1d/0x30 [ 1341.692646][T23768] entry_INT80_compat+0x71/0x76 [ 1341.692646][T23768] RIP: 0023:0xf7f11549 [ 1341.692646][T23768] Code: Bad RIP value. [ 1341.692646][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1341.692646][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1341.692646][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1341.692646][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1341.692646][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1341.692646][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1341.692646][T23768] Uninit was stored to memory at: [ 1341.692646][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1341.692646][T23768] __msan_chain_origin+0x50/0x90 [ 1341.692646][T23768] __get_compat_msghdr+0x5be/0x890 [ 1341.692646][T23768] get_compat_msghdr+0x108/0x270 [ 1341.692646][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1341.692646][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1341.692646][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1341.692646][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1341.692646][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1341.692646][T23768] do_int80_syscall_32+0x1d/0x30 [ 1341.692646][T23768] entry_INT80_compat+0x71/0x76 [ 1341.692646][T23768] [ 1341.692646][T23768] Uninit was stored to memory at: [ 1341.692646][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1341.692646][T23768] __msan_chain_origin+0x50/0x90 [ 1341.692646][T23768] __get_compat_msghdr+0x5be/0x890 [ 1341.692646][T23768] get_compat_msghdr+0x108/0x270 [ 1341.692646][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1341.692646][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1341.692646][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1341.692646][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1341.692646][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1341.692646][T23768] do_int80_syscall_32+0x1d/0x30 [ 1341.692646][T23768] entry_INT80_compat+0x71/0x76 [ 1341.692646][T23768] [ 1341.692646][T23768] Uninit was stored to memory at: [ 1341.692646][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1341.692646][T23768] __msan_chain_origin+0x50/0x90 [ 1341.692646][T23768] __get_compat_msghdr+0x5be/0x890 [ 1341.692646][T23768] get_compat_msghdr+0x108/0x270 [ 1341.692646][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1341.692646][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1341.692646][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1341.692646][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1341.692646][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1341.692646][T23768] do_int80_syscall_32+0x1d/0x30 [ 1341.692646][T23768] entry_INT80_compat+0x71/0x76 [ 1341.692646][T23768] [ 1341.692646][T23768] Uninit was stored to memory at: [ 1341.692646][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1341.692646][T23768] __msan_chain_origin+0x50/0x90 [ 1341.692646][T23768] __get_compat_msghdr+0x5be/0x890 [ 1341.692646][T23768] get_compat_msghdr+0x108/0x270 [ 1341.692646][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1341.692646][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1341.692646][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1341.692646][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1341.692646][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1341.692646][T23768] do_int80_syscall_32+0x1d/0x30 [ 1341.692646][T23768] entry_INT80_compat+0x71/0x76 [ 1341.692646][T23768] [ 1341.692646][T23768] Uninit was stored to memory at: [ 1341.692646][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1341.692646][T23768] __msan_chain_origin+0x50/0x90 [ 1341.692646][T23768] __get_compat_msghdr+0x5be/0x890 [ 1341.692646][T23768] get_compat_msghdr+0x108/0x270 [ 1341.692646][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1341.692646][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1341.692646][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1341.692646][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1341.692646][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1341.692646][T23768] do_int80_syscall_32+0x1d/0x30 [ 1341.692646][T23768] entry_INT80_compat+0x71/0x76 [ 1341.692646][T23768] [ 1341.692646][T23768] Uninit was stored to memory at: [ 1341.692646][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1341.692646][T23768] __msan_chain_origin+0x50/0x90 [ 1341.692646][T23768] __get_compat_msghdr+0x5be/0x890 [ 1341.692646][T23768] get_compat_msghdr+0x108/0x270 [ 1341.692646][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1341.692646][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1341.692646][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1341.692646][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1341.692646][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1341.692646][T23768] do_int80_syscall_32+0x1d/0x30 [ 1341.692646][T23768] entry_INT80_compat+0x71/0x76 [ 1341.692646][T23768] [ 1341.692646][T23768] Uninit was stored to memory at: [ 1341.692646][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1341.692646][T23768] __msan_chain_origin+0x50/0x90 [ 1341.692646][T23768] __get_compat_msghdr+0x5be/0x890 [ 1341.692646][T23768] get_compat_msghdr+0x108/0x270 [ 1341.692646][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1341.692646][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1341.692646][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1341.692646][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1341.692646][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1341.692646][T23768] do_int80_syscall_32+0x1d/0x30 [ 1341.692646][T23768] entry_INT80_compat+0x71/0x76 [ 1341.692646][T23768] [ 1341.692646][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1341.692646][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1341.692646][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1342.581873][T23774] not chained 3630000 origins [ 1342.582595][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1342.582595][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.582595][T23774] Call Trace: [ 1342.582595][T23774] dump_stack+0x1df/0x240 [ 1342.582595][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1342.582595][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1342.582595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1342.582595][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1342.582595][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1342.582595][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1342.582595][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1342.582595][T23774] ? psi_group_change+0x1007/0x13c0 [ 1342.582595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1342.582595][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1342.582595][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1342.582595][T23774] ? _copy_from_user+0x15b/0x260 [ 1342.582595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1342.582595][T23774] __msan_chain_origin+0x50/0x90 [ 1342.689675][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.582595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1342.702594][T23774] get_compat_msghdr+0x108/0x270 [ 1342.702594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1342.702594][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1342.702594][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1342.702594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1342.702594][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1342.702594][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1342.702594][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1342.702594][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1342.702594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1342.702594][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1342.702594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1342.702594][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1342.702594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1342.702594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1342.783833][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1342.702594][T23774] entry_INT80_compat+0x71/0x76 [ 1342.702594][T23774] RIP: 0023:0xf7f11549 [ 1342.702594][T23774] Code: Bad RIP value. [ 1342.702594][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1342.702594][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1342.702594][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1342.702594][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.702594][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1342.847492][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.702594][T23774] Uninit was stored to memory at: [ 1342.702594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1342.702594][T23774] __msan_chain_origin+0x50/0x90 [ 1342.702594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1342.702594][T23774] get_compat_msghdr+0x108/0x270 [ 1342.702594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1342.702594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1342.902885][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1342.702594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1342.702594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1342.702594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1342.702594][T23774] entry_INT80_compat+0x71/0x76 [ 1342.702594][T23774] [ 1342.702594][T23774] Uninit was stored to memory at: [ 1342.702594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1342.702594][T23774] __msan_chain_origin+0x50/0x90 [ 1342.954043][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1342.702594][T23774] get_compat_msghdr+0x108/0x270 [ 1342.702594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1342.702594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1342.702594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1342.702594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1342.702594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1342.702594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1342.702594][T23774] entry_INT80_compat+0x71/0x76 [ 1342.702594][T23774] [ 1342.702594][T23774] Uninit was stored to memory at: [ 1342.702594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1342.702594][T23774] __msan_chain_origin+0x50/0x90 [ 1342.702594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1342.702594][T23774] get_compat_msghdr+0x108/0x270 [ 1342.702594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1342.702594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1342.702594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1342.702594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.061334][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1342.702594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1342.702594][T23774] entry_INT80_compat+0x71/0x76 [ 1342.702594][T23774] [ 1342.702594][T23774] Uninit was stored to memory at: [ 1342.702594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1342.702594][T23774] __msan_chain_origin+0x50/0x90 [ 1342.702594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1342.702594][T23774] get_compat_msghdr+0x108/0x270 [ 1342.702594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1342.702594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1342.702594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.124049][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1342.702594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1342.702594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1342.702594][T23774] entry_INT80_compat+0x71/0x76 [ 1342.702594][T23774] [ 1342.702594][T23774] Uninit was stored to memory at: [ 1342.702594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1342.702594][T23774] __msan_chain_origin+0x50/0x90 [ 1342.702594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.180325][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] get_compat_msghdr+0x108/0x270 [ 1342.702594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1342.702594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1342.702594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1342.702594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1342.702594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1342.702594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1342.702594][T23774] entry_INT80_compat+0x71/0x76 [ 1342.702594][T23774] [ 1343.232751][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] Uninit was stored to memory at: [ 1342.702594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1342.702594][T23774] __msan_chain_origin+0x50/0x90 [ 1342.702594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1342.702594][T23774] get_compat_msghdr+0x108/0x270 [ 1342.702594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1342.702594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1342.702594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.279964][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1342.702594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1342.702594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1342.702594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1342.702594][T23774] entry_INT80_compat+0x71/0x76 [ 1342.702594][T23774] [ 1342.702594][T23774] Uninit was stored to memory at: [ 1342.702594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1342.702594][T23774] __msan_chain_origin+0x50/0x90 [ 1342.702594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1342.702594][T23774] get_compat_msghdr+0x108/0x270 [ 1342.702594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1342.702594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1342.702594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1342.702594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1342.702594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1342.702594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1342.702594][T23774] entry_INT80_compat+0x71/0x76 [ 1342.702594][T23774] [ 1342.702594][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1342.702594][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1342.702594][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1343.559769][T23774] not chained 3640000 origins [ 1343.562595][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1343.562595][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.562595][T23774] Call Trace: [ 1343.562595][T23774] dump_stack+0x1df/0x240 [ 1343.562595][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1343.562595][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1343.562595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1343.562595][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1343.562595][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1343.562595][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1343.562595][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1343.562595][T23774] ? psi_group_change+0x1007/0x13c0 [ 1343.562595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1343.562595][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1343.562595][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1343.562595][T23774] ? _copy_from_user+0x15b/0x260 [ 1343.562595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1343.562595][T23774] __msan_chain_origin+0x50/0x90 [ 1343.562595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.562595][T23774] get_compat_msghdr+0x108/0x270 [ 1343.562595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1343.562595][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1343.562595][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1343.562595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1343.562595][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1343.562595][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1343.562595][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1343.562595][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1343.562595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1343.562595][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1343.562595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.562595][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1343.562595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.562595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1343.562595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1343.562595][T23774] entry_INT80_compat+0x71/0x76 [ 1343.562595][T23774] RIP: 0023:0xf7f11549 [ 1343.562595][T23774] Code: Bad RIP value. [ 1343.562595][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1343.562595][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1343.562595][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1343.562595][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1343.562595][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1343.562595][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.562595][T23774] Uninit was stored to memory at: [ 1343.562595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1343.562595][T23774] __msan_chain_origin+0x50/0x90 [ 1343.562595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.562595][T23774] get_compat_msghdr+0x108/0x270 [ 1343.562595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1343.562595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1343.562595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.562595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.562595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1343.562595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1343.562595][T23774] entry_INT80_compat+0x71/0x76 [ 1343.562595][T23774] [ 1343.562595][T23774] Uninit was stored to memory at: [ 1343.562595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1343.562595][T23774] __msan_chain_origin+0x50/0x90 [ 1343.562595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.562595][T23774] get_compat_msghdr+0x108/0x270 [ 1343.562595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1343.562595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1343.562595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.562595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.562595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1343.562595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1343.562595][T23774] entry_INT80_compat+0x71/0x76 [ 1343.562595][T23774] [ 1343.562595][T23774] Uninit was stored to memory at: [ 1343.562595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1343.562595][T23774] __msan_chain_origin+0x50/0x90 [ 1343.562595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.562595][T23774] get_compat_msghdr+0x108/0x270 [ 1343.562595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1343.562595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1343.562595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.562595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.562595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1343.562595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1343.562595][T23774] entry_INT80_compat+0x71/0x76 [ 1343.562595][T23774] [ 1343.562595][T23774] Uninit was stored to memory at: [ 1343.562595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1343.562595][T23774] __msan_chain_origin+0x50/0x90 [ 1343.562595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.562595][T23774] get_compat_msghdr+0x108/0x270 [ 1343.562595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1343.562595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1343.562595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.562595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.562595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1343.562595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1343.562595][T23774] entry_INT80_compat+0x71/0x76 [ 1343.562595][T23774] [ 1343.562595][T23774] Uninit was stored to memory at: [ 1343.562595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1343.562595][T23774] __msan_chain_origin+0x50/0x90 [ 1343.562595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.562595][T23774] get_compat_msghdr+0x108/0x270 [ 1343.562595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1343.562595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1343.562595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.562595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.562595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1343.562595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1343.562595][T23774] entry_INT80_compat+0x71/0x76 [ 1343.562595][T23774] [ 1343.562595][T23774] Uninit was stored to memory at: [ 1343.562595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1343.562595][T23774] __msan_chain_origin+0x50/0x90 [ 1343.562595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.562595][T23774] get_compat_msghdr+0x108/0x270 [ 1343.562595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1343.562595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1343.562595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.562595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.562595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1343.562595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1343.562595][T23774] entry_INT80_compat+0x71/0x76 [ 1343.562595][T23774] [ 1343.562595][T23774] Uninit was stored to memory at: [ 1343.562595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1343.562595][T23774] __msan_chain_origin+0x50/0x90 [ 1343.562595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1343.562595][T23774] get_compat_msghdr+0x108/0x270 [ 1343.562595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1343.562595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1343.562595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1343.562595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1343.562595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1343.562595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1343.562595][T23774] entry_INT80_compat+0x71/0x76 [ 1343.562595][T23774] [ 1343.562595][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1343.562595][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1343.562595][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1344.455548][T23774] not chained 3650000 origins [ 1344.460261][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1344.462596][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.462596][T23774] Call Trace: [ 1344.462596][T23774] dump_stack+0x1df/0x240 [ 1344.462596][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1344.462596][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1344.462596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1344.462596][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1344.462596][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1344.462596][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1344.462596][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1344.462596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1344.462596][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1344.462596][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1344.462596][T23774] ? _copy_from_user+0x15b/0x260 [ 1344.462596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1344.462596][T23774] __msan_chain_origin+0x50/0x90 [ 1344.462596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1344.462596][T23774] get_compat_msghdr+0x108/0x270 [ 1344.462596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1344.462596][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1344.462596][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1344.462596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1344.462596][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1344.462596][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1344.462596][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1344.462596][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1344.462596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1344.462596][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1344.462596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1344.462596][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1344.462596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1344.462596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1344.462596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1344.462596][T23774] entry_INT80_compat+0x71/0x76 [ 1344.462596][T23774] RIP: 0023:0xf7f11549 [ 1344.462596][T23774] Code: Bad RIP value. [ 1344.462596][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1344.462596][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1344.462596][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1344.462596][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1344.462596][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1344.462596][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1344.462596][T23774] Uninit was stored to memory at: [ 1344.462596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1344.462596][T23774] __msan_chain_origin+0x50/0x90 [ 1344.462596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1344.462596][T23774] get_compat_msghdr+0x108/0x270 [ 1344.462596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1344.462596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1344.462596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1344.462596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1344.462596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1344.462596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1344.462596][T23774] entry_INT80_compat+0x71/0x76 [ 1344.462596][T23774] [ 1344.462596][T23774] Uninit was stored to memory at: [ 1344.462596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1344.462596][T23774] __msan_chain_origin+0x50/0x90 [ 1344.462596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1344.462596][T23774] get_compat_msghdr+0x108/0x270 [ 1344.462596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1344.462596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1344.462596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1344.462596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1344.462596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1344.462596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1344.462596][T23774] entry_INT80_compat+0x71/0x76 [ 1344.462596][T23774] [ 1344.462596][T23774] Uninit was stored to memory at: [ 1344.462596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1344.462596][T23774] __msan_chain_origin+0x50/0x90 [ 1344.462596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1344.462596][T23774] get_compat_msghdr+0x108/0x270 [ 1344.462596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1344.462596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1344.462596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1344.462596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1344.462596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1344.462596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1344.462596][T23774] entry_INT80_compat+0x71/0x76 [ 1344.462596][T23774] [ 1344.462596][T23774] Uninit was stored to memory at: [ 1344.462596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1344.462596][T23774] __msan_chain_origin+0x50/0x90 [ 1344.462596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1344.462596][T23774] get_compat_msghdr+0x108/0x270 [ 1344.462596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1344.462596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1344.462596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1344.462596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1344.462596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1344.462596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1344.462596][T23774] entry_INT80_compat+0x71/0x76 [ 1344.462596][T23774] [ 1344.462596][T23774] Uninit was stored to memory at: [ 1344.462596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1344.462596][T23774] __msan_chain_origin+0x50/0x90 [ 1344.462596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1344.462596][T23774] get_compat_msghdr+0x108/0x270 [ 1344.462596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1344.462596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1344.462596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1344.462596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1344.462596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1344.462596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1344.462596][T23774] entry_INT80_compat+0x71/0x76 [ 1344.462596][T23774] [ 1344.462596][T23774] Uninit was stored to memory at: [ 1344.462596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1344.462596][T23774] __msan_chain_origin+0x50/0x90 [ 1344.462596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1344.462596][T23774] get_compat_msghdr+0x108/0x270 [ 1344.462596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1344.462596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1344.462596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1344.462596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1344.462596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1344.462596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1344.462596][T23774] entry_INT80_compat+0x71/0x76 [ 1344.462596][T23774] [ 1344.462596][T23774] Uninit was stored to memory at: [ 1344.462596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1344.462596][T23774] __msan_chain_origin+0x50/0x90 [ 1344.462596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1344.462596][T23774] get_compat_msghdr+0x108/0x270 [ 1344.462596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1344.462596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1344.462596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1344.462596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1344.462596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1344.462596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1344.462596][T23774] entry_INT80_compat+0x71/0x76 [ 1344.462596][T23774] [ 1344.462596][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1344.462596][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1344.462596][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1345.348905][T23774] not chained 3660000 origins [ 1345.352597][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1345.352597][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.352597][T23774] Call Trace: [ 1345.352597][T23774] dump_stack+0x1df/0x240 [ 1345.352597][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1345.352597][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1345.352597][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1345.352597][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1345.352597][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1345.352597][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1345.352597][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1345.352597][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1345.352597][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1345.352597][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1345.352597][T23774] ? _copy_from_user+0x15b/0x260 [ 1345.352597][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1345.352597][T23774] __msan_chain_origin+0x50/0x90 [ 1345.352597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1345.352597][T23774] get_compat_msghdr+0x108/0x270 [ 1345.352597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1345.352597][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1345.352597][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1345.352597][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1345.352597][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1345.352597][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1345.352597][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1345.352597][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1345.352597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1345.352597][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1345.352597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1345.352597][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1345.352597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1345.352597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1345.352597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1345.352597][T23774] entry_INT80_compat+0x71/0x76 [ 1345.352597][T23774] RIP: 0023:0xf7f11549 [ 1345.352597][T23774] Code: Bad RIP value. [ 1345.352597][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1345.352597][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1345.352597][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1345.352597][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1345.352597][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1345.352597][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1345.352597][T23774] Uninit was stored to memory at: [ 1345.352597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1345.352597][T23774] __msan_chain_origin+0x50/0x90 [ 1345.352597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1345.352597][T23774] get_compat_msghdr+0x108/0x270 [ 1345.352597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1345.352597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1345.352597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1345.352597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1345.352597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1345.352597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1345.352597][T23774] entry_INT80_compat+0x71/0x76 [ 1345.352597][T23774] [ 1345.352597][T23774] Uninit was stored to memory at: [ 1345.352597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1345.352597][T23774] __msan_chain_origin+0x50/0x90 [ 1345.352597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1345.352597][T23774] get_compat_msghdr+0x108/0x270 [ 1345.352597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1345.352597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1345.352597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1345.352597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1345.352597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1345.352597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1345.352597][T23774] entry_INT80_compat+0x71/0x76 [ 1345.352597][T23774] [ 1345.352597][T23774] Uninit was stored to memory at: [ 1345.352597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1345.352597][T23774] __msan_chain_origin+0x50/0x90 [ 1345.352597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1345.352597][T23774] get_compat_msghdr+0x108/0x270 [ 1345.352597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1345.352597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1345.352597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1345.352597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1345.352597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1345.352597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1345.352597][T23774] entry_INT80_compat+0x71/0x76 [ 1345.352597][T23774] [ 1345.352597][T23774] Uninit was stored to memory at: [ 1345.352597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1345.352597][T23774] __msan_chain_origin+0x50/0x90 [ 1345.352597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1345.352597][T23774] get_compat_msghdr+0x108/0x270 [ 1345.352597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1345.352597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1345.352597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1345.352597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1345.352597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1345.352597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1345.352597][T23774] entry_INT80_compat+0x71/0x76 [ 1345.352597][T23774] [ 1345.352597][T23774] Uninit was stored to memory at: [ 1345.352597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1345.352597][T23774] __msan_chain_origin+0x50/0x90 [ 1345.352597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1345.352597][T23774] get_compat_msghdr+0x108/0x270 [ 1345.352597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1345.352597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1345.352597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1345.352597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1345.352597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1345.352597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1345.352597][T23774] entry_INT80_compat+0x71/0x76 [ 1345.352597][T23774] [ 1345.352597][T23774] Uninit was stored to memory at: [ 1345.352597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1345.352597][T23774] __msan_chain_origin+0x50/0x90 [ 1345.352597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1345.352597][T23774] get_compat_msghdr+0x108/0x270 [ 1345.352597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1345.352597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1345.352597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1345.352597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1345.352597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1345.352597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1345.352597][T23774] entry_INT80_compat+0x71/0x76 [ 1345.352597][T23774] [ 1345.352597][T23774] Uninit was stored to memory at: [ 1345.352597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1345.352597][T23774] __msan_chain_origin+0x50/0x90 [ 1345.352597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1345.352597][T23774] get_compat_msghdr+0x108/0x270 [ 1345.352597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1345.352597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1345.352597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1345.352597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1345.352597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1345.352597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1345.352597][T23774] entry_INT80_compat+0x71/0x76 [ 1345.352597][T23774] [ 1345.352597][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1345.352597][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1345.352597][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1346.237545][T23768] not chained 3670000 origins [ 1346.242259][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1346.242597][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.242597][T23768] Call Trace: [ 1346.242597][T23768] dump_stack+0x1df/0x240 [ 1346.242597][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1346.242597][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1346.242597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1346.242597][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1346.242597][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1346.242597][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1346.242597][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1346.242597][T23768] ? psi_group_change+0x1007/0x13c0 [ 1346.242597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1346.242597][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1346.242597][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1346.242597][T23768] ? _copy_from_user+0x15b/0x260 [ 1346.242597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1346.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1346.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1346.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1346.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1346.242597][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1346.242597][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1346.242597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1346.242597][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1346.242597][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1346.242597][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1346.242597][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1346.242597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1346.242597][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1346.242597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1346.242597][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1346.242597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1346.242597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1346.242597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1346.242597][T23768] entry_INT80_compat+0x71/0x76 [ 1346.242597][T23768] RIP: 0023:0xf7f11549 [ 1346.242597][T23768] Code: Bad RIP value. [ 1346.242597][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1346.242597][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1346.242597][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.242597][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.242597][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1346.242597][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.242597][T23768] Uninit was stored to memory at: [ 1346.242597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1346.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1346.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1346.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1346.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1346.242597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1346.242597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1346.242597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1346.242597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1346.242597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1346.242597][T23768] entry_INT80_compat+0x71/0x76 [ 1346.242597][T23768] [ 1346.242597][T23768] Uninit was stored to memory at: [ 1346.242597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1346.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1346.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1346.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1346.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1346.242597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1346.242597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1346.242597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1346.242597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1346.242597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1346.242597][T23768] entry_INT80_compat+0x71/0x76 [ 1346.242597][T23768] [ 1346.242597][T23768] Uninit was stored to memory at: [ 1346.242597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1346.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1346.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1346.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1346.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1346.242597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1346.242597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1346.242597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1346.242597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1346.242597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1346.242597][T23768] entry_INT80_compat+0x71/0x76 [ 1346.242597][T23768] [ 1346.242597][T23768] Uninit was stored to memory at: [ 1346.242597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1346.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1346.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1346.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1346.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1346.242597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1346.242597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1346.242597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1346.242597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1346.242597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1346.242597][T23768] entry_INT80_compat+0x71/0x76 [ 1346.242597][T23768] [ 1346.242597][T23768] Uninit was stored to memory at: [ 1346.242597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1346.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1346.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1346.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1346.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1346.242597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1346.242597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1346.242597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1346.242597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1346.242597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1346.242597][T23768] entry_INT80_compat+0x71/0x76 [ 1346.242597][T23768] [ 1346.242597][T23768] Uninit was stored to memory at: [ 1346.242597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1346.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1346.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1346.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1346.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1346.242597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1346.242597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1346.242597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1346.242597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1346.242597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1346.242597][T23768] entry_INT80_compat+0x71/0x76 [ 1346.242597][T23768] [ 1346.242597][T23768] Uninit was stored to memory at: [ 1346.242597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1346.242597][T23768] __msan_chain_origin+0x50/0x90 [ 1346.242597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1346.242597][T23768] get_compat_msghdr+0x108/0x270 [ 1346.242597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1346.242597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1346.242597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1346.242597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1346.242597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1346.242597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1346.242597][T23768] entry_INT80_compat+0x71/0x76 [ 1346.242597][T23768] [ 1346.242597][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1346.242597][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1346.242597][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1347.095097][T23768] not chained 3680000 origins [ 1347.099807][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1347.102608][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.102608][T23768] Call Trace: [ 1347.102608][T23768] dump_stack+0x1df/0x240 [ 1347.102608][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1347.102608][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1347.102608][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1347.102608][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1347.102608][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1347.102608][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1347.102608][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1347.102608][T23768] ? psi_group_change+0x1007/0x13c0 [ 1347.102608][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1347.102608][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1347.102608][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1347.102608][T23768] ? _copy_from_user+0x15b/0x260 [ 1347.102608][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1347.102608][T23768] __msan_chain_origin+0x50/0x90 [ 1347.102608][T23768] __get_compat_msghdr+0x5be/0x890 [ 1347.102608][T23768] get_compat_msghdr+0x108/0x270 [ 1347.102608][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1347.102608][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1347.102608][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1347.102608][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1347.102608][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1347.102608][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1347.102608][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1347.102608][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1347.102608][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1347.102608][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1347.102608][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1347.102608][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1347.102608][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1347.102608][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1347.102608][T23768] do_int80_syscall_32+0x1d/0x30 [ 1347.102608][T23768] entry_INT80_compat+0x71/0x76 [ 1347.102608][T23768] RIP: 0023:0xf7f11549 [ 1347.102608][T23768] Code: Bad RIP value. [ 1347.102608][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1347.102608][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1347.102608][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.102608][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1347.102608][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1347.102608][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1347.102608][T23768] Uninit was stored to memory at: [ 1347.102608][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1347.102608][T23768] __msan_chain_origin+0x50/0x90 [ 1347.102608][T23768] __get_compat_msghdr+0x5be/0x890 [ 1347.102608][T23768] get_compat_msghdr+0x108/0x270 [ 1347.102608][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1347.102608][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1347.102608][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1347.102608][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1347.102608][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1347.102608][T23768] do_int80_syscall_32+0x1d/0x30 [ 1347.102608][T23768] entry_INT80_compat+0x71/0x76 [ 1347.102608][T23768] [ 1347.102608][T23768] Uninit was stored to memory at: [ 1347.102608][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1347.102608][T23768] __msan_chain_origin+0x50/0x90 [ 1347.102608][T23768] __get_compat_msghdr+0x5be/0x890 [ 1347.102608][T23768] get_compat_msghdr+0x108/0x270 [ 1347.102608][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1347.102608][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1347.102608][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1347.102608][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1347.102608][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1347.102608][T23768] do_int80_syscall_32+0x1d/0x30 [ 1347.102608][T23768] entry_INT80_compat+0x71/0x76 [ 1347.102608][T23768] [ 1347.102608][T23768] Uninit was stored to memory at: [ 1347.102608][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1347.102608][T23768] __msan_chain_origin+0x50/0x90 [ 1347.102608][T23768] __get_compat_msghdr+0x5be/0x890 [ 1347.102608][T23768] get_compat_msghdr+0x108/0x270 [ 1347.102608][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1347.102608][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1347.102608][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1347.102608][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1347.102608][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1347.102608][T23768] do_int80_syscall_32+0x1d/0x30 [ 1347.102608][T23768] entry_INT80_compat+0x71/0x76 [ 1347.102608][T23768] [ 1347.102608][T23768] Uninit was stored to memory at: [ 1347.102608][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1347.102608][T23768] __msan_chain_origin+0x50/0x90 [ 1347.102608][T23768] __get_compat_msghdr+0x5be/0x890 [ 1347.102608][T23768] get_compat_msghdr+0x108/0x270 [ 1347.102608][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1347.102608][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1347.102608][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1347.102608][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1347.102608][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1347.102608][T23768] do_int80_syscall_32+0x1d/0x30 [ 1347.102608][T23768] entry_INT80_compat+0x71/0x76 [ 1347.102608][T23768] [ 1347.102608][T23768] Uninit was stored to memory at: [ 1347.102608][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1347.102608][T23768] __msan_chain_origin+0x50/0x90 [ 1347.102608][T23768] __get_compat_msghdr+0x5be/0x890 [ 1347.102608][T23768] get_compat_msghdr+0x108/0x270 [ 1347.102608][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1347.102608][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1347.102608][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1347.102608][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1347.102608][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1347.102608][T23768] do_int80_syscall_32+0x1d/0x30 [ 1347.102608][T23768] entry_INT80_compat+0x71/0x76 [ 1347.102608][T23768] [ 1347.102608][T23768] Uninit was stored to memory at: [ 1347.102608][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1347.102608][T23768] __msan_chain_origin+0x50/0x90 [ 1347.102608][T23768] __get_compat_msghdr+0x5be/0x890 [ 1347.102608][T23768] get_compat_msghdr+0x108/0x270 [ 1347.102608][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1347.102608][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1347.102608][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1347.102608][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1347.102608][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1347.102608][T23768] do_int80_syscall_32+0x1d/0x30 [ 1347.102608][T23768] entry_INT80_compat+0x71/0x76 [ 1347.102608][T23768] [ 1347.102608][T23768] Uninit was stored to memory at: [ 1347.102608][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1347.102608][T23768] __msan_chain_origin+0x50/0x90 [ 1347.102608][T23768] __get_compat_msghdr+0x5be/0x890 [ 1347.102608][T23768] get_compat_msghdr+0x108/0x270 [ 1347.102608][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1347.102608][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1347.102608][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1347.102608][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1347.102608][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1347.102608][T23768] do_int80_syscall_32+0x1d/0x30 [ 1347.102608][T23768] entry_INT80_compat+0x71/0x76 [ 1347.102608][T23768] [ 1347.102608][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1347.102608][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1347.102608][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1347.851739][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.020663][T23774] not chained 3690000 origins [ 1348.022746][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1348.022746][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.022746][T23774] Call Trace: [ 1348.022746][T23774] dump_stack+0x1df/0x240 [ 1348.022746][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1348.022746][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1348.022746][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1348.022746][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1348.022746][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1348.022746][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1348.022746][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1348.022746][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1348.022746][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1348.101637][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1348.022746][T23774] ? _copy_from_user+0x15b/0x260 [ 1348.022746][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1348.022746][T23774] __msan_chain_origin+0x50/0x90 [ 1348.129587][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.022746][T23774] get_compat_msghdr+0x108/0x270 [ 1348.022746][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.153101][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1348.022746][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1348.022746][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1348.175656][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1348.022746][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1348.022746][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1348.022746][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1348.022746][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.022746][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1348.022746][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.022746][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1348.022746][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.022746][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.022746][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.022746][T23774] entry_INT80_compat+0x71/0x76 [ 1348.249073][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] RIP: 0023:0xf7f11549 [ 1348.022746][T23774] Code: Bad RIP value. [ 1348.022746][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1348.022746][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1348.022746][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1348.022746][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1348.022746][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1348.022746][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1348.022746][T23774] Uninit was stored to memory at: [ 1348.022746][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1348.022746][T23774] __msan_chain_origin+0x50/0x90 [ 1348.022746][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.022746][T23774] get_compat_msghdr+0x108/0x270 [ 1348.022746][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.346299][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.022746][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.022746][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.022746][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.022746][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.022746][T23774] entry_INT80_compat+0x71/0x76 [ 1348.022746][T23774] [ 1348.022746][T23774] Uninit was stored to memory at: [ 1348.022746][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1348.395600][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] __msan_chain_origin+0x50/0x90 [ 1348.022746][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.418080][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] get_compat_msghdr+0x108/0x270 [ 1348.022746][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.022746][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.022746][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.022746][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.022746][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.022746][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.022746][T23774] entry_INT80_compat+0x71/0x76 [ 1348.022746][T23774] [ 1348.022746][T23774] Uninit was stored to memory at: [ 1348.022746][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1348.478625][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1348.022746][T23774] __msan_chain_origin+0x50/0x90 [ 1348.022746][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.022746][T23774] get_compat_msghdr+0x108/0x270 [ 1348.022746][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.022746][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.022746][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.022746][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.022746][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.022746][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.022746][T23774] entry_INT80_compat+0x71/0x76 [ 1348.022746][T23774] [ 1348.022746][T23774] Uninit was stored to memory at: [ 1348.022746][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1348.022746][T23774] __msan_chain_origin+0x50/0x90 [ 1348.022746][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.022746][T23774] get_compat_msghdr+0x108/0x270 [ 1348.022746][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.022746][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.022746][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.022746][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.022746][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.022746][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.022746][T23774] entry_INT80_compat+0x71/0x76 [ 1348.022746][T23774] [ 1348.022746][T23774] Uninit was stored to memory at: [ 1348.022746][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1348.022746][T23774] __msan_chain_origin+0x50/0x90 [ 1348.022746][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.022746][T23774] get_compat_msghdr+0x108/0x270 [ 1348.022746][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.022746][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.022746][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.022746][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.022746][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.022746][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.022746][T23774] entry_INT80_compat+0x71/0x76 [ 1348.022746][T23774] [ 1348.022746][T23774] Uninit was stored to memory at: [ 1348.022746][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1348.022746][T23774] __msan_chain_origin+0x50/0x90 [ 1348.022746][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.022746][T23774] get_compat_msghdr+0x108/0x270 [ 1348.022746][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.022746][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.022746][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.022746][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.022746][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.022746][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.022746][T23774] entry_INT80_compat+0x71/0x76 [ 1348.022746][T23774] [ 1348.022746][T23774] Uninit was stored to memory at: [ 1348.022746][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1348.022746][T23774] __msan_chain_origin+0x50/0x90 [ 1348.022746][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.022746][T23774] get_compat_msghdr+0x108/0x270 [ 1348.022746][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.022746][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.022746][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.022746][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.022746][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.022746][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.022746][T23774] entry_INT80_compat+0x71/0x76 [ 1348.022746][T23774] [ 1348.022746][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1348.022746][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1348.022746][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1348.880562][T23774] not chained 3700000 origins [ 1348.882585][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1348.882585][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.882585][T23774] Call Trace: [ 1348.882585][T23774] dump_stack+0x1df/0x240 [ 1348.882585][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1348.882585][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1348.882585][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1348.882585][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1348.882585][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1348.882585][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1348.882585][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1348.882585][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1348.882585][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1348.882585][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1348.882585][T23774] ? _copy_from_user+0x15b/0x260 [ 1348.882585][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1348.882585][T23774] __msan_chain_origin+0x50/0x90 [ 1348.882585][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.882585][T23774] get_compat_msghdr+0x108/0x270 [ 1348.882585][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.882585][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1348.882585][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1348.882585][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1348.882585][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1348.882585][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1348.882585][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1348.882585][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1348.882585][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1348.882585][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1348.882585][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.882585][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1348.882585][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.882585][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.882585][T23774] do_int80_syscall_32+0x1d/0x30 [ 1348.882585][T23774] entry_INT80_compat+0x71/0x76 [ 1348.882585][T23774] RIP: 0023:0xf7f11549 [ 1348.882585][T23774] Code: Bad RIP value. [ 1348.882585][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1348.882585][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1348.882585][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1348.882585][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1348.882585][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1348.882585][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1348.882585][T23774] Uninit was stored to memory at: [ 1348.882585][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1348.882585][T23774] __msan_chain_origin+0x50/0x90 [ 1348.882585][T23774] __get_compat_msghdr+0x5be/0x890 [ 1348.882585][T23774] get_compat_msghdr+0x108/0x270 [ 1348.882585][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1348.882585][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1349.166444][T23768] not chained 3710000 origins [ 1348.882585][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.882585][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1349.172602][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1348.882585][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1349.172602][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.882585][T23774] do_int80_syscall_32+0x1d/0x30 [ 1349.172602][T23768] Call Trace: [ 1348.882585][T23774] entry_INT80_compat+0x71/0x76 [ 1349.172602][T23768] dump_stack+0x1df/0x240 [ 1348.882585][T23774] [ 1349.172602][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1348.882585][T23774] Uninit was stored to memory at: [ 1349.172602][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1348.882585][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1349.172602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1348.882585][T23774] __msan_chain_origin+0x50/0x90 [ 1349.172602][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1348.882585][T23774] __get_compat_msghdr+0x5be/0x890 [ 1349.172602][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1348.882585][T23774] get_compat_msghdr+0x108/0x270 [ 1349.172602][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1348.882585][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1349.172602][T23768] ? __msan_get_context_state+0x9/0x20 [ 1348.882585][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1349.172602][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1348.882585][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1349.172602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1348.882585][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1349.172602][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1348.882585][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1349.172602][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1348.882585][T23774] do_int80_syscall_32+0x1d/0x30 [ 1349.172602][T23768] ? _copy_from_user+0x15b/0x260 [ 1348.882585][T23774] entry_INT80_compat+0x71/0x76 [ 1349.172602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1348.882585][T23774] [ 1349.172602][T23768] __msan_chain_origin+0x50/0x90 [ 1348.882585][T23774] Uninit was stored to memory at: [ 1349.172602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1348.882585][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1349.172602][T23768] get_compat_msghdr+0x108/0x270 [ 1348.882585][T23774] __msan_chain_origin+0x50/0x90 [ 1349.172602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1348.882585][T23774] __get_compat_msghdr+0x5be/0x890 [ 1349.172602][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1348.882585][T23774] get_compat_msghdr+0x108/0x270 [ 1349.172602][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1348.882585][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1349.172602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1348.882585][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1349.172602][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1348.882585][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1349.172602][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1348.882585][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1349.172602][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1348.882585][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.882585][T23774] do_int80_syscall_32+0x1d/0x30 [ 1349.172602][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1348.882585][T23774] entry_INT80_compat+0x71/0x76 [ 1349.172602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1348.882585][T23774] [ 1349.172602][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1348.882585][T23774] Uninit was stored to memory at: [ 1349.172602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.882585][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1349.172602][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1348.882585][T23774] __msan_chain_origin+0x50/0x90 [ 1349.172602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.882585][T23774] __get_compat_msghdr+0x5be/0x890 [ 1349.172602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.882585][T23774] get_compat_msghdr+0x108/0x270 [ 1349.172602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1348.882585][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1349.172602][T23768] entry_INT80_compat+0x71/0x76 [ 1348.882585][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1349.172602][T23768] RIP: 0023:0xf7f11549 [ 1348.882585][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1349.172602][T23768] Code: Bad RIP value. [ 1348.882585][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1349.172602][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1348.882585][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1349.172602][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1348.882585][T23774] do_int80_syscall_32+0x1d/0x30 [ 1349.172602][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1348.882585][T23774] entry_INT80_compat+0x71/0x76 [ 1349.172602][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1348.882585][T23774] [ 1349.172602][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1348.882585][T23774] Uninit was stored to memory at: [ 1349.172602][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1348.882585][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1349.172602][T23768] Uninit was stored to memory at: [ 1348.882585][T23774] __msan_chain_origin+0x50/0x90 [ 1349.172602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1348.882585][T23774] __get_compat_msghdr+0x5be/0x890 [ 1349.172602][T23768] __msan_chain_origin+0x50/0x90 [ 1348.882585][T23774] get_compat_msghdr+0x108/0x270 [ 1349.172602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1348.882585][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1349.172602][T23768] get_compat_msghdr+0x108/0x270 [ 1348.882585][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1349.172602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1348.882585][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1349.172602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1348.882585][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1349.172602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.882585][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1349.172602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.882585][T23774] do_int80_syscall_32+0x1d/0x30 [ 1349.172602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.882585][T23774] entry_INT80_compat+0x71/0x76 [ 1349.172602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1348.882585][T23774] [ 1349.172602][T23768] entry_INT80_compat+0x71/0x76 [ 1348.882585][T23774] Uninit was stored to memory at: [ 1349.172602][T23768] [ 1348.882585][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1349.172602][T23768] Uninit was stored to memory at: [ 1348.882585][T23774] __msan_chain_origin+0x50/0x90 [ 1349.172602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1348.882585][T23774] __get_compat_msghdr+0x5be/0x890 [ 1349.172602][T23768] __msan_chain_origin+0x50/0x90 [ 1348.882585][T23774] get_compat_msghdr+0x108/0x270 [ 1349.172602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1348.882585][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1349.172602][T23768] get_compat_msghdr+0x108/0x270 [ 1348.882585][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1349.172602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1348.882585][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1349.172602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1348.882585][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1349.172602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.882585][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1349.172602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.882585][T23774] do_int80_syscall_32+0x1d/0x30 [ 1349.172602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.882585][T23774] entry_INT80_compat+0x71/0x76 [ 1349.172602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1348.882585][T23774] [ 1349.172602][T23768] entry_INT80_compat+0x71/0x76 [ 1348.882585][T23774] Uninit was stored to memory at: [ 1349.172602][T23768] [ 1348.882585][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1349.172602][T23768] Uninit was stored to memory at: [ 1348.882585][T23774] __msan_chain_origin+0x50/0x90 [ 1348.882585][T23774] __get_compat_msghdr+0x5be/0x890 [ 1349.172602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1348.882585][T23774] get_compat_msghdr+0x108/0x270 [ 1349.172602][T23768] __msan_chain_origin+0x50/0x90 [ 1348.882585][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1349.172602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1348.882585][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1349.172602][T23768] get_compat_msghdr+0x108/0x270 [ 1348.882585][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1349.172602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1348.882585][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1349.172602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1348.882585][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1349.172602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1348.882585][T23774] do_int80_syscall_32+0x1d/0x30 [ 1349.172602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1348.882585][T23774] entry_INT80_compat+0x71/0x76 [ 1349.172602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1348.882585][T23774] [ 1349.172602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1348.882585][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1349.172602][T23768] entry_INT80_compat+0x71/0x76 [ 1348.882585][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1349.172602][T23768] [ 1348.882585][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1349.172602][T23768] Uninit was stored to memory at: [ 1350.055238][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1350.055238][T23768] __msan_chain_origin+0x50/0x90 [ 1350.055238][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.069793][T23768] get_compat_msghdr+0x108/0x270 [ 1350.069793][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.069793][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.069793][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.069793][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.069793][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.069793][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.069793][T23768] entry_INT80_compat+0x71/0x76 [ 1350.069793][T23768] [ 1350.069793][T23768] Uninit was stored to memory at: [ 1350.069793][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1350.069793][T23768] __msan_chain_origin+0x50/0x90 [ 1350.069793][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.069793][T23768] get_compat_msghdr+0x108/0x270 [ 1350.069793][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.069793][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.069793][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.069793][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.069793][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.069793][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.069793][T23768] entry_INT80_compat+0x71/0x76 [ 1350.069793][T23768] [ 1350.069793][T23768] Uninit was stored to memory at: [ 1350.069793][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1350.069793][T23768] __msan_chain_origin+0x50/0x90 [ 1350.069793][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.069793][T23768] get_compat_msghdr+0x108/0x270 [ 1350.069793][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.069793][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.069793][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.069793][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.069793][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.069793][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.069793][T23768] entry_INT80_compat+0x71/0x76 [ 1350.069793][T23768] [ 1350.069793][T23768] Uninit was stored to memory at: [ 1350.069793][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1350.069793][T23768] __msan_chain_origin+0x50/0x90 [ 1350.069793][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.069793][T23768] get_compat_msghdr+0x108/0x270 [ 1350.069793][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.069793][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.069793][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.069793][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.069793][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.069793][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.069793][T23768] entry_INT80_compat+0x71/0x76 [ 1350.069793][T23768] [ 1350.069793][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1350.069793][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1350.069793][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1350.771100][T23774] not chained 3720000 origins [ 1350.772584][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1350.772584][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.772584][T23774] Call Trace: [ 1350.772584][T23774] dump_stack+0x1df/0x240 [ 1350.772584][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1350.772584][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1350.772584][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1350.772584][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1350.772584][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1350.772584][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1350.832687][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1350.832687][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1350.832687][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1350.832687][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1350.832687][T23774] ? _copy_from_user+0x15b/0x260 [ 1350.832687][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1350.832687][T23774] __msan_chain_origin+0x50/0x90 [ 1350.832687][T23774] __get_compat_msghdr+0x5be/0x890 [ 1350.832687][T23774] get_compat_msghdr+0x108/0x270 [ 1350.832687][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1350.832687][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1350.832687][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1350.832687][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1350.832687][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1350.832687][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1350.832687][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1350.832687][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1350.832687][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1350.832687][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1350.832687][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.832687][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1350.832687][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.832687][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.832687][T23774] do_int80_syscall_32+0x1d/0x30 [ 1350.832687][T23774] entry_INT80_compat+0x71/0x76 [ 1350.832687][T23774] RIP: 0023:0xf7f11549 [ 1350.832687][T23774] Code: Bad RIP value. [ 1350.832687][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1350.832687][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1350.832687][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.832687][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1350.832687][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1350.832687][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1350.832687][T23774] Uninit was stored to memory at: [ 1350.832687][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1351.036759][T23768] not chained 3730000 origins [ 1350.832687][T23774] __msan_chain_origin+0x50/0x90 [ 1351.041457][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1350.832687][T23774] __get_compat_msghdr+0x5be/0x890 [ 1351.042593][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.832687][T23774] get_compat_msghdr+0x108/0x270 [ 1351.042593][T23768] Call Trace: [ 1350.832687][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1351.042593][T23768] dump_stack+0x1df/0x240 [ 1350.832687][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1351.042593][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1350.832687][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.042593][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1350.832687][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.042593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1350.832687][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.042593][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1350.832687][T23774] do_int80_syscall_32+0x1d/0x30 [ 1351.042593][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1350.832687][T23774] entry_INT80_compat+0x71/0x76 [ 1351.042593][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1350.832687][T23774] [ 1351.042593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1350.832687][T23774] Uninit was stored to memory at: [ 1351.042593][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1350.832687][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1351.042593][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1350.832687][T23774] __msan_chain_origin+0x50/0x90 [ 1351.042593][T23768] ? _copy_from_user+0x15b/0x260 [ 1350.832687][T23774] __get_compat_msghdr+0x5be/0x890 [ 1351.042593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1350.832687][T23774] get_compat_msghdr+0x108/0x270 [ 1351.042593][T23768] __msan_chain_origin+0x50/0x90 [ 1350.832687][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1351.042593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.832687][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1351.042593][T23768] get_compat_msghdr+0x108/0x270 [ 1350.832687][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.042593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.832687][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.042593][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1350.832687][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.042593][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1350.832687][T23774] do_int80_syscall_32+0x1d/0x30 [ 1351.042593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1350.832687][T23774] entry_INT80_compat+0x71/0x76 [ 1351.042593][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1350.832687][T23774] [ 1351.042593][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1350.832687][T23774] Uninit was stored to memory at: [ 1351.042593][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1350.832687][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1351.042593][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1350.832687][T23774] __msan_chain_origin+0x50/0x90 [ 1351.042593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.832687][T23774] __get_compat_msghdr+0x5be/0x890 [ 1351.042593][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1350.832687][T23774] get_compat_msghdr+0x108/0x270 [ 1351.042593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.832687][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1351.042593][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1350.832687][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1351.042593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.832687][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.042593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.832687][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.042593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.832687][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.042593][T23768] entry_INT80_compat+0x71/0x76 [ 1350.832687][T23774] do_int80_syscall_32+0x1d/0x30 [ 1351.042593][T23768] RIP: 0023:0xf7f11549 [ 1350.832687][T23774] entry_INT80_compat+0x71/0x76 [ 1351.042593][T23768] Code: Bad RIP value. [ 1350.832687][T23774] [ 1351.042593][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1350.832687][T23774] Uninit was stored to memory at: [ 1351.042593][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1350.832687][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1351.042593][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.832687][T23774] __msan_chain_origin+0x50/0x90 [ 1351.042593][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1350.832687][T23774] __get_compat_msghdr+0x5be/0x890 [ 1351.042593][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1350.832687][T23774] get_compat_msghdr+0x108/0x270 [ 1351.042593][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1350.832687][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1351.042593][T23768] Uninit was stored to memory at: [ 1350.832687][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1351.042593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1350.832687][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.042593][T23768] __msan_chain_origin+0x50/0x90 [ 1350.832687][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.042593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.832687][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.042593][T23768] get_compat_msghdr+0x108/0x270 [ 1350.832687][T23774] do_int80_syscall_32+0x1d/0x30 [ 1351.042593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.832687][T23774] entry_INT80_compat+0x71/0x76 [ 1351.042593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.832687][T23774] [ 1351.042593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.832687][T23774] Uninit was stored to memory at: [ 1351.042593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.832687][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1351.042593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.832687][T23774] __msan_chain_origin+0x50/0x90 [ 1351.042593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.832687][T23774] __get_compat_msghdr+0x5be/0x890 [ 1351.042593][T23768] entry_INT80_compat+0x71/0x76 [ 1350.832687][T23774] get_compat_msghdr+0x108/0x270 [ 1351.042593][T23768] [ 1350.832687][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1351.042593][T23768] Uninit was stored to memory at: [ 1350.832687][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1351.042593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1350.832687][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.042593][T23768] __msan_chain_origin+0x50/0x90 [ 1350.832687][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.042593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.832687][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.042593][T23768] get_compat_msghdr+0x108/0x270 [ 1350.832687][T23774] do_int80_syscall_32+0x1d/0x30 [ 1351.042593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.832687][T23774] entry_INT80_compat+0x71/0x76 [ 1351.042593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.832687][T23774] [ 1351.042593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.832687][T23774] Uninit was stored to memory at: [ 1351.042593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.832687][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1351.042593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.832687][T23774] __msan_chain_origin+0x50/0x90 [ 1351.042593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.832687][T23774] __get_compat_msghdr+0x5be/0x890 [ 1351.042593][T23768] entry_INT80_compat+0x71/0x76 [ 1350.832687][T23774] get_compat_msghdr+0x108/0x270 [ 1351.042593][T23768] [ 1350.832687][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1351.042593][T23768] Uninit was stored to memory at: [ 1350.832687][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1351.042593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1350.832687][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.042593][T23768] __msan_chain_origin+0x50/0x90 [ 1350.832687][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.042593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.832687][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.042593][T23768] get_compat_msghdr+0x108/0x270 [ 1350.832687][T23774] do_int80_syscall_32+0x1d/0x30 [ 1351.042593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.832687][T23774] entry_INT80_compat+0x71/0x76 [ 1351.042593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.832687][T23774] [ 1351.042593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.042593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.832687][T23774] Uninit was stored to memory at: [ 1351.042593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.832687][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1351.042593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.832687][T23774] __msan_chain_origin+0x50/0x90 [ 1351.042593][T23768] entry_INT80_compat+0x71/0x76 [ 1350.832687][T23774] __get_compat_msghdr+0x5be/0x890 [ 1351.042593][T23768] [ 1350.832687][T23774] get_compat_msghdr+0x108/0x270 [ 1351.042593][T23768] Uninit was stored to memory at: [ 1350.832687][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1351.042593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1350.832687][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1351.042593][T23768] __msan_chain_origin+0x50/0x90 [ 1350.832687][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.042593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1350.832687][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.042593][T23768] get_compat_msghdr+0x108/0x270 [ 1350.832687][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.042593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1350.832687][T23774] do_int80_syscall_32+0x1d/0x30 [ 1351.042593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1350.832687][T23774] entry_INT80_compat+0x71/0x76 [ 1351.042593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1350.832687][T23774] [ 1351.042593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1350.832687][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1351.042593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1350.832687][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1351.042593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1350.832687][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1351.042593][T23768] entry_INT80_compat+0x71/0x76 [ 1351.992662][T23768] [ 1351.992662][T23768] Uninit was stored to memory at: [ 1351.992662][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1351.992662][T23768] __msan_chain_origin+0x50/0x90 [ 1351.992662][T23768] __get_compat_msghdr+0x5be/0x890 [ 1351.992662][T23768] get_compat_msghdr+0x108/0x270 [ 1351.992662][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1351.992662][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1351.992662][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.992662][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.992662][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.992662][T23768] do_int80_syscall_32+0x1d/0x30 [ 1351.992662][T23768] entry_INT80_compat+0x71/0x76 [ 1351.992662][T23768] [ 1351.992662][T23768] Uninit was stored to memory at: [ 1351.992662][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1351.992662][T23768] __msan_chain_origin+0x50/0x90 [ 1351.992662][T23768] __get_compat_msghdr+0x5be/0x890 [ 1351.992662][T23768] get_compat_msghdr+0x108/0x270 [ 1351.992662][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1351.992662][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1351.992662][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.992662][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.992662][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.992662][T23768] do_int80_syscall_32+0x1d/0x30 [ 1351.992662][T23768] entry_INT80_compat+0x71/0x76 [ 1351.992662][T23768] [ 1351.992662][T23768] Uninit was stored to memory at: [ 1351.992662][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1351.992662][T23768] __msan_chain_origin+0x50/0x90 [ 1351.992662][T23768] __get_compat_msghdr+0x5be/0x890 [ 1351.992662][T23768] get_compat_msghdr+0x108/0x270 [ 1351.992662][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1351.992662][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1351.992662][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1351.992662][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1351.992662][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1351.992662][T23768] do_int80_syscall_32+0x1d/0x30 [ 1351.992662][T23768] entry_INT80_compat+0x71/0x76 [ 1351.992662][T23768] [ 1351.992662][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1351.992662][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1351.992662][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1352.421477][T23774] not chained 3740000 origins [ 1352.422591][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1352.422591][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.442718][T23774] Call Trace: [ 1352.442718][T23774] dump_stack+0x1df/0x240 [ 1352.442718][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1352.442718][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1352.442718][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1352.442718][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1352.442718][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1352.442718][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1352.442718][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1352.442718][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1352.442718][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1352.442718][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1352.442718][T23774] ? _copy_from_user+0x15b/0x260 [ 1352.442718][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1352.442718][T23774] __msan_chain_origin+0x50/0x90 [ 1352.442718][T23774] __get_compat_msghdr+0x5be/0x890 [ 1352.442718][T23774] get_compat_msghdr+0x108/0x270 [ 1352.442718][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1352.442718][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1352.442718][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1352.442718][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1352.442718][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1352.442718][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1352.442718][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1352.442718][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1352.442718][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1352.442718][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1352.442718][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1352.442718][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1352.442718][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1352.442718][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1352.442718][T23774] do_int80_syscall_32+0x1d/0x30 [ 1352.442718][T23774] entry_INT80_compat+0x71/0x76 [ 1352.442718][T23774] RIP: 0023:0xf7f11549 [ 1352.442718][T23774] Code: Bad RIP value. [ 1352.442718][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1352.442718][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1352.442718][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1352.442718][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1352.442718][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1352.442718][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1352.442718][T23774] Uninit was stored to memory at: [ 1352.442718][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1352.442718][T23774] __msan_chain_origin+0x50/0x90 [ 1352.442718][T23774] __get_compat_msghdr+0x5be/0x890 [ 1352.442718][T23774] get_compat_msghdr+0x108/0x270 [ 1352.442718][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1352.442718][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1352.442718][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1352.442718][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1352.442718][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1352.442718][T23774] do_int80_syscall_32+0x1d/0x30 [ 1352.442718][T23774] entry_INT80_compat+0x71/0x76 [ 1352.442718][T23774] [ 1352.442718][T23774] Uninit was stored to memory at: [ 1352.442718][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1352.442718][T23774] __msan_chain_origin+0x50/0x90 [ 1352.442718][T23774] __get_compat_msghdr+0x5be/0x890 [ 1352.442718][T23774] get_compat_msghdr+0x108/0x270 [ 1352.442718][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1352.442718][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1352.442718][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1352.442718][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1352.442718][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1352.442718][T23774] do_int80_syscall_32+0x1d/0x30 [ 1352.442718][T23774] entry_INT80_compat+0x71/0x76 [ 1352.442718][T23774] [ 1352.442718][T23774] Uninit was stored to memory at: [ 1352.442718][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1352.442718][T23774] __msan_chain_origin+0x50/0x90 [ 1352.442718][T23774] __get_compat_msghdr+0x5be/0x890 [ 1352.442718][T23774] get_compat_msghdr+0x108/0x270 [ 1352.442718][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1352.442718][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1352.442718][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1352.442718][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1352.442718][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1352.442718][T23774] do_int80_syscall_32+0x1d/0x30 [ 1352.442718][T23774] entry_INT80_compat+0x71/0x76 [ 1352.442718][T23774] [ 1352.869545][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1352.442718][T23774] Uninit was stored to memory at: [ 1352.882612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1352.882612][T23774] __msan_chain_origin+0x50/0x90 [ 1352.882612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1352.882612][T23774] get_compat_msghdr+0x108/0x270 [ 1352.882612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1352.882612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1352.882612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1352.916986][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1352.882612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1352.882612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1352.882612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1352.882612][T23774] entry_INT80_compat+0x71/0x76 [ 1352.882612][T23774] [ 1352.882612][T23774] Uninit was stored to memory at: [ 1352.882612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1352.882612][T23774] __msan_chain_origin+0x50/0x90 [ 1352.882612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1352.971718][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1352.882612][T23774] get_compat_msghdr+0x108/0x270 [ 1352.882612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1352.882612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1352.882612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1352.882612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1352.882612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1352.882612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1352.882612][T23774] entry_INT80_compat+0x71/0x76 [ 1352.882612][T23774] [ 1352.882612][T23774] Uninit was stored to memory at: [ 1352.882612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1352.882612][T23774] __msan_chain_origin+0x50/0x90 [ 1352.882612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1352.882612][T23774] get_compat_msghdr+0x108/0x270 [ 1352.882612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1352.882612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1352.882612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1352.882612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1352.882612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.074981][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1352.882612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1352.882612][T23774] entry_INT80_compat+0x71/0x76 [ 1352.882612][T23774] [ 1352.882612][T23774] Uninit was stored to memory at: [ 1352.882612][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1352.882612][T23774] __msan_chain_origin+0x50/0x90 [ 1353.113419][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1352.882612][T23774] __get_compat_msghdr+0x5be/0x890 [ 1352.882612][T23774] get_compat_msghdr+0x108/0x270 [ 1352.882612][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1352.882612][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1352.882612][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.144318][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1352.882612][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1352.882612][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1352.882612][T23774] do_int80_syscall_32+0x1d/0x30 [ 1352.882612][T23774] entry_INT80_compat+0x71/0x76 [ 1352.882612][T23774] [ 1352.882612][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1352.882612][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1352.882612][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1353.198882][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1353.399893][T23774] not chained 3750000 origins [ 1353.402575][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1353.412728][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.412728][T23774] Call Trace: [ 1353.412728][T23774] dump_stack+0x1df/0x240 [ 1353.412728][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1353.412728][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1353.412728][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1353.412728][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1353.412728][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1353.412728][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1353.412728][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1353.412728][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1353.412728][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1353.412728][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1353.412728][T23774] ? _copy_from_user+0x15b/0x260 [ 1353.412728][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1353.412728][T23774] __msan_chain_origin+0x50/0x90 [ 1353.412728][T23774] __get_compat_msghdr+0x5be/0x890 [ 1353.412728][T23774] get_compat_msghdr+0x108/0x270 [ 1353.412728][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1353.412728][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1353.412728][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1353.412728][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1353.412728][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1353.412728][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1353.412728][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1353.412728][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1353.553965][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1353.412728][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1353.412728][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1353.572614][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.572614][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1353.572614][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.589017][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1353.572614][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.572614][T23774] do_int80_syscall_32+0x1d/0x30 [ 1353.572614][T23774] entry_INT80_compat+0x71/0x76 [ 1353.572614][T23774] RIP: 0023:0xf7f11549 [ 1353.618923][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1353.572614][T23774] Code: Bad RIP value. [ 1353.572614][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1353.572614][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1353.572614][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1353.572614][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1353.572614][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1353.572614][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1353.572614][T23774] Uninit was stored to memory at: [ 1353.572614][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1353.572614][T23774] __msan_chain_origin+0x50/0x90 [ 1353.572614][T23774] __get_compat_msghdr+0x5be/0x890 [ 1353.572614][T23774] get_compat_msghdr+0x108/0x270 [ 1353.572614][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1353.572614][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1353.572614][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.572614][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.572614][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.572614][T23774] do_int80_syscall_32+0x1d/0x30 [ 1353.572614][T23774] entry_INT80_compat+0x71/0x76 [ 1353.572614][T23774] [ 1353.572614][T23774] Uninit was stored to memory at: [ 1353.572614][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1353.572614][T23774] __msan_chain_origin+0x50/0x90 [ 1353.572614][T23774] __get_compat_msghdr+0x5be/0x890 [ 1353.572614][T23774] get_compat_msghdr+0x108/0x270 [ 1353.572614][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1353.572614][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1353.572614][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.572614][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.572614][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.572614][T23774] do_int80_syscall_32+0x1d/0x30 [ 1353.572614][T23774] entry_INT80_compat+0x71/0x76 [ 1353.572614][T23774] [ 1353.572614][T23774] Uninit was stored to memory at: [ 1353.811778][T23768] not chained 3760000 origins [ 1353.572614][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1353.812609][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1353.572614][T23774] __msan_chain_origin+0x50/0x90 [ 1353.812609][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.572614][T23774] __get_compat_msghdr+0x5be/0x890 [ 1353.812609][T23768] Call Trace: [ 1353.572614][T23774] get_compat_msghdr+0x108/0x270 [ 1353.812609][T23768] dump_stack+0x1df/0x240 [ 1353.572614][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1353.812609][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1353.572614][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1353.812609][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1353.572614][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.812609][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1353.572614][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.812609][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1353.572614][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.812609][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1353.572614][T23774] do_int80_syscall_32+0x1d/0x30 [ 1353.812609][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1353.572614][T23774] entry_INT80_compat+0x71/0x76 [ 1353.812609][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1353.572614][T23774] [ 1353.812609][T23768] ? psi_group_change+0x1007/0x13c0 [ 1353.572614][T23774] Uninit was stored to memory at: [ 1353.812609][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1353.572614][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1353.812609][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1353.572614][T23774] __msan_chain_origin+0x50/0x90 [ 1353.812609][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1353.572614][T23774] __get_compat_msghdr+0x5be/0x890 [ 1353.812609][T23768] ? _copy_from_user+0x15b/0x260 [ 1353.572614][T23774] get_compat_msghdr+0x108/0x270 [ 1353.812609][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1353.572614][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1353.812609][T23768] __msan_chain_origin+0x50/0x90 [ 1353.572614][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1353.812609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1353.572614][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.812609][T23768] get_compat_msghdr+0x108/0x270 [ 1353.572614][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.812609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1353.572614][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.812609][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1353.572614][T23774] do_int80_syscall_32+0x1d/0x30 [ 1353.812609][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1353.572614][T23774] entry_INT80_compat+0x71/0x76 [ 1353.812609][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1353.572614][T23774] [ 1353.812609][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1353.572614][T23774] Uninit was stored to memory at: [ 1353.812609][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1353.572614][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1353.812609][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1353.572614][T23774] __msan_chain_origin+0x50/0x90 [ 1353.812609][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1353.572614][T23774] __get_compat_msghdr+0x5be/0x890 [ 1353.812609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1353.572614][T23774] get_compat_msghdr+0x108/0x270 [ 1353.812609][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1353.572614][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1353.812609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.572614][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1353.812609][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1353.572614][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.812609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.572614][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.812609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.572614][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.812609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1353.572614][T23774] do_int80_syscall_32+0x1d/0x30 [ 1353.812609][T23768] entry_INT80_compat+0x71/0x76 [ 1353.572614][T23774] entry_INT80_compat+0x71/0x76 [ 1353.812609][T23768] RIP: 0023:0xf7f11549 [ 1353.572614][T23774] [ 1353.812609][T23768] Code: Bad RIP value. [ 1353.572614][T23774] Uninit was stored to memory at: [ 1353.812609][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1353.572614][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1353.812609][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1353.572614][T23774] __msan_chain_origin+0x50/0x90 [ 1353.812609][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1353.572614][T23774] __get_compat_msghdr+0x5be/0x890 [ 1353.812609][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1353.572614][T23774] get_compat_msghdr+0x108/0x270 [ 1353.812609][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1353.572614][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1353.812609][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1353.572614][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1353.812609][T23768] Uninit was stored to memory at: [ 1353.572614][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.812609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1353.572614][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.812609][T23768] __msan_chain_origin+0x50/0x90 [ 1353.572614][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.812609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1353.572614][T23774] do_int80_syscall_32+0x1d/0x30 [ 1353.812609][T23768] get_compat_msghdr+0x108/0x270 [ 1353.572614][T23774] entry_INT80_compat+0x71/0x76 [ 1353.812609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1353.572614][T23774] [ 1353.812609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1353.572614][T23774] Uninit was stored to memory at: [ 1353.812609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.572614][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1353.812609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.572614][T23774] __msan_chain_origin+0x50/0x90 [ 1353.812609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.572614][T23774] __get_compat_msghdr+0x5be/0x890 [ 1353.812609][T23768] do_int80_syscall_32+0x1d/0x30 [ 1353.572614][T23774] get_compat_msghdr+0x108/0x270 [ 1353.812609][T23768] entry_INT80_compat+0x71/0x76 [ 1353.572614][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1353.812609][T23768] [ 1353.572614][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1353.812609][T23768] Uninit was stored to memory at: [ 1353.572614][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.812609][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1353.572614][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.812609][T23768] __msan_chain_origin+0x50/0x90 [ 1353.572614][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1353.812609][T23768] __get_compat_msghdr+0x5be/0x890 [ 1353.572614][T23774] do_int80_syscall_32+0x1d/0x30 [ 1353.812609][T23768] get_compat_msghdr+0x108/0x270 [ 1353.572614][T23774] entry_INT80_compat+0x71/0x76 [ 1353.812609][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1353.572614][T23774] [ 1353.812609][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1353.572614][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1353.812609][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1353.572614][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1353.812609][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1353.572614][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1353.812609][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1354.522024][T23768] do_int80_syscall_32+0x1d/0x30 [ 1354.522024][T23768] entry_INT80_compat+0x71/0x76 [ 1354.522024][T23768] [ 1354.522024][T23768] Uninit was stored to memory at: [ 1354.522024][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1354.522024][T23768] __msan_chain_origin+0x50/0x90 [ 1354.522024][T23768] __get_compat_msghdr+0x5be/0x890 [ 1354.522024][T23768] get_compat_msghdr+0x108/0x270 [ 1354.522024][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1354.522024][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1354.522024][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1354.522024][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1354.522024][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1354.522024][T23768] do_int80_syscall_32+0x1d/0x30 [ 1354.522024][T23768] entry_INT80_compat+0x71/0x76 [ 1354.522024][T23768] [ 1354.522024][T23768] Uninit was stored to memory at: [ 1354.522024][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1354.522024][T23768] __msan_chain_origin+0x50/0x90 [ 1354.522024][T23768] __get_compat_msghdr+0x5be/0x890 [ 1354.522024][T23768] get_compat_msghdr+0x108/0x270 [ 1354.522024][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1354.522024][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1354.522024][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1354.522024][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1354.522024][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1354.522024][T23768] do_int80_syscall_32+0x1d/0x30 [ 1354.522024][T23768] entry_INT80_compat+0x71/0x76 [ 1354.522024][T23768] [ 1354.522024][T23768] Uninit was stored to memory at: [ 1354.522024][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1354.522024][T23768] __msan_chain_origin+0x50/0x90 [ 1354.522024][T23768] __get_compat_msghdr+0x5be/0x890 [ 1354.522024][T23768] get_compat_msghdr+0x108/0x270 [ 1354.522024][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1354.522024][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1354.522024][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1354.522024][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1354.522024][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1354.522024][T23768] do_int80_syscall_32+0x1d/0x30 [ 1354.522024][T23768] entry_INT80_compat+0x71/0x76 [ 1354.522024][T23768] [ 1354.522024][T23768] Uninit was stored to memory at: [ 1354.522024][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1354.522024][T23768] __msan_chain_origin+0x50/0x90 [ 1354.522024][T23768] __get_compat_msghdr+0x5be/0x890 [ 1354.522024][T23768] get_compat_msghdr+0x108/0x270 [ 1354.522024][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1354.522024][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1354.522024][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1354.522024][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1354.522024][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1354.522024][T23768] do_int80_syscall_32+0x1d/0x30 [ 1354.522024][T23768] entry_INT80_compat+0x71/0x76 [ 1354.522024][T23768] [ 1354.522024][T23768] Uninit was stored to memory at: [ 1354.522024][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1354.522024][T23768] __msan_chain_origin+0x50/0x90 [ 1354.522024][T23768] __get_compat_msghdr+0x5be/0x890 [ 1354.522024][T23768] get_compat_msghdr+0x108/0x270 [ 1354.522024][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1354.522024][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1354.522024][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1354.522024][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1354.522024][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1354.522024][T23768] do_int80_syscall_32+0x1d/0x30 [ 1354.522024][T23768] entry_INT80_compat+0x71/0x76 [ 1354.522024][T23768] [ 1354.522024][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1354.522024][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1354.522024][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1355.097751][T23774] not chained 3770000 origins [ 1355.102465][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1355.102735][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.102735][T23774] Call Trace: [ 1355.102735][T23774] dump_stack+0x1df/0x240 [ 1355.102735][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1355.102735][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1355.102735][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1355.102735][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1355.102735][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1355.102735][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1355.102735][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1355.102735][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1355.102735][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1355.102735][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1355.102735][T23774] ? _copy_from_user+0x15b/0x260 [ 1355.102735][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1355.102735][T23774] __msan_chain_origin+0x50/0x90 [ 1355.102735][T23774] __get_compat_msghdr+0x5be/0x890 [ 1355.102735][T23774] get_compat_msghdr+0x108/0x270 [ 1355.102735][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1355.102735][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1355.102735][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1355.102735][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1355.102735][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1355.102735][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1355.102735][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1355.102735][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1355.102735][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1355.102735][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1355.102735][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.102735][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1355.102735][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.102735][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1355.102735][T23774] do_int80_syscall_32+0x1d/0x30 [ 1355.289405][T23774] entry_INT80_compat+0x71/0x76 [ 1355.289405][T23774] RIP: 0023:0xf7f11549 [ 1355.289405][T23774] Code: Bad RIP value. [ 1355.289405][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1355.289405][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1355.289405][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1355.289405][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1355.289405][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1355.289405][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1355.289405][T23774] Uninit was stored to memory at: [ 1355.289405][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1355.289405][T23774] __msan_chain_origin+0x50/0x90 [ 1355.289405][T23774] __get_compat_msghdr+0x5be/0x890 [ 1355.289405][T23774] get_compat_msghdr+0x108/0x270 [ 1355.289405][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1355.289405][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1355.289405][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.289405][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.289405][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1355.289405][T23774] do_int80_syscall_32+0x1d/0x30 [ 1355.289405][T23774] entry_INT80_compat+0x71/0x76 [ 1355.289405][T23774] [ 1355.289405][T23774] Uninit was stored to memory at: [ 1355.289405][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1355.289405][T23774] __msan_chain_origin+0x50/0x90 [ 1355.289405][T23774] __get_compat_msghdr+0x5be/0x890 [ 1355.289405][T23774] get_compat_msghdr+0x108/0x270 [ 1355.289405][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1355.289405][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1355.289405][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.289405][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.289405][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1355.289405][T23774] do_int80_syscall_32+0x1d/0x30 [ 1355.289405][T23774] entry_INT80_compat+0x71/0x76 [ 1355.289405][T23774] [ 1355.289405][T23774] Uninit was stored to memory at: [ 1355.289405][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1355.289405][T23774] __msan_chain_origin+0x50/0x90 [ 1355.289405][T23774] __get_compat_msghdr+0x5be/0x890 [ 1355.289405][T23774] get_compat_msghdr+0x108/0x270 [ 1355.289405][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1355.289405][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1355.289405][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.289405][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.289405][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1355.289405][T23774] do_int80_syscall_32+0x1d/0x30 [ 1355.289405][T23774] entry_INT80_compat+0x71/0x76 [ 1355.289405][T23774] [ 1355.289405][T23774] Uninit was stored to memory at: [ 1355.289405][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1355.289405][T23774] __msan_chain_origin+0x50/0x90 [ 1355.289405][T23774] __get_compat_msghdr+0x5be/0x890 [ 1355.289405][T23774] get_compat_msghdr+0x108/0x270 [ 1355.289405][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1355.289405][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1355.289405][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.289405][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.289405][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1355.289405][T23774] do_int80_syscall_32+0x1d/0x30 [ 1355.289405][T23774] entry_INT80_compat+0x71/0x76 [ 1355.289405][T23774] [ 1355.289405][T23774] Uninit was stored to memory at: [ 1355.289405][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1355.289405][T23774] __msan_chain_origin+0x50/0x90 [ 1355.289405][T23774] __get_compat_msghdr+0x5be/0x890 [ 1355.289405][T23774] get_compat_msghdr+0x108/0x270 [ 1355.289405][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1355.289405][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1355.289405][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.289405][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.289405][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1355.289405][T23774] do_int80_syscall_32+0x1d/0x30 [ 1355.289405][T23774] entry_INT80_compat+0x71/0x76 [ 1355.289405][T23774] [ 1355.289405][T23774] Uninit was stored to memory at: [ 1355.289405][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1355.289405][T23774] __msan_chain_origin+0x50/0x90 [ 1355.289405][T23774] __get_compat_msghdr+0x5be/0x890 [ 1355.289405][T23774] get_compat_msghdr+0x108/0x270 [ 1355.289405][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1355.289405][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1355.289405][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.289405][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.289405][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1355.289405][T23774] do_int80_syscall_32+0x1d/0x30 [ 1355.289405][T23774] entry_INT80_compat+0x71/0x76 [ 1355.289405][T23774] [ 1355.289405][T23774] Uninit was stored to memory at: [ 1355.289405][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1355.289405][T23774] __msan_chain_origin+0x50/0x90 [ 1355.289405][T23774] __get_compat_msghdr+0x5be/0x890 [ 1355.289405][T23774] get_compat_msghdr+0x108/0x270 [ 1355.289405][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1355.289405][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1355.289405][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1355.289405][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1355.289405][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1355.289405][T23774] do_int80_syscall_32+0x1d/0x30 [ 1355.289405][T23774] entry_INT80_compat+0x71/0x76 [ 1355.289405][T23774] [ 1355.289405][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1355.289405][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1355.289405][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1356.032262][T23774] not chained 3780000 origins [ 1356.032690][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1356.032690][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.032690][T23774] Call Trace: [ 1356.032690][T23774] dump_stack+0x1df/0x240 [ 1356.032690][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1356.032690][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1356.032690][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1356.032690][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1356.032690][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1356.032690][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1356.032690][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1356.032690][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1356.032690][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1356.032690][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1356.032690][T23774] ? _copy_from_user+0x15b/0x260 [ 1356.032690][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1356.032690][T23774] __msan_chain_origin+0x50/0x90 [ 1356.032690][T23774] __get_compat_msghdr+0x5be/0x890 [ 1356.032690][T23774] get_compat_msghdr+0x108/0x270 [ 1356.032690][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1356.032690][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1356.032690][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1356.032690][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1356.032690][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1356.032690][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1356.032690][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1356.032690][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1356.032690][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1356.032690][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1356.032690][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.032690][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1356.032690][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.032690][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.032690][T23774] do_int80_syscall_32+0x1d/0x30 [ 1356.032690][T23774] entry_INT80_compat+0x71/0x76 [ 1356.032690][T23774] RIP: 0023:0xf7f11549 [ 1356.032690][T23774] Code: Bad RIP value. [ 1356.032690][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1356.032690][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1356.032690][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1356.032690][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1356.032690][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1356.032690][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1356.032690][T23774] Uninit was stored to memory at: [ 1356.289512][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1356.289512][T23774] __msan_chain_origin+0x50/0x90 [ 1356.289512][T23774] __get_compat_msghdr+0x5be/0x890 [ 1356.289512][T23774] get_compat_msghdr+0x108/0x270 [ 1356.289512][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1356.289512][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1356.289512][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.289512][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.289512][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.289512][T23774] do_int80_syscall_32+0x1d/0x30 [ 1356.289512][T23774] entry_INT80_compat+0x71/0x76 [ 1356.289512][T23774] [ 1356.289512][T23774] Uninit was stored to memory at: [ 1356.289512][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1356.289512][T23774] __msan_chain_origin+0x50/0x90 [ 1356.289512][T23774] __get_compat_msghdr+0x5be/0x890 [ 1356.371183][T23768] not chained 3790000 origins [ 1356.289512][T23774] get_compat_msghdr+0x108/0x270 [ 1356.372593][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1356.289512][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1356.372593][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.289512][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1356.372593][T23768] Call Trace: [ 1356.289512][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.372593][T23768] dump_stack+0x1df/0x240 [ 1356.289512][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.372593][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1356.289512][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.372593][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1356.289512][T23774] do_int80_syscall_32+0x1d/0x30 [ 1356.372593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1356.289512][T23774] entry_INT80_compat+0x71/0x76 [ 1356.372593][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1356.289512][T23774] [ 1356.372593][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1356.289512][T23774] Uninit was stored to memory at: [ 1356.372593][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1356.289512][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1356.372593][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1356.289512][T23774] __msan_chain_origin+0x50/0x90 [ 1356.372593][T23768] ? psi_group_change+0x1007/0x13c0 [ 1356.372593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1356.289512][T23774] __get_compat_msghdr+0x5be/0x890 [ 1356.372593][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1356.289512][T23774] get_compat_msghdr+0x108/0x270 [ 1356.372593][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1356.289512][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1356.372593][T23768] ? _copy_from_user+0x15b/0x260 [ 1356.289512][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1356.372593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1356.289512][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.372593][T23768] __msan_chain_origin+0x50/0x90 [ 1356.289512][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.372593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1356.289512][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.372593][T23768] get_compat_msghdr+0x108/0x270 [ 1356.289512][T23774] do_int80_syscall_32+0x1d/0x30 [ 1356.372593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1356.289512][T23774] entry_INT80_compat+0x71/0x76 [ 1356.372593][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1356.289512][T23774] [ 1356.372593][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1356.289512][T23774] Uninit was stored to memory at: [ 1356.372593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1356.289512][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1356.372593][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1356.289512][T23774] __msan_chain_origin+0x50/0x90 [ 1356.372593][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1356.289512][T23774] __get_compat_msghdr+0x5be/0x890 [ 1356.372593][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1356.289512][T23774] get_compat_msghdr+0x108/0x270 [ 1356.372593][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1356.289512][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1356.372593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1356.289512][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1356.372593][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1356.289512][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.372593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.289512][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.372593][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1356.289512][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.372593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.289512][T23774] do_int80_syscall_32+0x1d/0x30 [ 1356.372593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.289512][T23774] entry_INT80_compat+0x71/0x76 [ 1356.372593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1356.289512][T23774] [ 1356.372593][T23768] entry_INT80_compat+0x71/0x76 [ 1356.289512][T23774] Uninit was stored to memory at: [ 1356.372593][T23768] RIP: 0023:0xf7f11549 [ 1356.289512][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1356.372593][T23768] Code: Bad RIP value. [ 1356.289512][T23774] __msan_chain_origin+0x50/0x90 [ 1356.372593][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1356.289512][T23774] __get_compat_msghdr+0x5be/0x890 [ 1356.372593][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1356.289512][T23774] get_compat_msghdr+0x108/0x270 [ 1356.372593][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1356.289512][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1356.372593][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1356.289512][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1356.372593][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1356.289512][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.372593][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1356.289512][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.372593][T23768] Uninit was stored to memory at: [ 1356.289512][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.372593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1356.289512][T23774] do_int80_syscall_32+0x1d/0x30 [ 1356.372593][T23768] __msan_chain_origin+0x50/0x90 [ 1356.289512][T23774] entry_INT80_compat+0x71/0x76 [ 1356.372593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1356.289512][T23774] [ 1356.372593][T23768] get_compat_msghdr+0x108/0x270 [ 1356.289512][T23774] Uninit was stored to memory at: [ 1356.372593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1356.289512][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1356.372593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1356.289512][T23774] __msan_chain_origin+0x50/0x90 [ 1356.372593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.289512][T23774] __get_compat_msghdr+0x5be/0x890 [ 1356.372593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.289512][T23774] get_compat_msghdr+0x108/0x270 [ 1356.372593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.289512][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1356.372593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1356.289512][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1356.372593][T23768] entry_INT80_compat+0x71/0x76 [ 1356.289512][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.372593][T23768] [ 1356.289512][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.372593][T23768] Uninit was stored to memory at: [ 1356.289512][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.372593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1356.289512][T23774] do_int80_syscall_32+0x1d/0x30 [ 1356.372593][T23768] __msan_chain_origin+0x50/0x90 [ 1356.289512][T23774] entry_INT80_compat+0x71/0x76 [ 1356.372593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1356.289512][T23774] [ 1356.372593][T23768] get_compat_msghdr+0x108/0x270 [ 1356.289512][T23774] Uninit was stored to memory at: [ 1356.372593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1356.289512][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1356.372593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1356.289512][T23774] __msan_chain_origin+0x50/0x90 [ 1356.372593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.289512][T23774] __get_compat_msghdr+0x5be/0x890 [ 1356.372593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.289512][T23774] get_compat_msghdr+0x108/0x270 [ 1356.372593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.289512][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1356.372593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1356.289512][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1356.372593][T23768] entry_INT80_compat+0x71/0x76 [ 1356.289512][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.372593][T23768] [ 1356.289512][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1356.372593][T23768] Uninit was stored to memory at: [ 1356.289512][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1356.372593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1356.289512][T23774] do_int80_syscall_32+0x1d/0x30 [ 1356.372593][T23768] __msan_chain_origin+0x50/0x90 [ 1356.289512][T23774] entry_INT80_compat+0x71/0x76 [ 1356.372593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1356.289512][T23774] [ 1356.372593][T23768] get_compat_msghdr+0x108/0x270 [ 1356.289512][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1356.372593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1356.289512][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1356.372593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1356.289512][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1356.372593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1356.372593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.185942][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.185942][T23768] do_int80_syscall_32+0x1d/0x30 [ 1357.185942][T23768] entry_INT80_compat+0x71/0x76 [ 1357.185942][T23768] [ 1357.185942][T23768] Uninit was stored to memory at: [ 1357.185942][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1357.185942][T23768] __msan_chain_origin+0x50/0x90 [ 1357.185942][T23768] __get_compat_msghdr+0x5be/0x890 [ 1357.185942][T23768] get_compat_msghdr+0x108/0x270 [ 1357.185942][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1357.185942][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1357.185942][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.185942][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.185942][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.185942][T23768] do_int80_syscall_32+0x1d/0x30 [ 1357.185942][T23768] entry_INT80_compat+0x71/0x76 [ 1357.185942][T23768] [ 1357.185942][T23768] Uninit was stored to memory at: [ 1357.185942][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1357.185942][T23768] __msan_chain_origin+0x50/0x90 [ 1357.185942][T23768] __get_compat_msghdr+0x5be/0x890 [ 1357.185942][T23768] get_compat_msghdr+0x108/0x270 [ 1357.185942][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1357.185942][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1357.185942][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.185942][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.185942][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.185942][T23768] do_int80_syscall_32+0x1d/0x30 [ 1357.185942][T23768] entry_INT80_compat+0x71/0x76 [ 1357.185942][T23768] [ 1357.185942][T23768] Uninit was stored to memory at: [ 1357.185942][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1357.185942][T23768] __msan_chain_origin+0x50/0x90 [ 1357.185942][T23768] __get_compat_msghdr+0x5be/0x890 [ 1357.185942][T23768] get_compat_msghdr+0x108/0x270 [ 1357.185942][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1357.185942][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1357.185942][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.185942][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.185942][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.185942][T23768] do_int80_syscall_32+0x1d/0x30 [ 1357.185942][T23768] entry_INT80_compat+0x71/0x76 [ 1357.185942][T23768] [ 1357.185942][T23768] Uninit was stored to memory at: [ 1357.185942][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1357.185942][T23768] __msan_chain_origin+0x50/0x90 [ 1357.185942][T23768] __get_compat_msghdr+0x5be/0x890 [ 1357.185942][T23768] get_compat_msghdr+0x108/0x270 [ 1357.185942][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1357.185942][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1357.185942][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.185942][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.185942][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.185942][T23768] do_int80_syscall_32+0x1d/0x30 [ 1357.185942][T23768] entry_INT80_compat+0x71/0x76 [ 1357.185942][T23768] [ 1357.185942][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1357.185942][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1357.185942][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1357.687397][T23774] not chained 3800000 origins [ 1357.692107][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1357.692586][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.692586][T23774] Call Trace: [ 1357.692586][T23774] dump_stack+0x1df/0x240 [ 1357.692586][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1357.692586][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1357.692586][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1357.692586][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1357.692586][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1357.692586][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1357.692586][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1357.692586][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1357.692586][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1357.692586][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1357.692586][T23774] ? _copy_from_user+0x15b/0x260 [ 1357.692586][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1357.692586][T23774] __msan_chain_origin+0x50/0x90 [ 1357.692586][T23774] __get_compat_msghdr+0x5be/0x890 [ 1357.692586][T23774] get_compat_msghdr+0x108/0x270 [ 1357.692586][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1357.692586][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1357.692586][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1357.692586][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1357.692586][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1357.692586][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1357.692586][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1357.692586][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1357.839323][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1357.839323][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1357.839323][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.839323][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1357.839323][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.839323][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.839323][T23774] do_int80_syscall_32+0x1d/0x30 [ 1357.877363][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.839323][T23774] entry_INT80_compat+0x71/0x76 [ 1357.892607][T23774] RIP: 0023:0xf7f11549 [ 1357.892607][T23774] Code: Bad RIP value. [ 1357.898538][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1357.892607][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1357.892607][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1357.892607][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1357.892607][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1357.892607][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.892607][T23774] Uninit was stored to memory at: [ 1357.961836][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1357.892607][T23774] __msan_chain_origin+0x50/0x90 [ 1357.892607][T23774] __get_compat_msghdr+0x5be/0x890 [ 1357.892607][T23774] get_compat_msghdr+0x108/0x270 [ 1357.892607][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1357.892607][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1357.892607][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.892607][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.892607][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.892607][T23774] do_int80_syscall_32+0x1d/0x30 [ 1357.892607][T23774] entry_INT80_compat+0x71/0x76 [ 1358.028286][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] [ 1357.892607][T23774] Uninit was stored to memory at: [ 1357.892607][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1358.050081][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] __msan_chain_origin+0x50/0x90 [ 1357.892607][T23774] __get_compat_msghdr+0x5be/0x890 [ 1357.892607][T23774] get_compat_msghdr+0x108/0x270 [ 1357.892607][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1358.077491][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1357.892607][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.892607][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.101212][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.892607][T23774] do_int80_syscall_32+0x1d/0x30 [ 1357.892607][T23774] entry_INT80_compat+0x71/0x76 [ 1357.892607][T23774] [ 1357.892607][T23774] Uninit was stored to memory at: [ 1357.892607][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1357.892607][T23774] __msan_chain_origin+0x50/0x90 [ 1357.892607][T23774] __get_compat_msghdr+0x5be/0x890 [ 1357.892607][T23774] get_compat_msghdr+0x108/0x270 [ 1357.892607][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1357.892607][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1358.162923][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.892607][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.892607][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.892607][T23774] do_int80_syscall_32+0x1d/0x30 [ 1357.892607][T23774] entry_INT80_compat+0x71/0x76 [ 1357.892607][T23774] [ 1357.892607][T23774] Uninit was stored to memory at: [ 1357.892607][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1357.892607][T23774] __msan_chain_origin+0x50/0x90 [ 1357.892607][T23774] __get_compat_msghdr+0x5be/0x890 [ 1358.223812][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] get_compat_msghdr+0x108/0x270 [ 1357.892607][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1357.892607][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1357.892607][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.250185][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1357.892607][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.892607][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.892607][T23774] do_int80_syscall_32+0x1d/0x30 [ 1357.892607][T23774] entry_INT80_compat+0x71/0x76 [ 1357.892607][T23774] [ 1357.892607][T23774] Uninit was stored to memory at: [ 1357.892607][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1357.892607][T23774] __msan_chain_origin+0x50/0x90 [ 1357.892607][T23774] __get_compat_msghdr+0x5be/0x890 [ 1357.892607][T23774] get_compat_msghdr+0x108/0x270 [ 1357.892607][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1357.892607][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1357.892607][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.892607][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.892607][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.892607][T23774] do_int80_syscall_32+0x1d/0x30 [ 1357.892607][T23774] entry_INT80_compat+0x71/0x76 [ 1357.892607][T23774] [ 1357.892607][T23774] Uninit was stored to memory at: [ 1357.892607][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1357.892607][T23774] __msan_chain_origin+0x50/0x90 [ 1357.892607][T23774] __get_compat_msghdr+0x5be/0x890 [ 1357.892607][T23774] get_compat_msghdr+0x108/0x270 [ 1357.892607][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1357.892607][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1357.892607][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.892607][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.892607][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.892607][T23774] do_int80_syscall_32+0x1d/0x30 [ 1357.892607][T23774] entry_INT80_compat+0x71/0x76 [ 1357.892607][T23774] [ 1357.892607][T23774] Uninit was stored to memory at: [ 1357.892607][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1357.892607][T23774] __msan_chain_origin+0x50/0x90 [ 1357.892607][T23774] __get_compat_msghdr+0x5be/0x890 [ 1357.892607][T23774] get_compat_msghdr+0x108/0x270 [ 1357.892607][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1357.892607][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1357.892607][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1357.892607][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1357.892607][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1357.892607][T23774] do_int80_syscall_32+0x1d/0x30 [ 1357.892607][T23774] entry_INT80_compat+0x71/0x76 [ 1357.892607][T23774] [ 1357.892607][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1357.892607][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1357.892607][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1358.697293][T23774] not chained 3810000 origins [ 1358.702025][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1358.702576][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.702576][T23774] Call Trace: [ 1358.702576][T23774] dump_stack+0x1df/0x240 [ 1358.702576][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1358.702576][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1358.702576][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1358.742785][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1358.742785][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1358.742785][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1358.742785][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1358.742785][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1358.742785][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1358.742785][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1358.742785][T23774] ? _copy_from_user+0x15b/0x260 [ 1358.742785][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1358.742785][T23774] __msan_chain_origin+0x50/0x90 [ 1358.742785][T23774] __get_compat_msghdr+0x5be/0x890 [ 1358.742785][T23774] get_compat_msghdr+0x108/0x270 [ 1358.742785][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1358.812800][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1358.812800][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1358.812800][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1358.812800][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1358.812800][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1358.812800][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1358.812800][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1358.812800][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1358.812800][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1358.812800][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.812800][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1358.812800][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.812800][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1358.812800][T23774] do_int80_syscall_32+0x1d/0x30 [ 1358.812800][T23774] entry_INT80_compat+0x71/0x76 [ 1358.812800][T23774] RIP: 0023:0xf7f11549 [ 1358.812800][T23774] Code: Bad RIP value. [ 1358.812800][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1358.812800][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1358.812800][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1358.812800][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1358.812800][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1358.812800][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1358.812800][T23774] Uninit was stored to memory at: [ 1358.812800][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1358.812800][T23774] __msan_chain_origin+0x50/0x90 [ 1358.812800][T23774] __get_compat_msghdr+0x5be/0x890 [ 1358.812800][T23774] get_compat_msghdr+0x108/0x270 [ 1358.812800][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1358.812800][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1358.812800][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.812800][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.812800][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1358.812800][T23774] do_int80_syscall_32+0x1d/0x30 [ 1358.812800][T23774] entry_INT80_compat+0x71/0x76 [ 1358.812800][T23774] [ 1358.812800][T23774] Uninit was stored to memory at: [ 1358.812800][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1358.812800][T23774] __msan_chain_origin+0x50/0x90 [ 1358.812800][T23774] __get_compat_msghdr+0x5be/0x890 [ 1358.812800][T23774] get_compat_msghdr+0x108/0x270 [ 1358.812800][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1358.812800][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1358.812800][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.812800][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.812800][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1358.812800][T23774] do_int80_syscall_32+0x1d/0x30 [ 1358.812800][T23774] entry_INT80_compat+0x71/0x76 [ 1358.812800][T23774] [ 1358.812800][T23774] Uninit was stored to memory at: [ 1358.812800][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1358.812800][T23774] __msan_chain_origin+0x50/0x90 [ 1358.812800][T23774] __get_compat_msghdr+0x5be/0x890 [ 1358.812800][T23774] get_compat_msghdr+0x108/0x270 [ 1358.812800][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1358.812800][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1358.812800][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.812800][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.812800][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1358.812800][T23774] do_int80_syscall_32+0x1d/0x30 [ 1359.138263][T23768] not chained 3820000 origins [ 1358.812800][T23774] entry_INT80_compat+0x71/0x76 [ 1359.142590][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1358.812800][T23774] [ 1359.142590][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.812800][T23774] Uninit was stored to memory at: [ 1359.142590][T23768] Call Trace: [ 1358.812800][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1359.142590][T23768] dump_stack+0x1df/0x240 [ 1358.812800][T23774] __msan_chain_origin+0x50/0x90 [ 1359.142590][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1358.812800][T23774] __get_compat_msghdr+0x5be/0x890 [ 1359.142590][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1358.812800][T23774] get_compat_msghdr+0x108/0x270 [ 1359.142590][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1358.812800][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1359.142590][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1358.812800][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1359.142590][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1358.812800][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.142590][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1358.812800][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.142590][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1358.812800][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.142590][T23768] ? psi_group_change+0x1007/0x13c0 [ 1358.812800][T23774] do_int80_syscall_32+0x1d/0x30 [ 1359.142590][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1358.812800][T23774] entry_INT80_compat+0x71/0x76 [ 1359.142590][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1358.812800][T23774] [ 1359.142590][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1358.812800][T23774] Uninit was stored to memory at: [ 1359.142590][T23768] ? _copy_from_user+0x15b/0x260 [ 1358.812800][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1359.142590][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1358.812800][T23774] __msan_chain_origin+0x50/0x90 [ 1359.142590][T23768] __msan_chain_origin+0x50/0x90 [ 1358.812800][T23774] __get_compat_msghdr+0x5be/0x890 [ 1359.142590][T23768] __get_compat_msghdr+0x5be/0x890 [ 1358.812800][T23774] get_compat_msghdr+0x108/0x270 [ 1359.142590][T23768] get_compat_msghdr+0x108/0x270 [ 1358.812800][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1359.142590][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1358.812800][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1359.142590][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1358.812800][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.142590][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1358.812800][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.142590][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1358.812800][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.142590][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1358.812800][T23774] do_int80_syscall_32+0x1d/0x30 [ 1359.142590][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1358.812800][T23774] entry_INT80_compat+0x71/0x76 [ 1359.142590][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1358.812800][T23774] [ 1359.142590][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1358.812800][T23774] Uninit was stored to memory at: [ 1359.142590][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1358.812800][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1359.142590][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1358.812800][T23774] __msan_chain_origin+0x50/0x90 [ 1359.142590][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.812800][T23774] __get_compat_msghdr+0x5be/0x890 [ 1359.142590][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1358.812800][T23774] get_compat_msghdr+0x108/0x270 [ 1359.142590][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.812800][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1359.142590][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1358.812800][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1359.142590][T23768] do_int80_syscall_32+0x1d/0x30 [ 1358.812800][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.142590][T23768] entry_INT80_compat+0x71/0x76 [ 1358.812800][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.142590][T23768] RIP: 0023:0xf7f11549 [ 1358.812800][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.142590][T23768] Code: Bad RIP value. [ 1358.812800][T23774] do_int80_syscall_32+0x1d/0x30 [ 1359.142590][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1358.812800][T23774] entry_INT80_compat+0x71/0x76 [ 1359.142590][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1358.812800][T23774] [ 1359.142590][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1358.812800][T23774] Uninit was stored to memory at: [ 1359.142590][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1358.812800][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1359.142590][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1358.812800][T23774] __msan_chain_origin+0x50/0x90 [ 1359.142590][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1358.812800][T23774] __get_compat_msghdr+0x5be/0x890 [ 1359.142590][T23768] Uninit was stored to memory at: [ 1358.812800][T23774] get_compat_msghdr+0x108/0x270 [ 1359.142590][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1358.812800][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1359.142590][T23768] __msan_chain_origin+0x50/0x90 [ 1358.812800][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1359.142590][T23768] __get_compat_msghdr+0x5be/0x890 [ 1358.812800][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.142590][T23768] get_compat_msghdr+0x108/0x270 [ 1358.812800][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.142590][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1358.812800][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.142590][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1358.812800][T23774] do_int80_syscall_32+0x1d/0x30 [ 1359.142590][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1358.812800][T23774] entry_INT80_compat+0x71/0x76 [ 1359.142590][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1358.812800][T23774] [ 1359.142590][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1358.812800][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1359.142590][T23768] do_int80_syscall_32+0x1d/0x30 [ 1358.812800][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1359.142590][T23768] entry_INT80_compat+0x71/0x76 [ 1358.812800][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1359.142590][T23768] [ 1359.745755][T23768] Uninit was stored to memory at: [ 1359.752649][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1359.755929][T23768] __msan_chain_origin+0x50/0x90 [ 1359.755929][T23768] __get_compat_msghdr+0x5be/0x890 [ 1359.755929][T23768] get_compat_msghdr+0x108/0x270 [ 1359.755929][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1359.755929][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1359.755929][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.755929][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.755929][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.755929][T23768] do_int80_syscall_32+0x1d/0x30 [ 1359.755929][T23768] entry_INT80_compat+0x71/0x76 [ 1359.755929][T23768] [ 1359.755929][T23768] Uninit was stored to memory at: [ 1359.755929][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1359.755929][T23768] __msan_chain_origin+0x50/0x90 [ 1359.755929][T23768] __get_compat_msghdr+0x5be/0x890 [ 1359.755929][T23768] get_compat_msghdr+0x108/0x270 [ 1359.755929][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1359.755929][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1359.755929][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.755929][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.755929][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.755929][T23768] do_int80_syscall_32+0x1d/0x30 [ 1359.755929][T23768] entry_INT80_compat+0x71/0x76 [ 1359.755929][T23768] [ 1359.755929][T23768] Uninit was stored to memory at: [ 1359.755929][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1359.755929][T23768] __msan_chain_origin+0x50/0x90 [ 1359.755929][T23768] __get_compat_msghdr+0x5be/0x890 [ 1359.755929][T23768] get_compat_msghdr+0x108/0x270 [ 1359.755929][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1359.755929][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1359.755929][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.755929][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.755929][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.755929][T23768] do_int80_syscall_32+0x1d/0x30 [ 1359.755929][T23768] entry_INT80_compat+0x71/0x76 [ 1359.755929][T23768] [ 1359.755929][T23768] Uninit was stored to memory at: [ 1359.755929][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1359.755929][T23768] __msan_chain_origin+0x50/0x90 [ 1359.755929][T23768] __get_compat_msghdr+0x5be/0x890 [ 1359.755929][T23768] get_compat_msghdr+0x108/0x270 [ 1359.755929][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1359.755929][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1359.755929][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.755929][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.755929][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.755929][T23768] do_int80_syscall_32+0x1d/0x30 [ 1359.755929][T23768] entry_INT80_compat+0x71/0x76 [ 1359.755929][T23768] [ 1359.755929][T23768] Uninit was stored to memory at: [ 1359.755929][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1359.755929][T23768] __msan_chain_origin+0x50/0x90 [ 1359.755929][T23768] __get_compat_msghdr+0x5be/0x890 [ 1359.755929][T23768] get_compat_msghdr+0x108/0x270 [ 1359.755929][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1359.755929][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1359.755929][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.755929][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.755929][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.755929][T23768] do_int80_syscall_32+0x1d/0x30 [ 1359.755929][T23768] entry_INT80_compat+0x71/0x76 [ 1359.755929][T23768] [ 1359.755929][T23768] Uninit was stored to memory at: [ 1359.755929][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1359.755929][T23768] __msan_chain_origin+0x50/0x90 [ 1359.755929][T23768] __get_compat_msghdr+0x5be/0x890 [ 1359.755929][T23768] get_compat_msghdr+0x108/0x270 [ 1359.755929][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1359.755929][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1359.755929][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1359.755929][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1359.755929][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1359.755929][T23768] do_int80_syscall_32+0x1d/0x30 [ 1359.755929][T23768] entry_INT80_compat+0x71/0x76 [ 1359.755929][T23768] [ 1359.755929][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1359.755929][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1359.755929][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1360.295702][T23768] not chained 3830000 origins [ 1360.300415][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1360.302593][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.302593][T23768] Call Trace: [ 1360.302593][T23768] dump_stack+0x1df/0x240 [ 1360.302593][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1360.302593][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1360.302593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1360.302593][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1360.302593][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1360.302593][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1360.302593][T23768] ? asm_sysvec_call_function_single+0x12/0x20 [ 1360.302593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1360.302593][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1360.302593][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1360.302593][T23768] ? _copy_from_user+0x15b/0x260 [ 1360.302593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1360.302593][T23768] __msan_chain_origin+0x50/0x90 [ 1360.302593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1360.302593][T23768] get_compat_msghdr+0x108/0x270 [ 1360.302593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1360.302593][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1360.302593][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1360.302593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1360.302593][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1360.302593][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1360.302593][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1360.302593][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1360.302593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1360.302593][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1360.302593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.302593][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1360.302593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.302593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1360.302593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1360.302593][T23768] entry_INT80_compat+0x71/0x76 [ 1360.302593][T23768] RIP: 0023:0xf7f11549 [ 1360.302593][T23768] Code: Bad RIP value. [ 1360.302593][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1360.302593][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1360.302593][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1360.302593][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1360.302593][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1360.302593][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1360.302593][T23768] Uninit was stored to memory at: [ 1360.302593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1360.302593][T23768] __msan_chain_origin+0x50/0x90 [ 1360.302593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1360.302593][T23768] get_compat_msghdr+0x108/0x270 [ 1360.302593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1360.302593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1360.302593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.302593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.302593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1360.302593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1360.302593][T23768] entry_INT80_compat+0x71/0x76 [ 1360.302593][T23768] [ 1360.302593][T23768] Uninit was stored to memory at: [ 1360.302593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1360.302593][T23768] __msan_chain_origin+0x50/0x90 [ 1360.302593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1360.302593][T23768] get_compat_msghdr+0x108/0x270 [ 1360.302593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1360.302593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1360.302593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.302593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.302593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1360.302593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1360.302593][T23768] entry_INT80_compat+0x71/0x76 [ 1360.302593][T23768] [ 1360.302593][T23768] Uninit was stored to memory at: [ 1360.302593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1360.302593][T23768] __msan_chain_origin+0x50/0x90 [ 1360.302593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1360.302593][T23768] get_compat_msghdr+0x108/0x270 [ 1360.302593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1360.302593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1360.302593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.302593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.302593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1360.302593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1360.302593][T23768] entry_INT80_compat+0x71/0x76 [ 1360.302593][T23768] [ 1360.302593][T23768] Uninit was stored to memory at: [ 1360.302593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1360.302593][T23768] __msan_chain_origin+0x50/0x90 [ 1360.302593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1360.302593][T23768] get_compat_msghdr+0x108/0x270 [ 1360.302593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1360.302593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1360.302593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.302593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.302593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1360.302593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1360.302593][T23768] entry_INT80_compat+0x71/0x76 [ 1360.302593][T23768] [ 1360.302593][T23768] Uninit was stored to memory at: [ 1360.302593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1360.302593][T23768] __msan_chain_origin+0x50/0x90 [ 1360.302593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1360.302593][T23768] get_compat_msghdr+0x108/0x270 [ 1360.302593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1360.302593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1360.302593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.302593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.302593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1360.302593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1360.302593][T23768] entry_INT80_compat+0x71/0x76 [ 1360.302593][T23768] [ 1360.302593][T23768] Uninit was stored to memory at: [ 1360.302593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1360.302593][T23768] __msan_chain_origin+0x50/0x90 [ 1360.302593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1360.302593][T23768] get_compat_msghdr+0x108/0x270 [ 1360.302593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1360.302593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1360.302593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.302593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.302593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1360.302593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1360.302593][T23768] entry_INT80_compat+0x71/0x76 [ 1360.302593][T23768] [ 1360.302593][T23768] Uninit was stored to memory at: [ 1360.302593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1360.302593][T23768] __msan_chain_origin+0x50/0x90 [ 1360.302593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1360.302593][T23768] get_compat_msghdr+0x108/0x270 [ 1360.302593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1360.302593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1360.302593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1360.302593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1360.302593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1360.302593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1360.302593][T23768] entry_INT80_compat+0x71/0x76 [ 1360.302593][T23768] [ 1360.302593][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1360.302593][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1360.302593][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1361.214435][T23768] not chained 3840000 origins [ 1361.219152][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1361.222600][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.222600][T23768] Call Trace: [ 1361.222600][T23768] dump_stack+0x1df/0x240 [ 1361.222600][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1361.222600][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1361.222600][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1361.222600][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1361.222600][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1361.222600][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1361.222600][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1361.222600][T23768] ? psi_group_change+0x1007/0x13c0 [ 1361.222600][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1361.222600][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1361.222600][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1361.222600][T23768] ? _copy_from_user+0x15b/0x260 [ 1361.222600][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1361.222600][T23768] __msan_chain_origin+0x50/0x90 [ 1361.222600][T23768] __get_compat_msghdr+0x5be/0x890 [ 1361.222600][T23768] get_compat_msghdr+0x108/0x270 [ 1361.222600][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1361.222600][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1361.222600][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1361.222600][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1361.222600][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1361.222600][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1361.222600][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1361.222600][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1361.222600][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1361.222600][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1361.222600][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.222600][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1361.222600][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.222600][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1361.222600][T23768] do_int80_syscall_32+0x1d/0x30 [ 1361.222600][T23768] entry_INT80_compat+0x71/0x76 [ 1361.222600][T23768] RIP: 0023:0xf7f11549 [ 1361.222600][T23768] Code: Bad RIP value. [ 1361.222600][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1361.222600][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1361.222600][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1361.222600][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1361.222600][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1361.222600][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1361.222600][T23768] Uninit was stored to memory at: [ 1361.222600][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1361.222600][T23768] __msan_chain_origin+0x50/0x90 [ 1361.222600][T23768] __get_compat_msghdr+0x5be/0x890 [ 1361.222600][T23768] get_compat_msghdr+0x108/0x270 [ 1361.222600][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1361.222600][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1361.222600][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.222600][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.222600][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1361.222600][T23768] do_int80_syscall_32+0x1d/0x30 [ 1361.222600][T23768] entry_INT80_compat+0x71/0x76 [ 1361.222600][T23768] [ 1361.222600][T23768] Uninit was stored to memory at: [ 1361.222600][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1361.222600][T23768] __msan_chain_origin+0x50/0x90 [ 1361.222600][T23768] __get_compat_msghdr+0x5be/0x890 [ 1361.222600][T23768] get_compat_msghdr+0x108/0x270 [ 1361.222600][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1361.222600][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1361.222600][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.222600][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.222600][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1361.222600][T23768] do_int80_syscall_32+0x1d/0x30 [ 1361.222600][T23768] entry_INT80_compat+0x71/0x76 [ 1361.222600][T23768] [ 1361.222600][T23768] Uninit was stored to memory at: [ 1361.222600][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1361.222600][T23768] __msan_chain_origin+0x50/0x90 [ 1361.222600][T23768] __get_compat_msghdr+0x5be/0x890 [ 1361.222600][T23768] get_compat_msghdr+0x108/0x270 [ 1361.222600][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1361.222600][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1361.222600][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.222600][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.222600][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1361.222600][T23768] do_int80_syscall_32+0x1d/0x30 [ 1361.222600][T23768] entry_INT80_compat+0x71/0x76 [ 1361.222600][T23768] [ 1361.222600][T23768] Uninit was stored to memory at: [ 1361.222600][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1361.222600][T23768] __msan_chain_origin+0x50/0x90 [ 1361.222600][T23768] __get_compat_msghdr+0x5be/0x890 [ 1361.222600][T23768] get_compat_msghdr+0x108/0x270 [ 1361.222600][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1361.222600][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1361.222600][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.222600][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.222600][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1361.222600][T23768] do_int80_syscall_32+0x1d/0x30 [ 1361.222600][T23768] entry_INT80_compat+0x71/0x76 [ 1361.222600][T23768] [ 1361.222600][T23768] Uninit was stored to memory at: [ 1361.222600][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1361.222600][T23768] __msan_chain_origin+0x50/0x90 [ 1361.222600][T23768] __get_compat_msghdr+0x5be/0x890 [ 1361.222600][T23768] get_compat_msghdr+0x108/0x270 [ 1361.222600][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1361.222600][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1361.222600][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.222600][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.222600][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1361.222600][T23768] do_int80_syscall_32+0x1d/0x30 [ 1361.222600][T23768] entry_INT80_compat+0x71/0x76 [ 1361.222600][T23768] [ 1361.222600][T23768] Uninit was stored to memory at: [ 1361.222600][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1361.222600][T23768] __msan_chain_origin+0x50/0x90 [ 1361.222600][T23768] __get_compat_msghdr+0x5be/0x890 [ 1361.222600][T23768] get_compat_msghdr+0x108/0x270 [ 1361.222600][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1361.222600][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1361.222600][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.222600][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.222600][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1361.222600][T23768] do_int80_syscall_32+0x1d/0x30 [ 1361.222600][T23768] entry_INT80_compat+0x71/0x76 [ 1361.222600][T23768] [ 1361.222600][T23768] Uninit was stored to memory at: [ 1361.222600][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1361.222600][T23768] __msan_chain_origin+0x50/0x90 [ 1361.222600][T23768] __get_compat_msghdr+0x5be/0x890 [ 1361.222600][T23768] get_compat_msghdr+0x108/0x270 [ 1361.222600][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1361.222600][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1361.222600][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1361.222600][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1361.222600][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1361.222600][T23768] do_int80_syscall_32+0x1d/0x30 [ 1361.222600][T23768] entry_INT80_compat+0x71/0x76 [ 1361.222600][T23768] [ 1361.222600][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1361.222600][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1361.222600][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1362.122963][T23768] not chained 3850000 origins [ 1362.127775][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1362.132593][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.142643][T23768] Call Trace: [ 1362.142643][T23768] dump_stack+0x1df/0x240 [ 1362.142643][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1362.142643][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1362.142643][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1362.142643][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1362.142643][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1362.142643][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1362.142643][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1362.142643][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1362.142643][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1362.142643][T23768] ? _copy_from_user+0x15b/0x260 [ 1362.142643][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1362.142643][T23768] __msan_chain_origin+0x50/0x90 [ 1362.142643][T23768] __get_compat_msghdr+0x5be/0x890 [ 1362.142643][T23768] get_compat_msghdr+0x108/0x270 [ 1362.142643][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1362.142643][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1362.142643][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1362.142643][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1362.142643][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1362.142643][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1362.142643][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1362.142643][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1362.142643][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1362.142643][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1362.142643][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.142643][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1362.142643][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.142643][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1362.142643][T23768] do_int80_syscall_32+0x1d/0x30 [ 1362.142643][T23768] entry_INT80_compat+0x71/0x76 [ 1362.142643][T23768] RIP: 0023:0xf7f11549 [ 1362.142643][T23768] Code: Bad RIP value. [ 1362.142643][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1362.142643][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1362.142643][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1362.142643][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1362.142643][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1362.142643][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1362.142643][T23768] Uninit was stored to memory at: [ 1362.142643][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1362.142643][T23768] __msan_chain_origin+0x50/0x90 [ 1362.142643][T23768] __get_compat_msghdr+0x5be/0x890 [ 1362.142643][T23768] get_compat_msghdr+0x108/0x270 [ 1362.142643][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1362.142643][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1362.142643][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.142643][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.142643][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1362.142643][T23768] do_int80_syscall_32+0x1d/0x30 [ 1362.142643][T23768] entry_INT80_compat+0x71/0x76 [ 1362.142643][T23768] [ 1362.142643][T23768] Uninit was stored to memory at: [ 1362.142643][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1362.142643][T23768] __msan_chain_origin+0x50/0x90 [ 1362.142643][T23768] __get_compat_msghdr+0x5be/0x890 [ 1362.142643][T23768] get_compat_msghdr+0x108/0x270 [ 1362.142643][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1362.142643][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1362.142643][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.142643][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.142643][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1362.142643][T23768] do_int80_syscall_32+0x1d/0x30 [ 1362.142643][T23768] entry_INT80_compat+0x71/0x76 [ 1362.142643][T23768] [ 1362.142643][T23768] Uninit was stored to memory at: [ 1362.142643][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1362.142643][T23768] __msan_chain_origin+0x50/0x90 [ 1362.142643][T23768] __get_compat_msghdr+0x5be/0x890 [ 1362.142643][T23768] get_compat_msghdr+0x108/0x270 [ 1362.142643][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1362.142643][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1362.142643][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.142643][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.142643][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1362.142643][T23768] do_int80_syscall_32+0x1d/0x30 [ 1362.142643][T23768] entry_INT80_compat+0x71/0x76 [ 1362.142643][T23768] [ 1362.142643][T23768] Uninit was stored to memory at: [ 1362.142643][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1362.142643][T23768] __msan_chain_origin+0x50/0x90 [ 1362.142643][T23768] __get_compat_msghdr+0x5be/0x890 [ 1362.142643][T23768] get_compat_msghdr+0x108/0x270 [ 1362.142643][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1362.142643][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1362.142643][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.142643][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.142643][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1362.142643][T23768] do_int80_syscall_32+0x1d/0x30 [ 1362.142643][T23768] entry_INT80_compat+0x71/0x76 [ 1362.142643][T23768] [ 1362.142643][T23768] Uninit was stored to memory at: [ 1362.142643][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1362.142643][T23768] __msan_chain_origin+0x50/0x90 [ 1362.142643][T23768] __get_compat_msghdr+0x5be/0x890 [ 1362.142643][T23768] get_compat_msghdr+0x108/0x270 [ 1362.142643][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1362.142643][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1362.142643][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.142643][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.142643][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1362.142643][T23768] do_int80_syscall_32+0x1d/0x30 [ 1362.142643][T23768] entry_INT80_compat+0x71/0x76 [ 1362.142643][T23768] [ 1362.142643][T23768] Uninit was stored to memory at: [ 1362.142643][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1362.142643][T23768] __msan_chain_origin+0x50/0x90 [ 1362.142643][T23768] __get_compat_msghdr+0x5be/0x890 [ 1362.142643][T23768] get_compat_msghdr+0x108/0x270 [ 1362.142643][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1362.142643][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1362.142643][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.142643][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.142643][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1362.142643][T23768] do_int80_syscall_32+0x1d/0x30 [ 1362.142643][T23768] entry_INT80_compat+0x71/0x76 [ 1362.142643][T23768] [ 1362.142643][T23768] Uninit was stored to memory at: [ 1362.142643][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1362.142643][T23768] __msan_chain_origin+0x50/0x90 [ 1362.142643][T23768] __get_compat_msghdr+0x5be/0x890 [ 1362.142643][T23768] get_compat_msghdr+0x108/0x270 [ 1362.142643][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1362.142643][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1362.142643][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1362.142643][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1362.142643][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1362.142643][T23768] do_int80_syscall_32+0x1d/0x30 [ 1362.142643][T23768] entry_INT80_compat+0x71/0x76 [ 1362.142643][T23768] [ 1362.142643][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1362.142643][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1362.142643][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1362.890202][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.033909][T23768] not chained 3860000 origins [ 1363.038629][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1363.042602][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.042602][T23768] Call Trace: [ 1363.042602][T23768] dump_stack+0x1df/0x240 [ 1363.042602][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1363.042602][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1363.042602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1363.042602][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1363.042602][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1363.042602][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1363.042602][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1363.042602][T23768] ? psi_group_change+0x1007/0x13c0 [ 1363.042602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1363.042602][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1363.042602][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1363.125391][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] ? _copy_from_user+0x15b/0x260 [ 1363.042602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1363.042602][T23768] __msan_chain_origin+0x50/0x90 [ 1363.149303][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1363.042602][T23768] get_compat_msghdr+0x108/0x270 [ 1363.167160][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1363.042602][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1363.042602][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1363.042602][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1363.042602][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1363.042602][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1363.042602][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1363.042602][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1363.042602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1363.042602][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1363.042602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.042602][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1363.042602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.042602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1363.042602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1363.258182][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] entry_INT80_compat+0x71/0x76 [ 1363.042602][T23768] RIP: 0023:0xf7f11549 [ 1363.042602][T23768] Code: Bad RIP value. [ 1363.042602][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1363.042602][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1363.042602][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1363.042602][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1363.311704][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1363.042602][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1363.042602][T23768] Uninit was stored to memory at: [ 1363.042602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1363.042602][T23768] __msan_chain_origin+0x50/0x90 [ 1363.042602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1363.042602][T23768] get_compat_msghdr+0x108/0x270 [ 1363.042602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1363.364478][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1363.042602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.042602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.042602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1363.042602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1363.042602][T23768] entry_INT80_compat+0x71/0x76 [ 1363.042602][T23768] [ 1363.042602][T23768] Uninit was stored to memory at: [ 1363.042602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1363.042602][T23768] __msan_chain_origin+0x50/0x90 [ 1363.042602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1363.042602][T23768] get_compat_msghdr+0x108/0x270 [ 1363.042602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1363.042602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1363.042602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.445604][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.042602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1363.042602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1363.042602][T23768] entry_INT80_compat+0x71/0x76 [ 1363.042602][T23768] [ 1363.042602][T23768] Uninit was stored to memory at: [ 1363.042602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1363.042602][T23768] __msan_chain_origin+0x50/0x90 [ 1363.042602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1363.042602][T23768] get_compat_msghdr+0x108/0x270 [ 1363.503942][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1363.042602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1363.042602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.529685][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1363.042602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.042602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1363.042602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1363.042602][T23768] entry_INT80_compat+0x71/0x76 [ 1363.042602][T23768] [ 1363.042602][T23768] Uninit was stored to memory at: [ 1363.042602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1363.042602][T23768] __msan_chain_origin+0x50/0x90 [ 1363.042602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1363.042602][T23768] get_compat_msghdr+0x108/0x270 [ 1363.042602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1363.042602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1363.042602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.042602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.042602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1363.042602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1363.042602][T23768] entry_INT80_compat+0x71/0x76 [ 1363.042602][T23768] [ 1363.042602][T23768] Uninit was stored to memory at: [ 1363.042602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1363.042602][T23768] __msan_chain_origin+0x50/0x90 [ 1363.042602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1363.042602][T23768] get_compat_msghdr+0x108/0x270 [ 1363.042602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1363.042602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1363.042602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.042602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.042602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1363.042602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1363.042602][T23768] entry_INT80_compat+0x71/0x76 [ 1363.042602][T23768] [ 1363.042602][T23768] Uninit was stored to memory at: [ 1363.042602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1363.042602][T23768] __msan_chain_origin+0x50/0x90 [ 1363.042602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1363.042602][T23768] get_compat_msghdr+0x108/0x270 [ 1363.042602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1363.042602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1363.042602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.042602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.042602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1363.042602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1363.042602][T23768] entry_INT80_compat+0x71/0x76 [ 1363.042602][T23768] [ 1363.042602][T23768] Uninit was stored to memory at: [ 1363.042602][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1363.042602][T23768] __msan_chain_origin+0x50/0x90 [ 1363.042602][T23768] __get_compat_msghdr+0x5be/0x890 [ 1363.042602][T23768] get_compat_msghdr+0x108/0x270 [ 1363.042602][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1363.042602][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1363.042602][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1363.042602][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1363.042602][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1363.042602][T23768] do_int80_syscall_32+0x1d/0x30 [ 1363.042602][T23768] entry_INT80_compat+0x71/0x76 [ 1363.042602][T23768] [ 1363.042602][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1363.042602][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1363.042602][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1364.034306][T23774] not chained 3870000 origins [ 1364.039017][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1364.042590][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.042590][T23774] Call Trace: [ 1364.042590][T23774] dump_stack+0x1df/0x240 [ 1364.042590][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1364.042590][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1364.042590][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1364.042590][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1364.042590][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1364.042590][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1364.042590][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1364.042590][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1364.042590][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1364.042590][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1364.042590][T23774] ? _copy_from_user+0x15b/0x260 [ 1364.042590][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1364.042590][T23774] __msan_chain_origin+0x50/0x90 [ 1364.042590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1364.042590][T23774] get_compat_msghdr+0x108/0x270 [ 1364.042590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1364.042590][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1364.042590][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1364.042590][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1364.042590][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1364.042590][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1364.042590][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1364.042590][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1364.042590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1364.042590][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1364.042590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.042590][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1364.042590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.042590][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.042590][T23774] do_int80_syscall_32+0x1d/0x30 [ 1364.042590][T23774] entry_INT80_compat+0x71/0x76 [ 1364.042590][T23774] RIP: 0023:0xf7f11549 [ 1364.042590][T23774] Code: Bad RIP value. [ 1364.042590][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1364.042590][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1364.042590][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1364.042590][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1364.042590][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1364.042590][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.042590][T23774] Uninit was stored to memory at: [ 1364.042590][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1364.042590][T23774] __msan_chain_origin+0x50/0x90 [ 1364.042590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1364.042590][T23774] get_compat_msghdr+0x108/0x270 [ 1364.042590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1364.042590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1364.042590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.042590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.042590][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.042590][T23774] do_int80_syscall_32+0x1d/0x30 [ 1364.042590][T23774] entry_INT80_compat+0x71/0x76 [ 1364.042590][T23774] [ 1364.042590][T23774] Uninit was stored to memory at: [ 1364.042590][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1364.042590][T23774] __msan_chain_origin+0x50/0x90 [ 1364.042590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1364.042590][T23774] get_compat_msghdr+0x108/0x270 [ 1364.042590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1364.042590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1364.042590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.042590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.042590][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.042590][T23774] do_int80_syscall_32+0x1d/0x30 [ 1364.042590][T23774] entry_INT80_compat+0x71/0x76 [ 1364.042590][T23774] [ 1364.042590][T23774] Uninit was stored to memory at: [ 1364.042590][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1364.042590][T23774] __msan_chain_origin+0x50/0x90 [ 1364.042590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1364.042590][T23774] get_compat_msghdr+0x108/0x270 [ 1364.042590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1364.042590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1364.042590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.042590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.042590][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.042590][T23774] do_int80_syscall_32+0x1d/0x30 [ 1364.042590][T23774] entry_INT80_compat+0x71/0x76 [ 1364.042590][T23774] [ 1364.042590][T23774] Uninit was stored to memory at: [ 1364.042590][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1364.042590][T23774] __msan_chain_origin+0x50/0x90 [ 1364.042590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1364.042590][T23774] get_compat_msghdr+0x108/0x270 [ 1364.042590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1364.042590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1364.042590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.042590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.042590][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.042590][T23774] do_int80_syscall_32+0x1d/0x30 [ 1364.042590][T23774] entry_INT80_compat+0x71/0x76 [ 1364.042590][T23774] [ 1364.042590][T23774] Uninit was stored to memory at: [ 1364.042590][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1364.042590][T23774] __msan_chain_origin+0x50/0x90 [ 1364.042590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1364.042590][T23774] get_compat_msghdr+0x108/0x270 [ 1364.042590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1364.042590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1364.042590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.042590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.042590][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.042590][T23774] do_int80_syscall_32+0x1d/0x30 [ 1364.042590][T23774] entry_INT80_compat+0x71/0x76 [ 1364.042590][T23774] [ 1364.042590][T23774] Uninit was stored to memory at: [ 1364.042590][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1364.042590][T23774] __msan_chain_origin+0x50/0x90 [ 1364.042590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1364.042590][T23774] get_compat_msghdr+0x108/0x270 [ 1364.042590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1364.042590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1364.042590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.042590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.042590][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.042590][T23774] do_int80_syscall_32+0x1d/0x30 [ 1364.042590][T23774] entry_INT80_compat+0x71/0x76 [ 1364.042590][T23774] [ 1364.042590][T23774] Uninit was stored to memory at: [ 1364.042590][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1364.042590][T23774] __msan_chain_origin+0x50/0x90 [ 1364.042590][T23774] __get_compat_msghdr+0x5be/0x890 [ 1364.042590][T23774] get_compat_msghdr+0x108/0x270 [ 1364.042590][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1364.042590][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1364.042590][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.042590][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.042590][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.042590][T23774] do_int80_syscall_32+0x1d/0x30 [ 1364.042590][T23774] entry_INT80_compat+0x71/0x76 [ 1364.042590][T23774] [ 1364.042590][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1364.042590][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1364.042590][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1364.810979][T23768] not chained 3880000 origins [ 1364.812665][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1364.812665][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.812665][T23768] Call Trace: [ 1364.812665][T23768] dump_stack+0x1df/0x240 [ 1364.812665][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1364.812665][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1364.812665][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1364.812665][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1364.862666][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1364.862666][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1364.862666][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1364.862666][T23768] ? psi_group_change+0x1007/0x13c0 [ 1364.862666][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1364.862666][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1364.862666][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1364.862666][T23768] ? _copy_from_user+0x15b/0x260 [ 1364.862666][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1364.862666][T23768] __msan_chain_origin+0x50/0x90 [ 1364.862666][T23768] __get_compat_msghdr+0x5be/0x890 [ 1364.862666][T23768] get_compat_msghdr+0x108/0x270 [ 1364.862666][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1364.862666][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1364.862666][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1364.862666][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1364.862666][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1364.862666][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1364.862666][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1364.862666][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1364.862666][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1364.862666][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1364.862666][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.862666][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1364.862666][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.862666][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.862666][T23768] do_int80_syscall_32+0x1d/0x30 [ 1364.862666][T23768] entry_INT80_compat+0x71/0x76 [ 1364.862666][T23768] RIP: 0023:0xf7f11549 [ 1364.862666][T23768] Code: Bad RIP value. [ 1364.862666][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1364.862666][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1364.862666][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1364.862666][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1364.862666][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1364.862666][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.862666][T23768] Uninit was stored to memory at: [ 1364.862666][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1364.862666][T23768] __msan_chain_origin+0x50/0x90 [ 1364.862666][T23768] __get_compat_msghdr+0x5be/0x890 [ 1364.862666][T23768] get_compat_msghdr+0x108/0x270 [ 1364.862666][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1364.862666][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1364.862666][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.862666][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.862666][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.862666][T23768] do_int80_syscall_32+0x1d/0x30 [ 1364.862666][T23768] entry_INT80_compat+0x71/0x76 [ 1364.862666][T23768] [ 1364.862666][T23768] Uninit was stored to memory at: [ 1364.862666][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1364.862666][T23768] __msan_chain_origin+0x50/0x90 [ 1364.862666][T23768] __get_compat_msghdr+0x5be/0x890 [ 1364.862666][T23768] get_compat_msghdr+0x108/0x270 [ 1364.862666][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1364.862666][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1364.862666][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.862666][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.862666][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.862666][T23768] do_int80_syscall_32+0x1d/0x30 [ 1364.862666][T23768] entry_INT80_compat+0x71/0x76 [ 1364.862666][T23768] [ 1364.862666][T23768] Uninit was stored to memory at: [ 1364.862666][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1364.862666][T23768] __msan_chain_origin+0x50/0x90 [ 1364.862666][T23768] __get_compat_msghdr+0x5be/0x890 [ 1364.862666][T23768] get_compat_msghdr+0x108/0x270 [ 1364.862666][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1364.862666][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1364.862666][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.862666][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.862666][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.862666][T23768] do_int80_syscall_32+0x1d/0x30 [ 1364.862666][T23768] entry_INT80_compat+0x71/0x76 [ 1364.862666][T23768] [ 1364.862666][T23768] Uninit was stored to memory at: [ 1364.862666][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1364.862666][T23768] __msan_chain_origin+0x50/0x90 [ 1364.862666][T23768] __get_compat_msghdr+0x5be/0x890 [ 1364.862666][T23768] get_compat_msghdr+0x108/0x270 [ 1364.862666][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1364.862666][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1364.862666][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.862666][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.862666][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.862666][T23768] do_int80_syscall_32+0x1d/0x30 [ 1364.862666][T23768] entry_INT80_compat+0x71/0x76 [ 1364.862666][T23768] [ 1364.862666][T23768] Uninit was stored to memory at: [ 1364.862666][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1364.862666][T23768] __msan_chain_origin+0x50/0x90 [ 1364.862666][T23768] __get_compat_msghdr+0x5be/0x890 [ 1364.862666][T23768] get_compat_msghdr+0x108/0x270 [ 1364.862666][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1364.862666][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1364.862666][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.862666][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.862666][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.862666][T23768] do_int80_syscall_32+0x1d/0x30 [ 1364.862666][T23768] entry_INT80_compat+0x71/0x76 [ 1364.862666][T23768] [ 1364.862666][T23768] Uninit was stored to memory at: [ 1364.862666][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1364.862666][T23768] __msan_chain_origin+0x50/0x90 [ 1364.862666][T23768] __get_compat_msghdr+0x5be/0x890 [ 1364.862666][T23768] get_compat_msghdr+0x108/0x270 [ 1364.862666][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1364.862666][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1364.862666][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.862666][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.862666][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.862666][T23768] do_int80_syscall_32+0x1d/0x30 [ 1364.862666][T23768] entry_INT80_compat+0x71/0x76 [ 1364.862666][T23768] [ 1364.862666][T23768] Uninit was stored to memory at: [ 1364.862666][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1364.862666][T23768] __msan_chain_origin+0x50/0x90 [ 1364.862666][T23768] __get_compat_msghdr+0x5be/0x890 [ 1364.862666][T23768] get_compat_msghdr+0x108/0x270 [ 1364.862666][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1364.862666][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1364.862666][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1364.862666][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1364.862666][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1364.862666][T23768] do_int80_syscall_32+0x1d/0x30 [ 1364.862666][T23768] entry_INT80_compat+0x71/0x76 [ 1364.862666][T23768] [ 1364.862666][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1364.862666][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1364.862666][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1365.770627][T23768] not chained 3890000 origins [ 1365.772664][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1365.772664][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.772664][T23768] Call Trace: [ 1365.772664][T23768] dump_stack+0x1df/0x240 [ 1365.772664][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1365.772664][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1365.772664][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1365.772664][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1365.772664][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1365.772664][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1365.772664][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1365.772664][T23768] ? psi_group_change+0x1007/0x13c0 [ 1365.772664][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1365.772664][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1365.772664][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1365.772664][T23768] ? _copy_from_user+0x15b/0x260 [ 1365.772664][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1365.772664][T23768] __msan_chain_origin+0x50/0x90 [ 1365.772664][T23768] __get_compat_msghdr+0x5be/0x890 [ 1365.772664][T23768] get_compat_msghdr+0x108/0x270 [ 1365.772664][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1365.772664][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1365.772664][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1365.772664][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1365.772664][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1365.772664][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1365.772664][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1365.772664][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1365.772664][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1365.772664][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1365.772664][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.772664][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1365.772664][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.772664][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1365.772664][T23768] do_int80_syscall_32+0x1d/0x30 [ 1365.772664][T23768] entry_INT80_compat+0x71/0x76 [ 1365.772664][T23768] RIP: 0023:0xf7f11549 [ 1365.772664][T23768] Code: Bad RIP value. [ 1365.772664][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1365.772664][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1365.772664][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1365.772664][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1365.772664][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1365.772664][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.772664][T23768] Uninit was stored to memory at: [ 1365.772664][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1365.772664][T23768] __msan_chain_origin+0x50/0x90 [ 1365.772664][T23768] __get_compat_msghdr+0x5be/0x890 [ 1365.772664][T23768] get_compat_msghdr+0x108/0x270 [ 1365.772664][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1365.772664][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1365.772664][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1365.772664][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1365.772664][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.082709][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.082709][T23768] entry_INT80_compat+0x71/0x76 [ 1366.082709][T23768] [ 1366.082709][T23768] Uninit was stored to memory at: [ 1366.082709][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.082709][T23768] __msan_chain_origin+0x50/0x90 [ 1366.082709][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.082709][T23768] get_compat_msghdr+0x108/0x270 [ 1366.082709][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.082709][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.082709][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.082709][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.082709][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.082709][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.082709][T23768] entry_INT80_compat+0x71/0x76 [ 1366.082709][T23768] [ 1366.082709][T23768] Uninit was stored to memory at: [ 1366.082709][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.082709][T23768] __msan_chain_origin+0x50/0x90 [ 1366.082709][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.082709][T23768] get_compat_msghdr+0x108/0x270 [ 1366.082709][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.082709][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.082709][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.082709][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.082709][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.082709][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.082709][T23768] entry_INT80_compat+0x71/0x76 [ 1366.082709][T23768] [ 1366.082709][T23768] Uninit was stored to memory at: [ 1366.082709][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.082709][T23768] __msan_chain_origin+0x50/0x90 [ 1366.082709][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.082709][T23768] get_compat_msghdr+0x108/0x270 [ 1366.082709][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.082709][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.082709][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.082709][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.082709][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.082709][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.082709][T23768] entry_INT80_compat+0x71/0x76 [ 1366.082709][T23768] [ 1366.082709][T23768] Uninit was stored to memory at: [ 1366.082709][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.082709][T23768] __msan_chain_origin+0x50/0x90 [ 1366.082709][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.082709][T23768] get_compat_msghdr+0x108/0x270 [ 1366.082709][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.082709][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.082709][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.082709][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.082709][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.082709][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.082709][T23768] entry_INT80_compat+0x71/0x76 [ 1366.082709][T23768] [ 1366.082709][T23768] Uninit was stored to memory at: [ 1366.082709][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.082709][T23768] __msan_chain_origin+0x50/0x90 [ 1366.082709][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.082709][T23768] get_compat_msghdr+0x108/0x270 [ 1366.082709][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.082709][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.082709][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.082709][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.082709][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.082709][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.082709][T23768] entry_INT80_compat+0x71/0x76 [ 1366.082709][T23768] [ 1366.082709][T23768] Uninit was stored to memory at: [ 1366.082709][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.082709][T23768] __msan_chain_origin+0x50/0x90 [ 1366.082709][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.082709][T23768] get_compat_msghdr+0x108/0x270 [ 1366.082709][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.082709][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.082709][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.082709][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.082709][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.082709][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.082709][T23768] entry_INT80_compat+0x71/0x76 [ 1366.082709][T23768] [ 1366.082709][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1366.082709][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1366.082709][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1366.705774][T23768] not chained 3900000 origins [ 1366.710486][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1366.712743][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.712743][T23768] Call Trace: [ 1366.712743][T23768] dump_stack+0x1df/0x240 [ 1366.712743][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1366.712743][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1366.712743][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1366.712743][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1366.712743][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1366.712743][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1366.712743][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1366.712743][T23768] ? psi_group_change+0x1007/0x13c0 [ 1366.712743][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1366.712743][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1366.712743][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1366.712743][T23768] ? _copy_from_user+0x15b/0x260 [ 1366.712743][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1366.712743][T23768] __msan_chain_origin+0x50/0x90 [ 1366.712743][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.712743][T23768] get_compat_msghdr+0x108/0x270 [ 1366.712743][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.712743][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1366.712743][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1366.712743][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1366.712743][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1366.712743][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1366.712743][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1366.712743][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1366.712743][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.712743][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1366.712743][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.712743][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1366.712743][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.712743][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.712743][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.712743][T23768] entry_INT80_compat+0x71/0x76 [ 1366.712743][T23768] RIP: 0023:0xf7f11549 [ 1366.712743][T23768] Code: Bad RIP value. [ 1366.712743][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1366.712743][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1366.712743][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1366.712743][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1366.712743][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1366.712743][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1366.712743][T23768] Uninit was stored to memory at: [ 1366.712743][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.712743][T23768] __msan_chain_origin+0x50/0x90 [ 1366.712743][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.712743][T23768] get_compat_msghdr+0x108/0x270 [ 1366.712743][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.712743][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.712743][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.712743][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.712743][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.712743][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.712743][T23768] entry_INT80_compat+0x71/0x76 [ 1366.712743][T23768] [ 1366.712743][T23768] Uninit was stored to memory at: [ 1366.712743][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.712743][T23768] __msan_chain_origin+0x50/0x90 [ 1366.712743][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.712743][T23768] get_compat_msghdr+0x108/0x270 [ 1366.712743][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.712743][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.712743][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.712743][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.712743][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.712743][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.712743][T23768] entry_INT80_compat+0x71/0x76 [ 1366.712743][T23768] [ 1366.712743][T23768] Uninit was stored to memory at: [ 1366.712743][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.712743][T23768] __msan_chain_origin+0x50/0x90 [ 1366.712743][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.712743][T23768] get_compat_msghdr+0x108/0x270 [ 1366.712743][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.712743][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.712743][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.712743][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.712743][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.712743][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.712743][T23768] entry_INT80_compat+0x71/0x76 [ 1366.712743][T23768] [ 1366.712743][T23768] Uninit was stored to memory at: [ 1366.712743][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.712743][T23768] __msan_chain_origin+0x50/0x90 [ 1366.712743][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.712743][T23768] get_compat_msghdr+0x108/0x270 [ 1366.712743][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.712743][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.712743][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.712743][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.712743][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.712743][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.712743][T23768] entry_INT80_compat+0x71/0x76 [ 1366.712743][T23768] [ 1366.712743][T23768] Uninit was stored to memory at: [ 1366.712743][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.712743][T23768] __msan_chain_origin+0x50/0x90 [ 1366.712743][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.712743][T23768] get_compat_msghdr+0x108/0x270 [ 1366.712743][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.712743][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.712743][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.712743][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.712743][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.712743][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.712743][T23768] entry_INT80_compat+0x71/0x76 [ 1366.712743][T23768] [ 1366.712743][T23768] Uninit was stored to memory at: [ 1366.712743][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.712743][T23768] __msan_chain_origin+0x50/0x90 [ 1366.712743][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.712743][T23768] get_compat_msghdr+0x108/0x270 [ 1366.712743][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.712743][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.712743][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.712743][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.712743][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.712743][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.712743][T23768] entry_INT80_compat+0x71/0x76 [ 1366.712743][T23768] [ 1366.712743][T23768] Uninit was stored to memory at: [ 1366.712743][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1366.712743][T23768] __msan_chain_origin+0x50/0x90 [ 1366.712743][T23768] __get_compat_msghdr+0x5be/0x890 [ 1366.712743][T23768] get_compat_msghdr+0x108/0x270 [ 1366.712743][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1366.712743][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1366.712743][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1366.712743][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1366.712743][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1366.712743][T23768] do_int80_syscall_32+0x1d/0x30 [ 1366.712743][T23768] entry_INT80_compat+0x71/0x76 [ 1366.712743][T23768] [ 1366.712743][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1366.712743][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1366.712743][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1367.631450][T23768] not chained 3910000 origins [ 1367.632683][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1367.632683][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.632683][T23768] Call Trace: [ 1367.632683][T23768] dump_stack+0x1df/0x240 [ 1367.632683][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1367.632683][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1367.632683][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1367.632683][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1367.632683][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1367.632683][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1367.632683][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1367.632683][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1367.632683][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1367.632683][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1367.632683][T23768] ? _copy_from_user+0x15b/0x260 [ 1367.632683][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1367.632683][T23768] __msan_chain_origin+0x50/0x90 [ 1367.632683][T23768] __get_compat_msghdr+0x5be/0x890 [ 1367.632683][T23768] get_compat_msghdr+0x108/0x270 [ 1367.632683][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1367.632683][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1367.632683][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1367.632683][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1367.632683][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1367.632683][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1367.632683][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1367.632683][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1367.632683][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1367.632683][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1367.632683][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.632683][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1367.632683][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.632683][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1367.632683][T23768] do_int80_syscall_32+0x1d/0x30 [ 1367.632683][T23768] entry_INT80_compat+0x71/0x76 [ 1367.632683][T23768] RIP: 0023:0xf7f11549 [ 1367.632683][T23768] Code: Bad RIP value. [ 1367.632683][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1367.632683][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1367.632683][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1367.632683][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1367.632683][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1367.632683][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1367.632683][T23768] Uninit was stored to memory at: [ 1367.632683][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1367.893974][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1367.632683][T23768] __msan_chain_origin+0x50/0x90 [ 1367.632683][T23768] __get_compat_msghdr+0x5be/0x890 [ 1367.912620][T23768] get_compat_msghdr+0x108/0x270 [ 1367.912620][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1367.912620][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1367.912620][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.912620][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.912620][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1367.912620][T23768] do_int80_syscall_32+0x1d/0x30 [ 1367.912620][T23768] entry_INT80_compat+0x71/0x76 [ 1367.953618][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1367.912620][T23768] [ 1367.912620][T23768] Uninit was stored to memory at: [ 1367.971888][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1367.912620][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1367.912620][T23768] __msan_chain_origin+0x50/0x90 [ 1367.912620][T23768] __get_compat_msghdr+0x5be/0x890 [ 1367.912620][T23768] get_compat_msghdr+0x108/0x270 [ 1367.912620][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1367.912620][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1367.912620][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.912620][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.912620][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1367.912620][T23768] do_int80_syscall_32+0x1d/0x30 [ 1367.912620][T23768] entry_INT80_compat+0x71/0x76 [ 1367.912620][T23768] [ 1367.912620][T23768] Uninit was stored to memory at: [ 1367.912620][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1367.912620][T23768] __msan_chain_origin+0x50/0x90 [ 1367.912620][T23768] __get_compat_msghdr+0x5be/0x890 [ 1368.057195][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1367.912620][T23768] get_compat_msghdr+0x108/0x270 [ 1367.912620][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1367.912620][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1367.912620][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.912620][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.912620][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1367.912620][T23768] do_int80_syscall_32+0x1d/0x30 [ 1367.912620][T23768] entry_INT80_compat+0x71/0x76 [ 1367.912620][T23768] [ 1367.912620][T23768] Uninit was stored to memory at: [ 1367.912620][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1368.123475][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1367.912620][T23768] __msan_chain_origin+0x50/0x90 [ 1367.912620][T23768] __get_compat_msghdr+0x5be/0x890 [ 1367.912620][T23768] get_compat_msghdr+0x108/0x270 [ 1367.912620][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1367.912620][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1367.912620][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.912620][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.912620][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1367.912620][T23768] do_int80_syscall_32+0x1d/0x30 [ 1367.912620][T23768] entry_INT80_compat+0x71/0x76 [ 1368.180782][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1367.912620][T23768] [ 1367.912620][T23768] Uninit was stored to memory at: [ 1367.912620][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1367.912620][T23768] __msan_chain_origin+0x50/0x90 [ 1367.912620][T23768] __get_compat_msghdr+0x5be/0x890 [ 1367.912620][T23768] get_compat_msghdr+0x108/0x270 [ 1367.912620][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1367.912620][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1367.912620][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.912620][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.912620][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1367.912620][T23768] do_int80_syscall_32+0x1d/0x30 [ 1367.912620][T23768] entry_INT80_compat+0x71/0x76 [ 1367.912620][T23768] [ 1367.912620][T23768] Uninit was stored to memory at: [ 1367.912620][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1367.912620][T23768] __msan_chain_origin+0x50/0x90 [ 1367.912620][T23768] __get_compat_msghdr+0x5be/0x890 [ 1367.912620][T23768] get_compat_msghdr+0x108/0x270 [ 1367.912620][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1367.912620][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1367.912620][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.294951][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1367.912620][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.912620][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1367.912620][T23768] do_int80_syscall_32+0x1d/0x30 [ 1367.912620][T23768] entry_INT80_compat+0x71/0x76 [ 1367.912620][T23768] [ 1367.912620][T23768] Uninit was stored to memory at: [ 1367.912620][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1367.912620][T23768] __msan_chain_origin+0x50/0x90 [ 1367.912620][T23768] __get_compat_msghdr+0x5be/0x890 [ 1367.912620][T23768] get_compat_msghdr+0x108/0x270 [ 1367.912620][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1367.912620][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1367.912620][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1367.912620][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1367.912620][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.382053][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1367.912620][T23768] do_int80_syscall_32+0x1d/0x30 [ 1367.912620][T23768] entry_INT80_compat+0x71/0x76 [ 1367.912620][T23768] [ 1367.912620][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1367.912620][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1367.912620][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1368.459872][T23774] not chained 3920000 origins [ 1368.462595][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1368.462595][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.462595][T23774] Call Trace: [ 1368.462595][T23774] dump_stack+0x1df/0x240 [ 1368.489035][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1368.462595][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1368.462595][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1368.462595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1368.462595][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1368.462595][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1368.462595][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1368.462595][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1368.462595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1368.462595][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1368.462595][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1368.462595][T23774] ? _copy_from_user+0x15b/0x260 [ 1368.558819][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1368.462595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1368.462595][T23774] __msan_chain_origin+0x50/0x90 [ 1368.462595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1368.462595][T23774] get_compat_msghdr+0x108/0x270 [ 1368.462595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1368.462595][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1368.462595][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1368.462595][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1368.462595][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1368.462595][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1368.462595][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1368.462595][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1368.462595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1368.462595][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1368.462595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.462595][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1368.462595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.462595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.462595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1368.462595][T23774] entry_INT80_compat+0x71/0x76 [ 1368.462595][T23774] RIP: 0023:0xf7f11549 [ 1368.462595][T23774] Code: Bad RIP value. [ 1368.462595][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1368.462595][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1368.462595][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1368.462595][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1368.462595][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1368.462595][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1368.462595][T23774] Uninit was stored to memory at: [ 1368.462595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1368.462595][T23774] __msan_chain_origin+0x50/0x90 [ 1368.462595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1368.462595][T23774] get_compat_msghdr+0x108/0x270 [ 1368.462595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1368.462595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1368.462595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.462595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.462595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.462595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1368.462595][T23774] entry_INT80_compat+0x71/0x76 [ 1368.462595][T23774] [ 1368.462595][T23774] Uninit was stored to memory at: [ 1368.462595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1368.462595][T23774] __msan_chain_origin+0x50/0x90 [ 1368.462595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1368.462595][T23774] get_compat_msghdr+0x108/0x270 [ 1368.462595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1368.462595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1368.462595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.462595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.462595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.462595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1368.462595][T23774] entry_INT80_compat+0x71/0x76 [ 1368.462595][T23774] [ 1368.462595][T23774] Uninit was stored to memory at: [ 1368.462595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1368.462595][T23774] __msan_chain_origin+0x50/0x90 [ 1368.462595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1368.462595][T23774] get_compat_msghdr+0x108/0x270 [ 1368.462595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1368.462595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1368.462595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.462595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.462595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.462595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1368.462595][T23774] entry_INT80_compat+0x71/0x76 [ 1368.462595][T23774] [ 1368.462595][T23774] Uninit was stored to memory at: [ 1368.462595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1368.462595][T23774] __msan_chain_origin+0x50/0x90 [ 1368.462595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1368.462595][T23774] get_compat_msghdr+0x108/0x270 [ 1368.462595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1368.462595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1368.462595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.462595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.462595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.462595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1368.462595][T23774] entry_INT80_compat+0x71/0x76 [ 1368.462595][T23774] [ 1368.462595][T23774] Uninit was stored to memory at: [ 1368.462595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1368.462595][T23774] __msan_chain_origin+0x50/0x90 [ 1368.462595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1368.462595][T23774] get_compat_msghdr+0x108/0x270 [ 1368.462595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1368.462595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1368.462595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.462595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.462595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.462595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1368.462595][T23774] entry_INT80_compat+0x71/0x76 [ 1368.462595][T23774] [ 1368.462595][T23774] Uninit was stored to memory at: [ 1368.462595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1368.462595][T23774] __msan_chain_origin+0x50/0x90 [ 1368.462595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1368.462595][T23774] get_compat_msghdr+0x108/0x270 [ 1368.462595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1368.462595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1368.462595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.462595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.462595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.462595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1368.462595][T23774] entry_INT80_compat+0x71/0x76 [ 1368.462595][T23774] [ 1368.462595][T23774] Uninit was stored to memory at: [ 1368.462595][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1368.462595][T23774] __msan_chain_origin+0x50/0x90 [ 1368.462595][T23774] __get_compat_msghdr+0x5be/0x890 [ 1368.462595][T23774] get_compat_msghdr+0x108/0x270 [ 1368.462595][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1368.462595][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1368.462595][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1368.462595][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1368.462595][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1368.462595][T23774] do_int80_syscall_32+0x1d/0x30 [ 1368.462595][T23774] entry_INT80_compat+0x71/0x76 [ 1368.462595][T23774] [ 1368.462595][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1368.462595][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1368.462595][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1369.345427][T23774] not chained 3930000 origins [ 1369.350141][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1369.352592][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.352592][T23774] Call Trace: [ 1369.352592][T23774] dump_stack+0x1df/0x240 [ 1369.352592][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1369.352592][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1369.352592][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1369.352592][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1369.352592][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1369.352592][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1369.352592][T23774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1369.352592][T23774] ? psi_group_change+0x1007/0x13c0 [ 1369.352592][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1369.352592][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1369.352592][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1369.352592][T23774] ? _copy_from_user+0x15b/0x260 [ 1369.352592][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1369.352592][T23774] __msan_chain_origin+0x50/0x90 [ 1369.352592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1369.352592][T23774] get_compat_msghdr+0x108/0x270 [ 1369.352592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1369.352592][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1369.352592][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1369.352592][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1369.352592][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1369.352592][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1369.352592][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1369.352592][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1369.352592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1369.352592][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1369.352592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.352592][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1369.352592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.352592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1369.352592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1369.352592][T23774] entry_INT80_compat+0x71/0x76 [ 1369.352592][T23774] RIP: 0023:0xf7f11549 [ 1369.352592][T23774] Code: Bad RIP value. [ 1369.352592][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1369.352592][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1369.352592][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1369.352592][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1369.352592][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1369.352592][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1369.352592][T23774] Uninit was stored to memory at: [ 1369.352592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1369.352592][T23774] __msan_chain_origin+0x50/0x90 [ 1369.352592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1369.352592][T23774] get_compat_msghdr+0x108/0x270 [ 1369.352592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1369.352592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1369.352592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.352592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.352592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1369.352592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1369.352592][T23774] entry_INT80_compat+0x71/0x76 [ 1369.352592][T23774] [ 1369.352592][T23774] Uninit was stored to memory at: [ 1369.352592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1369.352592][T23774] __msan_chain_origin+0x50/0x90 [ 1369.352592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1369.352592][T23774] get_compat_msghdr+0x108/0x270 [ 1369.352592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1369.352592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1369.352592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.352592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.352592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1369.352592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1369.352592][T23774] entry_INT80_compat+0x71/0x76 [ 1369.352592][T23774] [ 1369.352592][T23774] Uninit was stored to memory at: [ 1369.352592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1369.352592][T23774] __msan_chain_origin+0x50/0x90 [ 1369.352592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1369.352592][T23774] get_compat_msghdr+0x108/0x270 [ 1369.352592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1369.352592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1369.352592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.352592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.352592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1369.352592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1369.352592][T23774] entry_INT80_compat+0x71/0x76 [ 1369.352592][T23774] [ 1369.352592][T23774] Uninit was stored to memory at: [ 1369.352592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1369.352592][T23774] __msan_chain_origin+0x50/0x90 [ 1369.352592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1369.352592][T23774] get_compat_msghdr+0x108/0x270 [ 1369.352592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1369.352592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1369.352592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.352592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.352592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1369.352592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1369.352592][T23774] entry_INT80_compat+0x71/0x76 [ 1369.352592][T23774] [ 1369.352592][T23774] Uninit was stored to memory at: [ 1369.352592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1369.352592][T23774] __msan_chain_origin+0x50/0x90 [ 1369.352592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1369.352592][T23774] get_compat_msghdr+0x108/0x270 [ 1369.352592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1369.352592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1369.352592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.352592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.352592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1369.352592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1369.352592][T23774] entry_INT80_compat+0x71/0x76 [ 1369.352592][T23774] [ 1369.352592][T23774] Uninit was stored to memory at: [ 1369.352592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1369.352592][T23774] __msan_chain_origin+0x50/0x90 [ 1369.352592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1369.352592][T23774] get_compat_msghdr+0x108/0x270 [ 1369.352592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1369.352592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1369.352592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.352592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.352592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1369.352592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1369.352592][T23774] entry_INT80_compat+0x71/0x76 [ 1369.352592][T23774] [ 1369.352592][T23774] Uninit was stored to memory at: [ 1369.352592][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1369.352592][T23774] __msan_chain_origin+0x50/0x90 [ 1369.352592][T23774] __get_compat_msghdr+0x5be/0x890 [ 1369.352592][T23774] get_compat_msghdr+0x108/0x270 [ 1369.352592][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1369.352592][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1369.352592][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1369.352592][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1369.352592][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1369.352592][T23774] do_int80_syscall_32+0x1d/0x30 [ 1369.352592][T23774] entry_INT80_compat+0x71/0x76 [ 1369.352592][T23774] [ 1369.352592][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1369.352592][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1369.352592][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1370.216010][T23774] not chained 3940000 origins [ 1370.220745][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1370.222599][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.222599][T23774] Call Trace: [ 1370.222599][T23774] dump_stack+0x1df/0x240 [ 1370.222599][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1370.222599][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1370.222599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1370.222599][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1370.222599][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1370.222599][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1370.222599][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1370.222599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1370.222599][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1370.222599][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1370.222599][T23774] ? _copy_from_user+0x15b/0x260 [ 1370.222599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1370.222599][T23774] __msan_chain_origin+0x50/0x90 [ 1370.222599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1370.222599][T23774] get_compat_msghdr+0x108/0x270 [ 1370.222599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1370.222599][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1370.222599][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1370.222599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1370.222599][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1370.222599][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1370.222599][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1370.222599][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1370.222599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1370.222599][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1370.222599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.222599][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1370.222599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.222599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1370.222599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1370.222599][T23774] entry_INT80_compat+0x71/0x76 [ 1370.222599][T23774] RIP: 0023:0xf7f11549 [ 1370.222599][T23774] Code: Bad RIP value. [ 1370.222599][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1370.222599][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1370.222599][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1370.222599][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1370.222599][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1370.222599][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1370.222599][T23774] Uninit was stored to memory at: [ 1370.222599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1370.222599][T23774] __msan_chain_origin+0x50/0x90 [ 1370.222599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1370.222599][T23774] get_compat_msghdr+0x108/0x270 [ 1370.222599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1370.222599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1370.222599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.222599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.222599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1370.222599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1370.222599][T23774] entry_INT80_compat+0x71/0x76 [ 1370.222599][T23774] [ 1370.222599][T23774] Uninit was stored to memory at: [ 1370.222599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1370.222599][T23774] __msan_chain_origin+0x50/0x90 [ 1370.222599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1370.222599][T23774] get_compat_msghdr+0x108/0x270 [ 1370.222599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1370.222599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1370.222599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.222599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.222599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1370.222599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1370.222599][T23774] entry_INT80_compat+0x71/0x76 [ 1370.222599][T23774] [ 1370.222599][T23774] Uninit was stored to memory at: [ 1370.222599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1370.222599][T23774] __msan_chain_origin+0x50/0x90 [ 1370.222599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1370.222599][T23774] get_compat_msghdr+0x108/0x270 [ 1370.222599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1370.222599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1370.222599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.222599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.222599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1370.222599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1370.222599][T23774] entry_INT80_compat+0x71/0x76 [ 1370.222599][T23774] [ 1370.222599][T23774] Uninit was stored to memory at: [ 1370.222599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1370.222599][T23774] __msan_chain_origin+0x50/0x90 [ 1370.222599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1370.222599][T23774] get_compat_msghdr+0x108/0x270 [ 1370.222599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1370.222599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1370.222599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.222599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.222599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1370.222599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1370.222599][T23774] entry_INT80_compat+0x71/0x76 [ 1370.222599][T23774] [ 1370.222599][T23774] Uninit was stored to memory at: [ 1370.222599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1370.222599][T23774] __msan_chain_origin+0x50/0x90 [ 1370.222599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1370.222599][T23774] get_compat_msghdr+0x108/0x270 [ 1370.222599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1370.222599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1370.222599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.222599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.222599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1370.222599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1370.222599][T23774] entry_INT80_compat+0x71/0x76 [ 1370.222599][T23774] [ 1370.222599][T23774] Uninit was stored to memory at: [ 1370.222599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1370.222599][T23774] __msan_chain_origin+0x50/0x90 [ 1370.222599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1370.222599][T23774] get_compat_msghdr+0x108/0x270 [ 1370.222599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1370.222599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1370.222599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.222599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.222599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1370.222599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1370.222599][T23774] entry_INT80_compat+0x71/0x76 [ 1370.222599][T23774] [ 1370.222599][T23774] Uninit was stored to memory at: [ 1370.222599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1370.222599][T23774] __msan_chain_origin+0x50/0x90 [ 1370.222599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1370.222599][T23774] get_compat_msghdr+0x108/0x270 [ 1370.222599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1370.222599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1370.222599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1370.222599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1370.222599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1370.222599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1370.222599][T23774] entry_INT80_compat+0x71/0x76 [ 1370.222599][T23774] [ 1370.222599][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1370.222599][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1370.222599][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1371.091136][T23768] not chained 3950000 origins [ 1371.092592][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1371.092592][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.092592][T23768] Call Trace: [ 1371.092592][T23768] dump_stack+0x1df/0x240 [ 1371.092592][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1371.092592][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1371.092592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1371.092592][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1371.092592][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1371.092592][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1371.092592][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1371.092592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1371.092592][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1371.092592][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1371.092592][T23768] ? _copy_from_user+0x15b/0x260 [ 1371.092592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1371.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1371.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1371.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1371.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1371.092592][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1371.092592][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1371.092592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1371.092592][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1371.092592][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1371.092592][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1371.092592][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1371.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1371.092592][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1371.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.092592][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1371.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1371.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1371.092592][T23768] RIP: 0023:0xf7f11549 [ 1371.092592][T23768] Code: Bad RIP value. [ 1371.092592][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1371.092592][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1371.092592][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.092592][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1371.092592][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1371.092592][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1371.092592][T23768] Uninit was stored to memory at: [ 1371.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1371.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1371.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1371.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1371.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1371.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1371.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1371.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1371.092592][T23768] [ 1371.092592][T23768] Uninit was stored to memory at: [ 1371.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1371.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1371.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1371.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1371.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1371.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1371.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1371.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1371.092592][T23768] [ 1371.092592][T23768] Uninit was stored to memory at: [ 1371.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1371.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1371.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1371.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1371.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1371.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1371.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1371.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1371.092592][T23768] [ 1371.092592][T23768] Uninit was stored to memory at: [ 1371.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1371.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1371.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1371.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1371.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1371.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1371.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1371.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1371.092592][T23768] [ 1371.092592][T23768] Uninit was stored to memory at: [ 1371.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1371.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1371.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1371.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1371.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1371.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1371.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1371.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1371.092592][T23768] [ 1371.092592][T23768] Uninit was stored to memory at: [ 1371.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1371.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1371.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1371.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1371.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1371.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1371.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1371.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1371.092592][T23768] [ 1371.092592][T23768] Uninit was stored to memory at: [ 1371.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1371.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1371.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1371.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1371.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1371.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1371.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1371.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1371.092592][T23768] [ 1371.092592][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1371.092592][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1371.092592][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1371.968607][T23774] not chained 3960000 origins [ 1371.972601][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1371.972601][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.972601][T23774] Call Trace: [ 1371.972601][T23774] dump_stack+0x1df/0x240 [ 1371.972601][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1371.972601][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1371.972601][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1371.972601][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1371.972601][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1371.972601][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1371.972601][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1371.972601][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1371.972601][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1371.972601][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1371.972601][T23774] ? _copy_from_user+0x15b/0x260 [ 1371.972601][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1371.972601][T23774] __msan_chain_origin+0x50/0x90 [ 1371.972601][T23774] __get_compat_msghdr+0x5be/0x890 [ 1371.972601][T23774] get_compat_msghdr+0x108/0x270 [ 1371.972601][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1371.972601][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1371.972601][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1371.972601][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1371.972601][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1371.972601][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1371.972601][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1371.972601][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1371.972601][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1371.972601][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1371.972601][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.972601][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1371.972601][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.972601][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.972601][T23774] do_int80_syscall_32+0x1d/0x30 [ 1371.972601][T23774] entry_INT80_compat+0x71/0x76 [ 1371.972601][T23774] RIP: 0023:0xf7f11549 [ 1371.972601][T23774] Code: Bad RIP value. [ 1371.972601][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1371.972601][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1371.972601][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.972601][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1371.972601][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1371.972601][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1371.972601][T23774] Uninit was stored to memory at: [ 1371.972601][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1371.972601][T23774] __msan_chain_origin+0x50/0x90 [ 1371.972601][T23774] __get_compat_msghdr+0x5be/0x890 [ 1371.972601][T23774] get_compat_msghdr+0x108/0x270 [ 1371.972601][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1371.972601][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1371.972601][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.972601][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.972601][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.972601][T23774] do_int80_syscall_32+0x1d/0x30 [ 1371.972601][T23774] entry_INT80_compat+0x71/0x76 [ 1371.972601][T23774] [ 1371.972601][T23774] Uninit was stored to memory at: [ 1371.972601][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1371.972601][T23774] __msan_chain_origin+0x50/0x90 [ 1371.972601][T23774] __get_compat_msghdr+0x5be/0x890 [ 1371.972601][T23774] get_compat_msghdr+0x108/0x270 [ 1371.972601][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1371.972601][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1371.972601][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.972601][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.972601][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.972601][T23774] do_int80_syscall_32+0x1d/0x30 [ 1371.972601][T23774] entry_INT80_compat+0x71/0x76 [ 1371.972601][T23774] [ 1371.972601][T23774] Uninit was stored to memory at: [ 1371.972601][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1371.972601][T23774] __msan_chain_origin+0x50/0x90 [ 1371.972601][T23774] __get_compat_msghdr+0x5be/0x890 [ 1371.972601][T23774] get_compat_msghdr+0x108/0x270 [ 1371.972601][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1371.972601][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1371.972601][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.972601][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.972601][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.972601][T23774] do_int80_syscall_32+0x1d/0x30 [ 1371.972601][T23774] entry_INT80_compat+0x71/0x76 [ 1371.972601][T23774] [ 1371.972601][T23774] Uninit was stored to memory at: [ 1371.972601][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1371.972601][T23774] __msan_chain_origin+0x50/0x90 [ 1371.972601][T23774] __get_compat_msghdr+0x5be/0x890 [ 1371.972601][T23774] get_compat_msghdr+0x108/0x270 [ 1371.972601][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1371.972601][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1371.972601][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.972601][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.972601][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.972601][T23774] do_int80_syscall_32+0x1d/0x30 [ 1371.972601][T23774] entry_INT80_compat+0x71/0x76 [ 1371.972601][T23774] [ 1371.972601][T23774] Uninit was stored to memory at: [ 1371.972601][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1371.972601][T23774] __msan_chain_origin+0x50/0x90 [ 1371.972601][T23774] __get_compat_msghdr+0x5be/0x890 [ 1371.972601][T23774] get_compat_msghdr+0x108/0x270 [ 1371.972601][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1371.972601][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1371.972601][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.972601][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.972601][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.972601][T23774] do_int80_syscall_32+0x1d/0x30 [ 1371.972601][T23774] entry_INT80_compat+0x71/0x76 [ 1371.972601][T23774] [ 1371.972601][T23774] Uninit was stored to memory at: [ 1371.972601][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1371.972601][T23774] __msan_chain_origin+0x50/0x90 [ 1371.972601][T23774] __get_compat_msghdr+0x5be/0x890 [ 1371.972601][T23774] get_compat_msghdr+0x108/0x270 [ 1371.972601][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1371.972601][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1371.972601][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.972601][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.972601][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.972601][T23774] do_int80_syscall_32+0x1d/0x30 [ 1371.972601][T23774] entry_INT80_compat+0x71/0x76 [ 1371.972601][T23774] [ 1371.972601][T23774] Uninit was stored to memory at: [ 1371.972601][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1371.972601][T23774] __msan_chain_origin+0x50/0x90 [ 1371.972601][T23774] __get_compat_msghdr+0x5be/0x890 [ 1371.972601][T23774] get_compat_msghdr+0x108/0x270 [ 1371.972601][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1371.972601][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1371.972601][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1371.972601][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1371.972601][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1371.972601][T23774] do_int80_syscall_32+0x1d/0x30 [ 1371.972601][T23774] entry_INT80_compat+0x71/0x76 [ 1371.972601][T23774] [ 1371.972601][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1371.972601][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1371.972601][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1372.849861][T23768] not chained 3970000 origins [ 1372.852593][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1372.852593][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.852593][T23768] Call Trace: [ 1372.852593][T23768] dump_stack+0x1df/0x240 [ 1372.852593][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1372.852593][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1372.852593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1372.852593][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1372.852593][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1372.852593][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1372.852593][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1372.852593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1372.852593][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1372.852593][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1372.852593][T23768] ? _copy_from_user+0x15b/0x260 [ 1372.852593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1372.852593][T23768] __msan_chain_origin+0x50/0x90 [ 1372.852593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1372.852593][T23768] get_compat_msghdr+0x108/0x270 [ 1372.852593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1372.852593][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1372.852593][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1372.852593][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1372.852593][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1372.852593][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1372.852593][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1372.852593][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1372.852593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1372.852593][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1372.852593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.852593][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1372.852593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.852593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1372.852593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1372.852593][T23768] entry_INT80_compat+0x71/0x76 [ 1372.852593][T23768] RIP: 0023:0xf7f11549 [ 1372.852593][T23768] Code: Bad RIP value. [ 1372.852593][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1372.852593][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1372.852593][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1372.852593][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1372.852593][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1372.852593][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1372.852593][T23768] Uninit was stored to memory at: [ 1372.852593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1372.852593][T23768] __msan_chain_origin+0x50/0x90 [ 1372.852593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1372.852593][T23768] get_compat_msghdr+0x108/0x270 [ 1372.852593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1372.852593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1372.852593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.852593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.852593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1372.852593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1372.852593][T23768] entry_INT80_compat+0x71/0x76 [ 1372.852593][T23768] [ 1372.852593][T23768] Uninit was stored to memory at: [ 1372.852593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1372.852593][T23768] __msan_chain_origin+0x50/0x90 [ 1372.852593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1372.852593][T23768] get_compat_msghdr+0x108/0x270 [ 1372.852593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1372.852593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1372.852593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.852593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.852593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1372.852593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1372.852593][T23768] entry_INT80_compat+0x71/0x76 [ 1372.852593][T23768] [ 1372.852593][T23768] Uninit was stored to memory at: [ 1372.852593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1372.852593][T23768] __msan_chain_origin+0x50/0x90 [ 1372.852593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1372.852593][T23768] get_compat_msghdr+0x108/0x270 [ 1372.852593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1372.852593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1372.852593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.852593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.852593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1372.852593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1372.852593][T23768] entry_INT80_compat+0x71/0x76 [ 1372.852593][T23768] [ 1372.852593][T23768] Uninit was stored to memory at: [ 1372.852593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1372.852593][T23768] __msan_chain_origin+0x50/0x90 [ 1372.852593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1372.852593][T23768] get_compat_msghdr+0x108/0x270 [ 1372.852593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1372.852593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1372.852593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.852593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.852593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1372.852593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1372.852593][T23768] entry_INT80_compat+0x71/0x76 [ 1372.852593][T23768] [ 1372.852593][T23768] Uninit was stored to memory at: [ 1372.852593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1372.852593][T23768] __msan_chain_origin+0x50/0x90 [ 1372.852593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1372.852593][T23768] get_compat_msghdr+0x108/0x270 [ 1372.852593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1372.852593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1372.852593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.852593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.852593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1372.852593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1372.852593][T23768] entry_INT80_compat+0x71/0x76 [ 1372.852593][T23768] [ 1372.852593][T23768] Uninit was stored to memory at: [ 1372.852593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1372.852593][T23768] __msan_chain_origin+0x50/0x90 [ 1372.852593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1372.852593][T23768] get_compat_msghdr+0x108/0x270 [ 1372.852593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1372.852593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1372.852593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.852593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.852593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1372.852593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1372.852593][T23768] entry_INT80_compat+0x71/0x76 [ 1372.852593][T23768] [ 1372.852593][T23768] Uninit was stored to memory at: [ 1372.852593][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1372.852593][T23768] __msan_chain_origin+0x50/0x90 [ 1372.852593][T23768] __get_compat_msghdr+0x5be/0x890 [ 1372.852593][T23768] get_compat_msghdr+0x108/0x270 [ 1372.852593][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1372.852593][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1372.852593][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1372.852593][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1372.852593][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1372.852593][T23768] do_int80_syscall_32+0x1d/0x30 [ 1372.852593][T23768] entry_INT80_compat+0x71/0x76 [ 1372.852593][T23768] [ 1372.852593][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1372.852593][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1372.852593][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1373.577207][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.727595][T23774] not chained 3980000 origins [ 1373.732310][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1373.732603][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.732603][T23774] Call Trace: [ 1373.732603][T23774] dump_stack+0x1df/0x240 [ 1373.732603][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1373.732603][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1373.732603][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1373.732603][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1373.732603][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1373.732603][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1373.732603][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1373.732603][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1373.732603][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1373.732603][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1373.732603][T23774] ? _copy_from_user+0x15b/0x260 [ 1373.818595][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1373.732603][T23774] __msan_chain_origin+0x50/0x90 [ 1373.732603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1373.842202][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] get_compat_msghdr+0x108/0x270 [ 1373.732603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1373.732603][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1373.732603][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1373.732603][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1373.732603][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1373.732603][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1373.732603][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1373.732603][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1373.895294][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1373.732603][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1373.732603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.732603][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1373.732603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.732603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1373.732603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1373.732603][T23774] entry_INT80_compat+0x71/0x76 [ 1373.732603][T23774] RIP: 0023:0xf7f11549 [ 1373.732603][T23774] Code: Bad RIP value. [ 1373.732603][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1373.967268][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1373.732603][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1373.732603][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1373.732603][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1373.732603][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1373.732603][T23774] Uninit was stored to memory at: [ 1374.020195][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1373.732603][T23774] __msan_chain_origin+0x50/0x90 [ 1373.732603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1373.732603][T23774] get_compat_msghdr+0x108/0x270 [ 1373.732603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1373.732603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1374.058138][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.732603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.732603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1373.732603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1373.732603][T23774] entry_INT80_compat+0x71/0x76 [ 1373.732603][T23774] [ 1373.732603][T23774] Uninit was stored to memory at: [ 1373.732603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1373.732603][T23774] __msan_chain_origin+0x50/0x90 [ 1373.732603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1373.732603][T23774] get_compat_msghdr+0x108/0x270 [ 1373.732603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1373.732603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1373.732603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.132940][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.732603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1373.732603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1373.732603][T23774] entry_INT80_compat+0x71/0x76 [ 1373.732603][T23774] [ 1373.732603][T23774] Uninit was stored to memory at: [ 1373.732603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1373.732603][T23774] __msan_chain_origin+0x50/0x90 [ 1373.732603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1373.732603][T23774] get_compat_msghdr+0x108/0x270 [ 1374.191690][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1373.732603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1373.732603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.732603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.732603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1373.732603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1373.732603][T23774] entry_INT80_compat+0x71/0x76 [ 1373.732603][T23774] [ 1373.732603][T23774] Uninit was stored to memory at: [ 1373.732603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1373.732603][T23774] __msan_chain_origin+0x50/0x90 [ 1374.259803][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1373.732603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1373.732603][T23774] get_compat_msghdr+0x108/0x270 [ 1373.732603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1373.732603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1373.732603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.732603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.732603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1373.732603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1373.732603][T23774] entry_INT80_compat+0x71/0x76 [ 1373.732603][T23774] [ 1373.732603][T23774] Uninit was stored to memory at: [ 1373.732603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1373.732603][T23774] __msan_chain_origin+0x50/0x90 [ 1373.732603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1373.732603][T23774] get_compat_msghdr+0x108/0x270 [ 1373.732603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1373.732603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1373.732603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.732603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.732603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1373.732603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1373.732603][T23774] entry_INT80_compat+0x71/0x76 [ 1373.732603][T23774] [ 1373.732603][T23774] Uninit was stored to memory at: [ 1373.732603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1373.732603][T23774] __msan_chain_origin+0x50/0x90 [ 1373.732603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1373.732603][T23774] get_compat_msghdr+0x108/0x270 [ 1373.732603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1373.732603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1373.732603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.732603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.732603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1373.732603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1373.732603][T23774] entry_INT80_compat+0x71/0x76 [ 1373.732603][T23774] [ 1373.732603][T23774] Uninit was stored to memory at: [ 1373.732603][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1373.732603][T23774] __msan_chain_origin+0x50/0x90 [ 1373.732603][T23774] __get_compat_msghdr+0x5be/0x890 [ 1373.732603][T23774] get_compat_msghdr+0x108/0x270 [ 1373.732603][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1373.732603][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1373.732603][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1373.732603][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1373.732603][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1373.732603][T23774] do_int80_syscall_32+0x1d/0x30 [ 1373.732603][T23774] entry_INT80_compat+0x71/0x76 [ 1373.732603][T23774] [ 1373.732603][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1373.732603][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1373.732603][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1374.679404][T23768] not chained 3990000 origins [ 1374.682603][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1374.682603][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.682603][T23768] Call Trace: [ 1374.682603][T23768] dump_stack+0x1df/0x240 [ 1374.682603][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1374.682603][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1374.682603][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1374.682603][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1374.682603][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1374.682603][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1374.682603][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1374.682603][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1374.682603][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1374.682603][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1374.682603][T23768] ? _copy_from_user+0x15b/0x260 [ 1374.682603][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1374.682603][T23768] __msan_chain_origin+0x50/0x90 [ 1374.682603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1374.682603][T23768] get_compat_msghdr+0x108/0x270 [ 1374.682603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1374.682603][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1374.682603][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1374.682603][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1374.682603][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1374.682603][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1374.682603][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1374.682603][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1374.682603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1374.682603][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1374.682603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.682603][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1374.682603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.682603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1374.682603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1374.682603][T23768] entry_INT80_compat+0x71/0x76 [ 1374.682603][T23768] RIP: 0023:0xf7f11549 [ 1374.682603][T23768] Code: Bad RIP value. [ 1374.682603][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1374.682603][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1374.682603][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1374.682603][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1374.682603][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1374.682603][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1374.682603][T23768] Uninit was stored to memory at: [ 1374.682603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1374.682603][T23768] __msan_chain_origin+0x50/0x90 [ 1374.682603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1374.682603][T23768] get_compat_msghdr+0x108/0x270 [ 1374.682603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1374.682603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1374.682603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.682603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.682603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1374.682603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1374.682603][T23768] entry_INT80_compat+0x71/0x76 [ 1374.682603][T23768] [ 1374.682603][T23768] Uninit was stored to memory at: [ 1374.682603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1374.682603][T23768] __msan_chain_origin+0x50/0x90 [ 1374.682603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1374.682603][T23768] get_compat_msghdr+0x108/0x270 [ 1374.682603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1374.682603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1374.682603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.682603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.682603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1374.682603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1374.682603][T23768] entry_INT80_compat+0x71/0x76 [ 1374.682603][T23768] [ 1374.682603][T23768] Uninit was stored to memory at: [ 1374.682603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1374.682603][T23768] __msan_chain_origin+0x50/0x90 [ 1374.682603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1374.682603][T23768] get_compat_msghdr+0x108/0x270 [ 1374.682603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1374.682603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1374.682603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.682603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.682603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1374.682603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1374.682603][T23768] entry_INT80_compat+0x71/0x76 [ 1374.682603][T23768] [ 1374.682603][T23768] Uninit was stored to memory at: [ 1374.682603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1374.682603][T23768] __msan_chain_origin+0x50/0x90 [ 1374.682603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1374.682603][T23768] get_compat_msghdr+0x108/0x270 [ 1374.682603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1374.682603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1374.682603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.682603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.682603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1374.682603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1374.682603][T23768] entry_INT80_compat+0x71/0x76 [ 1374.682603][T23768] [ 1374.682603][T23768] Uninit was stored to memory at: [ 1374.682603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1374.682603][T23768] __msan_chain_origin+0x50/0x90 [ 1374.682603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1374.682603][T23768] get_compat_msghdr+0x108/0x270 [ 1374.682603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1374.682603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1374.682603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.682603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.682603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1374.682603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1374.682603][T23768] entry_INT80_compat+0x71/0x76 [ 1374.682603][T23768] [ 1374.682603][T23768] Uninit was stored to memory at: [ 1374.682603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1374.682603][T23768] __msan_chain_origin+0x50/0x90 [ 1374.682603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1374.682603][T23768] get_compat_msghdr+0x108/0x270 [ 1374.682603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1374.682603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1374.682603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.682603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.682603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1374.682603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1374.682603][T23768] entry_INT80_compat+0x71/0x76 [ 1374.682603][T23768] [ 1374.682603][T23768] Uninit was stored to memory at: [ 1374.682603][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1374.682603][T23768] __msan_chain_origin+0x50/0x90 [ 1374.682603][T23768] __get_compat_msghdr+0x5be/0x890 [ 1374.682603][T23768] get_compat_msghdr+0x108/0x270 [ 1374.682603][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1374.682603][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1374.682603][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1374.682603][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1374.682603][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1374.682603][T23768] do_int80_syscall_32+0x1d/0x30 [ 1374.682603][T23768] entry_INT80_compat+0x71/0x76 [ 1374.682603][T23768] [ 1374.682603][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1374.682603][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1374.682603][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1375.554834][T23774] not chained 4000000 origins [ 1375.560241][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1375.562597][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.562597][T23774] Call Trace: [ 1375.562597][T23774] dump_stack+0x1df/0x240 [ 1375.562597][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1375.562597][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1375.562597][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1375.562597][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1375.562597][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1375.562597][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1375.562597][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1375.562597][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1375.562597][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1375.562597][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1375.562597][T23774] ? _copy_from_user+0x15b/0x260 [ 1375.562597][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1375.562597][T23774] __msan_chain_origin+0x50/0x90 [ 1375.562597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1375.562597][T23774] get_compat_msghdr+0x108/0x270 [ 1375.562597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1375.562597][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1375.562597][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1375.562597][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1375.562597][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1375.562597][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1375.562597][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1375.562597][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1375.562597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1375.562597][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1375.562597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.562597][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1375.562597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.562597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1375.562597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1375.562597][T23774] entry_INT80_compat+0x71/0x76 [ 1375.562597][T23774] RIP: 0023:0xf7f11549 [ 1375.562597][T23774] Code: Bad RIP value. [ 1375.562597][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1375.562597][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1375.562597][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1375.562597][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1375.562597][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1375.562597][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1375.562597][T23774] Uninit was stored to memory at: [ 1375.562597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1375.562597][T23774] __msan_chain_origin+0x50/0x90 [ 1375.562597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1375.562597][T23774] get_compat_msghdr+0x108/0x270 [ 1375.562597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1375.562597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1375.562597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.562597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.562597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1375.562597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1375.562597][T23774] entry_INT80_compat+0x71/0x76 [ 1375.562597][T23774] [ 1375.562597][T23774] Uninit was stored to memory at: [ 1375.562597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1375.562597][T23774] __msan_chain_origin+0x50/0x90 [ 1375.562597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1375.562597][T23774] get_compat_msghdr+0x108/0x270 [ 1375.562597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1375.562597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1375.562597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.562597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.562597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1375.562597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1375.562597][T23774] entry_INT80_compat+0x71/0x76 [ 1375.562597][T23774] [ 1375.562597][T23774] Uninit was stored to memory at: [ 1375.562597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1375.562597][T23774] __msan_chain_origin+0x50/0x90 [ 1375.562597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1375.562597][T23774] get_compat_msghdr+0x108/0x270 [ 1375.562597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1375.562597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1375.562597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.562597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.562597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1375.562597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1375.562597][T23774] entry_INT80_compat+0x71/0x76 [ 1375.562597][T23774] [ 1375.562597][T23774] Uninit was stored to memory at: [ 1375.562597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1375.562597][T23774] __msan_chain_origin+0x50/0x90 [ 1375.562597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1375.562597][T23774] get_compat_msghdr+0x108/0x270 [ 1375.562597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1375.562597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1375.562597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.562597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.562597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1375.562597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1375.562597][T23774] entry_INT80_compat+0x71/0x76 [ 1375.562597][T23774] [ 1375.562597][T23774] Uninit was stored to memory at: [ 1375.562597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1375.562597][T23774] __msan_chain_origin+0x50/0x90 [ 1375.562597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1375.562597][T23774] get_compat_msghdr+0x108/0x270 [ 1375.562597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1375.562597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1375.562597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.562597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.562597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1375.562597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1375.562597][T23774] entry_INT80_compat+0x71/0x76 [ 1375.562597][T23774] [ 1375.562597][T23774] Uninit was stored to memory at: [ 1375.562597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1375.562597][T23774] __msan_chain_origin+0x50/0x90 [ 1375.562597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1375.562597][T23774] get_compat_msghdr+0x108/0x270 [ 1375.562597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1375.562597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1375.562597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.562597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.562597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1375.562597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1375.562597][T23774] entry_INT80_compat+0x71/0x76 [ 1375.562597][T23774] [ 1375.562597][T23774] Uninit was stored to memory at: [ 1375.562597][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1375.562597][T23774] __msan_chain_origin+0x50/0x90 [ 1375.562597][T23774] __get_compat_msghdr+0x5be/0x890 [ 1375.562597][T23774] get_compat_msghdr+0x108/0x270 [ 1375.562597][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1375.562597][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1375.562597][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1375.562597][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1375.562597][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1375.562597][T23774] do_int80_syscall_32+0x1d/0x30 [ 1375.562597][T23774] entry_INT80_compat+0x71/0x76 [ 1375.562597][T23774] [ 1375.562597][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1375.562597][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1375.562597][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1376.322904][T23774] not chained 4010000 origins [ 1376.327609][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1376.332594][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.332594][T23774] Call Trace: [ 1376.332594][T23774] dump_stack+0x1df/0x240 [ 1376.332594][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1376.332594][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1376.332594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1376.332594][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1376.332594][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1376.332594][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1376.332594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1376.332594][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1376.332594][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1376.332594][T23774] ? _copy_from_user+0x15b/0x260 [ 1376.332594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1376.332594][T23774] __msan_chain_origin+0x50/0x90 [ 1376.332594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1376.332594][T23774] get_compat_msghdr+0x108/0x270 [ 1376.332594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1376.332594][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1376.332594][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1376.332594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1376.332594][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1376.332594][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1376.332594][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1376.332594][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1376.332594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1376.332594][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1376.332594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.332594][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1376.332594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.332594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1376.332594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1376.332594][T23774] entry_INT80_compat+0x71/0x76 [ 1376.332594][T23774] RIP: 0023:0xf7f11549 [ 1376.332594][T23774] Code: Bad RIP value. [ 1376.332594][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1376.332594][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1376.332594][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.332594][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1376.332594][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1376.332594][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1376.332594][T23774] Uninit was stored to memory at: [ 1376.332594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1376.332594][T23774] __msan_chain_origin+0x50/0x90 [ 1376.332594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1376.332594][T23774] get_compat_msghdr+0x108/0x270 [ 1376.332594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1376.332594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1376.332594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.332594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.332594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1376.332594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1376.332594][T23774] entry_INT80_compat+0x71/0x76 [ 1376.332594][T23774] [ 1376.332594][T23774] Uninit was stored to memory at: [ 1376.332594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1376.332594][T23774] __msan_chain_origin+0x50/0x90 [ 1376.332594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1376.332594][T23774] get_compat_msghdr+0x108/0x270 [ 1376.332594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1376.332594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1376.332594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.332594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.332594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1376.332594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1376.332594][T23774] entry_INT80_compat+0x71/0x76 [ 1376.332594][T23774] [ 1376.332594][T23774] Uninit was stored to memory at: [ 1376.332594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1376.332594][T23774] __msan_chain_origin+0x50/0x90 [ 1376.332594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1376.332594][T23774] get_compat_msghdr+0x108/0x270 [ 1376.332594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1376.332594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1376.332594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.332594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.332594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1376.332594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1376.332594][T23774] entry_INT80_compat+0x71/0x76 [ 1376.332594][T23774] [ 1376.332594][T23774] Uninit was stored to memory at: [ 1376.332594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1376.332594][T23774] __msan_chain_origin+0x50/0x90 [ 1376.332594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1376.332594][T23774] get_compat_msghdr+0x108/0x270 [ 1376.332594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1376.332594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1376.332594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.332594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.332594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1376.332594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1376.332594][T23774] entry_INT80_compat+0x71/0x76 [ 1376.332594][T23774] [ 1376.332594][T23774] Uninit was stored to memory at: [ 1376.332594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1376.332594][T23774] __msan_chain_origin+0x50/0x90 [ 1376.332594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1376.332594][T23774] get_compat_msghdr+0x108/0x270 [ 1376.332594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1376.332594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1376.332594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.332594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.332594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1376.332594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1376.332594][T23774] entry_INT80_compat+0x71/0x76 [ 1376.332594][T23774] [ 1376.332594][T23774] Uninit was stored to memory at: [ 1376.332594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1376.332594][T23774] __msan_chain_origin+0x50/0x90 [ 1376.332594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1376.332594][T23774] get_compat_msghdr+0x108/0x270 [ 1376.332594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1376.332594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1376.332594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.332594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.332594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1376.332594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1376.332594][T23774] entry_INT80_compat+0x71/0x76 [ 1376.332594][T23774] [ 1376.332594][T23774] Uninit was stored to memory at: [ 1376.332594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1376.332594][T23774] __msan_chain_origin+0x50/0x90 [ 1376.332594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1376.332594][T23774] get_compat_msghdr+0x108/0x270 [ 1376.332594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1376.332594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1376.332594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1376.332594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1376.332594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1376.332594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1376.332594][T23774] entry_INT80_compat+0x71/0x76 [ 1376.332594][T23774] [ 1376.332594][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1376.332594][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1376.332594][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1377.169812][T23774] not chained 4020000 origins [ 1377.172600][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1377.172600][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.172600][T23774] Call Trace: [ 1377.172600][T23774] dump_stack+0x1df/0x240 [ 1377.172600][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1377.172600][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1377.172600][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1377.172600][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1377.172600][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1377.172600][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1377.172600][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1377.172600][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1377.172600][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1377.172600][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1377.172600][T23774] ? _copy_from_user+0x15b/0x260 [ 1377.172600][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1377.172600][T23774] __msan_chain_origin+0x50/0x90 [ 1377.172600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1377.172600][T23774] get_compat_msghdr+0x108/0x270 [ 1377.172600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1377.172600][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1377.172600][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1377.172600][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1377.172600][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1377.172600][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1377.172600][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1377.172600][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1377.172600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1377.172600][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1377.172600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.172600][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1377.172600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.172600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.172600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1377.172600][T23774] entry_INT80_compat+0x71/0x76 [ 1377.172600][T23774] RIP: 0023:0xf7f11549 [ 1377.172600][T23774] Code: Bad RIP value. [ 1377.172600][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1377.172600][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1377.172600][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.172600][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1377.172600][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1377.172600][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1377.172600][T23774] Uninit was stored to memory at: [ 1377.172600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1377.172600][T23774] __msan_chain_origin+0x50/0x90 [ 1377.172600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1377.172600][T23774] get_compat_msghdr+0x108/0x270 [ 1377.172600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1377.172600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1377.172600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.172600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.172600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.172600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1377.172600][T23774] entry_INT80_compat+0x71/0x76 [ 1377.172600][T23774] [ 1377.172600][T23774] Uninit was stored to memory at: [ 1377.172600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1377.172600][T23774] __msan_chain_origin+0x50/0x90 [ 1377.172600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1377.172600][T23774] get_compat_msghdr+0x108/0x270 [ 1377.172600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1377.172600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1377.172600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.172600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.172600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.172600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1377.172600][T23774] entry_INT80_compat+0x71/0x76 [ 1377.172600][T23774] [ 1377.172600][T23774] Uninit was stored to memory at: [ 1377.172600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1377.172600][T23774] __msan_chain_origin+0x50/0x90 [ 1377.172600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1377.172600][T23774] get_compat_msghdr+0x108/0x270 [ 1377.172600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1377.172600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1377.172600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.172600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.172600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.172600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1377.172600][T23774] entry_INT80_compat+0x71/0x76 [ 1377.172600][T23774] [ 1377.172600][T23774] Uninit was stored to memory at: [ 1377.172600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1377.172600][T23774] __msan_chain_origin+0x50/0x90 [ 1377.172600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1377.172600][T23774] get_compat_msghdr+0x108/0x270 [ 1377.172600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1377.172600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1377.172600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.172600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.172600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.172600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1377.172600][T23774] entry_INT80_compat+0x71/0x76 [ 1377.172600][T23774] [ 1377.172600][T23774] Uninit was stored to memory at: [ 1377.172600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1377.172600][T23774] __msan_chain_origin+0x50/0x90 [ 1377.172600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1377.172600][T23774] get_compat_msghdr+0x108/0x270 [ 1377.172600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1377.172600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1377.172600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.172600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.172600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.172600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1377.172600][T23774] entry_INT80_compat+0x71/0x76 [ 1377.172600][T23774] [ 1377.172600][T23774] Uninit was stored to memory at: [ 1377.172600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1377.172600][T23774] __msan_chain_origin+0x50/0x90 [ 1377.172600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1377.172600][T23774] get_compat_msghdr+0x108/0x270 [ 1377.172600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1377.172600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1377.172600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.172600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.172600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.172600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1377.172600][T23774] entry_INT80_compat+0x71/0x76 [ 1377.172600][T23774] [ 1377.172600][T23774] Uninit was stored to memory at: [ 1377.172600][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1377.172600][T23774] __msan_chain_origin+0x50/0x90 [ 1377.172600][T23774] __get_compat_msghdr+0x5be/0x890 [ 1377.172600][T23774] get_compat_msghdr+0x108/0x270 [ 1377.172600][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1377.172600][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1377.172600][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.172600][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.172600][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.172600][T23774] do_int80_syscall_32+0x1d/0x30 [ 1377.172600][T23774] entry_INT80_compat+0x71/0x76 [ 1377.172600][T23774] [ 1377.172600][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1377.172600][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1377.172600][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1377.929542][T23768] not chained 4030000 origins [ 1377.932650][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1377.932650][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.932650][T23768] Call Trace: [ 1377.932650][T23768] dump_stack+0x1df/0x240 [ 1377.932650][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1377.932650][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1377.932650][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1377.932650][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1377.932650][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1377.932650][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1377.932650][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1377.932650][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1377.932650][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1377.932650][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1377.932650][T23768] ? _copy_from_user+0x15b/0x260 [ 1377.932650][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1377.932650][T23768] __msan_chain_origin+0x50/0x90 [ 1377.932650][T23768] __get_compat_msghdr+0x5be/0x890 [ 1377.932650][T23768] get_compat_msghdr+0x108/0x270 [ 1377.932650][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1377.932650][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1377.932650][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1377.932650][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1377.932650][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1377.932650][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1377.932650][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1377.932650][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1377.932650][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1377.932650][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1377.932650][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.932650][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1377.932650][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.932650][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.932650][T23768] do_int80_syscall_32+0x1d/0x30 [ 1377.932650][T23768] entry_INT80_compat+0x71/0x76 [ 1377.932650][T23768] RIP: 0023:0xf7f11549 [ 1377.932650][T23768] Code: Bad RIP value. [ 1377.932650][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1377.932650][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1377.932650][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.932650][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1377.932650][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1377.932650][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1377.932650][T23768] Uninit was stored to memory at: [ 1377.932650][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1377.932650][T23768] __msan_chain_origin+0x50/0x90 [ 1377.932650][T23768] __get_compat_msghdr+0x5be/0x890 [ 1377.932650][T23768] get_compat_msghdr+0x108/0x270 [ 1377.932650][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1377.932650][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1377.932650][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.932650][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.932650][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.932650][T23768] do_int80_syscall_32+0x1d/0x30 [ 1377.932650][T23768] entry_INT80_compat+0x71/0x76 [ 1377.932650][T23768] [ 1377.932650][T23768] Uninit was stored to memory at: [ 1377.932650][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1377.932650][T23768] __msan_chain_origin+0x50/0x90 [ 1377.932650][T23768] __get_compat_msghdr+0x5be/0x890 [ 1377.932650][T23768] get_compat_msghdr+0x108/0x270 [ 1377.932650][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1377.932650][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1377.932650][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.932650][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.932650][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.932650][T23768] do_int80_syscall_32+0x1d/0x30 [ 1377.932650][T23768] entry_INT80_compat+0x71/0x76 [ 1377.932650][T23768] [ 1377.932650][T23768] Uninit was stored to memory at: [ 1377.932650][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1377.932650][T23768] __msan_chain_origin+0x50/0x90 [ 1377.932650][T23768] __get_compat_msghdr+0x5be/0x890 [ 1377.932650][T23768] get_compat_msghdr+0x108/0x270 [ 1377.932650][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1377.932650][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1377.932650][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.932650][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.932650][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.932650][T23768] do_int80_syscall_32+0x1d/0x30 [ 1377.932650][T23768] entry_INT80_compat+0x71/0x76 [ 1377.932650][T23768] [ 1377.932650][T23768] Uninit was stored to memory at: [ 1377.932650][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1377.932650][T23768] __msan_chain_origin+0x50/0x90 [ 1377.932650][T23768] __get_compat_msghdr+0x5be/0x890 [ 1377.932650][T23768] get_compat_msghdr+0x108/0x270 [ 1377.932650][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1377.932650][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1377.932650][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.932650][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.932650][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.932650][T23768] do_int80_syscall_32+0x1d/0x30 [ 1377.932650][T23768] entry_INT80_compat+0x71/0x76 [ 1377.932650][T23768] [ 1377.932650][T23768] Uninit was stored to memory at: [ 1377.932650][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1377.932650][T23768] __msan_chain_origin+0x50/0x90 [ 1377.932650][T23768] __get_compat_msghdr+0x5be/0x890 [ 1377.932650][T23768] get_compat_msghdr+0x108/0x270 [ 1377.932650][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1377.932650][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1377.932650][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.932650][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.932650][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.932650][T23768] do_int80_syscall_32+0x1d/0x30 [ 1377.932650][T23768] entry_INT80_compat+0x71/0x76 [ 1377.932650][T23768] [ 1377.932650][T23768] Uninit was stored to memory at: [ 1377.932650][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1377.932650][T23768] __msan_chain_origin+0x50/0x90 [ 1377.932650][T23768] __get_compat_msghdr+0x5be/0x890 [ 1377.932650][T23768] get_compat_msghdr+0x108/0x270 [ 1377.932650][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1377.932650][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1377.932650][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.932650][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.932650][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.932650][T23768] do_int80_syscall_32+0x1d/0x30 [ 1377.932650][T23768] entry_INT80_compat+0x71/0x76 [ 1377.932650][T23768] [ 1377.932650][T23768] Uninit was stored to memory at: [ 1377.932650][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1377.932650][T23768] __msan_chain_origin+0x50/0x90 [ 1377.932650][T23768] __get_compat_msghdr+0x5be/0x890 [ 1377.932650][T23768] get_compat_msghdr+0x108/0x270 [ 1377.932650][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1377.932650][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1377.932650][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1377.932650][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1377.932650][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1377.932650][T23768] do_int80_syscall_32+0x1d/0x30 [ 1377.932650][T23768] entry_INT80_compat+0x71/0x76 [ 1377.932650][T23768] [ 1377.932650][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1377.932650][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1377.932650][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1378.656250][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1378.772185][T23774] not chained 4040000 origins [ 1378.772594][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1378.772594][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.772594][T23774] Call Trace: [ 1378.772594][T23774] dump_stack+0x1df/0x240 [ 1378.772594][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1378.772594][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1378.772594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1378.772594][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1378.772594][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1378.772594][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1378.772594][T23774] ? __msan_get_context_state+0x9/0x20 [ 1378.772594][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1378.772594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1378.772594][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1378.772594][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1378.772594][T23774] ? _copy_from_user+0x15b/0x260 [ 1378.772594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1378.772594][T23774] __msan_chain_origin+0x50/0x90 [ 1378.772594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1378.772594][T23774] get_compat_msghdr+0x108/0x270 [ 1378.772594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1378.772594][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1378.772594][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1378.772594][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1378.772594][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1378.772594][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1378.772594][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1378.772594][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1378.772594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1378.772594][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1378.772594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.772594][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1378.772594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.772594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1378.772594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1378.772594][T23774] entry_INT80_compat+0x71/0x76 [ 1378.772594][T23774] RIP: 0023:0xf7f11549 [ 1378.772594][T23774] Code: Bad RIP value. [ 1378.772594][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1378.772594][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1378.772594][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1378.772594][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1378.772594][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1378.772594][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1378.772594][T23774] Uninit was stored to memory at: [ 1378.772594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1378.772594][T23774] __msan_chain_origin+0x50/0x90 [ 1378.772594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1378.772594][T23774] get_compat_msghdr+0x108/0x270 [ 1378.772594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1378.772594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1378.772594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.772594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.772594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1378.772594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1378.772594][T23774] entry_INT80_compat+0x71/0x76 [ 1378.772594][T23774] [ 1378.772594][T23774] Uninit was stored to memory at: [ 1378.772594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1378.772594][T23774] __msan_chain_origin+0x50/0x90 [ 1378.772594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1378.772594][T23774] get_compat_msghdr+0x108/0x270 [ 1378.772594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1378.772594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1378.772594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.772594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.772594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1378.772594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1378.772594][T23774] entry_INT80_compat+0x71/0x76 [ 1378.772594][T23774] [ 1378.772594][T23774] Uninit was stored to memory at: [ 1378.772594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1378.772594][T23774] __msan_chain_origin+0x50/0x90 [ 1378.772594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1378.772594][T23774] get_compat_msghdr+0x108/0x270 [ 1378.772594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1378.772594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1378.772594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.772594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.772594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1378.772594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1378.772594][T23774] entry_INT80_compat+0x71/0x76 [ 1378.772594][T23774] [ 1378.772594][T23774] Uninit was stored to memory at: [ 1378.772594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1378.772594][T23774] __msan_chain_origin+0x50/0x90 [ 1378.772594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1378.772594][T23774] get_compat_msghdr+0x108/0x270 [ 1378.772594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1378.772594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1378.772594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.772594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.772594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1378.772594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1378.772594][T23774] entry_INT80_compat+0x71/0x76 [ 1378.772594][T23774] [ 1378.772594][T23774] Uninit was stored to memory at: [ 1378.772594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1378.772594][T23774] __msan_chain_origin+0x50/0x90 [ 1378.772594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1378.772594][T23774] get_compat_msghdr+0x108/0x270 [ 1378.772594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1378.772594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1378.772594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.772594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.772594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1378.772594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1378.772594][T23774] entry_INT80_compat+0x71/0x76 [ 1378.772594][T23774] [ 1378.772594][T23774] Uninit was stored to memory at: [ 1378.772594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1378.772594][T23774] __msan_chain_origin+0x50/0x90 [ 1378.772594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1378.772594][T23774] get_compat_msghdr+0x108/0x270 [ 1378.772594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1378.772594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1378.772594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.772594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.772594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1378.772594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1378.772594][T23774] entry_INT80_compat+0x71/0x76 [ 1378.772594][T23774] [ 1378.772594][T23774] Uninit was stored to memory at: [ 1378.772594][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1378.772594][T23774] __msan_chain_origin+0x50/0x90 [ 1378.772594][T23774] __get_compat_msghdr+0x5be/0x890 [ 1378.772594][T23774] get_compat_msghdr+0x108/0x270 [ 1378.772594][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1378.772594][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1378.772594][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1378.772594][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1378.772594][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1378.772594][T23774] do_int80_syscall_32+0x1d/0x30 [ 1378.772594][T23774] entry_INT80_compat+0x71/0x76 [ 1378.772594][T23774] [ 1378.772594][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1378.772594][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1378.772594][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1379.546814][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1379.667763][T23774] not chained 4050000 origins [ 1379.672495][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1379.672790][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.672790][T23774] Call Trace: [ 1379.672790][T23774] dump_stack+0x1df/0x240 [ 1379.672790][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1379.672790][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1379.672790][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1379.672790][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1379.672790][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1379.672790][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1379.672790][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1379.672790][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1379.742766][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1379.742766][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1379.742766][T23774] ? _copy_from_user+0x15b/0x260 [ 1379.742766][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1379.742766][T23774] __msan_chain_origin+0x50/0x90 [ 1379.769366][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1379.742766][T23774] __get_compat_msghdr+0x5be/0x890 [ 1379.742766][T23774] get_compat_msghdr+0x108/0x270 [ 1379.742766][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1379.790675][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1379.742766][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1379.742766][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1379.742766][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1379.742766][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1379.742766][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1379.742766][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1379.742766][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1379.742766][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1379.742766][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1379.742766][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.742766][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1379.742766][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.742766][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1379.874924][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1379.742766][T23774] do_int80_syscall_32+0x1d/0x30 [ 1379.742766][T23774] entry_INT80_compat+0x71/0x76 [ 1379.892930][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1379.742766][T23774] RIP: 0023:0xf7f11549 [ 1379.742766][T23774] Code: Bad RIP value. [ 1379.742766][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1379.911513][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1379.742766][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1379.742766][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1379.742766][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1379.742766][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1379.742766][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1379.742766][T23774] Uninit was stored to memory at: [ 1379.742766][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1379.742766][T23774] __msan_chain_origin+0x50/0x90 [ 1379.742766][T23774] __get_compat_msghdr+0x5be/0x890 [ 1379.742766][T23774] get_compat_msghdr+0x108/0x270 [ 1379.742766][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1379.742766][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1379.742766][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1379.742766][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1379.742766][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1379.742766][T23774] do_int80_syscall_32+0x1d/0x30 [ 1379.742766][T23774] entry_INT80_compat+0x71/0x76 [ 1379.742766][T23774] [ 1379.742766][T23774] Uninit was stored to memory at: [ 1379.742766][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1379.742766][T23774] __msan_chain_origin+0x50/0x90 [ 1379.742766][T23774] __get_compat_msghdr+0x5be/0x890 [ 1379.742766][T23774] get_compat_msghdr+0x108/0x270 [ 1379.742766][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1380.062839][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1379.742766][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1379.742766][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.080313][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1379.742766][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.090623][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.100738][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1380.090623][T23774] do_int80_syscall_32+0x1d/0x30 [ 1380.090623][T23774] entry_INT80_compat+0x71/0x76 [ 1380.090623][T23774] [ 1380.090623][T23774] Uninit was stored to memory at: [ 1380.090623][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1380.090623][T23774] __msan_chain_origin+0x50/0x90 [ 1380.090623][T23774] __get_compat_msghdr+0x5be/0x890 [ 1380.090623][T23774] get_compat_msghdr+0x108/0x270 [ 1380.090623][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1380.090623][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1380.090623][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.090623][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.090623][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.090623][T23774] do_int80_syscall_32+0x1d/0x30 [ 1380.090623][T23774] entry_INT80_compat+0x71/0x76 [ 1380.090623][T23774] [ 1380.090623][T23774] Uninit was stored to memory at: [ 1380.090623][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1380.090623][T23774] __msan_chain_origin+0x50/0x90 [ 1380.090623][T23774] __get_compat_msghdr+0x5be/0x890 [ 1380.090623][T23774] get_compat_msghdr+0x108/0x270 [ 1380.090623][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1380.090623][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1380.090623][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.090623][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.090623][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.090623][T23774] do_int80_syscall_32+0x1d/0x30 [ 1380.090623][T23774] entry_INT80_compat+0x71/0x76 [ 1380.090623][T23774] [ 1380.090623][T23774] Uninit was stored to memory at: [ 1380.090623][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1380.090623][T23774] __msan_chain_origin+0x50/0x90 [ 1380.090623][T23774] __get_compat_msghdr+0x5be/0x890 [ 1380.090623][T23774] get_compat_msghdr+0x108/0x270 [ 1380.090623][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1380.090623][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1380.090623][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.090623][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.090623][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.090623][T23774] do_int80_syscall_32+0x1d/0x30 [ 1380.090623][T23774] entry_INT80_compat+0x71/0x76 [ 1380.090623][T23774] [ 1380.090623][T23774] Uninit was stored to memory at: [ 1380.090623][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1380.090623][T23774] __msan_chain_origin+0x50/0x90 [ 1380.090623][T23774] __get_compat_msghdr+0x5be/0x890 [ 1380.090623][T23774] get_compat_msghdr+0x108/0x270 [ 1380.090623][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1380.090623][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1380.090623][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.090623][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.090623][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.090623][T23774] do_int80_syscall_32+0x1d/0x30 [ 1380.090623][T23774] entry_INT80_compat+0x71/0x76 [ 1380.090623][T23774] [ 1380.090623][T23774] Uninit was stored to memory at: [ 1380.090623][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1380.090623][T23774] __msan_chain_origin+0x50/0x90 [ 1380.090623][T23774] __get_compat_msghdr+0x5be/0x890 [ 1380.090623][T23774] get_compat_msghdr+0x108/0x270 [ 1380.090623][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1380.090623][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1380.090623][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.090623][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.090623][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.090623][T23774] do_int80_syscall_32+0x1d/0x30 [ 1380.090623][T23774] entry_INT80_compat+0x71/0x76 [ 1380.090623][T23774] [ 1380.090623][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1380.090623][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1380.090623][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1380.560248][T23768] not chained 4060000 origins [ 1380.562597][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1380.562597][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.562597][T23768] Call Trace: [ 1380.562597][T23768] dump_stack+0x1df/0x240 [ 1380.562597][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1380.562597][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1380.562597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1380.562597][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1380.562597][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1380.562597][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1380.562597][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1380.562597][T23768] ? psi_group_change+0x1007/0x13c0 [ 1380.562597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1380.562597][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1380.562597][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1380.562597][T23768] ? _copy_from_user+0x15b/0x260 [ 1380.562597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1380.562597][T23768] __msan_chain_origin+0x50/0x90 [ 1380.562597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1380.562597][T23768] get_compat_msghdr+0x108/0x270 [ 1380.562597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1380.562597][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1380.562597][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1380.562597][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1380.562597][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1380.562597][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1380.562597][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1380.562597][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1380.562597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1380.562597][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1380.562597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.562597][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1380.562597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.562597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.562597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1380.562597][T23768] entry_INT80_compat+0x71/0x76 [ 1380.562597][T23768] RIP: 0023:0xf7f11549 [ 1380.562597][T23768] Code: Bad RIP value. [ 1380.562597][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1380.562597][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1380.562597][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1380.562597][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1380.562597][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1380.562597][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.562597][T23768] Uninit was stored to memory at: [ 1380.562597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1380.562597][T23768] __msan_chain_origin+0x50/0x90 [ 1380.562597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1380.562597][T23768] get_compat_msghdr+0x108/0x270 [ 1380.562597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1380.562597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1380.562597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.562597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.562597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.562597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1380.562597][T23768] entry_INT80_compat+0x71/0x76 [ 1380.562597][T23768] [ 1380.562597][T23768] Uninit was stored to memory at: [ 1380.562597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1380.562597][T23768] __msan_chain_origin+0x50/0x90 [ 1380.562597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1380.562597][T23768] get_compat_msghdr+0x108/0x270 [ 1380.562597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1380.562597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1380.562597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.562597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.562597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.562597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1380.562597][T23768] entry_INT80_compat+0x71/0x76 [ 1380.562597][T23768] [ 1380.562597][T23768] Uninit was stored to memory at: [ 1380.562597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1380.562597][T23768] __msan_chain_origin+0x50/0x90 [ 1380.562597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1380.562597][T23768] get_compat_msghdr+0x108/0x270 [ 1380.562597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1380.562597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1380.562597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.562597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.562597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.562597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1380.562597][T23768] entry_INT80_compat+0x71/0x76 [ 1380.562597][T23768] [ 1380.562597][T23768] Uninit was stored to memory at: [ 1380.562597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1380.562597][T23768] __msan_chain_origin+0x50/0x90 [ 1380.562597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1380.562597][T23768] get_compat_msghdr+0x108/0x270 [ 1380.562597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1380.562597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1380.562597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.562597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.562597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.562597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1380.562597][T23768] entry_INT80_compat+0x71/0x76 [ 1380.562597][T23768] [ 1380.562597][T23768] Uninit was stored to memory at: [ 1380.562597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1380.562597][T23768] __msan_chain_origin+0x50/0x90 [ 1380.562597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1380.562597][T23768] get_compat_msghdr+0x108/0x270 [ 1380.562597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1380.562597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1380.562597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.562597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.562597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.562597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1380.562597][T23768] entry_INT80_compat+0x71/0x76 [ 1380.562597][T23768] [ 1380.562597][T23768] Uninit was stored to memory at: [ 1380.562597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1380.562597][T23768] __msan_chain_origin+0x50/0x90 [ 1380.562597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1380.562597][T23768] get_compat_msghdr+0x108/0x270 [ 1380.562597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1380.562597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1380.562597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.562597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.562597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.562597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1380.562597][T23768] entry_INT80_compat+0x71/0x76 [ 1380.562597][T23768] [ 1380.562597][T23768] Uninit was stored to memory at: [ 1380.562597][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1380.562597][T23768] __msan_chain_origin+0x50/0x90 [ 1380.562597][T23768] __get_compat_msghdr+0x5be/0x890 [ 1380.562597][T23768] get_compat_msghdr+0x108/0x270 [ 1380.562597][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1380.562597][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1380.562597][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1380.562597][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1380.562597][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1380.562597][T23768] do_int80_syscall_32+0x1d/0x30 [ 1380.562597][T23768] entry_INT80_compat+0x71/0x76 [ 1380.562597][T23768] [ 1380.562597][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1380.562597][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1380.562597][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1381.448983][T23774] not chained 4070000 origins [ 1381.452584][T23774] CPU: 0 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1381.452584][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1381.452584][T23774] Call Trace: [ 1381.452584][T23774] dump_stack+0x1df/0x240 [ 1381.452584][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1381.482767][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1381.482767][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1381.482767][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1381.482767][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1381.482767][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1381.482767][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1381.482767][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1381.482767][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1381.482767][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1381.482767][T23774] ? _copy_from_user+0x15b/0x260 [ 1381.482767][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1381.482767][T23774] __msan_chain_origin+0x50/0x90 [ 1381.482767][T23774] __get_compat_msghdr+0x5be/0x890 [ 1381.552743][T23774] get_compat_msghdr+0x108/0x270 [ 1381.552743][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1381.552743][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1381.552743][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1381.552743][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1381.552743][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1381.552743][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1381.552743][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1381.552743][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1381.552743][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1381.552743][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1381.552743][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.552743][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1381.552743][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.552743][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1381.552743][T23774] do_int80_syscall_32+0x1d/0x30 [ 1381.552743][T23774] entry_INT80_compat+0x71/0x76 [ 1381.552743][T23774] RIP: 0023:0xf7f11549 [ 1381.552743][T23774] Code: Bad RIP value. [ 1381.552743][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1381.552743][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1381.552743][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1381.552743][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1381.552743][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1381.552743][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1381.552743][T23774] Uninit was stored to memory at: [ 1381.552743][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1381.552743][T23774] __msan_chain_origin+0x50/0x90 [ 1381.552743][T23774] __get_compat_msghdr+0x5be/0x890 [ 1381.552743][T23774] get_compat_msghdr+0x108/0x270 [ 1381.552743][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1381.552743][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1381.552743][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.552743][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.552743][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1381.552743][T23774] do_int80_syscall_32+0x1d/0x30 [ 1381.552743][T23774] entry_INT80_compat+0x71/0x76 [ 1381.552743][T23774] [ 1381.552743][T23774] Uninit was stored to memory at: [ 1381.552743][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1381.552743][T23774] __msan_chain_origin+0x50/0x90 [ 1381.552743][T23774] __get_compat_msghdr+0x5be/0x890 [ 1381.552743][T23774] get_compat_msghdr+0x108/0x270 [ 1381.552743][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1381.552743][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1381.552743][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.552743][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.552743][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1381.552743][T23774] do_int80_syscall_32+0x1d/0x30 [ 1381.552743][T23774] entry_INT80_compat+0x71/0x76 [ 1381.552743][T23774] [ 1381.552743][T23774] Uninit was stored to memory at: [ 1381.552743][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1381.552743][T23774] __msan_chain_origin+0x50/0x90 [ 1381.552743][T23774] __get_compat_msghdr+0x5be/0x890 [ 1381.552743][T23774] get_compat_msghdr+0x108/0x270 [ 1381.552743][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1381.552743][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1381.552743][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.552743][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.552743][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1381.552743][T23774] do_int80_syscall_32+0x1d/0x30 [ 1381.552743][T23774] entry_INT80_compat+0x71/0x76 [ 1381.552743][T23774] [ 1381.552743][T23774] Uninit was stored to memory at: [ 1381.552743][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1381.552743][T23774] __msan_chain_origin+0x50/0x90 [ 1381.552743][T23774] __get_compat_msghdr+0x5be/0x890 [ 1381.552743][T23774] get_compat_msghdr+0x108/0x270 [ 1381.552743][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1381.552743][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1381.552743][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.552743][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.552743][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1381.552743][T23774] do_int80_syscall_32+0x1d/0x30 [ 1381.552743][T23774] entry_INT80_compat+0x71/0x76 [ 1381.552743][T23774] [ 1381.552743][T23774] Uninit was stored to memory at: [ 1381.552743][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1381.552743][T23774] __msan_chain_origin+0x50/0x90 [ 1381.552743][T23774] __get_compat_msghdr+0x5be/0x890 [ 1381.552743][T23774] get_compat_msghdr+0x108/0x270 [ 1381.552743][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1381.552743][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1381.552743][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.552743][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.552743][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1381.552743][T23774] do_int80_syscall_32+0x1d/0x30 [ 1381.552743][T23774] entry_INT80_compat+0x71/0x76 [ 1381.552743][T23774] [ 1381.552743][T23774] Uninit was stored to memory at: [ 1381.552743][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1381.552743][T23774] __msan_chain_origin+0x50/0x90 [ 1381.552743][T23774] __get_compat_msghdr+0x5be/0x890 [ 1381.552743][T23774] get_compat_msghdr+0x108/0x270 [ 1381.552743][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1381.552743][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1381.552743][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.552743][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.552743][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1381.552743][T23774] do_int80_syscall_32+0x1d/0x30 [ 1381.552743][T23774] entry_INT80_compat+0x71/0x76 [ 1381.552743][T23774] [ 1381.552743][T23774] Uninit was stored to memory at: [ 1381.552743][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1381.552743][T23774] __msan_chain_origin+0x50/0x90 [ 1381.552743][T23774] __get_compat_msghdr+0x5be/0x890 [ 1381.552743][T23774] get_compat_msghdr+0x108/0x270 [ 1381.552743][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1381.552743][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1381.552743][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1381.552743][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1381.552743][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1381.552743][T23774] do_int80_syscall_32+0x1d/0x30 [ 1381.552743][T23774] entry_INT80_compat+0x71/0x76 [ 1381.552743][T23774] [ 1381.552743][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1381.552743][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1381.552743][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1382.335931][T23768] not chained 4080000 origins [ 1382.340647][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1382.342588][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.342588][T23768] Call Trace: [ 1382.342588][T23768] dump_stack+0x1df/0x240 [ 1382.342588][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1382.342588][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1382.342588][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1382.342588][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1382.342588][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1382.392798][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1382.392798][T23768] ? kmsan_get_metadata+0x11d/0x180 [ 1382.392798][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1382.392798][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1382.392798][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1382.392798][T23768] ? _copy_from_user+0x15b/0x260 [ 1382.392798][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1382.392798][T23768] __msan_chain_origin+0x50/0x90 [ 1382.392798][T23768] __get_compat_msghdr+0x5be/0x890 [ 1382.392798][T23768] get_compat_msghdr+0x108/0x270 [ 1382.392798][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1382.392798][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1382.392798][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1382.392798][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1382.392798][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1382.392798][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1382.392798][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1382.392798][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1382.392798][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1382.392798][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1382.392798][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.392798][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1382.392798][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.392798][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1382.392798][T23768] do_int80_syscall_32+0x1d/0x30 [ 1382.392798][T23768] entry_INT80_compat+0x71/0x76 [ 1382.392798][T23768] RIP: 0023:0xf7f11549 [ 1382.392798][T23768] Code: Bad RIP value. [ 1382.392798][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1382.392798][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1382.392798][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1382.392798][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1382.392798][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1382.392798][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1382.392798][T23768] Uninit was stored to memory at: [ 1382.392798][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1382.392798][T23768] __msan_chain_origin+0x50/0x90 [ 1382.392798][T23768] __get_compat_msghdr+0x5be/0x890 [ 1382.392798][T23768] get_compat_msghdr+0x108/0x270 [ 1382.392798][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1382.392798][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1382.392798][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.392798][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.392798][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1382.392798][T23768] do_int80_syscall_32+0x1d/0x30 [ 1382.392798][T23768] entry_INT80_compat+0x71/0x76 [ 1382.392798][T23768] [ 1382.392798][T23768] Uninit was stored to memory at: [ 1382.392798][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1382.392798][T23768] __msan_chain_origin+0x50/0x90 [ 1382.392798][T23768] __get_compat_msghdr+0x5be/0x890 [ 1382.392798][T23768] get_compat_msghdr+0x108/0x270 [ 1382.392798][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1382.392798][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1382.392798][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.392798][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.392798][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1382.392798][T23768] do_int80_syscall_32+0x1d/0x30 [ 1382.392798][T23768] entry_INT80_compat+0x71/0x76 [ 1382.392798][T23768] [ 1382.392798][T23768] Uninit was stored to memory at: [ 1382.392798][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1382.392798][T23768] __msan_chain_origin+0x50/0x90 [ 1382.392798][T23768] __get_compat_msghdr+0x5be/0x890 [ 1382.392798][T23768] get_compat_msghdr+0x108/0x270 [ 1382.392798][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1382.392798][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1382.392798][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.392798][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.392798][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1382.392798][T23768] do_int80_syscall_32+0x1d/0x30 [ 1382.392798][T23768] entry_INT80_compat+0x71/0x76 [ 1382.392798][T23768] [ 1382.392798][T23768] Uninit was stored to memory at: [ 1382.392798][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1382.392798][T23768] __msan_chain_origin+0x50/0x90 [ 1382.392798][T23768] __get_compat_msghdr+0x5be/0x890 [ 1382.392798][T23768] get_compat_msghdr+0x108/0x270 [ 1382.392798][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1382.392798][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1382.392798][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.392798][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.392798][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1382.392798][T23768] do_int80_syscall_32+0x1d/0x30 [ 1382.392798][T23768] entry_INT80_compat+0x71/0x76 [ 1382.392798][T23768] [ 1382.392798][T23768] Uninit was stored to memory at: [ 1382.392798][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1382.392798][T23768] __msan_chain_origin+0x50/0x90 [ 1382.392798][T23768] __get_compat_msghdr+0x5be/0x890 [ 1382.392798][T23768] get_compat_msghdr+0x108/0x270 [ 1382.392798][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1382.392798][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1382.392798][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.392798][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.392798][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1382.392798][T23768] do_int80_syscall_32+0x1d/0x30 [ 1382.392798][T23768] entry_INT80_compat+0x71/0x76 [ 1382.392798][T23768] [ 1382.392798][T23768] Uninit was stored to memory at: [ 1382.392798][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1382.392798][T23768] __msan_chain_origin+0x50/0x90 [ 1382.392798][T23768] __get_compat_msghdr+0x5be/0x890 [ 1382.392798][T23768] get_compat_msghdr+0x108/0x270 [ 1382.392798][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1382.392798][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1382.392798][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.392798][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.392798][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1382.392798][T23768] do_int80_syscall_32+0x1d/0x30 [ 1382.392798][T23768] entry_INT80_compat+0x71/0x76 [ 1382.392798][T23768] [ 1382.392798][T23768] Uninit was stored to memory at: [ 1382.392798][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1382.392798][T23768] __msan_chain_origin+0x50/0x90 [ 1382.392798][T23768] __get_compat_msghdr+0x5be/0x890 [ 1382.392798][T23768] get_compat_msghdr+0x108/0x270 [ 1382.392798][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1382.392798][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1382.392798][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1382.392798][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1382.392798][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1382.392798][T23768] do_int80_syscall_32+0x1d/0x30 [ 1382.392798][T23768] entry_INT80_compat+0x71/0x76 [ 1382.392798][T23768] [ 1382.392798][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1382.392798][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1382.392798][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1383.208742][T23774] not chained 4090000 origins [ 1383.212596][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1383.212596][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.212596][T23774] Call Trace: [ 1383.212596][T23774] dump_stack+0x1df/0x240 [ 1383.212596][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1383.212596][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1383.212596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1383.212596][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1383.212596][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1383.212596][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1383.212596][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1383.212596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1383.212596][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1383.212596][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1383.212596][T23774] ? _copy_from_user+0x15b/0x260 [ 1383.212596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1383.212596][T23774] __msan_chain_origin+0x50/0x90 [ 1383.212596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1383.212596][T23774] get_compat_msghdr+0x108/0x270 [ 1383.212596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1383.212596][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1383.212596][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1383.212596][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1383.212596][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1383.212596][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1383.212596][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1383.212596][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1383.212596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1383.212596][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1383.212596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.212596][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1383.212596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.212596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1383.212596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1383.212596][T23774] entry_INT80_compat+0x71/0x76 [ 1383.212596][T23774] RIP: 0023:0xf7f11549 [ 1383.212596][T23774] Code: Bad RIP value. [ 1383.212596][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1383.212596][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1383.212596][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1383.212596][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1383.212596][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1383.212596][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1383.212596][T23774] Uninit was stored to memory at: [ 1383.212596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1383.212596][T23774] __msan_chain_origin+0x50/0x90 [ 1383.212596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1383.212596][T23774] get_compat_msghdr+0x108/0x270 [ 1383.212596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1383.212596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1383.212596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.212596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.212596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1383.212596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1383.212596][T23774] entry_INT80_compat+0x71/0x76 [ 1383.212596][T23774] [ 1383.212596][T23774] Uninit was stored to memory at: [ 1383.212596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1383.212596][T23774] __msan_chain_origin+0x50/0x90 [ 1383.212596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1383.212596][T23774] get_compat_msghdr+0x108/0x270 [ 1383.212596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1383.212596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1383.212596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.212596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.212596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1383.212596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1383.212596][T23774] entry_INT80_compat+0x71/0x76 [ 1383.212596][T23774] [ 1383.212596][T23774] Uninit was stored to memory at: [ 1383.212596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1383.212596][T23774] __msan_chain_origin+0x50/0x90 [ 1383.212596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1383.212596][T23774] get_compat_msghdr+0x108/0x270 [ 1383.212596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1383.212596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1383.212596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.212596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.212596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1383.212596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1383.212596][T23774] entry_INT80_compat+0x71/0x76 [ 1383.212596][T23774] [ 1383.212596][T23774] Uninit was stored to memory at: [ 1383.212596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1383.212596][T23774] __msan_chain_origin+0x50/0x90 [ 1383.212596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1383.212596][T23774] get_compat_msghdr+0x108/0x270 [ 1383.212596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1383.212596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1383.212596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.212596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.212596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1383.212596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1383.212596][T23774] entry_INT80_compat+0x71/0x76 [ 1383.212596][T23774] [ 1383.212596][T23774] Uninit was stored to memory at: [ 1383.212596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1383.212596][T23774] __msan_chain_origin+0x50/0x90 [ 1383.212596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1383.212596][T23774] get_compat_msghdr+0x108/0x270 [ 1383.212596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1383.212596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1383.212596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.212596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.212596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1383.212596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1383.212596][T23774] entry_INT80_compat+0x71/0x76 [ 1383.212596][T23774] [ 1383.212596][T23774] Uninit was stored to memory at: [ 1383.212596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1383.212596][T23774] __msan_chain_origin+0x50/0x90 [ 1383.212596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1383.212596][T23774] get_compat_msghdr+0x108/0x270 [ 1383.212596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1383.212596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1383.212596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.212596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.212596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1383.212596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1383.212596][T23774] entry_INT80_compat+0x71/0x76 [ 1383.212596][T23774] [ 1383.212596][T23774] Uninit was stored to memory at: [ 1383.212596][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1383.212596][T23774] __msan_chain_origin+0x50/0x90 [ 1383.212596][T23774] __get_compat_msghdr+0x5be/0x890 [ 1383.212596][T23774] get_compat_msghdr+0x108/0x270 [ 1383.212596][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1383.212596][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1383.212596][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1383.212596][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1383.212596][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1383.212596][T23774] do_int80_syscall_32+0x1d/0x30 [ 1383.212596][T23774] entry_INT80_compat+0x71/0x76 [ 1383.212596][T23774] [ 1383.212596][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1383.212596][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1383.212596][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1384.086002][T23768] not chained 4100000 origins [ 1384.090713][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1384.092592][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.092592][T23768] Call Trace: [ 1384.092592][T23768] dump_stack+0x1df/0x240 [ 1384.092592][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1384.092592][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1384.092592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1384.092592][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1384.137741][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1384.092592][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1384.092592][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1384.092592][T23768] ? psi_group_change+0x1007/0x13c0 [ 1384.092592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1384.092592][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1384.092592][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1384.092592][T23768] ? _copy_from_user+0x15b/0x260 [ 1384.092592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1384.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1384.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1384.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1384.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1384.092592][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1384.218569][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1384.092592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1384.092592][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1384.092592][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1384.092592][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1384.092592][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1384.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1384.092592][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1384.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.275914][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1384.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1384.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1384.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1384.092592][T23768] RIP: 0023:0xf7f11549 [ 1384.092592][T23768] Code: Bad RIP value. [ 1384.092592][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1384.327348][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1384.092592][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1384.092592][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1384.092592][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1384.092592][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1384.092592][T23768] Uninit was stored to memory at: [ 1384.383996][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1384.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1384.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1384.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1384.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1384.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1384.423474][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1384.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1384.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1384.092592][T23768] [ 1384.092592][T23768] Uninit was stored to memory at: [ 1384.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1384.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1384.476928][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1384.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1384.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1384.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1384.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1384.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1384.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1384.092592][T23768] [ 1384.533943][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] Uninit was stored to memory at: [ 1384.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1384.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1384.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1384.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1384.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1384.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1384.578244][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1384.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1384.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1384.092592][T23768] [ 1384.092592][T23768] Uninit was stored to memory at: [ 1384.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1384.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1384.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1384.637003][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1384.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1384.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1384.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1384.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1384.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1384.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1384.092592][T23768] [ 1384.092592][T23768] Uninit was stored to memory at: [ 1384.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1384.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1384.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1384.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1384.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1384.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1384.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1384.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1384.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1384.092592][T23768] [ 1384.092592][T23768] Uninit was stored to memory at: [ 1384.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1384.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1384.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1384.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1384.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1384.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1384.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1384.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1384.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1384.092592][T23768] [ 1384.092592][T23768] Uninit was stored to memory at: [ 1384.092592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1384.092592][T23768] __msan_chain_origin+0x50/0x90 [ 1384.092592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1384.092592][T23768] get_compat_msghdr+0x108/0x270 [ 1384.092592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1384.092592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1384.092592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1384.092592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1384.092592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1384.092592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1384.092592][T23768] entry_INT80_compat+0x71/0x76 [ 1384.092592][T23768] [ 1384.092592][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1384.092592][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1384.092592][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1385.056741][T23774] not chained 4110000 origins [ 1385.061460][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1385.062599][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.062599][T23774] Call Trace: [ 1385.062599][T23774] dump_stack+0x1df/0x240 [ 1385.062599][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1385.062599][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1385.062599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1385.062599][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1385.062599][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1385.062599][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1385.062599][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1385.062599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1385.062599][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1385.062599][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1385.062599][T23774] ? _copy_from_user+0x15b/0x260 [ 1385.062599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1385.062599][T23774] __msan_chain_origin+0x50/0x90 [ 1385.062599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1385.062599][T23774] get_compat_msghdr+0x108/0x270 [ 1385.062599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1385.062599][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1385.062599][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1385.062599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1385.062599][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1385.062599][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1385.062599][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1385.062599][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1385.062599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1385.062599][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1385.062599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.062599][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1385.062599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.062599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.062599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1385.062599][T23774] entry_INT80_compat+0x71/0x76 [ 1385.062599][T23774] RIP: 0023:0xf7f11549 [ 1385.062599][T23774] Code: Bad RIP value. [ 1385.062599][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1385.062599][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1385.062599][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1385.062599][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1385.062599][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1385.062599][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1385.062599][T23774] Uninit was stored to memory at: [ 1385.062599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1385.062599][T23774] __msan_chain_origin+0x50/0x90 [ 1385.062599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1385.062599][T23774] get_compat_msghdr+0x108/0x270 [ 1385.062599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1385.062599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1385.062599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.062599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.062599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.062599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1385.062599][T23774] entry_INT80_compat+0x71/0x76 [ 1385.062599][T23774] [ 1385.062599][T23774] Uninit was stored to memory at: [ 1385.062599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1385.062599][T23774] __msan_chain_origin+0x50/0x90 [ 1385.062599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1385.062599][T23774] get_compat_msghdr+0x108/0x270 [ 1385.062599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1385.062599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1385.062599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.062599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.062599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.062599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1385.433561][T23768] not chained 4120000 origins [ 1385.062599][T23774] entry_INT80_compat+0x71/0x76 [ 1385.438614][T23768] CPU: 0 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1385.062599][T23774] [ 1385.442581][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.062599][T23774] Uninit was stored to memory at: [ 1385.442581][T23768] Call Trace: [ 1385.062599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1385.442581][T23768] dump_stack+0x1df/0x240 [ 1385.062599][T23774] __msan_chain_origin+0x50/0x90 [ 1385.442581][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1385.062599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1385.442581][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1385.062599][T23774] get_compat_msghdr+0x108/0x270 [ 1385.442581][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1385.062599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1385.442581][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1385.062599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1385.442581][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1385.062599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.442581][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1385.062599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.442581][T23768] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1385.062599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.442581][T23768] ? psi_group_change+0x1007/0x13c0 [ 1385.062599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1385.442581][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1385.062599][T23774] entry_INT80_compat+0x71/0x76 [ 1385.442581][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1385.062599][T23774] [ 1385.442581][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1385.062599][T23774] Uninit was stored to memory at: [ 1385.442581][T23768] ? _copy_from_user+0x15b/0x260 [ 1385.062599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1385.442581][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1385.062599][T23774] __msan_chain_origin+0x50/0x90 [ 1385.442581][T23768] __msan_chain_origin+0x50/0x90 [ 1385.062599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1385.442581][T23768] __get_compat_msghdr+0x5be/0x890 [ 1385.062599][T23774] get_compat_msghdr+0x108/0x270 [ 1385.442581][T23768] get_compat_msghdr+0x108/0x270 [ 1385.062599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1385.442581][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1385.062599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1385.442581][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1385.062599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.442581][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1385.062599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.442581][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1385.062599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.442581][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1385.062599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1385.442581][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1385.062599][T23774] entry_INT80_compat+0x71/0x76 [ 1385.442581][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1385.062599][T23774] [ 1385.442581][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1385.062599][T23774] Uninit was stored to memory at: [ 1385.442581][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1385.062599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1385.442581][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1385.062599][T23774] __msan_chain_origin+0x50/0x90 [ 1385.442581][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.062599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1385.442581][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1385.062599][T23774] get_compat_msghdr+0x108/0x270 [ 1385.442581][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.062599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1385.442581][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.062599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1385.442581][T23768] do_int80_syscall_32+0x1d/0x30 [ 1385.062599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.442581][T23768] entry_INT80_compat+0x71/0x76 [ 1385.062599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.442581][T23768] RIP: 0023:0xf7f11549 [ 1385.062599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.442581][T23768] Code: Bad RIP value. [ 1385.062599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1385.442581][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1385.062599][T23774] entry_INT80_compat+0x71/0x76 [ 1385.442581][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1385.062599][T23774] [ 1385.442581][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1385.062599][T23774] Uninit was stored to memory at: [ 1385.442581][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1385.062599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1385.442581][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1385.062599][T23774] __msan_chain_origin+0x50/0x90 [ 1385.442581][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1385.062599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1385.442581][T23768] Uninit was stored to memory at: [ 1385.062599][T23774] get_compat_msghdr+0x108/0x270 [ 1385.442581][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1385.062599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1385.442581][T23768] __msan_chain_origin+0x50/0x90 [ 1385.062599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1385.442581][T23768] __get_compat_msghdr+0x5be/0x890 [ 1385.062599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.442581][T23768] get_compat_msghdr+0x108/0x270 [ 1385.062599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.442581][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1385.062599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.442581][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1385.062599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1385.442581][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.062599][T23774] entry_INT80_compat+0x71/0x76 [ 1385.442581][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.062599][T23774] [ 1385.442581][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.062599][T23774] Uninit was stored to memory at: [ 1385.442581][T23768] do_int80_syscall_32+0x1d/0x30 [ 1385.062599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1385.442581][T23768] entry_INT80_compat+0x71/0x76 [ 1385.062599][T23774] __msan_chain_origin+0x50/0x90 [ 1385.442581][T23768] [ 1385.062599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1385.442581][T23768] Uninit was stored to memory at: [ 1385.062599][T23774] get_compat_msghdr+0x108/0x270 [ 1385.442581][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1385.062599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1385.442581][T23768] __msan_chain_origin+0x50/0x90 [ 1385.062599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1385.442581][T23768] __get_compat_msghdr+0x5be/0x890 [ 1385.062599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.442581][T23768] get_compat_msghdr+0x108/0x270 [ 1385.062599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.442581][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1385.062599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.442581][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1385.062599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1385.442581][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1385.062599][T23774] entry_INT80_compat+0x71/0x76 [ 1385.442581][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1385.062599][T23774] [ 1385.442581][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1385.062599][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1385.442581][T23768] do_int80_syscall_32+0x1d/0x30 [ 1385.062599][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1385.442581][T23768] entry_INT80_compat+0x71/0x76 [ 1385.062599][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1385.442581][T23768] [ 1385.442581][T23768] Uninit was stored to memory at: [ 1385.442581][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1386.179346][T23768] __msan_chain_origin+0x50/0x90 [ 1386.179353][T23768] __get_compat_msghdr+0x5be/0x890 [ 1386.179353][T23768] get_compat_msghdr+0x108/0x270 [ 1386.179353][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1386.179353][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1386.179353][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.179353][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.179353][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.179353][T23768] do_int80_syscall_32+0x1d/0x30 [ 1386.179353][T23768] entry_INT80_compat+0x71/0x76 [ 1386.179353][T23768] [ 1386.179353][T23768] Uninit was stored to memory at: [ 1386.179353][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1386.179353][T23768] __msan_chain_origin+0x50/0x90 [ 1386.179353][T23768] __get_compat_msghdr+0x5be/0x890 [ 1386.179353][T23768] get_compat_msghdr+0x108/0x270 [ 1386.179353][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1386.179353][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1386.179353][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.179353][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.179353][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.179353][T23768] do_int80_syscall_32+0x1d/0x30 [ 1386.179353][T23768] entry_INT80_compat+0x71/0x76 [ 1386.179353][T23768] [ 1386.179353][T23768] Uninit was stored to memory at: [ 1386.179353][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1386.179353][T23768] __msan_chain_origin+0x50/0x90 [ 1386.179353][T23768] __get_compat_msghdr+0x5be/0x890 [ 1386.179353][T23768] get_compat_msghdr+0x108/0x270 [ 1386.179353][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1386.179353][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1386.179353][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.179353][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.179353][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.179353][T23768] do_int80_syscall_32+0x1d/0x30 [ 1386.179353][T23768] entry_INT80_compat+0x71/0x76 [ 1386.179353][T23768] [ 1386.179353][T23768] Uninit was stored to memory at: [ 1386.179353][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1386.179353][T23768] __msan_chain_origin+0x50/0x90 [ 1386.179353][T23768] __get_compat_msghdr+0x5be/0x890 [ 1386.179353][T23768] get_compat_msghdr+0x108/0x270 [ 1386.179353][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1386.179353][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1386.179353][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.402708][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.402708][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.402708][T23768] do_int80_syscall_32+0x1d/0x30 [ 1386.402708][T23768] entry_INT80_compat+0x71/0x76 [ 1386.402708][T23768] [ 1386.402708][T23768] Uninit was stored to memory at: [ 1386.402708][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1386.402708][T23768] __msan_chain_origin+0x50/0x90 [ 1386.402708][T23768] __get_compat_msghdr+0x5be/0x890 [ 1386.402708][T23768] get_compat_msghdr+0x108/0x270 [ 1386.402708][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1386.402708][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1386.402708][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.402708][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.402708][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.402708][T23768] do_int80_syscall_32+0x1d/0x30 [ 1386.402708][T23768] entry_INT80_compat+0x71/0x76 [ 1386.402708][T23768] [ 1386.402708][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1386.402708][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1386.402708][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1386.665989][T23774] not chained 4130000 origins [ 1386.670723][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1386.672604][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.672604][T23774] Call Trace: [ 1386.672604][T23774] dump_stack+0x1df/0x240 [ 1386.672604][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1386.672604][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1386.672604][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1386.672604][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1386.672604][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1386.672604][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1386.672604][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1386.672604][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1386.672604][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1386.672604][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1386.672604][T23774] ? _copy_from_user+0x15b/0x260 [ 1386.672604][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1386.672604][T23774] __msan_chain_origin+0x50/0x90 [ 1386.672604][T23774] __get_compat_msghdr+0x5be/0x890 [ 1386.672604][T23774] get_compat_msghdr+0x108/0x270 [ 1386.672604][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1386.672604][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1386.672604][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1386.672604][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1386.672604][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1386.672604][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1386.672604][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1386.672604][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1386.672604][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1386.672604][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1386.672604][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.672604][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1386.672604][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.672604][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.672604][T23774] do_int80_syscall_32+0x1d/0x30 [ 1386.672604][T23774] entry_INT80_compat+0x71/0x76 [ 1386.672604][T23774] RIP: 0023:0xf7f11549 [ 1386.672604][T23774] Code: Bad RIP value. [ 1386.672604][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1386.672604][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1386.672604][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1386.672604][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1386.672604][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1386.672604][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1386.672604][T23774] Uninit was stored to memory at: [ 1386.672604][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1386.672604][T23774] __msan_chain_origin+0x50/0x90 [ 1386.672604][T23774] __get_compat_msghdr+0x5be/0x890 [ 1386.672604][T23774] get_compat_msghdr+0x108/0x270 [ 1386.672604][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1386.672604][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1386.672604][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.672604][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.672604][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.672604][T23774] do_int80_syscall_32+0x1d/0x30 [ 1386.672604][T23774] entry_INT80_compat+0x71/0x76 [ 1386.672604][T23774] [ 1386.672604][T23774] Uninit was stored to memory at: [ 1386.672604][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1386.672604][T23774] __msan_chain_origin+0x50/0x90 [ 1386.672604][T23774] __get_compat_msghdr+0x5be/0x890 [ 1386.672604][T23774] get_compat_msghdr+0x108/0x270 [ 1386.672604][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1386.672604][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1386.672604][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.672604][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.672604][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.672604][T23774] do_int80_syscall_32+0x1d/0x30 [ 1386.672604][T23774] entry_INT80_compat+0x71/0x76 [ 1386.672604][T23774] [ 1386.672604][T23774] Uninit was stored to memory at: [ 1386.672604][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1386.672604][T23774] __msan_chain_origin+0x50/0x90 [ 1386.672604][T23774] __get_compat_msghdr+0x5be/0x890 [ 1386.672604][T23774] get_compat_msghdr+0x108/0x270 [ 1386.672604][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1386.672604][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1386.672604][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.672604][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.672604][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.672604][T23774] do_int80_syscall_32+0x1d/0x30 [ 1386.672604][T23774] entry_INT80_compat+0x71/0x76 [ 1386.672604][T23774] [ 1386.672604][T23774] Uninit was stored to memory at: [ 1386.672604][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1386.672604][T23774] __msan_chain_origin+0x50/0x90 [ 1386.672604][T23774] __get_compat_msghdr+0x5be/0x890 [ 1386.672604][T23774] get_compat_msghdr+0x108/0x270 [ 1386.672604][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1386.672604][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1386.672604][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.672604][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.672604][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.672604][T23774] do_int80_syscall_32+0x1d/0x30 [ 1386.672604][T23774] entry_INT80_compat+0x71/0x76 [ 1386.672604][T23774] [ 1386.672604][T23774] Uninit was stored to memory at: [ 1386.672604][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1386.672604][T23774] __msan_chain_origin+0x50/0x90 [ 1386.672604][T23774] __get_compat_msghdr+0x5be/0x890 [ 1386.672604][T23774] get_compat_msghdr+0x108/0x270 [ 1386.672604][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1386.672604][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1386.672604][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.672604][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.672604][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.672604][T23774] do_int80_syscall_32+0x1d/0x30 [ 1386.672604][T23774] entry_INT80_compat+0x71/0x76 [ 1386.672604][T23774] [ 1386.672604][T23774] Uninit was stored to memory at: [ 1386.672604][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1386.672604][T23774] __msan_chain_origin+0x50/0x90 [ 1386.672604][T23774] __get_compat_msghdr+0x5be/0x890 [ 1386.672604][T23774] get_compat_msghdr+0x108/0x270 [ 1386.672604][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1386.672604][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1386.672604][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.672604][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.672604][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.672604][T23774] do_int80_syscall_32+0x1d/0x30 [ 1386.672604][T23774] entry_INT80_compat+0x71/0x76 [ 1386.672604][T23774] [ 1386.672604][T23774] Uninit was stored to memory at: [ 1386.672604][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1386.672604][T23774] __msan_chain_origin+0x50/0x90 [ 1386.672604][T23774] __get_compat_msghdr+0x5be/0x890 [ 1386.672604][T23774] get_compat_msghdr+0x108/0x270 [ 1386.672604][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1386.672604][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1386.672604][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1386.672604][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1386.672604][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1386.672604][T23774] do_int80_syscall_32+0x1d/0x30 [ 1386.672604][T23774] entry_INT80_compat+0x71/0x76 [ 1386.672604][T23774] [ 1386.672604][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1386.672604][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1386.672604][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1387.558610][T23774] not chained 4140000 origins [ 1387.562591][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1387.562591][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.562591][T23774] Call Trace: [ 1387.562591][T23774] dump_stack+0x1df/0x240 [ 1387.562591][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1387.562591][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1387.562591][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1387.562591][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1387.562591][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1387.562591][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1387.562591][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1387.562591][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1387.562591][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1387.562591][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1387.562591][T23774] ? _copy_from_user+0x15b/0x260 [ 1387.562591][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1387.562591][T23774] __msan_chain_origin+0x50/0x90 [ 1387.562591][T23774] __get_compat_msghdr+0x5be/0x890 [ 1387.562591][T23774] get_compat_msghdr+0x108/0x270 [ 1387.562591][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1387.562591][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1387.562591][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1387.562591][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1387.562591][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1387.562591][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1387.562591][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1387.562591][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1387.562591][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1387.562591][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1387.562591][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.562591][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1387.562591][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.562591][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1387.562591][T23774] do_int80_syscall_32+0x1d/0x30 [ 1387.562591][T23774] entry_INT80_compat+0x71/0x76 [ 1387.562591][T23774] RIP: 0023:0xf7f11549 [ 1387.562591][T23774] Code: Bad RIP value. [ 1387.562591][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1387.562591][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1387.562591][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1387.562591][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1387.562591][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1387.562591][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1387.562591][T23774] Uninit was stored to memory at: [ 1387.562591][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1387.562591][T23774] __msan_chain_origin+0x50/0x90 [ 1387.562591][T23774] __get_compat_msghdr+0x5be/0x890 [ 1387.562591][T23774] get_compat_msghdr+0x108/0x270 [ 1387.562591][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1387.562591][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1387.562591][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.562591][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.562591][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1387.562591][T23774] do_int80_syscall_32+0x1d/0x30 [ 1387.562591][T23774] entry_INT80_compat+0x71/0x76 [ 1387.562591][T23774] [ 1387.562591][T23774] Uninit was stored to memory at: [ 1387.562591][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1387.562591][T23774] __msan_chain_origin+0x50/0x90 [ 1387.562591][T23774] __get_compat_msghdr+0x5be/0x890 [ 1387.562591][T23774] get_compat_msghdr+0x108/0x270 [ 1387.562591][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1387.562591][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1387.562591][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.562591][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.562591][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1387.562591][T23774] do_int80_syscall_32+0x1d/0x30 [ 1387.562591][T23774] entry_INT80_compat+0x71/0x76 [ 1387.562591][T23774] [ 1387.562591][T23774] Uninit was stored to memory at: [ 1387.562591][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1387.562591][T23774] __msan_chain_origin+0x50/0x90 [ 1387.562591][T23774] __get_compat_msghdr+0x5be/0x890 [ 1387.562591][T23774] get_compat_msghdr+0x108/0x270 [ 1387.562591][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1387.562591][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1387.562591][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.562591][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.562591][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1387.562591][T23774] do_int80_syscall_32+0x1d/0x30 [ 1387.562591][T23774] entry_INT80_compat+0x71/0x76 [ 1387.562591][T23774] [ 1387.562591][T23774] Uninit was stored to memory at: [ 1387.562591][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1387.562591][T23774] __msan_chain_origin+0x50/0x90 [ 1387.562591][T23774] __get_compat_msghdr+0x5be/0x890 [ 1387.562591][T23774] get_compat_msghdr+0x108/0x270 [ 1387.562591][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1387.562591][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1387.562591][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.562591][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.562591][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1387.562591][T23774] do_int80_syscall_32+0x1d/0x30 [ 1387.562591][T23774] entry_INT80_compat+0x71/0x76 [ 1387.562591][T23774] [ 1387.562591][T23774] Uninit was stored to memory at: [ 1387.562591][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1387.562591][T23774] __msan_chain_origin+0x50/0x90 [ 1387.562591][T23774] __get_compat_msghdr+0x5be/0x890 [ 1387.562591][T23774] get_compat_msghdr+0x108/0x270 [ 1387.562591][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1387.562591][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1387.562591][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.562591][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.562591][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1387.562591][T23774] do_int80_syscall_32+0x1d/0x30 [ 1387.562591][T23774] entry_INT80_compat+0x71/0x76 [ 1387.562591][T23774] [ 1387.562591][T23774] Uninit was stored to memory at: [ 1387.562591][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1387.562591][T23774] __msan_chain_origin+0x50/0x90 [ 1387.562591][T23774] __get_compat_msghdr+0x5be/0x890 [ 1387.562591][T23774] get_compat_msghdr+0x108/0x270 [ 1387.562591][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1387.562591][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1387.562591][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.562591][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.562591][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1387.562591][T23774] do_int80_syscall_32+0x1d/0x30 [ 1387.562591][T23774] entry_INT80_compat+0x71/0x76 [ 1387.562591][T23774] [ 1387.562591][T23774] Uninit was stored to memory at: [ 1387.562591][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1387.562591][T23774] __msan_chain_origin+0x50/0x90 [ 1387.562591][T23774] __get_compat_msghdr+0x5be/0x890 [ 1387.562591][T23774] get_compat_msghdr+0x108/0x270 [ 1387.562591][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1387.562591][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1387.562591][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1387.562591][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1387.562591][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1387.562591][T23774] do_int80_syscall_32+0x1d/0x30 [ 1387.562591][T23774] entry_INT80_compat+0x71/0x76 [ 1387.562591][T23774] [ 1387.562591][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1387.562591][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1387.562591][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1388.445864][T23774] not chained 4150000 origins [ 1388.450578][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1388.452599][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.452599][T23774] Call Trace: [ 1388.452599][T23774] dump_stack+0x1df/0x240 [ 1388.452599][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1388.452599][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1388.452599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1388.452599][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1388.452599][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1388.452599][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1388.452599][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1388.452599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1388.452599][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1388.452599][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1388.452599][T23774] ? _copy_from_user+0x15b/0x260 [ 1388.452599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1388.452599][T23774] __msan_chain_origin+0x50/0x90 [ 1388.452599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1388.452599][T23774] get_compat_msghdr+0x108/0x270 [ 1388.452599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1388.452599][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1388.452599][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1388.452599][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1388.452599][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1388.452599][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1388.452599][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1388.452599][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1388.452599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1388.452599][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1388.452599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.452599][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1388.452599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.452599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1388.452599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1388.452599][T23774] entry_INT80_compat+0x71/0x76 [ 1388.452599][T23774] RIP: 0023:0xf7f11549 [ 1388.452599][T23774] Code: Bad RIP value. [ 1388.452599][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1388.452599][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1388.452599][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1388.452599][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1388.452599][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1388.452599][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1388.452599][T23774] Uninit was stored to memory at: [ 1388.452599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1388.452599][T23774] __msan_chain_origin+0x50/0x90 [ 1388.452599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1388.452599][T23774] get_compat_msghdr+0x108/0x270 [ 1388.452599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1388.452599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1388.452599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.452599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.452599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1388.452599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1388.452599][T23774] entry_INT80_compat+0x71/0x76 [ 1388.452599][T23774] [ 1388.452599][T23774] Uninit was stored to memory at: [ 1388.452599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1388.452599][T23774] __msan_chain_origin+0x50/0x90 [ 1388.452599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1388.452599][T23774] get_compat_msghdr+0x108/0x270 [ 1388.452599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1388.452599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1388.452599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.452599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.452599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1388.452599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1388.452599][T23774] entry_INT80_compat+0x71/0x76 [ 1388.452599][T23774] [ 1388.452599][T23774] Uninit was stored to memory at: [ 1388.452599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1388.452599][T23774] __msan_chain_origin+0x50/0x90 [ 1388.452599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1388.452599][T23774] get_compat_msghdr+0x108/0x270 [ 1388.452599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1388.452599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1388.452599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.452599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.452599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1388.452599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1388.452599][T23774] entry_INT80_compat+0x71/0x76 [ 1388.452599][T23774] [ 1388.452599][T23774] Uninit was stored to memory at: [ 1388.452599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1388.452599][T23774] __msan_chain_origin+0x50/0x90 [ 1388.452599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1388.452599][T23774] get_compat_msghdr+0x108/0x270 [ 1388.452599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1388.452599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1388.452599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.452599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.452599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1388.452599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1388.452599][T23774] entry_INT80_compat+0x71/0x76 [ 1388.452599][T23774] [ 1388.452599][T23774] Uninit was stored to memory at: [ 1388.452599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1388.452599][T23774] __msan_chain_origin+0x50/0x90 [ 1388.452599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1388.452599][T23774] get_compat_msghdr+0x108/0x270 [ 1388.452599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1388.452599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1388.452599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.452599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.452599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1388.452599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1388.452599][T23774] entry_INT80_compat+0x71/0x76 [ 1388.452599][T23774] [ 1388.452599][T23774] Uninit was stored to memory at: [ 1388.452599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1388.452599][T23774] __msan_chain_origin+0x50/0x90 [ 1388.452599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1388.452599][T23774] get_compat_msghdr+0x108/0x270 [ 1388.452599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1388.452599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1388.452599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.452599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.452599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1388.452599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1388.452599][T23774] entry_INT80_compat+0x71/0x76 [ 1388.452599][T23774] [ 1388.452599][T23774] Uninit was stored to memory at: [ 1388.452599][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1388.452599][T23774] __msan_chain_origin+0x50/0x90 [ 1388.452599][T23774] __get_compat_msghdr+0x5be/0x890 [ 1388.452599][T23774] get_compat_msghdr+0x108/0x270 [ 1388.452599][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1388.452599][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1388.452599][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1388.452599][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1388.452599][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1388.452599][T23774] do_int80_syscall_32+0x1d/0x30 [ 1388.452599][T23774] entry_INT80_compat+0x71/0x76 [ 1388.452599][T23774] [ 1388.452599][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1388.452599][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1388.452599][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1389.175744][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.327110][T23768] not chained 4160000 origins [ 1389.331826][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1389.332599][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1389.332599][T23768] Call Trace: [ 1389.332599][T23768] dump_stack+0x1df/0x240 [ 1389.332599][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1389.332599][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1389.332599][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1389.332599][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1389.332599][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1389.332599][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1389.332599][T23768] ? __msan_get_context_state+0x9/0x20 [ 1389.332599][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1389.332599][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1389.332599][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1389.332599][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1389.332599][T23768] ? _copy_from_user+0x15b/0x260 [ 1389.332599][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1389.332599][T23768] __msan_chain_origin+0x50/0x90 [ 1389.332599][T23768] __get_compat_msghdr+0x5be/0x890 [ 1389.332599][T23768] get_compat_msghdr+0x108/0x270 [ 1389.332599][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1389.450790][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1389.332599][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1389.468484][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1389.332599][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1389.332599][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1389.332599][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1389.332599][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1389.332599][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1389.332599][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1389.332599][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.332599][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1389.332599][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.332599][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1389.534647][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] do_int80_syscall_32+0x1d/0x30 [ 1389.332599][T23768] entry_INT80_compat+0x71/0x76 [ 1389.332599][T23768] RIP: 0023:0xf7f11549 [ 1389.560956][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] Code: Bad RIP value. [ 1389.332599][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1389.577365][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1389.332599][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1389.332599][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1389.332599][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1389.332599][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1389.332599][T23768] Uninit was stored to memory at: [ 1389.332599][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1389.332599][T23768] __msan_chain_origin+0x50/0x90 [ 1389.332599][T23768] __get_compat_msghdr+0x5be/0x890 [ 1389.332599][T23768] get_compat_msghdr+0x108/0x270 [ 1389.332599][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1389.657160][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1389.332599][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.677233][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.332599][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1389.332599][T23768] do_int80_syscall_32+0x1d/0x30 [ 1389.332599][T23768] entry_INT80_compat+0x71/0x76 [ 1389.332599][T23768] [ 1389.332599][T23768] Uninit was stored to memory at: [ 1389.332599][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1389.332599][T23768] __msan_chain_origin+0x50/0x90 [ 1389.332599][T23768] __get_compat_msghdr+0x5be/0x890 [ 1389.332599][T23768] get_compat_msghdr+0x108/0x270 [ 1389.332599][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1389.332599][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1389.332599][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.748719][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.332599][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1389.332599][T23768] do_int80_syscall_32+0x1d/0x30 [ 1389.332599][T23768] entry_INT80_compat+0x71/0x76 [ 1389.332599][T23768] [ 1389.332599][T23768] Uninit was stored to memory at: [ 1389.332599][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1389.332599][T23768] __msan_chain_origin+0x50/0x90 [ 1389.332599][T23768] __get_compat_msghdr+0x5be/0x890 [ 1389.332599][T23768] get_compat_msghdr+0x108/0x270 [ 1389.332599][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1389.332599][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1389.332599][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.332599][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.332599][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1389.332599][T23768] do_int80_syscall_32+0x1d/0x30 [ 1389.332599][T23768] entry_INT80_compat+0x71/0x76 [ 1389.332599][T23768] [ 1389.332599][T23768] Uninit was stored to memory at: [ 1389.332599][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1389.332599][T23768] __msan_chain_origin+0x50/0x90 [ 1389.332599][T23768] __get_compat_msghdr+0x5be/0x890 [ 1389.869242][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. [ 1389.332599][T23768] get_compat_msghdr+0x108/0x270 [ 1389.332599][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1389.332599][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1389.332599][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.332599][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.332599][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1389.332599][T23768] do_int80_syscall_32+0x1d/0x30 [ 1389.332599][T23768] entry_INT80_compat+0x71/0x76 [ 1389.332599][T23768] [ 1389.332599][T23768] Uninit was stored to memory at: [ 1389.332599][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1389.332599][T23768] __msan_chain_origin+0x50/0x90 [ 1389.332599][T23768] __get_compat_msghdr+0x5be/0x890 [ 1389.332599][T23768] get_compat_msghdr+0x108/0x270 [ 1389.332599][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1389.332599][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1389.332599][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.332599][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.332599][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1389.332599][T23768] do_int80_syscall_32+0x1d/0x30 [ 1389.332599][T23768] entry_INT80_compat+0x71/0x76 [ 1389.332599][T23768] [ 1389.332599][T23768] Uninit was stored to memory at: [ 1389.332599][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1389.332599][T23768] __msan_chain_origin+0x50/0x90 [ 1389.332599][T23768] __get_compat_msghdr+0x5be/0x890 [ 1389.332599][T23768] get_compat_msghdr+0x108/0x270 [ 1389.332599][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1389.332599][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1389.332599][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.332599][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.332599][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1389.332599][T23768] do_int80_syscall_32+0x1d/0x30 [ 1389.332599][T23768] entry_INT80_compat+0x71/0x76 [ 1389.332599][T23768] [ 1389.332599][T23768] Uninit was stored to memory at: [ 1389.332599][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1389.332599][T23768] __msan_chain_origin+0x50/0x90 [ 1389.332599][T23768] __get_compat_msghdr+0x5be/0x890 [ 1389.332599][T23768] get_compat_msghdr+0x108/0x270 [ 1389.332599][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1389.332599][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1389.332599][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1389.332599][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1389.332599][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1389.332599][T23768] do_int80_syscall_32+0x1d/0x30 [ 1389.332599][T23768] entry_INT80_compat+0x71/0x76 [ 1389.332599][T23768] [ 1389.332599][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1389.332599][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1389.332599][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1390.283269][T23768] not chained 4170000 origins [ 1390.287980][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1390.292604][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.292604][T23768] Call Trace: [ 1390.292604][T23768] dump_stack+0x1df/0x240 [ 1390.292604][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1390.292604][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1390.292604][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1390.292604][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1390.292604][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1390.292604][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1390.292604][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1390.292604][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1390.292604][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1390.292604][T23768] ? _copy_from_user+0x15b/0x260 [ 1390.292604][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1390.292604][T23768] __msan_chain_origin+0x50/0x90 [ 1390.292604][T23768] __get_compat_msghdr+0x5be/0x890 [ 1390.292604][T23768] get_compat_msghdr+0x108/0x270 [ 1390.292604][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1390.292604][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1390.292604][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1390.292604][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1390.292604][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1390.292604][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1390.292604][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1390.292604][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1390.292604][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1390.292604][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1390.292604][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.292604][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1390.292604][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.292604][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1390.292604][T23768] do_int80_syscall_32+0x1d/0x30 [ 1390.292604][T23768] entry_INT80_compat+0x71/0x76 [ 1390.292604][T23768] RIP: 0023:0xf7f11549 [ 1390.292604][T23768] Code: Bad RIP value. [ 1390.292604][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1390.292604][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1390.292604][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1390.292604][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1390.292604][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1390.292604][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1390.292604][T23768] Uninit was stored to memory at: [ 1390.292604][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1390.292604][T23768] __msan_chain_origin+0x50/0x90 [ 1390.292604][T23768] __get_compat_msghdr+0x5be/0x890 [ 1390.292604][T23768] get_compat_msghdr+0x108/0x270 [ 1390.292604][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1390.292604][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1390.292604][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.292604][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.292604][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1390.292604][T23768] do_int80_syscall_32+0x1d/0x30 [ 1390.292604][T23768] entry_INT80_compat+0x71/0x76 [ 1390.292604][T23768] [ 1390.292604][T23768] Uninit was stored to memory at: [ 1390.292604][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1390.292604][T23768] __msan_chain_origin+0x50/0x90 [ 1390.292604][T23768] __get_compat_msghdr+0x5be/0x890 [ 1390.292604][T23768] get_compat_msghdr+0x108/0x270 [ 1390.292604][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1390.292604][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1390.292604][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.292604][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.292604][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1390.292604][T23768] do_int80_syscall_32+0x1d/0x30 [ 1390.292604][T23768] entry_INT80_compat+0x71/0x76 [ 1390.292604][T23768] [ 1390.292604][T23768] Uninit was stored to memory at: [ 1390.292604][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1390.292604][T23768] __msan_chain_origin+0x50/0x90 [ 1390.292604][T23768] __get_compat_msghdr+0x5be/0x890 [ 1390.292604][T23768] get_compat_msghdr+0x108/0x270 [ 1390.292604][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1390.292604][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1390.292604][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.292604][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.292604][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1390.292604][T23768] do_int80_syscall_32+0x1d/0x30 [ 1390.292604][T23768] entry_INT80_compat+0x71/0x76 [ 1390.292604][T23768] [ 1390.292604][T23768] Uninit was stored to memory at: [ 1390.292604][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1390.292604][T23768] __msan_chain_origin+0x50/0x90 [ 1390.292604][T23768] __get_compat_msghdr+0x5be/0x890 [ 1390.292604][T23768] get_compat_msghdr+0x108/0x270 [ 1390.292604][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1390.292604][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1390.292604][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.292604][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.292604][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1390.292604][T23768] do_int80_syscall_32+0x1d/0x30 [ 1390.292604][T23768] entry_INT80_compat+0x71/0x76 [ 1390.292604][T23768] [ 1390.292604][T23768] Uninit was stored to memory at: [ 1390.292604][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1390.292604][T23768] __msan_chain_origin+0x50/0x90 [ 1390.292604][T23768] __get_compat_msghdr+0x5be/0x890 [ 1390.292604][T23768] get_compat_msghdr+0x108/0x270 [ 1390.292604][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1390.292604][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1390.292604][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.292604][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.292604][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1390.292604][T23768] do_int80_syscall_32+0x1d/0x30 [ 1390.292604][T23768] entry_INT80_compat+0x71/0x76 [ 1390.292604][T23768] [ 1390.292604][T23768] Uninit was stored to memory at: [ 1390.292604][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1390.292604][T23768] __msan_chain_origin+0x50/0x90 [ 1390.292604][T23768] __get_compat_msghdr+0x5be/0x890 [ 1390.292604][T23768] get_compat_msghdr+0x108/0x270 [ 1390.292604][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1390.292604][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1390.292604][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.292604][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.292604][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1390.292604][T23768] do_int80_syscall_32+0x1d/0x30 [ 1390.292604][T23768] entry_INT80_compat+0x71/0x76 [ 1390.292604][T23768] [ 1390.292604][T23768] Uninit was stored to memory at: [ 1390.292604][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1390.292604][T23768] __msan_chain_origin+0x50/0x90 [ 1390.292604][T23768] __get_compat_msghdr+0x5be/0x890 [ 1390.292604][T23768] get_compat_msghdr+0x108/0x270 [ 1390.292604][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1390.292604][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1390.292604][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1390.292604][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1390.292604][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1390.292604][T23768] do_int80_syscall_32+0x1d/0x30 [ 1390.292604][T23768] entry_INT80_compat+0x71/0x76 [ 1390.292604][T23768] [ 1390.292604][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1390.292604][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1390.292604][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1391.174711][T23774] not chained 4180000 origins [ 1391.179429][T23774] CPU: 1 PID: 23774 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1391.182593][T23774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.182593][T23774] Call Trace: [ 1391.182593][T23774] dump_stack+0x1df/0x240 [ 1391.182593][T23774] kmsan_internal_chain_origin+0x6f/0x130 [ 1391.182593][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1391.182593][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1391.182593][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1391.182593][T23774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1391.182593][T23774] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1391.182593][T23774] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1391.182593][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1391.182593][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1391.182593][T23774] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1391.182593][T23774] ? _copy_from_user+0x15b/0x260 [ 1391.182593][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1391.182593][T23774] __msan_chain_origin+0x50/0x90 [ 1391.182593][T23774] __get_compat_msghdr+0x5be/0x890 [ 1391.182593][T23774] get_compat_msghdr+0x108/0x270 [ 1391.182593][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1391.182593][T23774] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1391.182593][T23774] ? kmsan_set_origin_checked+0x95/0xf0 [ 1391.182593][T23774] ? kmsan_get_metadata+0x4f/0x180 [ 1391.182593][T23774] ? kmsan_internal_set_origin+0x75/0xb0 [ 1391.182593][T23774] ? __msan_poison_alloca+0xf0/0x120 [ 1391.182593][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1391.182593][T23774] ? __sys_recvmmsg+0xb4/0x510 [ 1391.182593][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1391.182593][T23774] ? __syscall_return_slowpath+0x89/0x5b0 [ 1391.182593][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.182593][T23774] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1391.182593][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.182593][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1391.182593][T23774] do_int80_syscall_32+0x1d/0x30 [ 1391.182593][T23774] entry_INT80_compat+0x71/0x76 [ 1391.182593][T23774] RIP: 0023:0xf7f11549 [ 1391.182593][T23774] Code: Bad RIP value. [ 1391.182593][T23774] RSP: 002b:00000000f5ceb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1391.182593][T23774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1391.182593][T23774] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1391.182593][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1391.182593][T23774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1391.182593][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1391.182593][T23774] Uninit was stored to memory at: [ 1391.182593][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1391.182593][T23774] __msan_chain_origin+0x50/0x90 [ 1391.182593][T23774] __get_compat_msghdr+0x5be/0x890 [ 1391.182593][T23774] get_compat_msghdr+0x108/0x270 [ 1391.182593][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1391.182593][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1391.182593][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.182593][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.182593][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1391.182593][T23774] do_int80_syscall_32+0x1d/0x30 [ 1391.182593][T23774] entry_INT80_compat+0x71/0x76 [ 1391.182593][T23774] [ 1391.182593][T23774] Uninit was stored to memory at: [ 1391.182593][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1391.182593][T23774] __msan_chain_origin+0x50/0x90 [ 1391.182593][T23774] __get_compat_msghdr+0x5be/0x890 [ 1391.182593][T23774] get_compat_msghdr+0x108/0x270 [ 1391.182593][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1391.182593][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1391.182593][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.182593][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.182593][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1391.182593][T23774] do_int80_syscall_32+0x1d/0x30 [ 1391.182593][T23774] entry_INT80_compat+0x71/0x76 [ 1391.182593][T23774] [ 1391.182593][T23774] Uninit was stored to memory at: [ 1391.182593][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1391.182593][T23774] __msan_chain_origin+0x50/0x90 [ 1391.182593][T23774] __get_compat_msghdr+0x5be/0x890 [ 1391.182593][T23774] get_compat_msghdr+0x108/0x270 [ 1391.182593][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1391.182593][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1391.182593][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.182593][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.182593][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1391.182593][T23774] do_int80_syscall_32+0x1d/0x30 [ 1391.182593][T23774] entry_INT80_compat+0x71/0x76 [ 1391.182593][T23774] [ 1391.182593][T23774] Uninit was stored to memory at: [ 1391.182593][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1391.182593][T23774] __msan_chain_origin+0x50/0x90 [ 1391.182593][T23774] __get_compat_msghdr+0x5be/0x890 [ 1391.182593][T23774] get_compat_msghdr+0x108/0x270 [ 1391.182593][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1391.182593][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1391.182593][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.182593][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.182593][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1391.182593][T23774] do_int80_syscall_32+0x1d/0x30 [ 1391.182593][T23774] entry_INT80_compat+0x71/0x76 [ 1391.182593][T23774] [ 1391.182593][T23774] Uninit was stored to memory at: [ 1391.182593][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1391.182593][T23774] __msan_chain_origin+0x50/0x90 [ 1391.182593][T23774] __get_compat_msghdr+0x5be/0x890 [ 1391.182593][T23774] get_compat_msghdr+0x108/0x270 [ 1391.182593][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1391.182593][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1391.182593][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.182593][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.182593][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1391.182593][T23774] do_int80_syscall_32+0x1d/0x30 [ 1391.182593][T23774] entry_INT80_compat+0x71/0x76 [ 1391.182593][T23774] [ 1391.182593][T23774] Uninit was stored to memory at: [ 1391.182593][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1391.182593][T23774] __msan_chain_origin+0x50/0x90 [ 1391.182593][T23774] __get_compat_msghdr+0x5be/0x890 [ 1391.182593][T23774] get_compat_msghdr+0x108/0x270 [ 1391.182593][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1391.182593][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1391.182593][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.182593][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.182593][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1391.182593][T23774] do_int80_syscall_32+0x1d/0x30 [ 1391.182593][T23774] entry_INT80_compat+0x71/0x76 [ 1391.182593][T23774] [ 1391.182593][T23774] Uninit was stored to memory at: [ 1391.182593][T23774] kmsan_internal_chain_origin+0xad/0x130 [ 1391.182593][T23774] __msan_chain_origin+0x50/0x90 [ 1391.182593][T23774] __get_compat_msghdr+0x5be/0x890 [ 1391.182593][T23774] get_compat_msghdr+0x108/0x270 [ 1391.182593][T23774] do_recvmmsg+0xa6a/0x1ee0 [ 1391.182593][T23774] __sys_recvmmsg+0x4ca/0x510 [ 1391.182593][T23774] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1391.182593][T23774] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1391.182593][T23774] do_syscall_32_irqs_on+0x1a3/0x290 [ 1391.182593][T23774] do_int80_syscall_32+0x1d/0x30 [ 1391.182593][T23774] entry_INT80_compat+0x71/0x76 [ 1391.182593][T23774] [ 1391.182593][T23774] Local variable ----msg_sys@do_recvmmsg created at: [ 1391.182593][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1391.182593][T23774] do_recvmmsg+0xc5/0x1ee0 [ 1392.075220][T23768] not chained 4190000 origins [ 1392.079934][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1392.082652][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.082652][T23768] Call Trace: [ 1392.082652][T23768] dump_stack+0x1df/0x240 [ 1392.082652][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1392.082652][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1392.082652][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1392.082652][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1392.082652][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1392.082652][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1392.082652][T23768] ? __msan_get_context_state+0x9/0x20 [ 1392.082652][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1392.082652][T23768] ? __exc_page_fault+0xf6/0x390 [ 1392.082652][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1392.082652][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1392.082652][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1392.082652][T23768] ? _copy_from_user+0x15b/0x260 [ 1392.082652][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1392.082652][T23768] __msan_chain_origin+0x50/0x90 [ 1392.082652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1392.082652][T23768] get_compat_msghdr+0x108/0x270 [ 1392.082652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1392.082652][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1392.082652][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1392.082652][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1392.082652][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1392.082652][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1392.082652][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1392.082652][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1392.082652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1392.082652][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1392.082652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.082652][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1392.082652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.082652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1392.082652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1392.082652][T23768] entry_INT80_compat+0x71/0x76 [ 1392.082652][T23768] RIP: 0023:0xf7f11549 [ 1392.082652][T23768] Code: Bad RIP value. [ 1392.082652][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1392.082652][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1392.082652][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1392.082652][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1392.082652][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1392.082652][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1392.082652][T23768] Uninit was stored to memory at: [ 1392.082652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1392.082652][T23768] __msan_chain_origin+0x50/0x90 [ 1392.082652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1392.082652][T23768] get_compat_msghdr+0x108/0x270 [ 1392.082652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1392.082652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1392.082652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.082652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.082652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1392.082652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1392.082652][T23768] entry_INT80_compat+0x71/0x76 [ 1392.082652][T23768] [ 1392.082652][T23768] Uninit was stored to memory at: [ 1392.082652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1392.082652][T23768] __msan_chain_origin+0x50/0x90 [ 1392.082652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1392.082652][T23768] get_compat_msghdr+0x108/0x270 [ 1392.082652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1392.082652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1392.082652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.082652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.082652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1392.082652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1392.082652][T23768] entry_INT80_compat+0x71/0x76 [ 1392.082652][T23768] [ 1392.082652][T23768] Uninit was stored to memory at: [ 1392.082652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1392.082652][T23768] __msan_chain_origin+0x50/0x90 [ 1392.082652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1392.082652][T23768] get_compat_msghdr+0x108/0x270 [ 1392.082652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1392.082652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1392.082652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.082652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.082652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1392.082652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1392.082652][T23768] entry_INT80_compat+0x71/0x76 [ 1392.082652][T23768] [ 1392.082652][T23768] Uninit was stored to memory at: [ 1392.082652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1392.082652][T23768] __msan_chain_origin+0x50/0x90 [ 1392.082652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1392.082652][T23768] get_compat_msghdr+0x108/0x270 [ 1392.082652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1392.082652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1392.082652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.082652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.082652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1392.082652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1392.082652][T23768] entry_INT80_compat+0x71/0x76 [ 1392.082652][T23768] [ 1392.082652][T23768] Uninit was stored to memory at: [ 1392.082652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1392.082652][T23768] __msan_chain_origin+0x50/0x90 [ 1392.082652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1392.082652][T23768] get_compat_msghdr+0x108/0x270 [ 1392.082652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1392.082652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1392.082652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.082652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.082652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1392.082652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1392.082652][T23768] entry_INT80_compat+0x71/0x76 [ 1392.082652][T23768] [ 1392.082652][T23768] Uninit was stored to memory at: [ 1392.082652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1392.082652][T23768] __msan_chain_origin+0x50/0x90 [ 1392.082652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1392.082652][T23768] get_compat_msghdr+0x108/0x270 [ 1392.082652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1392.082652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1392.082652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.082652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.082652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1392.082652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1392.082652][T23768] entry_INT80_compat+0x71/0x76 [ 1392.082652][T23768] [ 1392.082652][T23768] Uninit was stored to memory at: [ 1392.082652][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1392.082652][T23768] __msan_chain_origin+0x50/0x90 [ 1392.082652][T23768] __get_compat_msghdr+0x5be/0x890 [ 1392.082652][T23768] get_compat_msghdr+0x108/0x270 [ 1392.082652][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1392.082652][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1392.082652][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1392.082652][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1392.082652][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1392.082652][T23768] do_int80_syscall_32+0x1d/0x30 [ 1392.082652][T23768] entry_INT80_compat+0x71/0x76 [ 1392.082652][T23768] [ 1392.082652][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1392.082652][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1392.082652][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1393.008155][T23768] not chained 4200000 origins [ 1393.012592][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1393.012592][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.012592][T23768] Call Trace: [ 1393.012592][T23768] dump_stack+0x1df/0x240 [ 1393.012592][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1393.012592][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1393.012592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1393.012592][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1393.012592][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1393.012592][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1393.012592][T23768] ? __msan_get_context_state+0x9/0x20 [ 1393.012592][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1393.012592][T23768] ? __exc_page_fault+0xf6/0x390 [ 1393.012592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1393.012592][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1393.012592][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1393.012592][T23768] ? _copy_from_user+0x15b/0x260 [ 1393.012592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1393.012592][T23768] __msan_chain_origin+0x50/0x90 [ 1393.012592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.012592][T23768] get_compat_msghdr+0x108/0x270 [ 1393.012592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.012592][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1393.012592][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1393.012592][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1393.012592][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1393.012592][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1393.012592][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1393.012592][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1393.012592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.012592][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1393.012592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.012592][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1393.012592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.012592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.012592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.012592][T23768] entry_INT80_compat+0x71/0x76 [ 1393.012592][T23768] RIP: 0023:0xf7f11549 [ 1393.012592][T23768] Code: Bad RIP value. [ 1393.012592][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1393.012592][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1393.012592][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1393.012592][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1393.012592][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1393.012592][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1393.012592][T23768] Uninit was stored to memory at: [ 1393.012592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.012592][T23768] __msan_chain_origin+0x50/0x90 [ 1393.012592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.012592][T23768] get_compat_msghdr+0x108/0x270 [ 1393.012592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.012592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.012592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.012592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.012592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.012592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.012592][T23768] entry_INT80_compat+0x71/0x76 [ 1393.012592][T23768] [ 1393.012592][T23768] Uninit was stored to memory at: [ 1393.012592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.012592][T23768] __msan_chain_origin+0x50/0x90 [ 1393.012592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.012592][T23768] get_compat_msghdr+0x108/0x270 [ 1393.012592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.012592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.012592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.012592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.012592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.012592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.012592][T23768] entry_INT80_compat+0x71/0x76 [ 1393.012592][T23768] [ 1393.012592][T23768] Uninit was stored to memory at: [ 1393.012592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.012592][T23768] __msan_chain_origin+0x50/0x90 [ 1393.012592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.012592][T23768] get_compat_msghdr+0x108/0x270 [ 1393.012592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.012592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.012592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.012592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.012592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.012592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.012592][T23768] entry_INT80_compat+0x71/0x76 [ 1393.012592][T23768] [ 1393.012592][T23768] Uninit was stored to memory at: [ 1393.012592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.012592][T23768] __msan_chain_origin+0x50/0x90 [ 1393.012592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.012592][T23768] get_compat_msghdr+0x108/0x270 [ 1393.012592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.012592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.012592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.012592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.012592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.012592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.012592][T23768] entry_INT80_compat+0x71/0x76 [ 1393.012592][T23768] [ 1393.012592][T23768] Uninit was stored to memory at: [ 1393.012592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.012592][T23768] __msan_chain_origin+0x50/0x90 [ 1393.012592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.012592][T23768] get_compat_msghdr+0x108/0x270 [ 1393.012592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.012592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.012592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.012592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.012592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.012592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.012592][T23768] entry_INT80_compat+0x71/0x76 [ 1393.012592][T23768] [ 1393.012592][T23768] Uninit was stored to memory at: [ 1393.012592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.012592][T23768] __msan_chain_origin+0x50/0x90 [ 1393.012592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.012592][T23768] get_compat_msghdr+0x108/0x270 [ 1393.012592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.012592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.012592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.012592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.012592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.012592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.012592][T23768] entry_INT80_compat+0x71/0x76 [ 1393.012592][T23768] [ 1393.012592][T23768] Uninit was stored to memory at: [ 1393.012592][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.012592][T23768] __msan_chain_origin+0x50/0x90 [ 1393.012592][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.012592][T23768] get_compat_msghdr+0x108/0x270 [ 1393.012592][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.012592][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.012592][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.012592][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.012592][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.012592][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.012592][T23768] entry_INT80_compat+0x71/0x76 [ 1393.012592][T23768] [ 1393.012592][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1393.012592][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1393.012592][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1393.915313][T23768] not chained 4210000 origins [ 1393.920032][T23768] CPU: 1 PID: 23768 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1393.922661][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.922661][T23768] Call Trace: [ 1393.922661][T23768] dump_stack+0x1df/0x240 [ 1393.922661][T23768] kmsan_internal_chain_origin+0x6f/0x130 [ 1393.922661][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1393.922661][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1393.922661][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1393.922661][T23768] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1393.922661][T23768] ? unix_dgram_recvmsg+0x159d/0x18e0 [ 1393.922661][T23768] ? __msan_get_context_state+0x9/0x20 [ 1393.922661][T23768] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1393.922661][T23768] ? __exc_page_fault+0xf6/0x390 [ 1393.922661][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1393.922661][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1393.922661][T23768] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1393.922661][T23768] ? _copy_from_user+0x15b/0x260 [ 1393.922661][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1393.922661][T23768] __msan_chain_origin+0x50/0x90 [ 1393.922661][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.922661][T23768] get_compat_msghdr+0x108/0x270 [ 1393.922661][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.922661][T23768] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1393.922661][T23768] ? kmsan_set_origin_checked+0x95/0xf0 [ 1393.922661][T23768] ? kmsan_get_metadata+0x4f/0x180 [ 1393.922661][T23768] ? kmsan_internal_set_origin+0x75/0xb0 [ 1393.922661][T23768] ? __msan_poison_alloca+0xf0/0x120 [ 1393.922661][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1393.922661][T23768] ? __sys_recvmmsg+0xb4/0x510 [ 1393.922661][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.922661][T23768] ? __syscall_return_slowpath+0x89/0x5b0 [ 1393.922661][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.922661][T23768] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 1393.922661][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.922661][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.922661][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.922661][T23768] entry_INT80_compat+0x71/0x76 [ 1393.922661][T23768] RIP: 0023:0xf7f11549 [ 1393.922661][T23768] Code: Bad RIP value. [ 1393.922661][T23768] RSP: 002b:00000000f5d0c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1393.922661][T23768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1393.922661][T23768] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1393.922661][T23768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1393.922661][T23768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1393.922661][T23768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1393.922661][T23768] Uninit was stored to memory at: [ 1393.922661][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.922661][T23768] __msan_chain_origin+0x50/0x90 [ 1393.922661][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.922661][T23768] get_compat_msghdr+0x108/0x270 [ 1393.922661][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.922661][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.922661][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.922661][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.922661][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.922661][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.922661][T23768] entry_INT80_compat+0x71/0x76 [ 1393.922661][T23768] [ 1393.922661][T23768] Uninit was stored to memory at: [ 1393.922661][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.922661][T23768] __msan_chain_origin+0x50/0x90 [ 1393.922661][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.922661][T23768] get_compat_msghdr+0x108/0x270 [ 1393.922661][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.922661][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.922661][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.922661][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.922661][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.922661][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.922661][T23768] entry_INT80_compat+0x71/0x76 [ 1393.922661][T23768] [ 1393.922661][T23768] Uninit was stored to memory at: [ 1393.922661][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.922661][T23768] __msan_chain_origin+0x50/0x90 [ 1393.922661][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.922661][T23768] get_compat_msghdr+0x108/0x270 [ 1393.922661][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.922661][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.922661][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.922661][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.922661][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.922661][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.922661][T23768] entry_INT80_compat+0x71/0x76 [ 1393.922661][T23768] [ 1393.922661][T23768] Uninit was stored to memory at: [ 1393.922661][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.922661][T23768] __msan_chain_origin+0x50/0x90 [ 1393.922661][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.922661][T23768] get_compat_msghdr+0x108/0x270 [ 1393.922661][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1393.922661][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1393.922661][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1393.922661][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1393.922661][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1393.922661][T23768] do_int80_syscall_32+0x1d/0x30 [ 1393.922661][T23768] entry_INT80_compat+0x71/0x76 [ 1393.922661][T23768] [ 1393.922661][T23768] Uninit was stored to memory at: [ 1393.922661][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1393.922661][T23768] __msan_chain_origin+0x50/0x90 [ 1394.455252][ T1] systemd[1]: systemd-journald.service: Start operation timed out. Terminating. [ 1393.922661][T23768] __get_compat_msghdr+0x5be/0x890 [ 1393.922661][T23768] get_compat_msghdr+0x108/0x270 [ 1394.472595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1394.472595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1394.472595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.472595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.472595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1394.472595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1394.472595][T23768] entry_INT80_compat+0x71/0x76 [ 1394.472595][T23768] [ 1394.472595][T23768] Uninit was stored to memory at: [ 1394.472595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1394.472595][T23768] __msan_chain_origin+0x50/0x90 [ 1394.472595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1394.472595][T23768] get_compat_msghdr+0x108/0x270 [ 1394.472595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1394.472595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1394.472595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.472595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.472595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1394.472595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1394.472595][T23768] entry_INT80_compat+0x71/0x76 [ 1394.472595][T23768] [ 1394.472595][T23768] Uninit was stored to memory at: [ 1394.472595][T23768] kmsan_internal_chain_origin+0xad/0x130 [ 1394.472595][T23768] __msan_chain_origin+0x50/0x90 [ 1394.472595][T23768] __get_compat_msghdr+0x5be/0x890 [ 1394.472595][T23768] get_compat_msghdr+0x108/0x270 [ 1394.472595][T23768] do_recvmmsg+0xa6a/0x1ee0 [ 1394.472595][T23768] __sys_recvmmsg+0x4ca/0x510 [ 1394.472595][T23768] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1394.472595][T23768] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1394.472595][T23768] do_syscall_32_irqs_on+0x1a3/0x290 [ 1394.472595][T23768] do_int80_syscall_32+0x1d/0x30 [ 1394.472595][T23768] entry_INT80_compat+0x71/0x76 [ 1394.472595][T23768] [ 1394.472595][T23768] Local variable ----msg_sys@do_recvmmsg created at: [ 1394.472595][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1394.472595][T23768] do_recvmmsg+0xc5/0x1ee0 [ 1394.712950][T23894] systemd-journald[23894]: /dev/kmsg buffer overrun, some messages lost. 18:38:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5, 0xffdb, 0x0, {}, {}, {}, 0x2, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "9373a07edb73955521d841f2be869631ea9506dd3d50254cfa5b2b020000b62dce8100"}}, 0x80}}, 0x0) 18:38:58 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)="fe251b58aa1cba1e10") 18:38:58 executing program 1: syz_emit_ethernet(0x6c, &(0x7f0000000080)=ANY=[], 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x808000) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr, 0x1}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0xfdef, 0x0, 0x0, 0x0) close(0xffffffffffffffff) getpid() bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2d9) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000002c0)="1f11c391ebb0498200c347e9bd472454e7f8bd23544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c0300000061d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc3", 0x70}, {0x0}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xbc}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f00000001c0)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad8829d4c730d18b45a18432e78da5b1ccd896642b2655cc3d7e806dbcc930c722b5135fb6", 0x4d}], 0x5}, 0x0) splice(r1, 0x0, r0, 0x0, 0x6e803, 0x0) 18:38:58 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)="fe251b58aa1cba1e10f4495fd4") pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) 18:38:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfca) 18:38:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000dc0)={0x38, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0c00002c00270d0000008cbb7e84a79b02890d", @ANYRES32=r2, @ANYBLOB="00000000000000000e0000000a00010062617369630000005c000200580003005400010009000100766c616e000000002800028006000300000000001c000200000000000000000000000000000000000000000002000000040006000c00070000000000000000000c00080000000000000000000a000100726f757465000000e40b020008000300bd0000000800020096000000b80106005c0107000b00010073616d706c6500006c0002800800040085d00b24080005000000000008000300ffffffff1800020003000000050000000500000006000000ff0700000800030007000000080005009004000018000200ff030000ff030000fdffffdf0000000003000000080005000000000008000500ff070000c60006000d4b76d204649dfa87c5f9a8061a236738380e517900c4b8d495dc2602147c8cbad0779d2f6b7436efc907318c72a88638c05911499f37bd90b80b61ca4a3a1cd640558ce7f80bb3c7e379644085153237ccdebf90200eb9689dc86a769edd85ea34a0dbf1ca84daf641e2b5dbdf4b9ffcfa6eeda35bace5f34edd5d3c8f3a4b84f74cf1dc9a1d4d48fda3305637ff42c5f2753992b1c357e07d0263a3f0fefab4502f772f0734b1591304cd49dbe6d01a088863c1ec82b73c9c46096d2a61c3c77000000c00070000000000010000000c000800010000004631af10580012000d000100636f6e6e6d61726b00000000200002801c000100010100000900000006000000e80aea7c09000000040000000c0006008e745af18b1b11c60c00070000000000000000000c00080000000000030000008c08"], 0xc7c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1395.330427][T23930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1395.358969][T22864] tipc: TX() has been purged, node left! [ 1395.432474][T23937] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 18:38:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 18:38:58 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000a00)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0cfdff", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 1396.266882][T23937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:38:59 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x500, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r0, 0x0, 0x400) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r2 = socket$inet(0x2, 0x1, 0x0) mlock2(&(0x7f0000197000/0x2000)=nil, 0x2000, 0x0) socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240008d6, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) [ 1396.322374][T23947] syz-executor.5 (23947) used greatest stack depth: 3784 bytes left 18:38:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000300)="d2", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f000021affc)) 18:38:59 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x500, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r0, 0x0, 0x400) r2 = socket$inet(0x2, 0x1, 0x0) mlock2(&(0x7f0000197000/0x2000)=nil, 0x2000, 0x0) socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240008d6, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 18:39:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfca) [ 1398.909855][T22864] device hsr_slave_0 left promiscuous mode [ 1398.971276][T22864] device hsr_slave_1 left promiscuous mode [ 1399.043354][T22864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.050950][T22864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.072954][T22864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.080572][T22864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.094624][T22864] device bridge_slave_1 left promiscuous mode [ 1399.101339][T22864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.147198][T22864] device bridge_slave_0 left promiscuous mode [ 1399.154484][T22864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.230147][T22864] device veth1_macvtap left promiscuous mode [ 1399.236701][T22864] device veth0_macvtap left promiscuous mode [ 1399.243094][T22864] device veth1_vlan left promiscuous mode [ 1399.248920][T22864] device veth0_vlan left promiscuous mode [ 1402.385648][T22864] bond2 (unregistering): Released all slaves [ 1402.412000][T22864] bond1 (unregistering): Released all slaves [ 1402.744196][T22864] team0 (unregistering): Port device team_slave_1 removed [ 1402.771178][T22864] team0 (unregistering): Port device team_slave_0 removed [ 1402.802545][T22864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.864388][T22864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.037910][T22864] bond0 (unregistering): Released all slaves [ 1403.336028][T23978] IPVS: ftp: loaded support on port[0] = 21 [ 1404.072236][T23978] chnl_net:caif_netlink_parms(): no params data found [ 1404.311424][T23978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.318793][T23978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.328522][T23978] device bridge_slave_0 entered promiscuous mode [ 1404.346226][T23978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.353809][T23978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.363555][T23978] device bridge_slave_1 entered promiscuous mode [ 1404.418359][T23978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.435144][T23978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.492973][T23978] team0: Port device team_slave_0 added [ 1404.506934][T23978] team0: Port device team_slave_1 added [ 1404.552060][T23978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.559257][T23978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.585494][T23978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.606008][T23978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.614698][T23978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.640901][T23978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.740384][T23978] device hsr_slave_0 entered promiscuous mode [ 1404.806957][T23978] device hsr_slave_1 entered promiscuous mode [ 1405.434730][T23978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.466575][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1405.475632][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1405.499003][T23978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.530397][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1405.541108][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1405.550531][T19465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.557813][T19465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.570442][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1405.586065][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1405.595705][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1405.605086][T14297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.612213][T14297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.658619][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1405.669568][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1405.684571][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1405.695135][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1405.740330][T23978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1405.751070][T23978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1405.766649][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1405.776459][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1405.787716][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1405.798023][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1405.807732][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1405.818196][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1405.828063][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1405.893760][T23978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.909972][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1405.919041][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1405.927907][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.107358][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.117575][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.181547][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.191977][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1406.213745][T23978] device veth0_vlan entered promiscuous mode [ 1406.234394][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1406.245971][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.265290][T23978] device veth1_vlan entered promiscuous mode [ 1406.335805][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1406.345428][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1406.355208][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1406.365355][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1406.385241][T23978] device veth0_macvtap entered promiscuous mode [ 1406.406070][T23978] device veth1_macvtap entered promiscuous mode [ 1406.416480][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1406.426950][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1406.478171][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.489726][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.501944][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.512638][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.522541][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.533342][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.543398][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.554015][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.564053][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.574745][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.589199][T23978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.598773][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1406.609091][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1406.657119][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1406.667787][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.678568][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1406.689186][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.699222][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1406.709846][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.719931][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1406.731305][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.741439][T23978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1406.752064][T23978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.774298][T23978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.786937][T17166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1406.797788][T17166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:39:10 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x500}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x400) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r2 = socket$inet(0x2, 0x1, 0x0) mlock2(&(0x7f0000197000/0x2000)=nil, 0x2000, 0x0) socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) dup(0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240008d6, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 18:39:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000300)="d2", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f000021affc)) 18:39:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002c8000/0x400000)=nil, 0x400000, 0x11) 18:39:10 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x500, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r0, 0x0, 0x400) r2 = socket$inet(0x2, 0x1, 0x0) mlock2(&(0x7f0000197000/0x2000)=nil, 0x2000, 0x0) socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240008d6, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 18:39:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfca) 18:39:10 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r0, 0x0, 0x400) r2 = socket$inet(0x2, 0x1, 0x0) mlock2(&(0x7f0000197000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240008d6, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 18:39:11 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x3d, 0x1, 0x0, 0x4, 0x80200, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x48010, 0xff, 0x0, 0x3, 0x2, 0x0, 0x7}, 0x0, 0xf, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000100)="7ed90497e276bfbe2a0f462de3a4b1df89cb0c35bbebcc4c2da921f5b158d36879458ede68d06ad81476cda2863e070435d73d43442fbd9f587396f11c754c0128db3eab4aa70aaf27f63a6ca8e7", &(0x7f0000000180)=""/136}, 0x20) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xb06) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108044e80ecdb4cb92e08480e003f000000e8bd6efb250309000e0001004e0448ff050005001201", 0x59}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 18:39:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000003e008102e00f80ecdb4cb9040ac1804bd11600eec563931d65ef0b007c05e87c55a1bc000900b800069903000000050015000500812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace125e43f75b2ea5c6312f8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4efab57a5025ccca9e00360db798262f3d40fad95667e04adcdf638a97f19be3bb9ad809f5e1cace81ed0b7fece0b42a9ecbee5d", 0xd8}], 0x1}, 0x0) 18:39:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfca) 18:39:11 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000000)="a3", 0x1}], 0x1}, 0x44044) 18:39:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000003e008102e00f80ecdb4cb9040ac1804bd11600eec563931d65ef0b007c05e87c55a1bc000900b800069903000000050015000500812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace125e43f75b2ea5c6312f8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4efab57a5025ccca9e00360db798262f3d40fad95667e04adcdf638a97f19be3bb9ad809f5e1cace81ed0b7fece0b42a9ecbee5d", 0xd8}], 0x1}, 0x0) 18:39:11 executing program 5: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private0={0x7}}, 0x80, 0x0}, 0x20008041) [ 1408.649703][T24225] device geneve1 entered promiscuous mode 18:39:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000003e008102e00f80ecdb4cb9040ac1804bd11600eec563931d65ef0b007c05e87c55a1bc000900b800069903000000050015000500812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace125e43f75b2ea5c6312f8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4efab57a5025ccca9e00360db798262f3d40fad95667e04adcdf638a97f19be3bb9ad809f5e1cace81ed0b7fece0b42a9ecbee5d", 0xd8}], 0x1}, 0x0) 18:39:11 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x72, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000633a77fbac14143fee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 18:39:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffdfffffff}, 0x4400, 0x0, 0x0, 0x7, 0xff8, 0x0, 0xfffd}, 0x0, 0xfffffffffffffffe, r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r3, 0x0, 0x10, 0x0}, 0x30) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x44, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1ef, 0x0, 0x6, 0x1613, 0x0, 0x5}, r1, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r5 = perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x70, 0x15, 0x0, 0xd, 0x6a, 0x0, 0x100000000, 0x12112, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb744, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x9, 0x0, 0x7, 0x0, 0xca, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x19101, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) perf_event_open(&(0x7f00000015c0)={0x5, 0x70, 0x8, 0x0, 0x7, 0x4, 0x0, 0x2, 0x1901, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb976, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x9, 0x7, 0x9, 0xffffffffffffffff, 0x7, 0x40}, 0x0, 0x9, r6, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x10\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03G\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000000c0)={0x2, 0x4e23, @dev}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000180)="a44c396d6afd6c6323fa43565c14ec1aad96e974b9af41302933873466f9391ff5e48f8b54044477a2ac00b5e22af9e6d0cca12568189a6304a98066f7ce417ddb23351ee81d7b3a78cb79def4cc5314e7237934e055c876c2b092f06b431d6fe998963aa0a8b9816a56848035e1cdf21b88f13f8cb61b1f9e6352036b5110ec4f75a3d8f8d8ca99393ba36ed40bf4bb16382ac1b69d0d5ea7db0209d30b9bbc927fdc2d", 0xa4}, {&(0x7f0000000240)="10a4d40e1ea0dd5270b6d6add4bc12106e65802ff7156563bcab36852b2006987488397e80", 0x25}, {&(0x7f0000000280)="11ab00354bc280d2f0746eb49aa6f221451acd47bbe7bdf08541c9b268b340ca9c1839d7a7215c80c7c964ae293c9180ada38bbda2e6a2664b9f6f1b988c40d8f4e146af41b30854ba2f2d92d153cce022465c3b43119e8ea74974bec7e05a6ba00118895985206993955826bdaa72cf12577cc74b38061cf94538a8b314a413a8", 0x81}, {&(0x7f00000013c0)="6f1c9c925655b69380825b49c31aa980b0d479c489ac4ab1e3b3e3985a23a7db21f1ce76405524c9a090198cdb5179260c2ab918ff38b719c1e120f70d5f52b59fc5465f11721adb3d42f99a9fb995e2feee511ed45192a7efbcefa775", 0x5d}, {&(0x7f0000001440)="9a1a37133723f9fc8859535b1546671de907a3160622cb75fa749e0ec14b791f8f3799e202a83cd34adb6625f61f62c909ae889ec8a00a45e1551a33551776864871ac93110d34171f3b2fc17d295098d730c48961fd444246abdc5d6849", 0x5e}], 0x6, &(0x7f0000001540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x18}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:39:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfca) 18:39:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108044e80ecdb4cb92e08480e003f000000e8bd6efb250309000e0001004e0448ff050005001201", 0x59}], 0x1}, 0x0) 18:39:13 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x3d, 0x1, 0x0, 0x4, 0x80200, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x48010, 0xff, 0x0, 0x3, 0x2, 0x0, 0x7}, 0x0, 0xf, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000100)="7ed90497e276bfbe2a0f462de3a4b1df89cb0c35bbebcc4c2da921f5b158d36879458ede68d06ad81476cda2863e070435d73d43442fbd9f587396f11c754c0128db3eab4aa70aaf27f63a6ca8e7", &(0x7f0000000180)=""/136}, 0x20) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xb06) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108044e80ecdb4cb92e08480e003f000000e8bd6efb250309000e0001004e0448ff050005001201", 0x59}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 18:39:13 executing program 2: socket$kcm(0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x1010, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000200)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\x00\xfb\xaad\x1a\xa0') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000000400), 0x0, &(0x7f00000006c0)=""/238, 0xee}, 0x20010020) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0xff, &(0x7f0000000040)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f00000005c0)=""/235, 0xeb}], 0x3}, 0x12023) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0xc) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400), 0x4) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000440)={0x2000007}, 0x8) r4 = gettid() perf_event_open(0x0, r4, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001f80)={0x4, 0x70, 0xff, 0x3f, 0x7, 0x4, 0x0, 0x2000, 0xf28c27eb1bbf1846, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000001f40)}, 0x40000, 0x5, 0xffff, 0x7, 0x400, 0x9, 0x3}, r4, 0xf, r3, 0x13) perf_event_open(&(0x7f0000000480)={0x3, 0x70, 0x9, 0x0, 0x1f, 0x80, 0x0, 0x80, 0x104e0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x2, 0x5}, 0x204, 0xff, 0x7, 0x1, 0xffffffff, 0xe3, 0x9}, 0x0, 0x100000, r3, 0x8) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000001a008104e00f80ecdb4cb8fc02000004a1dc0200810040fb12000200ac14141b40d8000000000000000e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1410.224133][T24263] device geneve1 entered promiscuous mode [ 1410.303122][T24267] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1410.710147][T24267] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:39:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000001240)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8983, &(0x7f0000000000)={r1}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r3, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0xfffffe7c, 0x0}, 0x10100) sendmsg$sock(r0, &(0x7f0000001200)={&(0x7f0000000040)=@xdp={0x2c, 0x4, 0x0, 0x35}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}], 0x30}, 0x20000) 18:39:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)="7093a0", &(0x7f0000000280), 0x7, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={0x0, &(0x7f0000000200)=""/163, &(0x7f00000004c0), &(0x7f0000000080), 0x3, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x0, 0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="7e96abb05e4c88797b8bef33389527cd8e1dc0a5a32e6009128d6c"], 0x0, 0x0, 0xe1, &(0x7f0000000000)=""/225, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8901, &(0x7f0000000000)='&@[\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000004c0), 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='@\x00'}, 0x10) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) 18:39:14 executing program 0: 18:39:14 executing program 2: 18:39:14 executing program 3: 18:39:14 executing program 2: 18:39:14 executing program 0: 18:39:14 executing program 5: 18:39:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfca) 18:39:14 executing program 1: 18:39:15 executing program 2: 18:39:15 executing program 3: 18:39:15 executing program 0: 18:39:15 executing program 5: 18:39:15 executing program 1: 18:39:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfca) 18:39:15 executing program 2: 18:39:15 executing program 3: 18:39:15 executing program 0: 18:39:15 executing program 5: 18:39:15 executing program 1: 18:39:16 executing program 3: 18:39:16 executing program 2: 18:39:16 executing program 0: 18:39:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfca) 18:39:16 executing program 5: 18:39:16 executing program 1: 18:39:16 executing program 3: 18:39:16 executing program 2: 18:39:16 executing program 0: 18:39:16 executing program 5: 18:39:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0xfca) 18:39:16 executing program 1: 18:39:17 executing program 2: 18:39:17 executing program 3: 18:39:17 executing program 0: 18:39:17 executing program 5: 18:39:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0xfca) 18:39:17 executing program 1: 18:39:17 executing program 2: 18:39:17 executing program 3: 18:39:17 executing program 0: 18:39:17 executing program 5: 18:39:18 executing program 1: 18:39:18 executing program 3: 18:39:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0xfca) 18:39:18 executing program 2: 18:39:18 executing program 0: 18:39:18 executing program 5: 18:39:18 executing program 2: 18:39:18 executing program 1: 18:39:18 executing program 3: 18:39:18 executing program 0: 18:39:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0xfca) 18:39:18 executing program 5: 18:39:18 executing program 1: 18:39:19 executing program 2: 18:39:19 executing program 3: 18:39:19 executing program 5: 18:39:19 executing program 0: 18:39:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0xfca) 18:39:19 executing program 1: 18:39:19 executing program 2: 18:39:19 executing program 3: 18:39:19 executing program 0: 18:39:19 executing program 5: 18:39:19 executing program 1: 18:39:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0xfca) 18:39:20 executing program 2: 18:39:20 executing program 3: 18:39:20 executing program 0: 18:39:20 executing program 5: 18:39:20 executing program 1: 18:39:20 executing program 2: 18:39:20 executing program 3: 18:39:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xfca) 18:39:20 executing program 0: 18:39:20 executing program 5: 18:39:21 executing program 1: 18:39:21 executing program 2: 18:39:21 executing program 3: 18:39:21 executing program 5: 18:39:21 executing program 0: 18:39:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xfca) 18:39:21 executing program 1: 18:39:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:21 executing program 5: 18:39:21 executing program 0: 18:39:22 executing program 1: 18:39:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xfca) 18:39:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:22 executing program 5: 18:39:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:22 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfff, 0x0, 0x0, "8533ef9a0fde9839760ab597a15e87ebe966c7"}) 18:39:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe800000000000"], 0xfca) 18:39:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) mlock2(&(0x7f0000700000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfff, 0x0, 0x0, "8533ef9a0fde9839760ab597a15e87ebe966c7"}) 18:39:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe800000000000"], 0xfca) 18:39:23 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000001440)=[{0x0, 0x0, 0xffffffff}, {&(0x7f0000000180)="91c2b393e614c4265ed6deec228bcc391c3e94c37de34919b6831d6ac7d1766e1bb96414fbdb23b3cbb81532d0b1bd41ffac29c40d742f3e07928fb642cb8d692680eb2a2ebf09239b08eee6d4e90c6bdc90d2b6f15212959633eae120103dde3c623d231c7e2c63af828397304a71968714b11a9435c4f8cc084d4d7af6e61134f68aa7ddd1b3f5c6e04ca61fd8ecb332af83a0d4701bf3669f25a28bdcebfdce551c03f69b8df1ef49b463d22594276022267c1463ae3394fe7788d8407881b4b39e0deffdbe54c9a7ded723f0cd8c4496ac22c18ce8a006a52d9d4eb4900e254f8e142e8d9fe1072432ea2d87f45a479d5983fc53a3412f30c95a04bf2eb1106856173e60ef3e89f01fc0c0b60d2dd4a28f8b5f912eeef5730475164ba25d6f2420b6d03eea2b1f33916a56ac1da01a398d03217b622b17d53e35389acdea1641cb2a347996b4136df78104aae1e280f676a78f61f7912349c32098bec2adac2db855c0a13d5406d0d6a8082abaea372e6fd8016372ccf050e6e0ff0a37e66af39c12194a692ae270feef565beb92f61cec90f70cd90db3ec5fa48b0352b65799f29ab4693a2591ccd778597c8e94a92e91880127ec7154afc96adaaad8b06b20df18aa79d153", 0x1c8, 0x1}]) 18:39:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:24 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe800000000000"], 0xfca) 18:39:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4008ae8a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:39:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) 18:39:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000"], 0xfca) 18:39:25 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4188aea7, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) 18:39:25 executing program 1: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x200, 0x440) 18:39:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000"], 0xfca) 18:39:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x40000000002, 0x3, 0x0) 18:39:25 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)=0x3) 18:39:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:26 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000"], 0xfca) 18:39:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) 18:39:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 18:39:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:26 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000700000/0x4000)=nil, 0x4000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 18:39:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000"], 0xfca) 18:39:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:27 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0x2bcf}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000"], 0xfca) 18:39:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000380)=""/168) 18:39:28 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:28 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x940, 0x0) 18:39:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x0, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff020000000000000000"], 0xfca) 18:39:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) 18:39:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:29 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4008ae8a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(r0, r3, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0xc080aebe, 0x0) dup2(0xffffffffffffffff, r4) 18:39:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x0, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff0200"/47], 0xfca) 18:39:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) 18:39:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x0, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff0200"/47], 0xfca) 18:39:30 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) [ 1427.194377][T24707] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 18:39:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x0, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:30 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x0, 0x0, 0x25, 0x0, 0x0, "774c8e38043b405b74a51da93fd27535e444c0"}) 18:39:30 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0), 0x4) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff0200"/47], 0xfca) 18:39:31 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x0, 0x0, 0x900, 0x0, 0x0, "774c8e38043b405b74a51da93fd27535e444c0"}) 18:39:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x0, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:31 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff0200"/49], 0xfca) 18:39:31 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x0) 18:39:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x0, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:32 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000240)=@abs={0x8}, 0x8) 18:39:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff0200"/49], 0xfca) 18:39:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x0, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)=0x8) 18:39:32 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockname$unix(r1, 0x0, &(0x7f0000000140)) 18:39:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020000000000000060bc7d020f982100fe8000000000000000000000000000aaff0200"/49], 0xfca) 18:39:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x0, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 18:39:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f00000000c0), 0xc) 18:39:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x0, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:33 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$inet_sctp(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x2000}}], 0x1c}, 0x0) 18:39:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000), 0x4) 18:39:35 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 18:39:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000580)=@in6={0x1c, 0x1c}, 0x1c) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000040)={0x7}, 0x8) dup2(r0, r1) 18:39:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 18:39:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000080)=ANY=[@ANYBLOB="e1"], &(0x7f0000000040)=0x8) 18:39:35 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$inet_sctp(r3, &(0x7f00000012c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x400, 0x0, 0x0, r2}}], 0x1c}, 0x0) 18:39:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000580)={"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"}) 18:39:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x14) 18:39:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], &(0x7f0000000040)=0x8) 18:39:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:36 executing program 1: syz_emit_ethernet(0x26a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd607e002002342c00fe8000000000000000000000000000bbfe"], 0x0) 18:39:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, 0x0) 18:39:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040)={0xfd}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0xb) 18:39:36 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000540)={@random="cd3997030f00", @empty, @val, {@ipv6}}, 0x0) 18:39:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvfrom(r0, 0x0, 0x0, 0x83, 0x0, 0x0) 18:39:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:39:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, 0x0) 18:39:37 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$inet_sctp(r2, &(0x7f00000012c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x2000}}], 0x1c}, 0x0) 18:39:37 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000000), &(0x7f0000000040)=0x8) 18:39:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000240), &(0x7f0000000100)=0x8) 18:39:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4188aea7, 0x0) 18:39:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:39:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 18:39:38 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)=0xa0) 18:39:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="820207fdff"], 0x10) dup2(r1, r0) r2 = dup(r0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:39:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000000), &(0x7f00000000c0)=0x18) 18:39:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, &(0x7f00000000c0), 0x94) 18:39:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$inet_sctp(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x0, 0x0, 0x0, r2}}], 0x1c}, 0x0) 18:39:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000580)=@in6={0x1c, 0x1c}, 0x1c) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000040)={0x7, 0x525}, 0x8) dup2(r0, r1) 18:39:39 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) read(r0, &(0x7f0000000000)=""/99, 0x63) 18:39:39 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:39 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="10024e"], &(0x7f00000001c0)=0xa0) 18:39:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 18:39:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfff, 0x6182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x24000000) 18:39:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffff0c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 18:39:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/166, 0xa6}], 0x1, 0x0) 18:39:40 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20) 18:39:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfff, 0x6182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x24000000) 18:39:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x10c5, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x289, 0x10, 0x0}, 0x70) 18:39:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f00000000c0), 0xc) 18:39:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0) 18:39:41 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x848}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="4c825a773d4b7d3e0d434c701258c1a5a6c5b3a80864896400040000f7aa9910dcf43c23051de293b8cbaabd8c9215e588f710", 0xfffffdef, 0x40090, 0x0, 0x16d) 18:39:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 18:39:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 18:39:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:42 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=""/15, 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000d40)=""/151, 0x97}], 0x1}}], 0x2, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000100)=""/57, 0x3d}, {&(0x7f0000000e00)=""/215, 0xd7}, {&(0x7f00000001c0)=""/61, 0x3d}], 0x4}, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000b40)={{&(0x7f0000000ac0)=""/105, 0x69}, 0x0}, 0x20) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 18:39:42 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r2, 0x0, 0x82, &(0x7f0000000300)=""/178, &(0x7f0000000100)=0xb2) tkill(0x0, 0x0) 18:39:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r0, &(0x7f00000001c0), 0x0) 18:39:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 18:39:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/166, 0xa6}], 0x1, 0x0) 18:39:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/166, 0xa6}], 0x63, 0x0) 18:39:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:43 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0xb605}}], 0xc6, 0x0) 18:39:43 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 18:39:43 executing program 4: 18:39:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0xc0c0583b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) 18:39:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = memfd_create(&(0x7f0000000080)='\x15\xf7^\xf9\x12\x0f\xbd+\xa7\xce\xfa%\x98\xc6\x1e\x1e\xf8\x0213\xce\x89x\xb6\x9b\xfbp\x9f\xd5\x9d\b\xb7\x1b\xcc\x91\xc9\x12\xb01\xa8\x1e\xdb\xea+\xfd\x8d\xe7\xdc\x90\x90\xa8\x1a\xa6%\xc2\x85d?\x15W\xc0\xb9\xfb\x01&\xbb\xce6\xe7\x96\xf2\xf5\n!\xc5\xe2\xef\xce\xff\xec\xac9\x98\xb4<\xc5|\x0e\xae', 0x0) ftruncate(r1, 0x800799c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000006, 0x13, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) io_setup(0x7f, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r2, 0x1, &(0x7f0000000340)=[0x0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7}, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 18:39:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r0) chdir(&(0x7f0000000040)='./file0\x00') 18:39:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:45 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:39:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) io_setup(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0xd0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@esp={{0x30, 'esp\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'geneve1\x00'}, 0x18) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) capget(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:39:45 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:39:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:45 executing program 3: mq_open(&(0x7f00000002c0)='syz', 0x40, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x7fffffff}) 18:39:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 1442.530709][T25152] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 18:39:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) 18:39:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:46 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x22) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000940)=""/71, 0x47}], 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 18:39:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x22) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0xc0070020) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xe, 0x80019c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) [ 1444.035110][T25171] new mount options do not match the existing superblock, will be ignored [ 1444.100383][T25173] new mount options do not match the existing superblock, will be ignored [ 1444.136351][T25175] new mount options do not match the existing superblock, will be ignored [ 1444.311375][T25175] new mount options do not match the existing superblock, will be ignored 18:39:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 18:39:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x28}}, 0x0) 18:39:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02034c00100000000000000000000000010014000000000005000600000000000a0000000000000000000000000000000000000000000001000000000000000001001500000000000200010000000000000000000004000005000500000000000a"], 0x80}}, 0x0) 18:39:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x22) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0xc0070020) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xe, 0x80019c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) 18:39:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 1445.262155][T25187] new mount options do not match the existing superblock, will be ignored 18:39:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002"], 0x138}}, 0x0) 18:39:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x22) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0xc0070020) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xe, 0x80019c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) 18:39:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\''], 0x24}}, 0x0) 18:39:48 executing program 2: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x848}, {0x80000006}]}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="4c825a773d4b7d3e0d434c701258c1a5a6c5b3a80864896400040000f7aa9910dcf43c23051de293b8cbaabd8c9215e588f710", 0xfffffdef, 0x40090, 0x0, 0x16d) 18:39:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x22) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0xc0070020) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xe, 0x80019c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) 18:39:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x1d8, 0x3a0, 0x2a8, 0xf0, 0xf0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@ipv6={@loopback, @remote, [], [], 'wg1\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev, @ipv4, 0x21}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@ipv4={[], [], @private}, @mcast1, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00', @ipv4={[], [], @empty}, @local, @private2, @mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, @private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TOS={0x28, 'TOS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) 18:39:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) 18:39:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x100801, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}, {&(0x7f0000002340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0}], 0x2, 0x40890d2) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1c00"}) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000500)=""/83, 0xfffffef6, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x802, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/173, 0xad, &(0x7f0000000400)={&(0x7f00000002c0)={'michael_mic-generic\x00'}, &(0x7f0000000300)="77937b9db4abacab17897b71b444ff2fedabf37ba647d934c149786622a8d0c4bcd414dea6bc99eb10e4d12c9c73cf2ec9e6d51007b2a8521308104b3aa58e25c9893d77ab3d894b3615d920be200293919570356a1c8549dfbfa4098b0529f5fe9eab37e76e67922bc7aadfa8ba9b602239ee6d462f955f41a7ea0eb24d4dccff69a092c6c6f1ffdac76cc29f6f0bc072f54555ea6892030b21bb3599f36b22d5a28af31331c81ef028f0c3b453458f376bfe125ac221a9a4", 0xb9}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) 18:39:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 18:39:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x96) 18:39:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000084, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 18:39:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:50 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0109dd6d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 18:39:50 executing program 2: 18:39:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:51 executing program 3: 18:39:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x96) 18:39:51 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:39:51 executing program 2: 18:39:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810fafc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:39:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x42242, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 18:39:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 18:39:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x96) [ 1448.946080][T25278] ===================================================== [ 1448.952572][T25278] BUG: KMSAN: uninit-value in sha256_update+0x8bf0/0x9090 [ 1448.952572][T25278] CPU: 0 PID: 25278 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1448.952572][T25278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.978923][T25278] Call Trace: [ 1448.978923][T25278] dump_stack+0x1df/0x240 [ 1448.978923][T25278] kmsan_report+0xf7/0x1e0 [ 1448.978923][T25278] __msan_warning+0x58/0xa0 [ 1448.978923][T25278] sha256_update+0x8bf0/0x9090 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1448.978923][T25278] ? fsnotify_parent+0xbe/0x410 [ 1448.978923][T25278] ? kmsan_get_metadata+0x11d/0x180 [ 1448.978923][T25278] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1448.978923][T25278] ? __kernel_read+0x103b/0x1200 [ 1448.978923][T25278] crypto_sha256_update+0x8b/0xb0 [ 1448.978923][T25278] ? sha1_base_init+0x180/0x180 [ 1448.978923][T25278] crypto_shash_update+0x4e9/0x550 [ 1448.978923][T25278] ? integrity_kernel_read+0xfc/0x140 [ 1448.978923][T25278] ima_calc_file_hash+0x187a/0x3880 [ 1448.978923][T25278] ? __brelse+0x5f/0xd0 [ 1448.978923][T25278] ? ext4_xattr_ibody_get+0xf70/0x12b0 [ 1448.978923][T25278] ? up_read+0x40/0x2b0 [ 1448.978923][T25278] ? kmsan_get_metadata+0x11d/0x180 [ 1448.978923][T25278] ? __msan_poison_alloca+0xf0/0x120 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? kmsan_set_origin_checked+0x95/0xf0 [ 1448.978923][T25278] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1448.978923][T25278] ima_collect_measurement+0x45b/0xa20 [ 1448.978923][T25278] process_measurement+0x1a7d/0x2ce0 [ 1448.978923][T25278] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1448.978923][T25278] ? kmsan_get_metadata+0x11d/0x180 [ 1448.978923][T25278] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1448.978923][T25278] ? selinux_task_getsid+0x1e0/0x1e0 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ima_file_check+0x131/0x170 [ 1448.978923][T25278] path_openat+0x4b9e/0x5d50 [ 1448.978923][T25278] ? should_fail+0x72/0x9e0 [ 1448.978923][T25278] ? kmsan_get_metadata+0x11d/0x180 [ 1448.978923][T25278] do_filp_open+0x2b8/0x710 [ 1448.978923][T25278] do_sys_openat2+0x96f/0xe30 [ 1448.978923][T25278] __se_compat_sys_open+0x21b/0x280 [ 1448.978923][T25278] ? __ia32_sys_openat2+0x70/0x70 [ 1448.978923][T25278] __ia32_compat_sys_open+0x4a/0x70 [ 1448.978923][T25278] __do_fast_syscall_32+0x2aa/0x400 [ 1448.978923][T25278] do_fast_syscall_32+0x6b/0xd0 [ 1448.978923][T25278] do_SYSENTER_32+0x73/0x90 [ 1448.978923][T25278] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1448.978923][T25278] RIP: 0023:0xf7f74549 [ 1448.978923][T25278] Code: Bad RIP value. [ 1448.978923][T25278] RSP: 002b:00000000f5d6f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1448.978923][T25278] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 0000000000042242 [ 1448.978923][T25278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1448.978923][T25278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1448.978923][T25278] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1448.978923][T25278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1448.978923][T25278] [ 1448.978923][T25278] Uninit was stored to memory at: [ 1448.978923][T25278] kmsan_internal_chain_origin+0xad/0x130 [ 1448.978923][T25278] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1448.978923][T25278] kmsan_memcpy_metadata+0xb/0x10 [ 1448.978923][T25278] __msan_memcpy+0x43/0x50 [ 1448.978923][T25278] _copy_to_iter+0xd28/0x26e0 [ 1448.978923][T25278] copy_page_to_iter+0x40c/0x1bb0 [ 1448.978923][T25278] generic_file_buffered_read+0x27b0/0x3650 [ 1448.978923][T25278] generic_file_read_iter+0x164/0xad0 [ 1448.978923][T25278] ext4_file_read_iter+0x876/0xa90 [ 1448.978923][T25278] __kernel_read+0xba3/0x1200 [ 1448.978923][T25278] integrity_kernel_read+0xfc/0x140 [ 1448.978923][T25278] ima_calc_file_hash+0x17ea/0x3880 [ 1448.978923][T25278] ima_collect_measurement+0x45b/0xa20 [ 1448.978923][T25278] process_measurement+0x1a7d/0x2ce0 [ 1448.978923][T25278] ima_file_check+0x131/0x170 [ 1448.978923][T25278] path_openat+0x4b9e/0x5d50 [ 1448.978923][T25278] do_filp_open+0x2b8/0x710 [ 1448.978923][T25278] do_sys_openat2+0x96f/0xe30 [ 1448.978923][T25278] __se_compat_sys_open+0x21b/0x280 [ 1448.978923][T25278] __ia32_compat_sys_open+0x4a/0x70 [ 1448.978923][T25278] __do_fast_syscall_32+0x2aa/0x400 [ 1448.978923][T25278] do_fast_syscall_32+0x6b/0xd0 [ 1448.978923][T25278] do_SYSENTER_32+0x73/0x90 [ 1448.978923][T25278] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1448.978923][T25278] [ 1448.978923][T25278] Uninit was stored to memory at: [ 1448.978923][T25278] kmsan_internal_chain_origin+0xad/0x130 [ 1448.978923][T25278] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1448.978923][T25278] kmsan_memcpy_metadata+0xb/0x10 [ 1448.978923][T25278] __msan_memcpy+0x43/0x50 [ 1448.978923][T25278] iov_iter_copy_from_user_atomic+0x11b1/0x1780 [ 1448.978923][T25278] generic_perform_write+0x499/0x9a0 [ 1448.978923][T25278] ext4_buffered_write_iter+0x795/0xac0 [ 1448.978923][T25278] ext4_file_write_iter+0x1034/0x2dd0 [ 1448.978923][T25278] do_iter_readv_writev+0x94a/0xb10 [ 1448.978923][T25278] do_iter_write+0x303/0xdc0 [ 1448.978923][T25278] vfs_iter_write+0x118/0x180 [ 1448.978923][T25278] iter_file_splice_write+0xb5f/0x1800 [ 1448.978923][T25278] direct_splice_actor+0x1fd/0x580 [ 1448.978923][T25278] splice_direct_to_actor+0x6b2/0xf50 [ 1448.978923][T25278] do_splice_direct+0x342/0x580 [ 1448.978923][T25278] do_sendfile+0x101b/0x1d40 [ 1448.978923][T25278] __se_compat_sys_sendfile+0x301/0x3c0 [ 1448.978923][T25278] __ia32_compat_sys_sendfile+0x56/0x70 [ 1448.978923][T25278] __do_fast_syscall_32+0x2aa/0x400 [ 1448.978923][T25278] do_fast_syscall_32+0x6b/0xd0 [ 1448.978923][T25278] do_SYSENTER_32+0x73/0x90 [ 1448.978923][T25278] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1448.978923][T25278] [ 1448.978923][T25278] Uninit was created at: [ 1448.978923][T25278] kmsan_save_stack_with_flags+0x3c/0x90 [ 1448.978923][T25278] kmsan_alloc_page+0xb9/0x180 [ 1448.978923][T25278] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 1448.978923][T25278] alloc_pages_current+0x672/0x990 [ 1448.978923][T25278] push_pipe+0x605/0xb70 [ 1448.978923][T25278] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 1448.978923][T25278] do_splice_to+0x4fc/0x14f0 [ 1448.978923][T25278] splice_direct_to_actor+0x45c/0xf50 [ 1448.978923][T25278] do_splice_direct+0x342/0x580 [ 1448.978923][T25278] do_sendfile+0x101b/0x1d40 [ 1448.978923][T25278] __se_compat_sys_sendfile+0x301/0x3c0 [ 1448.978923][T25278] __ia32_compat_sys_sendfile+0x56/0x70 [ 1448.978923][T25278] __do_fast_syscall_32+0x2aa/0x400 [ 1448.978923][T25278] do_fast_syscall_32+0x6b/0xd0 [ 1448.978923][T25278] do_SYSENTER_32+0x73/0x90 [ 1448.978923][T25278] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1448.978923][T25278] ===================================================== [ 1448.978923][T25278] Disabling lock debugging due to kernel taint [ 1448.978923][T25278] Kernel panic - not syncing: panic_on_warn set ... [ 1448.978923][T25278] CPU: 0 PID: 25278 Comm: syz-executor.3 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1448.978923][T25278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.978923][T25278] Call Trace: [ 1448.978923][T25278] dump_stack+0x1df/0x240 [ 1448.978923][T25278] panic+0x3d5/0xc3e [ 1448.978923][T25278] kmsan_report+0x1df/0x1e0 [ 1448.978923][T25278] __msan_warning+0x58/0xa0 [ 1448.978923][T25278] sha256_update+0x8bf0/0x9090 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1448.978923][T25278] ? fsnotify_parent+0xbe/0x410 [ 1448.978923][T25278] ? kmsan_get_metadata+0x11d/0x180 [ 1448.978923][T25278] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1448.978923][T25278] ? __kernel_read+0x103b/0x1200 [ 1448.978923][T25278] crypto_sha256_update+0x8b/0xb0 [ 1448.978923][T25278] ? sha1_base_init+0x180/0x180 [ 1448.978923][T25278] crypto_shash_update+0x4e9/0x550 [ 1448.978923][T25278] ? integrity_kernel_read+0xfc/0x140 [ 1448.978923][T25278] ima_calc_file_hash+0x187a/0x3880 [ 1448.978923][T25278] ? __brelse+0x5f/0xd0 [ 1448.978923][T25278] ? ext4_xattr_ibody_get+0xf70/0x12b0 [ 1448.978923][T25278] ? up_read+0x40/0x2b0 [ 1448.978923][T25278] ? kmsan_get_metadata+0x11d/0x180 [ 1448.978923][T25278] ? __msan_poison_alloca+0xf0/0x120 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? kmsan_set_origin_checked+0x95/0xf0 [ 1448.978923][T25278] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1448.978923][T25278] ima_collect_measurement+0x45b/0xa20 [ 1448.978923][T25278] process_measurement+0x1a7d/0x2ce0 [ 1448.978923][T25278] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1448.978923][T25278] ? kmsan_get_metadata+0x11d/0x180 [ 1448.978923][T25278] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1448.978923][T25278] ? selinux_task_getsid+0x1e0/0x1e0 [ 1448.978923][T25278] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1448.978923][T25278] ? kmsan_get_metadata+0x4f/0x180 [ 1448.978923][T25278] ima_file_check+0x131/0x170 [ 1448.978923][T25278] path_openat+0x4b9e/0x5d50 [ 1448.978923][T25278] ? should_fail+0x72/0x9e0 [ 1448.978923][T25278] ? kmsan_get_metadata+0x11d/0x180 [ 1448.978923][T25278] do_filp_open+0x2b8/0x710 [ 1448.978923][T25278] do_sys_openat2+0x96f/0xe30 [ 1448.978923][T25278] __se_compat_sys_open+0x21b/0x280 [ 1448.978923][T25278] ? __ia32_sys_openat2+0x70/0x70 [ 1448.978923][T25278] __ia32_compat_sys_open+0x4a/0x70 [ 1448.978923][T25278] __do_fast_syscall_32+0x2aa/0x400 [ 1448.978923][T25278] do_fast_syscall_32+0x6b/0xd0 [ 1448.978923][T25278] do_SYSENTER_32+0x73/0x90 [ 1448.978923][T25278] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1448.978923][T25278] RIP: 0023:0xf7f74549 [ 1448.978923][T25278] Code: Bad RIP value. [ 1448.978923][T25278] RSP: 002b:00000000f5d6f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1448.978923][T25278] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 0000000000042242 [ 1448.978923][T25278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1448.978923][T25278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1448.978923][T25278] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1448.978923][T25278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1448.978923][T25278] Kernel Offset: 0x13600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1448.978923][T25278] Rebooting in 86400 seconds..