(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 531.185602][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 531.242903][T11987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=11987 comm=syz-executor.0 [ 531.280737][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 532.349004][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 532.582275][ T1209] tipc: TX() has been purged, node left! 17:53:35 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:35 executing program 5: 17:53:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:35 executing program 1: r0 = openat$autofs(0xffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x110100, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x4, 0x5, 0x5, "e0304852aad563eab33cf613befe889a67ab6f32fcc541c51c9120b07ef32f8edfbc6395a52b75641b4a78211ef423365dbff1212c75d98d19618bc2be7353", 0xb}, 0x58) getsockname(r1, 0x0, 0x0) shmget(0x1, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) 17:53:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 532.940126][T12010] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 533.000639][T12013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12013 comm=syz-executor.0 [ 533.054014][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:36 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x401, 0x5, &(0x7f0000000340)=[{&(0x7f0000000080)="1a355a5fd2d03225f6d06c54284cd1721ce69a5b8fccb45c458ae75b4c96be2290a9659ccbe1ddfdc9deb841727480ee7fc6c55a49a8bc812b0f4dcb180aa7f5d7dea37a29ed15292aabb081f5b2af0378672d6005008789b3381919e227a3e661d6", 0x62, 0x1000}, {&(0x7f0000000100)="225ce85088cd80671cc511f0d57d5f7a095bdf53823dff329250a40090a75f1d7152d79ed7f7cfd9a6f5f00ca066e330556d4f7cb05eba3820b1d0d479b1db0b875abce518e2e1e1e3c9dbc70ba7ea10bcfd04e521317b13b72a78b476e75d46e016a1019f7a95973949dba298fb3de8b15c", 0x72, 0x4}, {&(0x7f0000000180)="17fce12139fcf2a9be05f1db676cb06c2f16353978e99b5a5346c442c0661a0eb011406227bab2019dfc3cb595475fc6fe5e40d5c18af79e7eca22e778a0326212c446973e74bdf742612f2a9b1a912a88", 0x51, 0x7}, {&(0x7f0000000200)="14ee76fdf1ef3cf61fb1855cff9bed715d807490b414025c9c050dae96cd691ff07f85ecd45904e24a0ad85ad0f427b53c21fd4bcf7bbd0526dc3b7e7a6bdd9d0826ffe8ef3f3aaacbc98d4c985d275cf6bf2ba914d6fa7392e9ad21d27981cc719028f97f856a14048d023f3524fbe7d90b5fc5cb4bb7d7af9f3474f53fa5011a0ebd680a0669de2d079c8cdc7c6f1fb406f28f728b0633c1a50c0c2de57ece12db1b4c27462e39ab4cf1e4884da8f526084461b0a27a", 0xb7, 0x9}, {&(0x7f00000002c0)="0514488aa810395f24d422b51b3e1a5ff730b71b83461844cff1cf31d4426fcbed83dd8a35bbc58ed5e95035330d7bfed9e79b0c8fc5095830360ec7610a5b6d8f22835dccf91094b340bee0cb70b17967a85a9623ae330e73394f5024b083856052e660e38fc50f74d42dce2a047e0221926bc2f2", 0x75, 0x401}], 0x2800002, &(0x7f0000000380)='+@\x00') r1 = openat$procfs(0xffffff9c, &(0x7f00000003c0)='/proc/schedstat\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8001}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x20}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf73f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) getsockname(r0, 0x0, 0x0) 17:53:36 executing program 5: [ 533.290602][T12015] IPVS: ftp: loaded support on port[0] = 21 17:53:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 533.706719][T12038] nfs: Unknown parameter '+@' 17:53:36 executing program 5: [ 533.808060][T12038] nfs: Unknown parameter '+@' 17:53:37 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 533.952969][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 534.011749][T12051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12051 comm=syz-executor.0 [ 534.070417][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 535.189049][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 535.432082][ T1360] tipc: TX() has been purged, node left! 17:53:38 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:38 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getsockname(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xd4, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xff}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10000}, @ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2101}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000054}, 0x4008040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r8, 0x0, r9) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@ipv6_delroute={0x40, 0x19, 0x800, 0x70bd2c, 0x25dfdbfb, {0xa, 0xb0, 0x10, 0x2, 0xff, 0x1, 0xff, 0xa, 0x3400}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_IIF={0x8, 0x3, r7}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x34, 0x26, 0x200, 0xfffffff7, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xffff, 0xa}, {0xffe0, 0x5}, {0xa, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4010) 17:53:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:38 executing program 5: 17:53:38 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 535.803184][T12072] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 535.838102][ T27] audit: type=1326 audit(1597168418.961:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12068 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc1549 code=0x0 [ 535.892918][T12077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12077 comm=syz-executor.0 17:53:39 executing program 5: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000100)="47d0331602b54ee39a969f23f4d22f2d7408c3d8ddbe01c8777bd527adba3ae2be7f32bf2b5379147c532b64d1b4230ff96e8d648e2914db70cafae7", 0x3c, 0x0, &(0x7f00000001c0), 0x10) [ 536.050828][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:53:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 536.182988][T12090] IPVS: ftp: loaded support on port[0] = 21 17:53:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:39 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 536.615193][T12083] __nla_validate_parse: 2 callbacks suppressed [ 536.615231][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 536.646489][ T27] audit: type=1326 audit(1597168419.772:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12068 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc1549 code=0x0 [ 536.684983][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:53:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x4) r3 = socket$inet_dccp(0x2, 0x6, 0x0) bind$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x67) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) [ 536.797175][T12122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 536.934833][T12127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12127 comm=syz-executor.0 [ 537.002114][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:40 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) r5 = gettid() tkill(r5, 0x16) r6 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) r7 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) kcmp(r4, r5, 0x4, r6, r7) getsockname(r0, 0x0, 0x0) [ 537.308804][ T27] audit: type=1400 audit(1597168420.432:12): avc: denied { create } for pid=12132 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 537.455005][ T27] audit: type=1400 audit(1597168420.502:13): avc: denied { node_bind } for pid=12132 comm="syz-executor.5" saddr=172.20.20.170 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 537.478379][ T27] audit: type=1400 audit(1597168420.502:14): avc: denied { name_connect } for pid=12132 comm="syz-executor.5" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 538.094888][ T27] audit: type=1400 audit(1597168421.222:15): avc: denied { name_bind } for pid=12132 comm="syz-executor.5" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 538.487712][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 538.610104][ T1360] tipc: TX() has been purged, node left! 17:53:41 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000040)='./file1\x00', 0xffbfffff, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="2216050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) request_key(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000380)='./file1\x00', 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) chown(&(0x7f0000000000)='./file1/file0\x00', 0xee01, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x63) [ 538.976246][T12152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 539.029797][T12158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12158 comm=syz-executor.0 17:53:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 539.433295][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 539.623595][T12169] IPVS: ftp: loaded support on port[0] = 21 17:53:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@private2, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2c200a2, r3}) 17:53:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 540.287363][T12195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12195 comm=syz-executor.0 [ 540.349448][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:44 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) getsockname(r0, 0x0, 0x0) [ 541.086008][T12205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12205 comm=syz-executor.0 [ 541.142123][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 541.902625][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 541.997559][T10808] tipc: TX() has been purged, node left! 17:53:45 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 17:53:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:45 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x240000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000140)={0xb82, 0x3, 0x0, 'queue0\x00', 0x45}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000240)={@private0, 0x0, 0x4}, &(0x7f0000000280)=0x20) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) sendto$packet(r3, &(0x7f0000000000)="adcd07cc091b15045478bb9688a4bc24060533e3b4eb2845ad878087a5f2df811b0436c67b4052f54b462a3d06ae6fc7", 0x30, 0x4004800, &(0x7f00000000c0)={0x11, 0xf8, r6, 0x1, 0x6b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f9ffff7f000000ebffff080000001c00048004000a"], 0x30}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @remote, 0xfffffff7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xea7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}]}]}, 0x110}, 0x1, 0x0, 0x0, 0xc000}, 0x404c810) [ 542.311856][T12223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12223 comm=syz-executor.0 [ 542.360475][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 542.396960][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.442362][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 542.528591][T12232] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 17:53:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 542.741515][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 542.799914][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:53:46 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x82, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={r4, 0x8000, 0x3}, &(0x7f00000002c0)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000040)="9f88d4b869f7a8d7f14cb0e1ed644b4ecc9e76878065e3b8e41e3b4fc07cc46bc29bbd78aafcafbb89f6e79ada420a5f3ebbc730162295f9fa410b03ce1e0789369b829e9646f1f1bfe076bd84b29038c63b6c4fafa636efd0cdb1a313afb726563756a059c98bd66bae144ee6c5046bfde96489789d548ccebdcff2aed5345a50784f9c672e6167cf21f169ae00102f2e3e2957", &(0x7f0000000100)=""/41, &(0x7f0000000140)="732de73911b3d7307a1afc73c1e714384a24e6b067a41da522036581a8ce67f982b1485540d87aff34e48e3e1d04c26473090afdbebaffb4", &(0x7f0000000180)="5c69abc30f0e0f769069da4d04df5787c692bd6e345b025d674ad88975f20532f9ef7d588381ebac8ae9b7f726d4010992ca052f8ab4c455345ce122e319848cee46c93c67d15f16f389fb27b08232d5973b84ba13f9a383297b8cdf2b1a897c8a6e83b09f7fb679166217c321d4e1f8b31793beb4b10d4b81af8e8a03432e9e3c15953a88d2fd27d6b77a2fa81df95e13d8d381904b4ba97d6d3d6169d145fbae2f1d56c777f216a76f1f74b15089db41", 0x7fffffff, r7, 0x4}, 0x38) getsockname(r0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') [ 542.904256][T12246] IPVS: ftp: loaded support on port[0] = 21 17:53:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:46 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) [ 544.159185][T12280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12280 comm=syz-executor.0 [ 544.233300][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 544.733217][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 545.133887][T10808] tipc: TX() has been purged, node left! 17:53:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x49, [], 0x0, 0x0, &(0x7f0000000180)=""/73}, &(0x7f0000000280)=0x78) 17:53:48 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) getsockname(r0, 0x0, 0x0) 17:53:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:48 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) [ 545.374992][T12299] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 545.449986][T12302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12302 comm=syz-executor.0 [ 545.480468][T12304] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 545.559113][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:48 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockname(r0, 0x0, 0x0) 17:53:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:49 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x200, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xb6135e975ccb2eca}}) [ 545.913350][T12310] IPVS: ftp: loaded support on port[0] = 21 17:53:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:49 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_complete(0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000480)=0xa53, 0x4) r4 = fcntl$dupfd(r1, 0x0, r2) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0x8004510b, &(0x7f0000000440)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x2600, 0x0}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000004c0)=""/22, &(0x7f0000000500)=0x16) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x7, 0x3}, 0x0, 0x0, &(0x7f0000000200)={0x3, 0x5, 0x4, 0x6}, &(0x7f0000000240)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0xfffffffffffff800}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=""/222, 0xde, r5}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0x1}}, 0x20) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r6, 0x0, 0x0) [ 546.417606][T12339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12339 comm=syz-executor.0 [ 546.488420][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:49 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 17:53:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 547.220656][T12351] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:50 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 547.277398][T12353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12353 comm=syz-executor.0 17:53:50 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x100, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff", 0x4}]) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f00000001c0)="87133aeb07d78d3504b235d858389b9b04f30fee73a1010e1a79006706aea47c313a35b29a03b8d46d1a52814d4ba53c31c86227a78831825b449c1f10f3259e2cdc0793c2c8ed947b1a266ad02bda241e53ed2afd91df779bd035ff253bd2bf3c515019b2", 0x65, 0x9, 0x0, 0x2}, &(0x7f0000000280)) r4 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xa0000, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0xfffffffb, &(0x7f0000000180)=0x4) ioctl$VIDIOC_G_EDID(r4, 0xc0245628, &(0x7f0000000100)={0x0, 0x8, 0x9, [], &(0x7f00000000c0)}) [ 547.348596][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 548.718493][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 549.029953][T10808] tipc: TX() has been purged, node left! 17:53:52 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@nfs='nfs'}]}) 17:53:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 549.416761][T12374] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 549.477622][T12374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12374 comm=syz-executor.0 [ 549.485117][T12370] FAT-fs (loop5): bogus number of reserved sectors [ 549.497843][T12370] FAT-fs (loop5): Can't find a valid FAT filesystem [ 549.535215][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 549.568741][T12370] FAT-fs (loop5): bogus number of reserved sectors [ 549.575677][T12370] FAT-fs (loop5): Can't find a valid FAT filesystem [ 549.834764][T12380] IPVS: ftp: loaded support on port[0] = 21 [ 549.992105][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:53:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 550.674013][T12406] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 550.738554][T12408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12408 comm=syz-executor.0 [ 550.768586][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:53 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0xe}) 17:53:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:54 executing program 2: unshare(0x40000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:54 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0']) chdir(&(0x7f0000000340)='./bus\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000780)=ANY=[], 0x2f) dup3(r1, r0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x2f) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:53:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 551.742885][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.811736][T12419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12419 comm=syz-executor.0 [ 551.854463][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 552.029531][T12422] IPVS: ftp: loaded support on port[0] = 21 17:53:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 552.296919][ T27] audit: type=1804 audit(1597168435.424:16): pid=12427 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir820573810/syzkaller.iwGnqC/47/bus/bus" dev="sda1" ino=16228 res=1 [ 552.323062][ T27] audit: type=1800 audit(1597168435.424:17): pid=12427 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16228 res=0 17:53:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r3, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r4}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = accept4$netrom(r2, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @null, @default, @null, @default, @rose, @bcast, @null]}, &(0x7f0000000080)=0x48, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x4, [0x6, 0x80, 0xfffffffffffff234, 0x0]}}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r6, 0x0, 0x0) [ 552.618351][ T27] audit: type=1804 audit(1597168435.534:18): pid=12452 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir820573810/syzkaller.iwGnqC/47/bus/bus" dev="sda1" ino=16228 res=1 [ 552.645900][ T27] audit: type=1800 audit(1597168435.534:19): pid=12452 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16228 res=0 17:53:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000380)={0x0, 0x0, @fd}, 0xff00}) syz_open_procfs(0x0, 0x0) [ 552.826028][T12458] __nla_validate_parse: 1 callbacks suppressed [ 552.826063][T12458] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 552.897290][T12461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12461 comm=syz-executor.0 17:53:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 552.949199][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:56 executing program 2: unshare(0x40000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:56 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) getsockname(r0, 0x0, 0x0) 17:53:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 553.740351][T12474] IPVS: ftp: loaded support on port[0] = 21 [ 553.843865][T12475] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 553.879072][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 553.921225][T12479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12479 comm=syz-executor.0 [ 553.986393][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:57 executing program 5: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) [ 554.249851][T10808] tipc: TX() has been purged, node left! [ 554.280629][T10808] tipc: TX() has been purged, node left! 17:53:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17:53:57 executing program 2: unshare(0x40000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:57 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockname(r0, 0x0, 0x0) [ 554.926139][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 554.971490][T12515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12515 comm=syz-executor.0 [ 555.044037][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:58 executing program 5: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/85) [ 555.256224][T12522] IPVS: ftp: loaded support on port[0] = 21 17:53:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 555.549381][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:58 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockname(r0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x6e, 0x1, 0x4, "f4f326c993c65e17c1df0900ac51c886", "8f3b61ca8f7bfdc90a57fa64d11c312cb36564e042a42070408e668c169f08329982b4f451b14e7aee09c07121184b7080cbec120d3b27e6da8d5281b4e336ada94cadfb5353d99d568c5227d39a72bd679ab4b769556c4a7e"}, 0x6e, 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x800) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000080)={0xd65c, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x38}, 0x7d}}}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r3, 0xa, 0x12) recvmmsg(r4, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r3, r4) r5 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) fcntl$setown(r4, 0x8, 0x0) r6 = syz_open_procfs(r5, &(0x7f00000002c0)='mountinfo\x00') setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000300)={0x1, 0xf5a, 0x9, 0x3}, 0x8) [ 555.886013][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 555.931375][T12556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12556 comm=syz-executor.0 17:53:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)) fcntl$notify(r0, 0x11, 0x741000) [ 555.980859][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:59 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:53:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, 0x0, 0x0) 17:53:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:53:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:53:59 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0xa440, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000201ac, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) [ 556.669799][T12571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12571 comm=syz-executor.0 17:54:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, 0x0, 0x0) [ 556.966600][T12560] not chained 1050000 origins [ 556.971338][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 556.980004][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.990057][T12560] Call Trace: [ 556.993377][T12560] dump_stack+0x21c/0x280 [ 556.997726][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 557.003456][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 557.009535][T12560] ? kmsan_get_metadata+0x116/0x180 [ 557.014747][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 557.020566][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 557.026675][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 557.032064][T12560] ? kmsan_get_metadata+0x116/0x180 [ 557.037272][T12560] ? kmsan_get_metadata+0x116/0x180 [ 557.042496][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 557.048053][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 557.054134][T12560] ? _copy_from_user+0x201/0x310 [ 557.059080][T12560] ? kmsan_get_metadata+0x116/0x180 [ 557.064286][T12560] __msan_chain_origin+0x50/0x90 [ 557.069235][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 557.069727][T12581] NFS: Device name not specified [ 557.074364][T12560] get_compat_msghdr+0x108/0x2b0 [ 557.074392][T12560] do_recvmmsg+0xdbb/0x22c0 [ 557.074424][T12560] ? kmsan_get_metadata+0x116/0x180 [ 557.074478][T12560] ? kmsan_get_metadata+0x116/0x180 [ 557.099216][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 557.105122][T12560] ? kmsan_get_metadata+0x116/0x180 [ 557.110327][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 557.115968][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 557.121265][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 557.126034][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 557.130812][T12560] __sys_recvmmsg+0x5dd/0x610 [ 557.135527][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.139129][T12582] NFS: Device name not specified [ 557.141605][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.141627][T12560] __do_fast_syscall_32+0x2af/0x480 [ 557.141679][T12560] do_fast_syscall_32+0x6b/0xd0 [ 557.162860][T12560] do_SYSENTER_32+0x73/0x90 [ 557.167394][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.174369][T12560] RIP: 0023:0xf7fc1549 [ 557.178427][T12560] Code: Bad RIP value. [ 557.182492][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 557.190903][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 557.198877][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 557.206853][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.214840][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 557.222821][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.230811][T12560] Uninit was stored to memory at: [ 557.235854][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 557.241576][T12560] __msan_chain_origin+0x50/0x90 [ 557.246517][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 557.251631][T12560] get_compat_msghdr+0x108/0x2b0 [ 557.256570][T12560] do_recvmmsg+0xdbb/0x22c0 [ 557.261074][T12560] __sys_recvmmsg+0x5dd/0x610 [ 557.265752][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.271819][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.277982][T12560] __do_fast_syscall_32+0x2af/0x480 [ 557.283187][T12560] do_fast_syscall_32+0x6b/0xd0 [ 557.288039][T12560] do_SYSENTER_32+0x73/0x90 [ 557.292543][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.298946][T12560] [ 557.301281][T12560] Uninit was stored to memory at: [ 557.306310][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 557.312030][T12560] __msan_chain_origin+0x50/0x90 [ 557.316971][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 557.322082][T12560] get_compat_msghdr+0x108/0x2b0 [ 557.327018][T12560] do_recvmmsg+0xdbb/0x22c0 [ 557.331524][T12560] __sys_recvmmsg+0x5dd/0x610 [ 557.336206][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.342291][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.348450][T12560] __do_fast_syscall_32+0x2af/0x480 [ 557.353664][T12560] do_fast_syscall_32+0x6b/0xd0 [ 557.358514][T12560] do_SYSENTER_32+0x73/0x90 [ 557.363021][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.369336][T12560] [ 557.371662][T12560] Uninit was stored to memory at: [ 557.376689][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 557.382414][T12560] __msan_chain_origin+0x50/0x90 [ 557.387372][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 557.392487][T12560] get_compat_msghdr+0x108/0x2b0 [ 557.397438][T12560] do_recvmmsg+0xdbb/0x22c0 [ 557.401938][T12560] __sys_recvmmsg+0x5dd/0x610 [ 557.406620][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.412699][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.418863][T12560] __do_fast_syscall_32+0x2af/0x480 [ 557.424070][T12560] do_fast_syscall_32+0x6b/0xd0 [ 557.428925][T12560] do_SYSENTER_32+0x73/0x90 [ 557.433425][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.439732][T12560] [ 557.442043][T12560] Uninit was stored to memory at: [ 557.447059][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 557.452767][T12560] __msan_chain_origin+0x50/0x90 [ 557.457698][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 557.462803][T12560] get_compat_msghdr+0x108/0x2b0 [ 557.467737][T12560] do_recvmmsg+0xdbb/0x22c0 [ 557.472250][T12560] __sys_recvmmsg+0x5dd/0x610 [ 557.476921][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.482988][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.489137][T12560] __do_fast_syscall_32+0x2af/0x480 [ 557.494328][T12560] do_fast_syscall_32+0x6b/0xd0 [ 557.499169][T12560] do_SYSENTER_32+0x73/0x90 [ 557.503663][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.509968][T12560] [ 557.512291][T12560] Uninit was stored to memory at: [ 557.517319][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 557.523031][T12560] __msan_chain_origin+0x50/0x90 [ 557.527959][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 557.533060][T12560] get_compat_msghdr+0x108/0x2b0 [ 557.537984][T12560] do_recvmmsg+0xdbb/0x22c0 [ 557.542474][T12560] __sys_recvmmsg+0x5dd/0x610 [ 557.547143][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.553197][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.559346][T12560] __do_fast_syscall_32+0x2af/0x480 [ 557.564533][T12560] do_fast_syscall_32+0x6b/0xd0 [ 557.569370][T12560] do_SYSENTER_32+0x73/0x90 [ 557.573864][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.580169][T12560] [ 557.582482][T12560] Uninit was stored to memory at: [ 557.587511][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 557.593234][T12560] __msan_chain_origin+0x50/0x90 [ 557.598163][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 557.603266][T12560] get_compat_msghdr+0x108/0x2b0 [ 557.608193][T12560] do_recvmmsg+0xdbb/0x22c0 [ 557.612693][T12560] __sys_recvmmsg+0x5dd/0x610 [ 557.617359][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.623432][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.629575][T12560] __do_fast_syscall_32+0x2af/0x480 [ 557.634766][T12560] do_fast_syscall_32+0x6b/0xd0 [ 557.639609][T12560] do_SYSENTER_32+0x73/0x90 [ 557.644106][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.650410][T12560] [ 557.652724][T12560] Uninit was stored to memory at: [ 557.657739][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 557.663447][T12560] __msan_chain_origin+0x50/0x90 [ 557.668375][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 557.673479][T12560] get_compat_msghdr+0x108/0x2b0 [ 557.678406][T12560] do_recvmmsg+0xdbb/0x22c0 [ 557.682899][T12560] __sys_recvmmsg+0x5dd/0x610 [ 557.687568][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.693719][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.699859][T12560] __do_fast_syscall_32+0x2af/0x480 [ 557.705046][T12560] do_fast_syscall_32+0x6b/0xd0 [ 557.709884][T12560] do_SYSENTER_32+0x73/0x90 17:54:00 executing program 5: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) chdir(&(0x7f0000000340)='./bus\x00') [ 557.714391][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.720733][T12560] [ 557.723045][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 557.729702][T12560] do_recvmmsg+0xbf/0x22c0 [ 557.734133][T12560] do_recvmmsg+0xbf/0x22c0 17:54:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:54:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 558.287393][T12586] __nla_validate_parse: 2 callbacks suppressed [ 558.287543][T12586] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.361715][T12589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12589 comm=syz-executor.0 [ 558.397524][T12564] not chained 1060000 origins [ 558.401156][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.402227][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 558.402236][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.402243][T12564] Call Trace: [ 558.402269][T12564] dump_stack+0x21c/0x280 [ 558.402297][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 558.402319][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 558.402340][T12564] ? kmsan_get_metadata+0x116/0x180 [ 558.402361][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 558.402382][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 558.402400][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 558.402425][T12564] ? kmsan_get_metadata+0x116/0x180 [ 558.402470][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 558.482681][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 558.488743][T12564] ? _copy_from_user+0x201/0x310 [ 558.493676][T12564] ? kmsan_get_metadata+0x116/0x180 [ 558.498863][T12564] __msan_chain_origin+0x50/0x90 [ 558.503805][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 558.508923][T12564] get_compat_msghdr+0x108/0x2b0 [ 558.513857][T12564] do_recvmmsg+0xdbb/0x22c0 [ 558.518357][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 558.524161][T12564] ? kmsan_get_metadata+0x116/0x180 [ 558.529353][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 558.535268][T12564] ? kmsan_get_metadata+0x116/0x180 [ 558.540464][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 558.546090][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 558.551370][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 558.556125][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 558.560884][T12564] __sys_recvmmsg+0x5dd/0x610 [ 558.565579][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.572053][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.578210][T12564] __do_fast_syscall_32+0x2af/0x480 [ 558.583417][T12564] do_fast_syscall_32+0x6b/0xd0 [ 558.588265][T12564] do_SYSENTER_32+0x73/0x90 [ 558.592765][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.599077][T12564] RIP: 0023:0xf7fc1549 [ 558.603122][T12564] Code: Bad RIP value. [ 558.607172][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 558.615571][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 558.623535][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 558.631599][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.639578][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.647558][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.655527][T12564] Uninit was stored to memory at: [ 558.660633][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 558.667384][T12564] __msan_chain_origin+0x50/0x90 [ 558.672311][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 558.677407][T12564] get_compat_msghdr+0x108/0x2b0 [ 558.682334][T12564] do_recvmmsg+0xdbb/0x22c0 [ 558.686829][T12564] __sys_recvmmsg+0x5dd/0x610 [ 558.691491][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.697540][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.703683][T12564] __do_fast_syscall_32+0x2af/0x480 [ 558.708871][T12564] do_fast_syscall_32+0x6b/0xd0 [ 558.713713][T12564] do_SYSENTER_32+0x73/0x90 [ 558.718203][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.724505][T12564] [ 558.726816][T12564] Uninit was stored to memory at: [ 558.731829][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 558.737533][T12564] __msan_chain_origin+0x50/0x90 [ 558.742456][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 558.747557][T12564] get_compat_msghdr+0x108/0x2b0 [ 558.752489][T12564] do_recvmmsg+0xdbb/0x22c0 [ 558.756979][T12564] __sys_recvmmsg+0x5dd/0x610 [ 558.761645][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.767700][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.773842][T12564] __do_fast_syscall_32+0x2af/0x480 [ 558.779027][T12564] do_fast_syscall_32+0x6b/0xd0 [ 558.783874][T12564] do_SYSENTER_32+0x73/0x90 [ 558.788364][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.794669][T12564] [ 558.796982][T12564] Uninit was stored to memory at: [ 558.801998][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 558.807724][T12564] __msan_chain_origin+0x50/0x90 [ 558.812652][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 558.817748][T12564] get_compat_msghdr+0x108/0x2b0 [ 558.822673][T12564] do_recvmmsg+0xdbb/0x22c0 [ 558.827162][T12564] __sys_recvmmsg+0x5dd/0x610 [ 558.831837][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.837895][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.844044][T12564] __do_fast_syscall_32+0x2af/0x480 [ 558.849231][T12564] do_fast_syscall_32+0x6b/0xd0 [ 558.854071][T12564] do_SYSENTER_32+0x73/0x90 [ 558.858563][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.864867][T12564] [ 558.867182][T12564] Uninit was stored to memory at: [ 558.872195][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 558.877903][T12564] __msan_chain_origin+0x50/0x90 [ 558.882834][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 558.887936][T12564] get_compat_msghdr+0x108/0x2b0 [ 558.892858][T12564] do_recvmmsg+0xdbb/0x22c0 [ 558.897357][T12564] __sys_recvmmsg+0x5dd/0x610 [ 558.902019][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.908071][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.914210][T12564] __do_fast_syscall_32+0x2af/0x480 [ 558.919407][T12564] do_fast_syscall_32+0x6b/0xd0 [ 558.924241][T12564] do_SYSENTER_32+0x73/0x90 [ 558.928732][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.935036][T12564] [ 558.937349][T12564] Uninit was stored to memory at: [ 558.942362][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 558.948069][T12564] __msan_chain_origin+0x50/0x90 [ 558.952994][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 558.958093][T12564] get_compat_msghdr+0x108/0x2b0 [ 558.963019][T12564] do_recvmmsg+0xdbb/0x22c0 [ 558.967509][T12564] __sys_recvmmsg+0x5dd/0x610 [ 558.972175][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.978246][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.984387][T12564] __do_fast_syscall_32+0x2af/0x480 [ 558.989578][T12564] do_fast_syscall_32+0x6b/0xd0 [ 558.994418][T12564] do_SYSENTER_32+0x73/0x90 [ 558.998911][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.005215][T12564] [ 559.007529][T12564] Uninit was stored to memory at: [ 559.012542][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 559.018249][T12564] __msan_chain_origin+0x50/0x90 [ 559.023175][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 559.028272][T12564] get_compat_msghdr+0x108/0x2b0 [ 559.033196][T12564] do_recvmmsg+0xdbb/0x22c0 [ 559.037687][T12564] __sys_recvmmsg+0x5dd/0x610 [ 559.042356][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.048411][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.054566][T12564] __do_fast_syscall_32+0x2af/0x480 [ 559.059752][T12564] do_fast_syscall_32+0x6b/0xd0 [ 559.064591][T12564] do_SYSENTER_32+0x73/0x90 [ 559.069082][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.075385][T12564] [ 559.077706][T12564] Uninit was stored to memory at: [ 559.082717][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 559.088423][T12564] __msan_chain_origin+0x50/0x90 [ 559.093347][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 559.098444][T12564] get_compat_msghdr+0x108/0x2b0 [ 559.103367][T12564] do_recvmmsg+0xdbb/0x22c0 [ 559.107858][T12564] __sys_recvmmsg+0x5dd/0x610 [ 559.112528][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.118580][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.124721][T12564] __do_fast_syscall_32+0x2af/0x480 [ 559.129906][T12564] do_fast_syscall_32+0x6b/0xd0 [ 559.134749][T12564] do_SYSENTER_32+0x73/0x90 [ 559.139240][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.145629][T12564] [ 559.147943][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 559.154638][T12564] do_recvmmsg+0xbf/0x22c0 [ 559.159039][T12564] do_recvmmsg+0xbf/0x22c0 17:54:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, 0x0, 0x0) [ 559.991736][T10808] tipc: TX() has been purged, node left! [ 560.014764][T10808] tipc: TX() has been purged, node left! [ 560.868537][T12560] not chained 1070000 origins [ 560.873255][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 560.881915][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.892086][T12560] Call Trace: [ 560.895371][T12560] dump_stack+0x21c/0x280 [ 560.899699][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 560.905410][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 560.911473][T12560] ? kmsan_get_metadata+0x116/0x180 [ 560.916662][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 560.922460][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 560.928516][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 560.933889][T12560] ? kmsan_get_metadata+0x116/0x180 [ 560.939080][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 560.944619][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 560.950682][T12560] ? _copy_from_user+0x201/0x310 [ 560.955612][T12560] ? kmsan_get_metadata+0x116/0x180 [ 560.960804][T12560] __msan_chain_origin+0x50/0x90 [ 560.965743][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 560.970859][T12560] get_compat_msghdr+0x108/0x2b0 [ 560.975795][T12560] do_recvmmsg+0xdbb/0x22c0 [ 560.980299][T12560] ? kmsan_get_metadata+0x116/0x180 [ 560.985493][T12560] ? kmsan_get_metadata+0x116/0x180 [ 560.990691][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 560.996577][T12560] ? kmsan_get_metadata+0x116/0x180 [ 561.001769][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 561.007393][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 561.012668][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 561.017419][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 561.022191][T12560] __sys_recvmmsg+0x5dd/0x610 [ 561.026868][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.032943][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.039087][T12560] __do_fast_syscall_32+0x2af/0x480 [ 561.044284][T12560] do_fast_syscall_32+0x6b/0xd0 [ 561.049126][T12560] do_SYSENTER_32+0x73/0x90 [ 561.053623][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.059934][T12560] RIP: 0023:0xf7fc1549 [ 561.063982][T12560] Code: Bad RIP value. [ 561.068037][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 561.076454][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 561.084413][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 561.092372][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.100332][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 561.108286][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.116252][T12560] Uninit was stored to memory at: [ 561.121269][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 561.126978][T12560] __msan_chain_origin+0x50/0x90 [ 561.132079][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 561.137177][T12560] get_compat_msghdr+0x108/0x2b0 [ 561.142104][T12560] do_recvmmsg+0xdbb/0x22c0 [ 561.146593][T12560] __sys_recvmmsg+0x5dd/0x610 [ 561.151261][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.157314][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.163456][T12560] __do_fast_syscall_32+0x2af/0x480 [ 561.168643][T12560] do_fast_syscall_32+0x6b/0xd0 [ 561.173482][T12560] do_SYSENTER_32+0x73/0x90 [ 561.177980][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.184285][T12560] [ 561.186595][T12560] Uninit was stored to memory at: [ 561.191617][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 561.197324][T12560] __msan_chain_origin+0x50/0x90 [ 561.202249][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 561.207348][T12560] get_compat_msghdr+0x108/0x2b0 [ 561.212281][T12560] do_recvmmsg+0xdbb/0x22c0 [ 561.216767][T12560] __sys_recvmmsg+0x5dd/0x610 [ 561.221430][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.227522][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.233664][T12560] __do_fast_syscall_32+0x2af/0x480 [ 561.238850][T12560] do_fast_syscall_32+0x6b/0xd0 [ 561.243688][T12560] do_SYSENTER_32+0x73/0x90 [ 561.248179][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.254481][T12560] [ 561.256795][T12560] Uninit was stored to memory at: [ 561.261910][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 561.267615][T12560] __msan_chain_origin+0x50/0x90 [ 561.272538][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 561.277634][T12560] get_compat_msghdr+0x108/0x2b0 [ 561.282555][T12560] do_recvmmsg+0xdbb/0x22c0 [ 561.287044][T12560] __sys_recvmmsg+0x5dd/0x610 [ 561.291709][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.297763][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.303903][T12560] __do_fast_syscall_32+0x2af/0x480 [ 561.309089][T12560] do_fast_syscall_32+0x6b/0xd0 [ 561.313927][T12560] do_SYSENTER_32+0x73/0x90 [ 561.318417][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.324718][T12560] [ 561.327027][T12560] Uninit was stored to memory at: [ 561.332041][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 561.337745][T12560] __msan_chain_origin+0x50/0x90 [ 561.342667][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 561.347763][T12560] get_compat_msghdr+0x108/0x2b0 [ 561.352685][T12560] do_recvmmsg+0xdbb/0x22c0 [ 561.357170][T12560] __sys_recvmmsg+0x5dd/0x610 [ 561.361831][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.367885][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.374028][T12560] __do_fast_syscall_32+0x2af/0x480 [ 561.379214][T12560] do_fast_syscall_32+0x6b/0xd0 [ 561.384052][T12560] do_SYSENTER_32+0x73/0x90 [ 561.388555][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.394856][T12560] [ 561.397168][T12560] Uninit was stored to memory at: [ 561.402197][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 561.407904][T12560] __msan_chain_origin+0x50/0x90 [ 561.412835][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 561.417932][T12560] get_compat_msghdr+0x108/0x2b0 [ 561.422865][T12560] do_recvmmsg+0xdbb/0x22c0 [ 561.427359][T12560] __sys_recvmmsg+0x5dd/0x610 [ 561.432026][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.438080][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.444219][T12560] __do_fast_syscall_32+0x2af/0x480 [ 561.449407][T12560] do_fast_syscall_32+0x6b/0xd0 [ 561.454253][T12560] do_SYSENTER_32+0x73/0x90 [ 561.458747][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.465050][T12560] [ 561.467362][T12560] Uninit was stored to memory at: [ 561.472378][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 561.478086][T12560] __msan_chain_origin+0x50/0x90 [ 561.483014][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 561.488116][T12560] get_compat_msghdr+0x108/0x2b0 [ 561.493040][T12560] do_recvmmsg+0xdbb/0x22c0 [ 561.497528][T12560] __sys_recvmmsg+0x5dd/0x610 [ 561.502191][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.508244][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.514392][T12560] __do_fast_syscall_32+0x2af/0x480 [ 561.519578][T12560] do_fast_syscall_32+0x6b/0xd0 [ 561.524444][T12560] do_SYSENTER_32+0x73/0x90 [ 561.528934][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.535238][T12560] [ 561.537551][T12560] Uninit was stored to memory at: [ 561.542600][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 561.548315][T12560] __msan_chain_origin+0x50/0x90 [ 561.553255][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 561.558360][T12560] get_compat_msghdr+0x108/0x2b0 [ 561.563289][T12560] do_recvmmsg+0xdbb/0x22c0 [ 561.567783][T12560] __sys_recvmmsg+0x5dd/0x610 [ 561.572464][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.578531][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.584686][T12560] __do_fast_syscall_32+0x2af/0x480 [ 561.590011][T12560] do_fast_syscall_32+0x6b/0xd0 [ 561.594853][T12560] do_SYSENTER_32+0x73/0x90 [ 561.599349][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.605650][T12560] [ 561.607966][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 561.614628][T12560] do_recvmmsg+0xbf/0x22c0 [ 561.619046][T12560] do_recvmmsg+0xbf/0x22c0 [ 562.017628][T12564] not chained 1080000 origins [ 562.022340][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 562.031011][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.041061][T12564] Call Trace: [ 562.044375][T12564] dump_stack+0x21c/0x280 [ 562.048714][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 562.054441][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 562.060511][T12564] ? kmsan_get_metadata+0x116/0x180 [ 562.065715][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.071535][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 562.077601][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 562.082979][T12564] ? kmsan_get_metadata+0x116/0x180 [ 562.088182][T12564] ? kmsan_get_metadata+0x116/0x180 [ 562.093386][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 562.098949][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 562.105021][T12564] ? _copy_from_user+0x201/0x310 [ 562.109956][T12564] ? kmsan_get_metadata+0x116/0x180 [ 562.115156][T12564] __msan_chain_origin+0x50/0x90 [ 562.120101][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 562.125231][T12564] get_compat_msghdr+0x108/0x2b0 [ 562.130185][T12564] do_recvmmsg+0xdbb/0x22c0 [ 562.134961][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.140783][T12564] ? kmsan_get_metadata+0x116/0x180 [ 562.145987][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 562.151883][T12564] ? kmsan_get_metadata+0x116/0x180 [ 562.157080][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 562.162722][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 562.168008][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 562.172776][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 562.177544][T12564] __sys_recvmmsg+0x5dd/0x610 [ 562.182239][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.188317][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.194481][T12564] __do_fast_syscall_32+0x2af/0x480 [ 562.199691][T12564] do_fast_syscall_32+0x6b/0xd0 [ 562.204550][T12564] do_SYSENTER_32+0x73/0x90 [ 562.209057][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.215384][T12564] RIP: 0023:0xf7fc1549 [ 562.219441][T12564] Code: Bad RIP value. [ 562.223503][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 562.231914][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 562.239897][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 562.247868][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.255842][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 562.263812][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.271789][T12564] Uninit was stored to memory at: [ 562.276816][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 562.282536][T12564] __msan_chain_origin+0x50/0x90 [ 562.287480][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 562.292593][T12564] get_compat_msghdr+0x108/0x2b0 [ 562.297526][T12564] do_recvmmsg+0xdbb/0x22c0 [ 562.302026][T12564] __sys_recvmmsg+0x5dd/0x610 [ 562.306708][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.312779][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.318930][T12564] __do_fast_syscall_32+0x2af/0x480 [ 562.324129][T12564] do_fast_syscall_32+0x6b/0xd0 [ 562.328977][T12564] do_SYSENTER_32+0x73/0x90 [ 562.333482][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.339798][T12564] [ 562.342117][T12564] Uninit was stored to memory at: [ 562.347145][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 562.352864][T12564] __msan_chain_origin+0x50/0x90 [ 562.357808][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 562.362928][T12564] get_compat_msghdr+0x108/0x2b0 [ 562.367872][T12564] do_recvmmsg+0xdbb/0x22c0 [ 562.372468][T12564] __sys_recvmmsg+0x5dd/0x610 [ 562.377165][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.383242][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.389404][T12564] __do_fast_syscall_32+0x2af/0x480 [ 562.394615][T12564] do_fast_syscall_32+0x6b/0xd0 [ 562.399468][T12564] do_SYSENTER_32+0x73/0x90 [ 562.403978][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.410301][T12564] [ 562.412623][T12564] Uninit was stored to memory at: [ 562.417763][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 562.423488][T12564] __msan_chain_origin+0x50/0x90 [ 562.428431][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 562.433546][T12564] get_compat_msghdr+0x108/0x2b0 [ 562.438485][T12564] do_recvmmsg+0xdbb/0x22c0 [ 562.442992][T12564] __sys_recvmmsg+0x5dd/0x610 [ 562.447680][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.453752][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.459915][T12564] __do_fast_syscall_32+0x2af/0x480 [ 562.465120][T12564] do_fast_syscall_32+0x6b/0xd0 [ 562.469991][T12564] do_SYSENTER_32+0x73/0x90 [ 562.474504][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.480820][T12564] [ 562.483140][T12564] Uninit was stored to memory at: [ 562.488173][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 562.493901][T12564] __msan_chain_origin+0x50/0x90 [ 562.498846][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 562.503962][T12564] get_compat_msghdr+0x108/0x2b0 [ 562.508902][T12564] do_recvmmsg+0xdbb/0x22c0 [ 562.513406][T12564] __sys_recvmmsg+0x5dd/0x610 [ 562.518087][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.524158][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.530314][T12564] __do_fast_syscall_32+0x2af/0x480 [ 562.535526][T12564] do_fast_syscall_32+0x6b/0xd0 [ 562.540394][T12564] do_SYSENTER_32+0x73/0x90 [ 562.544908][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.551223][T12564] [ 562.553541][T12564] Uninit was stored to memory at: [ 562.558572][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 562.564297][T12564] __msan_chain_origin+0x50/0x90 [ 562.569242][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 562.574355][T12564] get_compat_msghdr+0x108/0x2b0 [ 562.579288][T12564] do_recvmmsg+0xdbb/0x22c0 [ 562.583788][T12564] __sys_recvmmsg+0x5dd/0x610 [ 562.588476][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.594551][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.600710][T12564] __do_fast_syscall_32+0x2af/0x480 [ 562.605929][T12564] do_fast_syscall_32+0x6b/0xd0 [ 562.610801][T12564] do_SYSENTER_32+0x73/0x90 [ 562.615307][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.621621][T12564] [ 562.623948][T12564] Uninit was stored to memory at: [ 562.628986][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 562.634710][T12564] __msan_chain_origin+0x50/0x90 [ 562.639648][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 562.644761][T12564] get_compat_msghdr+0x108/0x2b0 [ 562.649704][T12564] do_recvmmsg+0xdbb/0x22c0 [ 562.654215][T12564] __sys_recvmmsg+0x5dd/0x610 [ 562.658909][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.664982][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.671141][T12564] __do_fast_syscall_32+0x2af/0x480 [ 562.676360][T12564] do_fast_syscall_32+0x6b/0xd0 [ 562.681232][T12564] do_SYSENTER_32+0x73/0x90 [ 562.685844][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.692159][T12564] [ 562.694479][T12564] Uninit was stored to memory at: [ 562.699507][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 562.705227][T12564] __msan_chain_origin+0x50/0x90 [ 562.710164][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 562.715273][T12564] get_compat_msghdr+0x108/0x2b0 [ 562.720218][T12564] do_recvmmsg+0xdbb/0x22c0 [ 562.724718][T12564] __sys_recvmmsg+0x5dd/0x610 [ 562.729401][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.735495][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.741649][T12564] __do_fast_syscall_32+0x2af/0x480 [ 562.746846][T12564] do_fast_syscall_32+0x6b/0xd0 [ 562.751698][T12564] do_SYSENTER_32+0x73/0x90 [ 562.756205][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.762519][T12564] [ 562.764845][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 562.771514][T12564] do_recvmmsg+0xbf/0x22c0 [ 562.775930][T12564] do_recvmmsg+0xbf/0x22c0 [ 562.831873][T12560] not chained 1090000 origins [ 562.836610][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 562.845279][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.855328][T12560] Call Trace: [ 562.858624][T12560] dump_stack+0x21c/0x280 [ 562.862975][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 562.868705][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 562.874777][T12560] ? kmsan_get_metadata+0x116/0x180 [ 562.879993][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.885805][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 562.891875][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 562.897256][T12560] ? kmsan_get_metadata+0x116/0x180 [ 562.902458][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 562.908037][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 562.914110][T12560] ? _copy_from_user+0x201/0x310 [ 562.919054][T12560] ? kmsan_get_metadata+0x116/0x180 [ 562.924257][T12560] __msan_chain_origin+0x50/0x90 [ 562.929202][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 562.934328][T12560] get_compat_msghdr+0x108/0x2b0 [ 562.939275][T12560] do_recvmmsg+0xdbb/0x22c0 [ 562.943796][T12560] ? kmsan_get_metadata+0x116/0x180 [ 562.949030][T12560] ? kmsan_get_metadata+0x116/0x180 [ 562.954246][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 562.960158][T12560] ? kmsan_get_metadata+0x116/0x180 [ 562.965366][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 562.971006][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 562.976381][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 562.981147][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 562.985916][T12560] __sys_recvmmsg+0x5dd/0x610 [ 562.990615][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.996701][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.002869][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.008102][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.012960][T12560] do_SYSENTER_32+0x73/0x90 [ 563.017472][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.023796][T12560] RIP: 0023:0xf7fc1549 [ 563.027862][T12560] Code: Bad RIP value. [ 563.031948][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 563.040362][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 563.048331][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 563.056301][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.064269][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 563.072268][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.080248][T12560] Uninit was stored to memory at: [ 563.085282][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.091000][T12560] __msan_chain_origin+0x50/0x90 [ 563.095939][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.101050][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.105985][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.110486][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.115164][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.121232][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.127385][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.132584][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.137435][T12560] do_SYSENTER_32+0x73/0x90 [ 563.141942][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.148257][T12560] [ 563.150578][T12560] Uninit was stored to memory at: [ 563.156734][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.162465][T12560] __msan_chain_origin+0x50/0x90 [ 563.167401][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.172513][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.177446][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.181949][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.186628][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.192698][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.198857][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.204070][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.208924][T12560] do_SYSENTER_32+0x73/0x90 [ 563.213456][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.228103][T12560] [ 563.230424][T12560] Uninit was stored to memory at: [ 563.235969][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.241686][T12560] __msan_chain_origin+0x50/0x90 [ 563.246660][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.251772][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.256705][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.261208][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.265887][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.271957][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.278121][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.283322][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.288171][T12560] do_SYSENTER_32+0x73/0x90 [ 563.292680][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.298991][T12560] [ 563.301320][T12560] Uninit was stored to memory at: [ 563.306359][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.312078][T12560] __msan_chain_origin+0x50/0x90 [ 563.317026][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.322137][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.327073][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.331575][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.336261][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.342349][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.348500][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.353700][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.358554][T12560] do_SYSENTER_32+0x73/0x90 [ 563.363062][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.369377][T12560] [ 563.371695][T12560] Uninit was stored to memory at: [ 563.376718][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.382435][T12560] __msan_chain_origin+0x50/0x90 [ 563.387373][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.392485][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.397420][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.401926][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.406604][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.412671][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.418826][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.424039][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.428889][T12560] do_SYSENTER_32+0x73/0x90 [ 563.433399][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.439711][T12560] [ 563.442036][T12560] Uninit was stored to memory at: [ 563.447065][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.452784][T12560] __msan_chain_origin+0x50/0x90 [ 563.457724][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.462840][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.467806][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.472310][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.476999][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.483065][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.489219][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.494415][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.499262][T12560] do_SYSENTER_32+0x73/0x90 [ 563.503762][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.510070][T12560] [ 563.512384][T12560] Uninit was stored to memory at: [ 563.517412][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.523128][T12560] __msan_chain_origin+0x50/0x90 [ 563.528066][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.533175][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.538106][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.542605][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.547279][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.553349][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.559504][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.564698][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.569545][T12560] do_SYSENTER_32+0x73/0x90 [ 563.574048][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.580358][T12560] [ 563.582677][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 563.589356][T12560] do_recvmmsg+0xbf/0x22c0 [ 563.593772][T12560] do_recvmmsg+0xbf/0x22c0 [ 563.619837][T12560] not chained 1100000 origins [ 563.624539][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 563.633202][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.643252][T12560] Call Trace: [ 563.646550][T12560] dump_stack+0x21c/0x280 [ 563.650909][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 563.656637][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 563.662709][T12560] ? kmsan_get_metadata+0x116/0x180 [ 563.667912][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 563.673725][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 563.679793][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 563.685175][T12560] ? kmsan_get_metadata+0x116/0x180 [ 563.690374][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 563.695925][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 563.701996][T12560] ? _copy_from_user+0x201/0x310 [ 563.706940][T12560] ? kmsan_get_metadata+0x116/0x180 [ 563.712229][T12560] __msan_chain_origin+0x50/0x90 [ 563.717172][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.722304][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.727252][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.731770][T12560] ? kmsan_get_metadata+0x116/0x180 [ 563.736971][T12560] ? kmsan_get_metadata+0x116/0x180 [ 563.742174][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 563.748076][T12560] ? kmsan_get_metadata+0x116/0x180 [ 563.753277][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 563.758935][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 563.764225][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 563.768981][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 563.773738][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.778424][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.784491][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.790636][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.795853][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.800698][T12560] do_SYSENTER_32+0x73/0x90 [ 563.805194][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.811508][T12560] RIP: 0023:0xf7fc1549 [ 563.815556][T12560] Code: Bad RIP value. [ 563.819607][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 563.828006][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 563.835964][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 563.844034][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.852002][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 563.859960][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.867935][T12560] Uninit was stored to memory at: [ 563.872953][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.878659][T12560] __msan_chain_origin+0x50/0x90 [ 563.883585][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.888683][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.893608][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.898100][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.902768][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.908824][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.914968][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.920156][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.924995][T12560] do_SYSENTER_32+0x73/0x90 [ 563.929503][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.935806][T12560] [ 563.938117][T12560] Uninit was stored to memory at: [ 563.943128][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 563.948835][T12560] __msan_chain_origin+0x50/0x90 [ 563.953760][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 563.958856][T12560] get_compat_msghdr+0x108/0x2b0 [ 563.963781][T12560] do_recvmmsg+0xdbb/0x22c0 [ 563.968269][T12560] __sys_recvmmsg+0x5dd/0x610 [ 563.972944][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.978995][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.985250][T12560] __do_fast_syscall_32+0x2af/0x480 [ 563.990435][T12560] do_fast_syscall_32+0x6b/0xd0 [ 563.995276][T12560] do_SYSENTER_32+0x73/0x90 [ 563.999785][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.006090][T12560] [ 564.008400][T12560] Uninit was stored to memory at: [ 564.013413][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 564.019119][T12560] __msan_chain_origin+0x50/0x90 [ 564.024044][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 564.029144][T12560] get_compat_msghdr+0x108/0x2b0 [ 564.034093][T12560] do_recvmmsg+0xdbb/0x22c0 [ 564.038581][T12560] __sys_recvmmsg+0x5dd/0x610 [ 564.043248][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.049305][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.055448][T12560] __do_fast_syscall_32+0x2af/0x480 [ 564.060634][T12560] do_fast_syscall_32+0x6b/0xd0 [ 564.065471][T12560] do_SYSENTER_32+0x73/0x90 [ 564.069964][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.076269][T12560] [ 564.078582][T12560] Uninit was stored to memory at: [ 564.083592][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 564.089300][T12560] __msan_chain_origin+0x50/0x90 [ 564.094225][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 564.099321][T12560] get_compat_msghdr+0x108/0x2b0 [ 564.104249][T12560] do_recvmmsg+0xdbb/0x22c0 [ 564.108739][T12560] __sys_recvmmsg+0x5dd/0x610 [ 564.113406][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.119462][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.125601][T12560] __do_fast_syscall_32+0x2af/0x480 [ 564.130787][T12560] do_fast_syscall_32+0x6b/0xd0 [ 564.135623][T12560] do_SYSENTER_32+0x73/0x90 [ 564.140116][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.146421][T12560] [ 564.148733][T12560] Uninit was stored to memory at: [ 564.153745][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 564.159462][T12560] __msan_chain_origin+0x50/0x90 [ 564.164389][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 564.169488][T12560] get_compat_msghdr+0x108/0x2b0 [ 564.174412][T12560] do_recvmmsg+0xdbb/0x22c0 [ 564.178900][T12560] __sys_recvmmsg+0x5dd/0x610 [ 564.183567][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.189623][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.195764][T12560] __do_fast_syscall_32+0x2af/0x480 [ 564.200949][T12560] do_fast_syscall_32+0x6b/0xd0 [ 564.205787][T12560] do_SYSENTER_32+0x73/0x90 [ 564.210277][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.216579][T12560] [ 564.218889][T12560] Uninit was stored to memory at: [ 564.223921][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 564.229635][T12560] __msan_chain_origin+0x50/0x90 [ 564.234561][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 564.239657][T12560] get_compat_msghdr+0x108/0x2b0 [ 564.244578][T12560] do_recvmmsg+0xdbb/0x22c0 [ 564.249068][T12560] __sys_recvmmsg+0x5dd/0x610 [ 564.253733][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.259787][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.265931][T12560] __do_fast_syscall_32+0x2af/0x480 [ 564.271118][T12560] do_fast_syscall_32+0x6b/0xd0 [ 564.275954][T12560] do_SYSENTER_32+0x73/0x90 [ 564.280442][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.286743][T12560] [ 564.289053][T12560] Uninit was stored to memory at: [ 564.294072][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 564.299777][T12560] __msan_chain_origin+0x50/0x90 [ 564.304701][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 564.309807][T12560] get_compat_msghdr+0x108/0x2b0 [ 564.314733][T12560] do_recvmmsg+0xdbb/0x22c0 [ 564.319325][T12560] __sys_recvmmsg+0x5dd/0x610 [ 564.323994][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.330049][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.336191][T12560] __do_fast_syscall_32+0x2af/0x480 [ 564.341379][T12560] do_fast_syscall_32+0x6b/0xd0 [ 564.346216][T12560] do_SYSENTER_32+0x73/0x90 [ 564.350706][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.357005][T12560] [ 564.359312][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 564.366254][T12560] do_recvmmsg+0xbf/0x22c0 [ 564.370659][T12560] do_recvmmsg+0xbf/0x22c0 [ 564.618067][T12564] not chained 1110000 origins [ 564.622782][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 564.631446][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.641581][T12564] Call Trace: [ 564.644878][T12564] dump_stack+0x21c/0x280 [ 564.649218][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 564.655033][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 564.661117][T12564] ? kmsan_get_metadata+0x116/0x180 [ 564.666316][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 564.672163][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 564.678230][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 564.683608][T12564] ? kmsan_get_metadata+0x116/0x180 [ 564.688810][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 564.694361][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 564.700441][T12564] ? _copy_from_user+0x201/0x310 [ 564.705405][T12564] ? kmsan_get_metadata+0x116/0x180 [ 564.710613][T12564] __msan_chain_origin+0x50/0x90 [ 564.715565][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 564.720714][T12564] get_compat_msghdr+0x108/0x2b0 [ 564.725748][T12564] do_recvmmsg+0xdbb/0x22c0 [ 564.730253][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 564.736070][T12564] ? kmsan_get_metadata+0x116/0x180 [ 564.741291][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 564.747186][T12564] ? kmsan_get_metadata+0x116/0x180 [ 564.752391][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 564.758029][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 564.763346][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 564.768112][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 564.772882][T12564] __sys_recvmmsg+0x5dd/0x610 [ 564.777594][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.783673][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.789829][T12564] __do_fast_syscall_32+0x2af/0x480 [ 564.795035][T12564] do_fast_syscall_32+0x6b/0xd0 [ 564.799890][T12564] do_SYSENTER_32+0x73/0x90 [ 564.804445][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.810771][T12564] RIP: 0023:0xf7fc1549 [ 564.814828][T12564] Code: Bad RIP value. [ 564.818887][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 564.827304][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 564.835276][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 564.843243][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.851212][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.859180][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.867160][T12564] Uninit was stored to memory at: [ 564.872188][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 564.877895][T12564] __msan_chain_origin+0x50/0x90 [ 564.882934][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 564.888034][T12564] get_compat_msghdr+0x108/0x2b0 [ 564.892961][T12564] do_recvmmsg+0xdbb/0x22c0 [ 564.897450][T12564] __sys_recvmmsg+0x5dd/0x610 [ 564.902114][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.908168][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.914310][T12564] __do_fast_syscall_32+0x2af/0x480 [ 564.919496][T12564] do_fast_syscall_32+0x6b/0xd0 [ 564.924335][T12564] do_SYSENTER_32+0x73/0x90 [ 564.928830][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.935147][T12564] [ 564.937459][T12564] Uninit was stored to memory at: [ 564.942474][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 564.948178][T12564] __msan_chain_origin+0x50/0x90 [ 564.953102][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 564.958199][T12564] get_compat_msghdr+0x108/0x2b0 [ 564.963120][T12564] do_recvmmsg+0xdbb/0x22c0 [ 564.967613][T12564] __sys_recvmmsg+0x5dd/0x610 [ 564.972282][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.978337][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.984481][T12564] __do_fast_syscall_32+0x2af/0x480 [ 564.989666][T12564] do_fast_syscall_32+0x6b/0xd0 [ 564.994505][T12564] do_SYSENTER_32+0x73/0x90 [ 564.998997][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.005302][T12564] [ 565.007613][T12564] Uninit was stored to memory at: [ 565.012643][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 565.018349][T12564] __msan_chain_origin+0x50/0x90 [ 565.023278][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 565.028381][T12564] get_compat_msghdr+0x108/0x2b0 [ 565.033305][T12564] do_recvmmsg+0xdbb/0x22c0 [ 565.037793][T12564] __sys_recvmmsg+0x5dd/0x610 [ 565.042457][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.048513][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.054655][T12564] __do_fast_syscall_32+0x2af/0x480 [ 565.059841][T12564] do_fast_syscall_32+0x6b/0xd0 [ 565.064691][T12564] do_SYSENTER_32+0x73/0x90 [ 565.069194][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.075494][T12564] [ 565.077805][T12564] Uninit was stored to memory at: [ 565.082990][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 565.088698][T12564] __msan_chain_origin+0x50/0x90 [ 565.093627][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 565.098727][T12564] get_compat_msghdr+0x108/0x2b0 [ 565.103650][T12564] do_recvmmsg+0xdbb/0x22c0 [ 565.108142][T12564] __sys_recvmmsg+0x5dd/0x610 [ 565.112806][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.118865][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.125015][T12564] __do_fast_syscall_32+0x2af/0x480 [ 565.130200][T12564] do_fast_syscall_32+0x6b/0xd0 [ 565.135038][T12564] do_SYSENTER_32+0x73/0x90 [ 565.139526][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.145830][T12564] [ 565.148141][T12564] Uninit was stored to memory at: [ 565.153155][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 565.158861][T12564] __msan_chain_origin+0x50/0x90 [ 565.163787][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 565.168888][T12564] get_compat_msghdr+0x108/0x2b0 [ 565.173812][T12564] do_recvmmsg+0xdbb/0x22c0 [ 565.178302][T12564] __sys_recvmmsg+0x5dd/0x610 [ 565.182967][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.189021][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.195161][T12564] __do_fast_syscall_32+0x2af/0x480 [ 565.200462][T12564] do_fast_syscall_32+0x6b/0xd0 [ 565.205299][T12564] do_SYSENTER_32+0x73/0x90 [ 565.209795][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.216098][T12564] [ 565.218408][T12564] Uninit was stored to memory at: [ 565.223422][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 565.229127][T12564] __msan_chain_origin+0x50/0x90 [ 565.234051][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 565.239149][T12564] get_compat_msghdr+0x108/0x2b0 [ 565.244074][T12564] do_recvmmsg+0xdbb/0x22c0 [ 565.248562][T12564] __sys_recvmmsg+0x5dd/0x610 [ 565.253228][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.259284][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.265426][T12564] __do_fast_syscall_32+0x2af/0x480 [ 565.270615][T12564] do_fast_syscall_32+0x6b/0xd0 [ 565.275454][T12564] do_SYSENTER_32+0x73/0x90 [ 565.279947][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.286252][T12564] [ 565.288566][T12564] Uninit was stored to memory at: [ 565.293579][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 565.299285][T12564] __msan_chain_origin+0x50/0x90 [ 565.304219][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 565.309317][T12564] get_compat_msghdr+0x108/0x2b0 [ 565.314252][T12564] do_recvmmsg+0xdbb/0x22c0 [ 565.318743][T12564] __sys_recvmmsg+0x5dd/0x610 [ 565.323409][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.329465][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.335609][T12564] __do_fast_syscall_32+0x2af/0x480 [ 565.340799][T12564] do_fast_syscall_32+0x6b/0xd0 [ 565.345636][T12564] do_SYSENTER_32+0x73/0x90 [ 565.350132][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.356554][T12564] [ 565.358962][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 565.365629][T12564] do_recvmmsg+0xbf/0x22c0 [ 565.370041][T12564] do_recvmmsg+0xbf/0x22c0 [ 565.642670][T12560] not chained 1120000 origins [ 565.647404][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 565.656071][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.666122][T12560] Call Trace: [ 565.669424][T12560] dump_stack+0x21c/0x280 [ 565.673793][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 565.679519][T12560] ? kmsan_get_metadata+0x116/0x180 [ 565.684740][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 565.690549][T12560] ? kmsan_get_metadata+0x116/0x180 [ 565.695768][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 565.701664][T12560] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 565.707744][T12560] ? sched_clock_cpu+0x65/0x8e0 [ 565.712600][T12560] ? kmsan_get_metadata+0x116/0x180 [ 565.717798][T12560] ? kmsan_get_metadata+0x116/0x180 [ 565.722999][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 565.728548][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 565.734622][T12560] ? _copy_from_user+0x201/0x310 [ 565.739561][T12560] ? kmsan_get_metadata+0x116/0x180 [ 565.744769][T12560] __msan_chain_origin+0x50/0x90 [ 565.749707][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 565.754834][T12560] get_compat_msghdr+0x108/0x2b0 [ 565.759782][T12560] do_recvmmsg+0xdbb/0x22c0 [ 565.764301][T12560] ? kmsan_get_metadata+0x116/0x180 [ 565.769504][T12560] ? kmsan_get_metadata+0x116/0x180 [ 565.774706][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 565.780603][T12560] ? kmsan_get_metadata+0x116/0x180 [ 565.785803][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 565.791439][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 565.796727][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 565.801485][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 565.806253][T12560] __sys_recvmmsg+0x5dd/0x610 [ 565.810944][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.817021][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.823175][T12560] __do_fast_syscall_32+0x2af/0x480 [ 565.828382][T12560] do_fast_syscall_32+0x6b/0xd0 [ 565.833234][T12560] do_SYSENTER_32+0x73/0x90 [ 565.837742][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.844062][T12560] RIP: 0023:0xf7fc1549 [ 565.848116][T12560] Code: Bad RIP value. [ 565.852177][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 565.860583][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 565.863381][T12564] not chained 1130000 origins [ 565.868550][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 565.881144][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.889114][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 565.897072][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.905034][T12560] Uninit was stored to memory at: [ 565.905047][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 565.905063][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.910069][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 565.918712][T12564] Call Trace: [ 565.928750][T12560] __msan_chain_origin+0x50/0x90 [ 565.934443][T12564] dump_stack+0x21c/0x280 [ 565.937703][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 565.942615][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 565.946917][T12560] get_compat_msghdr+0x108/0x2b0 [ 565.952002][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 565.957693][T12560] do_recvmmsg+0xdbb/0x22c0 [ 565.962606][T12564] ? kmsan_get_metadata+0x116/0x180 [ 565.968644][T12560] __sys_recvmmsg+0x5dd/0x610 [ 565.973229][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 565.978398][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.983139][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 565.988947][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.994987][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 566.001026][T12560] __do_fast_syscall_32+0x2af/0x480 [ 566.007151][T12564] ? kmsan_get_metadata+0x116/0x180 [ 566.012493][T12560] do_fast_syscall_32+0x6b/0xd0 [ 566.017661][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 566.022834][T12560] do_SYSENTER_32+0x73/0x90 [ 566.027662][T12564] ? kmsan_get_metadata+0x116/0x180 [ 566.033444][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.037919][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 566.043080][T12560] [ 566.049390][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 566.054908][T12560] Uninit was stored to memory at: [ 566.057229][T12564] ? _copy_from_user+0x201/0x310 [ 566.063267][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 566.068265][T12564] ? kmsan_get_metadata+0x116/0x180 [ 566.073172][T12560] __msan_chain_origin+0x50/0x90 [ 566.078864][T12564] __msan_chain_origin+0x50/0x90 [ 566.084034][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 566.088948][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 566.093860][T12560] get_compat_msghdr+0x108/0x2b0 [ 566.098954][T12564] get_compat_msghdr+0x108/0x2b0 [ 566.104038][T12560] do_recvmmsg+0xdbb/0x22c0 [ 566.108952][T12564] do_recvmmsg+0xdbb/0x22c0 [ 566.113861][T12560] __sys_recvmmsg+0x5dd/0x610 [ 566.118337][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 566.122811][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.127468][T12564] ? kmsan_get_metadata+0x116/0x180 [ 566.133244][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.139286][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 566.144454][T12560] __do_fast_syscall_32+0x2af/0x480 [ 566.150583][T12564] ? kmsan_get_metadata+0x116/0x180 [ 566.156449][T12560] do_fast_syscall_32+0x6b/0xd0 [ 566.161622][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 566.166794][T12560] do_SYSENTER_32+0x73/0x90 [ 566.171616][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 566.177220][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.181721][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 566.186968][T12560] [ 566.193283][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 566.198007][T12560] Uninit was stored to memory at: [ 566.200322][T12564] __sys_recvmmsg+0x5dd/0x610 [ 566.205060][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 566.210064][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.214707][T12560] __msan_chain_origin+0x50/0x90 [ 566.220402][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.226457][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 566.231369][T12564] __do_fast_syscall_32+0x2af/0x480 [ 566.237492][T12560] get_compat_msghdr+0x108/0x2b0 [ 566.242582][T12564] do_fast_syscall_32+0x6b/0xd0 [ 566.247751][T12560] do_recvmmsg+0xdbb/0x22c0 [ 566.252667][T12564] do_SYSENTER_32+0x73/0x90 [ 566.257490][T12560] __sys_recvmmsg+0x5dd/0x610 [ 566.261968][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.266442][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.271087][T12564] RIP: 0023:0xf7fc1549 [ 566.277389][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.283417][T12564] Code: Bad RIP value. [ 566.287471][T12560] __do_fast_syscall_32+0x2af/0x480 [ 566.293588][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 566.297639][T12560] do_fast_syscall_32+0x6b/0xd0 [ 566.302804][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 566.311190][T12560] do_SYSENTER_32+0x73/0x90 [ 566.316008][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 566.323960][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.328429][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.336399][T12560] [ 566.342704][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 566.350660][T12560] Uninit was stored to memory at: [ 566.352977][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.360942][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 566.365935][T12564] Uninit was stored to memory at: [ 566.373900][T12560] __msan_chain_origin+0x50/0x90 [ 566.379598][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 566.384611][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 566.389524][T12564] __msan_chain_origin+0x50/0x90 [ 566.395216][T12560] get_compat_msghdr+0x108/0x2b0 [ 566.400304][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 566.405217][T12560] do_recvmmsg+0xdbb/0x22c0 [ 566.410129][T12564] get_compat_msghdr+0x108/0x2b0 [ 566.415213][T12560] __sys_recvmmsg+0x5dd/0x610 [ 566.419703][T12564] do_recvmmsg+0xdbb/0x22c0 [ 566.424619][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.429265][T12564] __sys_recvmmsg+0x5dd/0x610 [ 566.433750][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.439789][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.444444][T12560] __do_fast_syscall_32+0x2af/0x480 [ 566.450578][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.456620][T12560] do_fast_syscall_32+0x6b/0xd0 [ 566.461791][T12564] __do_fast_syscall_32+0x2af/0x480 [ 566.467920][T12560] do_SYSENTER_32+0x73/0x90 [ 566.472746][T12564] do_fast_syscall_32+0x6b/0xd0 [ 566.477921][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.482398][T12564] do_SYSENTER_32+0x73/0x90 [ 566.487219][T12560] [ 566.493535][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.498002][T12560] Uninit was stored to memory at: [ 566.500308][T12564] [ 566.506639][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 566.511623][T12564] Uninit was stored to memory at: [ 566.513951][T12560] __msan_chain_origin+0x50/0x90 [ 566.519645][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 566.524666][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 566.529582][T12564] __msan_chain_origin+0x50/0x90 [ 566.535277][T12560] get_compat_msghdr+0x108/0x2b0 [ 566.540364][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 566.545276][T12560] do_recvmmsg+0xdbb/0x22c0 [ 566.550187][T12564] get_compat_msghdr+0x108/0x2b0 [ 566.555270][T12560] __sys_recvmmsg+0x5dd/0x610 [ 566.559742][T12564] do_recvmmsg+0xdbb/0x22c0 [ 566.564656][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.569305][T12564] __sys_recvmmsg+0x5dd/0x610 [ 566.573783][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.579844][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.584509][T12560] __do_fast_syscall_32+0x2af/0x480 [ 566.590648][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.596689][T12560] do_fast_syscall_32+0x6b/0xd0 [ 566.601860][T12564] __do_fast_syscall_32+0x2af/0x480 [ 566.607984][T12560] do_SYSENTER_32+0x73/0x90 [ 566.612845][T12564] do_fast_syscall_32+0x6b/0xd0 [ 566.618020][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.622517][T12564] do_SYSENTER_32+0x73/0x90 [ 566.627335][T12560] [ 566.633652][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.638138][T12560] Uninit was stored to memory at: [ 566.640444][T12564] [ 566.646757][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 566.651743][T12564] Uninit was stored to memory at: [ 566.654061][T12560] __msan_chain_origin+0x50/0x90 [ 566.659753][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 566.664750][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 566.669659][T12564] __msan_chain_origin+0x50/0x90 [ 566.675353][T12560] get_compat_msghdr+0x108/0x2b0 [ 566.680441][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 566.685352][T12560] do_recvmmsg+0xdbb/0x22c0 [ 566.690262][T12564] get_compat_msghdr+0x108/0x2b0 [ 566.695344][T12560] __sys_recvmmsg+0x5dd/0x610 [ 566.699820][T12564] do_recvmmsg+0xdbb/0x22c0 [ 566.704742][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.709389][T12564] __sys_recvmmsg+0x5dd/0x610 [ 566.713871][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.719909][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.724559][T12560] __do_fast_syscall_32+0x2af/0x480 [ 566.730683][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.736717][T12560] do_fast_syscall_32+0x6b/0xd0 [ 566.741886][T12564] __do_fast_syscall_32+0x2af/0x480 [ 566.748009][T12560] do_SYSENTER_32+0x73/0x90 [ 566.752836][T12564] do_fast_syscall_32+0x6b/0xd0 [ 566.758008][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.762480][T12564] do_SYSENTER_32+0x73/0x90 [ 566.767292][T12560] [ 566.773601][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.778067][T12560] Uninit was stored to memory at: [ 566.780372][T12564] [ 566.786683][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 566.791669][T12564] Uninit was stored to memory at: [ 566.793984][T12560] __msan_chain_origin+0x50/0x90 [ 566.799677][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 566.804677][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 566.809584][T12564] __msan_chain_origin+0x50/0x90 [ 566.815276][T12560] get_compat_msghdr+0x108/0x2b0 [ 566.820394][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 566.825302][T12560] do_recvmmsg+0xdbb/0x22c0 [ 566.830210][T12564] get_compat_msghdr+0x108/0x2b0 [ 566.835291][T12560] __sys_recvmmsg+0x5dd/0x610 [ 566.839778][T12564] do_recvmmsg+0xdbb/0x22c0 [ 566.844812][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.849459][T12564] __sys_recvmmsg+0x5dd/0x610 [ 566.854030][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.860063][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.864713][T12560] __do_fast_syscall_32+0x2af/0x480 [ 566.870844][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.876882][T12560] do_fast_syscall_32+0x6b/0xd0 [ 566.882054][T12564] __do_fast_syscall_32+0x2af/0x480 [ 566.888183][T12560] do_SYSENTER_32+0x73/0x90 [ 566.893009][T12564] do_fast_syscall_32+0x6b/0xd0 [ 566.898182][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.902659][T12564] do_SYSENTER_32+0x73/0x90 [ 566.907471][T12560] [ 566.913781][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.918249][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 566.920571][T12564] [ 566.926881][T12560] do_recvmmsg+0xbf/0x22c0 [ 566.933523][T12564] Uninit was stored to memory at: [ 566.935835][T12560] do_recvmmsg+0xbf/0x22c0 [ 566.940226][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 566.955314][T12564] __msan_chain_origin+0x50/0x90 [ 566.960255][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 566.965363][T12564] get_compat_msghdr+0x108/0x2b0 [ 566.970296][T12564] do_recvmmsg+0xdbb/0x22c0 [ 566.974795][T12564] __sys_recvmmsg+0x5dd/0x610 [ 566.979469][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.985542][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.991699][T12564] __do_fast_syscall_32+0x2af/0x480 [ 566.996895][T12564] do_fast_syscall_32+0x6b/0xd0 [ 567.001743][T12564] do_SYSENTER_32+0x73/0x90 [ 567.006249][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.012562][T12564] [ 567.014880][T12564] Uninit was stored to memory at: [ 567.019902][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 567.025618][T12564] __msan_chain_origin+0x50/0x90 [ 567.030552][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 567.035677][T12564] get_compat_msghdr+0x108/0x2b0 [ 567.040612][T12564] do_recvmmsg+0xdbb/0x22c0 [ 567.045113][T12564] __sys_recvmmsg+0x5dd/0x610 [ 567.049807][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.055871][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.062165][T12564] __do_fast_syscall_32+0x2af/0x480 [ 567.067360][T12564] do_fast_syscall_32+0x6b/0xd0 [ 567.072208][T12564] do_SYSENTER_32+0x73/0x90 [ 567.076708][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.083018][T12564] [ 567.085336][T12564] Uninit was stored to memory at: [ 567.090444][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 567.096416][T12564] __msan_chain_origin+0x50/0x90 [ 567.101347][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 567.106453][T12564] get_compat_msghdr+0x108/0x2b0 [ 567.111386][T12564] do_recvmmsg+0xdbb/0x22c0 [ 567.115886][T12564] __sys_recvmmsg+0x5dd/0x610 [ 567.120563][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.126626][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.132776][T12564] __do_fast_syscall_32+0x2af/0x480 [ 567.137977][T12564] do_fast_syscall_32+0x6b/0xd0 [ 567.138182][T12560] not chained 1140000 origins [ 567.142825][T12564] do_SYSENTER_32+0x73/0x90 [ 567.147494][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 567.151975][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.160611][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.166906][T12564] [ 567.176937][T12560] Call Trace: [ 567.179243][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 567.182530][T12560] dump_stack+0x21c/0x280 [ 567.189174][T12564] do_recvmmsg+0xbf/0x22c0 [ 567.193483][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 567.197872][T12564] do_recvmmsg+0xbf/0x22c0 [ 567.203568][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 567.214094][T12560] ? kmsan_get_metadata+0x116/0x180 [ 567.219329][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 567.225143][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 567.231217][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 567.236591][T12560] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 567.242667][T12560] ? kmsan_get_metadata+0x116/0x180 [ 567.247932][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 567.253518][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 567.259593][T12560] ? _copy_from_user+0x201/0x310 [ 567.264542][T12560] ? kmsan_get_metadata+0x116/0x180 [ 567.269746][T12560] __msan_chain_origin+0x50/0x90 [ 567.274691][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 567.279906][T12560] get_compat_msghdr+0x108/0x2b0 [ 567.284854][T12560] do_recvmmsg+0xdbb/0x22c0 [ 567.289404][T12560] ? kmsan_get_metadata+0x116/0x180 [ 567.294614][T12560] ? kmsan_get_metadata+0x116/0x180 [ 567.299817][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 567.305713][T12560] ? kmsan_get_metadata+0x116/0x180 [ 567.310916][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 567.316554][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 567.321841][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 567.326602][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 567.331370][T12560] __sys_recvmmsg+0x5dd/0x610 [ 567.336061][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.342143][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.348303][T12560] __do_fast_syscall_32+0x2af/0x480 [ 567.353511][T12560] do_fast_syscall_32+0x6b/0xd0 [ 567.358368][T12560] do_SYSENTER_32+0x73/0x90 [ 567.362896][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.369219][T12560] RIP: 0023:0xf7fc1549 [ 567.373276][T12560] Code: Bad RIP value. [ 567.377337][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 567.385765][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 567.393733][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 567.401700][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.409668][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 567.417635][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.425616][T12560] Uninit was stored to memory at: [ 567.430661][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 567.436383][T12560] __msan_chain_origin+0x50/0x90 [ 567.441338][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 567.446452][T12560] get_compat_msghdr+0x108/0x2b0 [ 567.451391][T12560] do_recvmmsg+0xdbb/0x22c0 [ 567.455909][T12560] __sys_recvmmsg+0x5dd/0x610 [ 567.460588][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.466688][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.472849][T12560] __do_fast_syscall_32+0x2af/0x480 [ 567.478048][T12560] do_fast_syscall_32+0x6b/0xd0 [ 567.483162][T12560] do_SYSENTER_32+0x73/0x90 [ 567.487672][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.494011][T12560] [ 567.496332][T12560] Uninit was stored to memory at: [ 567.501360][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 567.507079][T12560] __msan_chain_origin+0x50/0x90 [ 567.512013][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 567.517121][T12560] get_compat_msghdr+0x108/0x2b0 [ 567.522056][T12560] do_recvmmsg+0xdbb/0x22c0 [ 567.526561][T12560] __sys_recvmmsg+0x5dd/0x610 [ 567.531248][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.537322][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.543490][T12560] __do_fast_syscall_32+0x2af/0x480 [ 567.548734][T12560] do_fast_syscall_32+0x6b/0xd0 [ 567.553590][T12560] do_SYSENTER_32+0x73/0x90 [ 567.558095][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.564410][T12560] [ 567.566738][T12560] Uninit was stored to memory at: [ 567.571854][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 567.577573][T12560] __msan_chain_origin+0x50/0x90 [ 567.582649][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 567.587764][T12560] get_compat_msghdr+0x108/0x2b0 [ 567.592705][T12560] do_recvmmsg+0xdbb/0x22c0 [ 567.597205][T12560] __sys_recvmmsg+0x5dd/0x610 [ 567.601888][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.607955][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.614110][T12560] __do_fast_syscall_32+0x2af/0x480 [ 567.619310][T12560] do_fast_syscall_32+0x6b/0xd0 [ 567.624162][T12560] do_SYSENTER_32+0x73/0x90 [ 567.628668][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.634980][T12560] [ 567.637300][T12560] Uninit was stored to memory at: [ 567.642437][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 567.648162][T12560] __msan_chain_origin+0x50/0x90 [ 567.653103][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 567.658214][T12560] get_compat_msghdr+0x108/0x2b0 [ 567.663150][T12560] do_recvmmsg+0xdbb/0x22c0 [ 567.667650][T12560] __sys_recvmmsg+0x5dd/0x610 [ 567.672330][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.678396][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.684569][T12560] __do_fast_syscall_32+0x2af/0x480 [ 567.689769][T12560] do_fast_syscall_32+0x6b/0xd0 [ 567.694617][T12560] do_SYSENTER_32+0x73/0x90 [ 567.699122][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.705433][T12560] [ 567.707758][T12560] Uninit was stored to memory at: [ 567.712783][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 567.718497][T12560] __msan_chain_origin+0x50/0x90 [ 567.723456][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 567.728570][T12560] get_compat_msghdr+0x108/0x2b0 [ 567.733508][T12560] do_recvmmsg+0xdbb/0x22c0 [ 567.738009][T12560] __sys_recvmmsg+0x5dd/0x610 [ 567.742687][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.748751][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.754904][T12560] __do_fast_syscall_32+0x2af/0x480 [ 567.760102][T12560] do_fast_syscall_32+0x6b/0xd0 [ 567.764951][T12560] do_SYSENTER_32+0x73/0x90 [ 567.769456][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.775766][T12560] [ 567.778092][T12560] Uninit was stored to memory at: [ 567.783117][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 567.788836][T12560] __msan_chain_origin+0x50/0x90 [ 567.793773][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 567.798880][T12560] get_compat_msghdr+0x108/0x2b0 [ 567.803814][T12560] do_recvmmsg+0xdbb/0x22c0 [ 567.808315][T12560] __sys_recvmmsg+0x5dd/0x610 [ 567.812996][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.819159][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.825311][T12560] __do_fast_syscall_32+0x2af/0x480 [ 567.830515][T12560] do_fast_syscall_32+0x6b/0xd0 [ 567.835363][T12560] do_SYSENTER_32+0x73/0x90 [ 567.839869][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.846183][T12560] [ 567.848509][T12560] Uninit was stored to memory at: [ 567.853535][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 567.853779][T12564] not chained 1150000 origins [ 567.859251][T12560] __msan_chain_origin+0x50/0x90 [ 567.863951][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 567.868860][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 567.877594][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.882682][T12560] get_compat_msghdr+0x108/0x2b0 [ 567.892704][T12564] Call Trace: [ 567.897624][T12560] do_recvmmsg+0xdbb/0x22c0 [ 567.900890][T12564] dump_stack+0x21c/0x280 [ 567.905365][T12560] __sys_recvmmsg+0x5dd/0x610 [ 567.909672][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 567.914324][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.920018][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 567.926060][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.932103][T12564] ? kmsan_get_metadata+0x116/0x180 [ 567.938229][T12560] __do_fast_syscall_32+0x2af/0x480 [ 567.943404][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 567.948575][T12560] do_fast_syscall_32+0x6b/0xd0 [ 567.954354][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 567.959176][T12560] do_SYSENTER_32+0x73/0x90 [ 567.965217][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 567.969696][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.975043][T12564] ? kmsan_get_metadata+0x116/0x180 [ 567.981331][T12560] [ 567.986515][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 567.988812][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 567.994338][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 568.000983][T12560] do_recvmmsg+0xbf/0x22c0 [ 568.007026][T12564] ? _copy_from_user+0x201/0x310 [ 568.011416][T12560] do_recvmmsg+0xbf/0x22c0 [ 568.016331][T12564] ? kmsan_get_metadata+0x116/0x180 [ 568.025900][T12564] __msan_chain_origin+0x50/0x90 [ 568.030851][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 568.035984][T12564] get_compat_msghdr+0x108/0x2b0 [ 568.040932][T12564] do_recvmmsg+0xdbb/0x22c0 [ 568.045433][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 568.051242][T12564] ? kmsan_get_metadata+0x116/0x180 [ 568.056434][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 568.062320][T12564] ? kmsan_get_metadata+0x116/0x180 [ 568.067507][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 568.073135][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 568.078411][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 568.083163][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 568.087924][T12564] __sys_recvmmsg+0x5dd/0x610 [ 568.092607][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.098669][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.104816][T12564] __do_fast_syscall_32+0x2af/0x480 [ 568.110010][T12564] do_fast_syscall_32+0x6b/0xd0 [ 568.114850][T12564] do_SYSENTER_32+0x73/0x90 [ 568.119345][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.125658][T12564] RIP: 0023:0xf7fc1549 [ 568.129705][T12564] Code: Bad RIP value. [ 568.133755][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 568.142154][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 568.150111][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 568.158069][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.166026][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.173984][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.181952][T12564] Uninit was stored to memory at: [ 568.186967][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 568.192676][T12564] __msan_chain_origin+0x50/0x90 [ 568.197600][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 568.202702][T12564] get_compat_msghdr+0x108/0x2b0 [ 568.207628][T12564] do_recvmmsg+0xdbb/0x22c0 [ 568.212117][T12564] __sys_recvmmsg+0x5dd/0x610 [ 568.216784][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.222846][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.228988][T12564] __do_fast_syscall_32+0x2af/0x480 [ 568.234173][T12564] do_fast_syscall_32+0x6b/0xd0 [ 568.239010][T12564] do_SYSENTER_32+0x73/0x90 [ 568.243502][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.249808][T12564] [ 568.252145][T12564] Uninit was stored to memory at: [ 568.257170][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 568.262882][T12564] __msan_chain_origin+0x50/0x90 [ 568.267819][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 568.272924][T12564] get_compat_msghdr+0x108/0x2b0 [ 568.277847][T12564] do_recvmmsg+0xdbb/0x22c0 [ 568.282332][T12564] __sys_recvmmsg+0x5dd/0x610 [ 568.286999][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.293232][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.299376][T12564] __do_fast_syscall_32+0x2af/0x480 [ 568.304579][T12564] do_fast_syscall_32+0x6b/0xd0 [ 568.309422][T12564] do_SYSENTER_32+0x73/0x90 [ 568.313920][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.320226][T12564] [ 568.322541][T12564] Uninit was stored to memory at: [ 568.327580][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 568.333292][T12564] __msan_chain_origin+0x50/0x90 [ 568.338223][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 568.343323][T12564] get_compat_msghdr+0x108/0x2b0 [ 568.348249][T12564] do_recvmmsg+0xdbb/0x22c0 [ 568.352741][T12564] __sys_recvmmsg+0x5dd/0x610 [ 568.357408][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.363467][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.369612][T12564] __do_fast_syscall_32+0x2af/0x480 [ 568.374802][T12564] do_fast_syscall_32+0x6b/0xd0 [ 568.380682][T12564] do_SYSENTER_32+0x73/0x90 [ 568.385174][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.391477][T12564] [ 568.393789][T12564] Uninit was stored to memory at: [ 568.398803][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 568.404508][T12564] __msan_chain_origin+0x50/0x90 [ 568.409444][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 568.414542][T12564] get_compat_msghdr+0x108/0x2b0 [ 568.419596][T12564] do_recvmmsg+0xdbb/0x22c0 [ 568.424100][T12564] __sys_recvmmsg+0x5dd/0x610 [ 568.428771][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.434832][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.440996][T12564] __do_fast_syscall_32+0x2af/0x480 [ 568.446188][T12564] do_fast_syscall_32+0x6b/0xd0 [ 568.451030][T12564] do_SYSENTER_32+0x73/0x90 [ 568.455530][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.461835][T12564] [ 568.464149][T12564] Uninit was stored to memory at: [ 568.469172][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 568.474883][T12564] __msan_chain_origin+0x50/0x90 [ 568.479810][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 568.484907][T12564] get_compat_msghdr+0x108/0x2b0 [ 568.489835][T12564] do_recvmmsg+0xdbb/0x22c0 [ 568.494326][T12564] __sys_recvmmsg+0x5dd/0x610 [ 568.498991][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.505048][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.511191][T12564] __do_fast_syscall_32+0x2af/0x480 [ 568.516382][T12564] do_fast_syscall_32+0x6b/0xd0 [ 568.521230][T12564] do_SYSENTER_32+0x73/0x90 [ 568.525729][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.532034][T12564] [ 568.534347][T12564] Uninit was stored to memory at: [ 568.539388][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 568.545096][T12564] __msan_chain_origin+0x50/0x90 [ 568.550023][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 568.555122][T12564] get_compat_msghdr+0x108/0x2b0 [ 568.560050][T12564] do_recvmmsg+0xdbb/0x22c0 [ 568.564539][T12564] __sys_recvmmsg+0x5dd/0x610 [ 568.569205][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.575266][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.581415][T12564] __do_fast_syscall_32+0x2af/0x480 [ 568.586605][T12564] do_fast_syscall_32+0x6b/0xd0 [ 568.591455][T12564] do_SYSENTER_32+0x73/0x90 [ 568.595949][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.602254][T12564] [ 568.604565][T12564] Uninit was stored to memory at: [ 568.609578][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 568.615286][T12564] __msan_chain_origin+0x50/0x90 [ 568.620219][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 568.625318][T12564] get_compat_msghdr+0x108/0x2b0 [ 568.630247][T12564] do_recvmmsg+0xdbb/0x22c0 [ 568.634740][T12564] __sys_recvmmsg+0x5dd/0x610 [ 568.639411][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.645472][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.651628][T12564] __do_fast_syscall_32+0x2af/0x480 [ 568.656817][T12564] do_fast_syscall_32+0x6b/0xd0 [ 568.661659][T12564] do_SYSENTER_32+0x73/0x90 [ 568.666153][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.672463][T12564] [ 568.674780][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 568.681441][T12564] do_recvmmsg+0xbf/0x22c0 [ 568.685843][T12564] do_recvmmsg+0xbf/0x22c0 [ 568.899557][T12564] not chained 1160000 origins [ 568.904269][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 568.912937][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.923001][T12564] Call Trace: [ 568.926322][T12564] dump_stack+0x21c/0x280 [ 568.930661][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 568.936385][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 568.942571][T12564] ? kmsan_get_metadata+0x116/0x180 [ 568.947778][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 568.953586][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 568.959666][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 568.965050][T12564] ? kmsan_get_metadata+0x116/0x180 [ 568.970255][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 568.975805][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 568.981881][T12564] ? _copy_from_user+0x201/0x310 [ 568.986825][T12564] ? kmsan_get_metadata+0x116/0x180 [ 568.992026][T12564] __msan_chain_origin+0x50/0x90 [ 568.996973][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 569.002103][T12564] get_compat_msghdr+0x108/0x2b0 [ 569.007050][T12564] do_recvmmsg+0xdbb/0x22c0 [ 569.011583][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 569.017413][T12564] ? kmsan_get_metadata+0x116/0x180 [ 569.022619][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 569.028514][T12564] ? kmsan_get_metadata+0x116/0x180 [ 569.033716][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 569.039354][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 569.044645][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 569.049410][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 569.054181][T12564] __sys_recvmmsg+0x5dd/0x610 [ 569.058872][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.064954][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.071113][T12564] __do_fast_syscall_32+0x2af/0x480 [ 569.076319][T12564] do_fast_syscall_32+0x6b/0xd0 [ 569.081191][T12564] do_SYSENTER_32+0x73/0x90 [ 569.085722][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.092048][T12564] RIP: 0023:0xf7fc1549 [ 569.096104][T12564] Code: Bad RIP value. [ 569.100165][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 569.108573][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 569.116541][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 569.124509][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 569.132475][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 569.140444][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.148421][T12564] Uninit was stored to memory at: [ 569.153449][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 569.159167][T12564] __msan_chain_origin+0x50/0x90 [ 569.164107][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 569.169218][T12564] get_compat_msghdr+0x108/0x2b0 [ 569.174158][T12564] do_recvmmsg+0xdbb/0x22c0 [ 569.178660][T12564] __sys_recvmmsg+0x5dd/0x610 [ 569.183346][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.189422][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.195574][T12564] __do_fast_syscall_32+0x2af/0x480 [ 569.200774][T12564] do_fast_syscall_32+0x6b/0xd0 [ 569.205626][T12564] do_SYSENTER_32+0x73/0x90 [ 569.210159][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.216475][T12564] [ 569.218800][T12564] Uninit was stored to memory at: [ 569.223826][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 569.229542][T12564] __msan_chain_origin+0x50/0x90 [ 569.234476][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 569.239583][T12564] get_compat_msghdr+0x108/0x2b0 [ 569.244538][T12564] do_recvmmsg+0xdbb/0x22c0 [ 569.249042][T12564] __sys_recvmmsg+0x5dd/0x610 [ 569.253723][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.259789][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.265944][T12564] __do_fast_syscall_32+0x2af/0x480 [ 569.271140][T12564] do_fast_syscall_32+0x6b/0xd0 [ 569.274656][T12560] not chained 1170000 origins [ 569.275980][T12564] do_SYSENTER_32+0x73/0x90 [ 569.276002][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.280660][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 569.285125][T12564] [ 569.291428][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.300081][T12564] Uninit was stored to memory at: [ 569.302384][T12560] Call Trace: [ 569.312444][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 569.317530][T12560] dump_stack+0x21c/0x280 [ 569.320789][T12564] __msan_chain_origin+0x50/0x90 [ 569.326485][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 569.330784][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 569.335692][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 569.341384][T12564] get_compat_msghdr+0x108/0x2b0 [ 569.346472][T12560] ? kmsan_get_metadata+0x116/0x180 [ 569.352506][T12564] do_recvmmsg+0xdbb/0x22c0 [ 569.357416][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 569.362586][T12564] __sys_recvmmsg+0x5dd/0x610 [ 569.367065][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 569.372849][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.377496][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 569.383538][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.389578][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 569.394924][T12564] __do_fast_syscall_32+0x2af/0x480 [ 569.401051][T12560] ? kmsan_get_metadata+0x116/0x180 [ 569.406837][T12564] do_fast_syscall_32+0x6b/0xd0 [ 569.412005][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 569.417194][T12564] do_SYSENTER_32+0x73/0x90 [ 569.422020][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 569.427539][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.432016][T12560] ? _copy_from_user+0x201/0x310 [ 569.438042][T12564] [ 569.444355][T12560] ? kmsan_get_metadata+0x116/0x180 [ 569.449276][T12564] Uninit was stored to memory at: [ 569.451595][T12560] __msan_chain_origin+0x50/0x90 [ 569.456786][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 569.461783][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 569.466715][T12564] __msan_chain_origin+0x50/0x90 [ 569.472414][T12560] get_compat_msghdr+0x108/0x2b0 [ 569.477501][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 569.482415][T12560] do_recvmmsg+0xdbb/0x22c0 [ 569.487328][T12564] get_compat_msghdr+0x108/0x2b0 [ 569.492417][T12560] ? kmsan_get_metadata+0x116/0x180 [ 569.496887][T12564] do_recvmmsg+0xdbb/0x22c0 [ 569.501808][T12560] ? kmsan_get_metadata+0x116/0x180 [ 569.506976][T12564] __sys_recvmmsg+0x5dd/0x610 [ 569.511456][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 569.516625][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.521278][T12560] ? kmsan_get_metadata+0x116/0x180 [ 569.527144][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.533186][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 569.538358][T12564] __do_fast_syscall_32+0x2af/0x480 [ 569.544485][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 569.550099][T12564] do_fast_syscall_32+0x6b/0xd0 [ 569.555268][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 569.560543][T12564] do_SYSENTER_32+0x73/0x90 [ 569.565374][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 569.570120][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.574621][T12560] __sys_recvmmsg+0x5dd/0x610 [ 569.579351][T12564] [ 569.585668][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.590322][T12564] Uninit was stored to memory at: [ 569.592644][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.598682][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 569.603680][T12560] __do_fast_syscall_32+0x2af/0x480 [ 569.609810][T12564] __msan_chain_origin+0x50/0x90 [ 569.615504][T12560] do_fast_syscall_32+0x6b/0xd0 [ 569.620694][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 569.625624][T12560] do_SYSENTER_32+0x73/0x90 [ 569.630446][T12564] get_compat_msghdr+0x108/0x2b0 [ 569.635530][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.640004][T12564] do_recvmmsg+0xdbb/0x22c0 [ 569.644913][T12560] RIP: 0023:0xf7fc1549 [ 569.651216][T12564] __sys_recvmmsg+0x5dd/0x610 [ 569.655686][T12560] Code: Bad RIP value. [ 569.659758][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.664500][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 569.668555][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.674587][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 569.682986][T12564] __do_fast_syscall_32+0x2af/0x480 [ 569.689104][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 569.697056][T12564] do_fast_syscall_32+0x6b/0xd0 [ 569.702220][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 569.710172][T12564] do_SYSENTER_32+0x73/0x90 [ 569.714990][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 569.722953][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.727421][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.735367][T12564] [ 569.741666][T12560] Uninit was stored to memory at: [ 569.749613][T12564] Uninit was stored to memory at: [ 569.751926][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 569.756923][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 569.761916][T12560] __msan_chain_origin+0x50/0x90 [ 569.767612][T12564] __msan_chain_origin+0x50/0x90 [ 569.773302][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 569.778212][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 569.783119][T12560] get_compat_msghdr+0x108/0x2b0 [ 569.788206][T12564] get_compat_msghdr+0x108/0x2b0 [ 569.793287][T12560] do_recvmmsg+0xdbb/0x22c0 [ 569.798196][T12564] do_recvmmsg+0xdbb/0x22c0 [ 569.803103][T12560] __sys_recvmmsg+0x5dd/0x610 [ 569.807581][T12564] __sys_recvmmsg+0x5dd/0x610 [ 569.812057][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.816702][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.821354][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.827393][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.833431][T12560] __do_fast_syscall_32+0x2af/0x480 [ 569.839573][T12564] __do_fast_syscall_32+0x2af/0x480 [ 569.845700][T12560] do_fast_syscall_32+0x6b/0xd0 [ 569.850874][T12564] do_fast_syscall_32+0x6b/0xd0 [ 569.856041][T12560] do_SYSENTER_32+0x73/0x90 [ 569.860860][T12564] do_SYSENTER_32+0x73/0x90 [ 569.865705][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.870178][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.874639][T12560] [ 569.880933][T12564] [ 569.887247][T12560] Uninit was stored to memory at: [ 569.889553][T12564] Uninit was stored to memory at: [ 569.891869][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 569.896870][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 569.901867][T12560] __msan_chain_origin+0x50/0x90 [ 569.907557][T12564] __msan_chain_origin+0x50/0x90 [ 569.913248][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 569.918155][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 569.923065][T12560] get_compat_msghdr+0x108/0x2b0 [ 569.928146][T12564] get_compat_msghdr+0x108/0x2b0 [ 569.933231][T12560] do_recvmmsg+0xdbb/0x22c0 [ 569.938142][T12564] do_recvmmsg+0xdbb/0x22c0 [ 569.943050][T12560] __sys_recvmmsg+0x5dd/0x610 [ 569.947528][T12564] __sys_recvmmsg+0x5dd/0x610 [ 569.952005][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.956651][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.961301][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.967347][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.973381][T12560] __do_fast_syscall_32+0x2af/0x480 [ 569.979606][T12564] __do_fast_syscall_32+0x2af/0x480 [ 569.985732][T12560] do_fast_syscall_32+0x6b/0xd0 [ 569.990903][T12564] do_fast_syscall_32+0x6b/0xd0 [ 569.996072][T12560] do_SYSENTER_32+0x73/0x90 [ 570.000907][T12564] do_SYSENTER_32+0x73/0x90 [ 570.005732][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.010208][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.014671][T12560] [ 570.020965][T12564] [ 570.027261][T12560] Uninit was stored to memory at: [ 570.029569][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 570.031884][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 570.036879][T12564] do_recvmmsg+0xbf/0x22c0 [ 570.043527][T12560] __msan_chain_origin+0x50/0x90 [ 570.049228][T12564] do_recvmmsg+0xbf/0x22c0 [ 570.053618][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 570.068018][T12560] get_compat_msghdr+0x108/0x2b0 [ 570.072961][T12560] do_recvmmsg+0xdbb/0x22c0 [ 570.077458][T12560] __sys_recvmmsg+0x5dd/0x610 [ 570.082131][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.088209][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.094360][T12560] __do_fast_syscall_32+0x2af/0x480 [ 570.099546][T12560] do_fast_syscall_32+0x6b/0xd0 [ 570.104387][T12560] do_SYSENTER_32+0x73/0x90 [ 570.108880][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.115183][T12560] [ 570.117490][T12560] Uninit was stored to memory at: [ 570.122515][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 570.128218][T12560] __msan_chain_origin+0x50/0x90 [ 570.133141][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 570.138252][T12560] get_compat_msghdr+0x108/0x2b0 [ 570.143179][T12560] do_recvmmsg+0xdbb/0x22c0 [ 570.147671][T12560] __sys_recvmmsg+0x5dd/0x610 [ 570.152336][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.158386][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.164525][T12560] __do_fast_syscall_32+0x2af/0x480 [ 570.169717][T12560] do_fast_syscall_32+0x6b/0xd0 [ 570.174553][T12560] do_SYSENTER_32+0x73/0x90 [ 570.179041][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.185340][T12560] [ 570.187648][T12560] Uninit was stored to memory at: [ 570.192662][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 570.198367][T12560] __msan_chain_origin+0x50/0x90 [ 570.203291][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 570.208387][T12560] get_compat_msghdr+0x108/0x2b0 [ 570.213311][T12560] do_recvmmsg+0xdbb/0x22c0 [ 570.217802][T12560] __sys_recvmmsg+0x5dd/0x610 [ 570.222472][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.228526][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.234668][T12560] __do_fast_syscall_32+0x2af/0x480 [ 570.239867][T12560] do_fast_syscall_32+0x6b/0xd0 [ 570.244702][T12560] do_SYSENTER_32+0x73/0x90 [ 570.249193][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.255498][T12560] [ 570.257806][T12560] Uninit was stored to memory at: [ 570.262831][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 570.268536][T12560] __msan_chain_origin+0x50/0x90 [ 570.273461][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 570.278581][T12560] get_compat_msghdr+0x108/0x2b0 [ 570.283504][T12560] do_recvmmsg+0xdbb/0x22c0 [ 570.287994][T12560] __sys_recvmmsg+0x5dd/0x610 [ 570.292659][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.298714][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.304855][T12560] __do_fast_syscall_32+0x2af/0x480 [ 570.310159][T12560] do_fast_syscall_32+0x6b/0xd0 [ 570.314995][T12560] do_SYSENTER_32+0x73/0x90 [ 570.319487][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.325791][T12560] [ 570.328104][T12560] Uninit was stored to memory at: [ 570.333116][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 570.338824][T12560] __msan_chain_origin+0x50/0x90 [ 570.343754][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 570.348851][T12560] get_compat_msghdr+0x108/0x2b0 [ 570.353791][T12560] do_recvmmsg+0xdbb/0x22c0 [ 570.358282][T12560] __sys_recvmmsg+0x5dd/0x610 [ 570.362946][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.368999][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.375137][T12560] __do_fast_syscall_32+0x2af/0x480 [ 570.380321][T12560] do_fast_syscall_32+0x6b/0xd0 [ 570.385155][T12560] do_SYSENTER_32+0x73/0x90 [ 570.389660][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.396125][T12560] [ 570.398442][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 570.405106][T12560] do_recvmmsg+0xbf/0x22c0 [ 570.409515][T12560] do_recvmmsg+0xbf/0x22c0 [ 570.600086][T12560] not chained 1180000 origins [ 570.604828][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 570.613566][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.623691][T12560] Call Trace: [ 570.626981][T12560] dump_stack+0x21c/0x280 [ 570.631317][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 570.637112][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 570.643174][T12560] ? kmsan_get_metadata+0x116/0x180 [ 570.648367][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 570.654161][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 570.660223][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 570.665717][T12560] ? kmsan_get_metadata+0x116/0x180 [ 570.670903][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 570.676561][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 570.682622][T12560] ? _copy_from_user+0x201/0x310 [ 570.687552][T12560] ? kmsan_get_metadata+0x116/0x180 [ 570.692738][T12560] __msan_chain_origin+0x50/0x90 [ 570.697669][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 570.702782][T12560] get_compat_msghdr+0x108/0x2b0 [ 570.707714][T12560] do_recvmmsg+0xdbb/0x22c0 [ 570.712217][T12560] ? kmsan_get_metadata+0x116/0x180 [ 570.717402][T12560] ? kmsan_get_metadata+0x116/0x180 [ 570.722588][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 570.728470][T12560] ? kmsan_get_metadata+0x116/0x180 [ 570.733659][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 570.739286][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 570.744561][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 570.749312][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 570.754064][T12560] __sys_recvmmsg+0x5dd/0x610 [ 570.758741][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.764803][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.770949][T12560] __do_fast_syscall_32+0x2af/0x480 [ 570.776143][T12560] do_fast_syscall_32+0x6b/0xd0 [ 570.780988][T12560] do_SYSENTER_32+0x73/0x90 [ 570.785482][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.791791][T12560] RIP: 0023:0xf7fc1549 [ 570.795835][T12560] Code: Bad RIP value. [ 570.799901][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 570.808297][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 570.816253][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 570.824207][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.832163][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.840126][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.848090][T12560] Uninit was stored to memory at: [ 570.853104][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 570.858808][T12560] __msan_chain_origin+0x50/0x90 [ 570.863733][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 570.868827][T12560] get_compat_msghdr+0x108/0x2b0 [ 570.873759][T12560] do_recvmmsg+0xdbb/0x22c0 [ 570.878250][T12560] __sys_recvmmsg+0x5dd/0x610 [ 570.882915][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.888970][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.895110][T12560] __do_fast_syscall_32+0x2af/0x480 [ 570.900297][T12560] do_fast_syscall_32+0x6b/0xd0 [ 570.905134][T12560] do_SYSENTER_32+0x73/0x90 [ 570.909630][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.915933][T12560] [ 570.918354][T12560] Uninit was stored to memory at: [ 570.923380][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 570.929103][T12560] __msan_chain_origin+0x50/0x90 [ 570.934030][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 570.939134][T12560] get_compat_msghdr+0x108/0x2b0 [ 570.944062][T12560] do_recvmmsg+0xdbb/0x22c0 [ 570.948549][T12560] __sys_recvmmsg+0x5dd/0x610 [ 570.953217][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.959270][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.965421][T12560] __do_fast_syscall_32+0x2af/0x480 [ 570.970605][T12560] do_fast_syscall_32+0x6b/0xd0 [ 570.975440][T12560] do_SYSENTER_32+0x73/0x90 [ 570.979927][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.986316][T12560] [ 570.988627][T12560] Uninit was stored to memory at: [ 570.993636][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 570.999340][T12560] __msan_chain_origin+0x50/0x90 [ 571.004268][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 571.009365][T12560] get_compat_msghdr+0x108/0x2b0 [ 571.014289][T12560] do_recvmmsg+0xdbb/0x22c0 [ 571.018776][T12560] __sys_recvmmsg+0x5dd/0x610 [ 571.023442][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.029495][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.035635][T12560] __do_fast_syscall_32+0x2af/0x480 [ 571.040820][T12560] do_fast_syscall_32+0x6b/0xd0 [ 571.045659][T12560] do_SYSENTER_32+0x73/0x90 [ 571.050155][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.056562][T12560] [ 571.058874][T12560] Uninit was stored to memory at: [ 571.063884][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 571.069590][T12560] __msan_chain_origin+0x50/0x90 [ 571.074516][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 571.079612][T12560] get_compat_msghdr+0x108/0x2b0 [ 571.084537][T12560] do_recvmmsg+0xdbb/0x22c0 [ 571.089023][T12560] __sys_recvmmsg+0x5dd/0x610 [ 571.093685][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.099743][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.105882][T12560] __do_fast_syscall_32+0x2af/0x480 [ 571.111067][T12560] do_fast_syscall_32+0x6b/0xd0 [ 571.115904][T12560] do_SYSENTER_32+0x73/0x90 [ 571.120494][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.126794][T12560] [ 571.129109][T12560] Uninit was stored to memory at: [ 571.134119][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 571.139851][T12560] __msan_chain_origin+0x50/0x90 [ 571.144776][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 571.149872][T12560] get_compat_msghdr+0x108/0x2b0 [ 571.154796][T12560] do_recvmmsg+0xdbb/0x22c0 [ 571.159286][T12560] __sys_recvmmsg+0x5dd/0x610 [ 571.163949][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.170017][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.176161][T12560] __do_fast_syscall_32+0x2af/0x480 [ 571.181347][T12560] do_fast_syscall_32+0x6b/0xd0 [ 571.186185][T12560] do_SYSENTER_32+0x73/0x90 [ 571.190677][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.196983][T12560] [ 571.199293][T12560] Uninit was stored to memory at: [ 571.204307][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 571.210012][T12560] __msan_chain_origin+0x50/0x90 [ 571.214933][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 571.220027][T12560] get_compat_msghdr+0x108/0x2b0 [ 571.224950][T12560] do_recvmmsg+0xdbb/0x22c0 [ 571.229440][T12560] __sys_recvmmsg+0x5dd/0x610 [ 571.234107][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.240164][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.246305][T12560] __do_fast_syscall_32+0x2af/0x480 [ 571.251491][T12560] do_fast_syscall_32+0x6b/0xd0 [ 571.256330][T12560] do_SYSENTER_32+0x73/0x90 [ 571.260820][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.267120][T12560] [ 571.269433][T12560] Uninit was stored to memory at: [ 571.274447][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 571.280168][T12560] __msan_chain_origin+0x50/0x90 [ 571.285101][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 571.290216][T12560] get_compat_msghdr+0x108/0x2b0 [ 571.295150][T12560] do_recvmmsg+0xdbb/0x22c0 [ 571.299747][T12560] __sys_recvmmsg+0x5dd/0x610 [ 571.304410][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.310985][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.317128][T12560] __do_fast_syscall_32+0x2af/0x480 [ 571.322318][T12560] do_fast_syscall_32+0x6b/0xd0 [ 571.327157][T12560] do_SYSENTER_32+0x73/0x90 [ 571.331652][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.337957][T12560] [ 571.340268][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 571.346929][T12560] do_recvmmsg+0xbf/0x22c0 [ 571.351333][T12560] do_recvmmsg+0xbf/0x22c0 [ 571.635520][T12564] not chained 1190000 origins [ 571.640231][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 571.648892][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.658943][T12564] Call Trace: [ 571.662238][T12564] dump_stack+0x21c/0x280 [ 571.666582][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 571.672306][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 571.678377][T12564] ? kmsan_get_metadata+0x116/0x180 [ 571.683582][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 571.689392][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 571.695457][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 571.700836][T12564] ? kmsan_get_metadata+0x116/0x180 [ 571.706034][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 571.711670][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 571.717741][T12564] ? _copy_from_user+0x201/0x310 [ 571.722690][T12564] ? kmsan_get_metadata+0x116/0x180 [ 571.727889][T12564] __msan_chain_origin+0x50/0x90 [ 571.732843][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 571.737970][T12564] get_compat_msghdr+0x108/0x2b0 [ 571.743118][T12564] do_recvmmsg+0xdbb/0x22c0 [ 571.747628][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 571.753447][T12564] ? kmsan_get_metadata+0x116/0x180 [ 571.758733][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 571.764625][T12564] ? kmsan_get_metadata+0x116/0x180 [ 571.769827][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 571.775460][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 571.780746][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 571.785533][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 571.790301][T12564] __sys_recvmmsg+0x5dd/0x610 [ 571.795000][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.801089][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.807248][T12564] __do_fast_syscall_32+0x2af/0x480 [ 571.812457][T12564] do_fast_syscall_32+0x6b/0xd0 [ 571.817315][T12564] do_SYSENTER_32+0x73/0x90 [ 571.821827][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.828146][T12564] RIP: 0023:0xf7fc1549 [ 571.832200][T12564] Code: Bad RIP value. [ 571.836259][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 571.844705][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 571.852675][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 571.860768][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.868742][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.876714][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.884693][T12564] Uninit was stored to memory at: [ 571.889723][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 571.895435][T12564] __msan_chain_origin+0x50/0x90 [ 571.900385][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 571.905493][T12564] get_compat_msghdr+0x108/0x2b0 [ 571.910431][T12564] do_recvmmsg+0xdbb/0x22c0 [ 571.914928][T12564] __sys_recvmmsg+0x5dd/0x610 [ 571.919606][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.925673][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.931825][T12564] __do_fast_syscall_32+0x2af/0x480 [ 571.937021][T12564] do_fast_syscall_32+0x6b/0xd0 [ 571.941870][T12564] do_SYSENTER_32+0x73/0x90 [ 571.946409][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.952720][T12564] [ 571.955036][T12564] Uninit was stored to memory at: [ 571.960057][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 571.965780][T12564] __msan_chain_origin+0x50/0x90 [ 571.970717][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 571.975823][T12564] get_compat_msghdr+0x108/0x2b0 [ 571.980756][T12564] do_recvmmsg+0xdbb/0x22c0 [ 571.985259][T12564] __sys_recvmmsg+0x5dd/0x610 [ 571.989933][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.995999][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.002237][T12564] __do_fast_syscall_32+0x2af/0x480 [ 572.007433][T12564] do_fast_syscall_32+0x6b/0xd0 [ 572.012282][T12564] do_SYSENTER_32+0x73/0x90 [ 572.016792][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.023104][T12564] [ 572.025427][T12564] Uninit was stored to memory at: [ 572.030450][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 572.036165][T12564] __msan_chain_origin+0x50/0x90 [ 572.041101][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 572.046210][T12564] get_compat_msghdr+0x108/0x2b0 [ 572.051144][T12564] do_recvmmsg+0xdbb/0x22c0 [ 572.055643][T12564] __sys_recvmmsg+0x5dd/0x610 [ 572.060323][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.066389][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.072543][T12564] __do_fast_syscall_32+0x2af/0x480 [ 572.077740][T12564] do_fast_syscall_32+0x6b/0xd0 [ 572.082590][T12564] do_SYSENTER_32+0x73/0x90 [ 572.087098][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.093410][T12564] [ 572.095731][T12564] Uninit was stored to memory at: [ 572.100760][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 572.106482][T12564] __msan_chain_origin+0x50/0x90 [ 572.111418][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 572.116527][T12564] get_compat_msghdr+0x108/0x2b0 [ 572.121465][T12564] do_recvmmsg+0xdbb/0x22c0 [ 572.125968][T12564] __sys_recvmmsg+0x5dd/0x610 [ 572.130646][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.136726][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.142887][T12564] __do_fast_syscall_32+0x2af/0x480 [ 572.148088][T12564] do_fast_syscall_32+0x6b/0xd0 [ 572.152947][T12564] do_SYSENTER_32+0x73/0x90 [ 572.157448][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.163763][T12564] [ 572.166082][T12564] Uninit was stored to memory at: [ 572.171105][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 572.176818][T12564] __msan_chain_origin+0x50/0x90 [ 572.181763][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 572.186872][T12564] get_compat_msghdr+0x108/0x2b0 [ 572.191809][T12564] do_recvmmsg+0xdbb/0x22c0 [ 572.196306][T12564] __sys_recvmmsg+0x5dd/0x610 [ 572.200990][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.207055][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.213208][T12564] __do_fast_syscall_32+0x2af/0x480 [ 572.218405][T12564] do_fast_syscall_32+0x6b/0xd0 [ 572.223270][T12564] do_SYSENTER_32+0x73/0x90 [ 572.227780][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.234091][T12564] [ 572.236411][T12564] Uninit was stored to memory at: [ 572.241474][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 572.247191][T12564] __msan_chain_origin+0x50/0x90 [ 572.252128][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 572.257236][T12564] get_compat_msghdr+0x108/0x2b0 [ 572.262183][T12564] do_recvmmsg+0xdbb/0x22c0 [ 572.266680][T12564] __sys_recvmmsg+0x5dd/0x610 [ 572.271356][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.277427][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.283583][T12564] __do_fast_syscall_32+0x2af/0x480 [ 572.288782][T12564] do_fast_syscall_32+0x6b/0xd0 [ 572.293636][T12564] do_SYSENTER_32+0x73/0x90 [ 572.298133][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.304444][T12564] [ 572.306769][T12564] Uninit was stored to memory at: [ 572.311795][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 572.317510][T12564] __msan_chain_origin+0x50/0x90 [ 572.322445][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 572.327557][T12564] get_compat_msghdr+0x108/0x2b0 [ 572.332491][T12564] do_recvmmsg+0xdbb/0x22c0 [ 572.336986][T12564] __sys_recvmmsg+0x5dd/0x610 [ 572.341664][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.347730][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.353895][T12564] __do_fast_syscall_32+0x2af/0x480 [ 572.359093][T12564] do_fast_syscall_32+0x6b/0xd0 [ 572.363949][T12564] do_SYSENTER_32+0x73/0x90 [ 572.368455][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.374771][T12564] [ 572.377093][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 572.383767][T12564] do_recvmmsg+0xbf/0x22c0 [ 572.388182][T12564] do_recvmmsg+0xbf/0x22c0 [ 572.434955][T12560] not chained 1200000 origins [ 572.439657][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 572.448410][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.458457][T12560] Call Trace: [ 572.461745][T12560] dump_stack+0x21c/0x280 [ 572.466076][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 572.471879][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 572.477938][T12560] ? kmsan_get_metadata+0x116/0x180 [ 572.483126][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 572.489042][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 572.495100][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 572.500466][T12560] ? kmsan_get_metadata+0x116/0x180 [ 572.505652][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 572.511187][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 572.517245][T12560] ? _copy_from_user+0x201/0x310 [ 572.522175][T12560] ? kmsan_get_metadata+0x116/0x180 [ 572.527362][T12560] __msan_chain_origin+0x50/0x90 [ 572.532294][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 572.537407][T12560] get_compat_msghdr+0x108/0x2b0 [ 572.542340][T12560] do_recvmmsg+0xdbb/0x22c0 [ 572.546845][T12560] ? kmsan_get_metadata+0x116/0x180 [ 572.552039][T12560] ? kmsan_get_metadata+0x116/0x180 [ 572.557229][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 572.563111][T12560] ? kmsan_get_metadata+0x116/0x180 [ 572.568298][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 572.573917][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 572.579190][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 572.583951][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 572.588713][T12560] __sys_recvmmsg+0x5dd/0x610 [ 572.593395][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.599455][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.605623][T12560] __do_fast_syscall_32+0x2af/0x480 [ 572.610819][T12560] do_fast_syscall_32+0x6b/0xd0 [ 572.615662][T12560] do_SYSENTER_32+0x73/0x90 [ 572.620160][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.626496][T12560] RIP: 0023:0xf7fc1549 [ 572.630543][T12560] Code: Bad RIP value. [ 572.634591][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 572.642992][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 572.650958][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 572.659006][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.666965][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 572.674923][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.682890][T12560] Uninit was stored to memory at: [ 572.687908][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 572.693614][T12560] __msan_chain_origin+0x50/0x90 [ 572.698536][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 572.703633][T12560] get_compat_msghdr+0x108/0x2b0 [ 572.708555][T12560] do_recvmmsg+0xdbb/0x22c0 [ 572.713045][T12560] __sys_recvmmsg+0x5dd/0x610 [ 572.717711][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.723767][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.729913][T12560] __do_fast_syscall_32+0x2af/0x480 [ 572.735113][T12560] do_fast_syscall_32+0x6b/0xd0 [ 572.739952][T12560] do_SYSENTER_32+0x73/0x90 [ 572.744451][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.750753][T12560] [ 572.753062][T12560] Uninit was stored to memory at: [ 572.758070][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 572.763779][T12560] __msan_chain_origin+0x50/0x90 [ 572.768701][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 572.773798][T12560] get_compat_msghdr+0x108/0x2b0 [ 572.778725][T12560] do_recvmmsg+0xdbb/0x22c0 [ 572.783216][T12560] __sys_recvmmsg+0x5dd/0x610 [ 572.787879][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.793932][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.800069][T12560] __do_fast_syscall_32+0x2af/0x480 [ 572.805262][T12560] do_fast_syscall_32+0x6b/0xd0 [ 572.810098][T12560] do_SYSENTER_32+0x73/0x90 [ 572.814588][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.820886][T12560] [ 572.823205][T12560] Uninit was stored to memory at: [ 572.828214][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 572.833916][T12560] __msan_chain_origin+0x50/0x90 [ 572.838839][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 572.843936][T12560] get_compat_msghdr+0x108/0x2b0 [ 572.848858][T12560] do_recvmmsg+0xdbb/0x22c0 [ 572.853346][T12560] __sys_recvmmsg+0x5dd/0x610 [ 572.858007][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.864058][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.870195][T12560] __do_fast_syscall_32+0x2af/0x480 [ 572.875381][T12560] do_fast_syscall_32+0x6b/0xd0 [ 572.880218][T12560] do_SYSENTER_32+0x73/0x90 [ 572.884708][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.891008][T12560] [ 572.893315][T12560] Uninit was stored to memory at: [ 572.898327][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 572.904029][T12560] __msan_chain_origin+0x50/0x90 [ 572.908951][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 572.914046][T12560] get_compat_msghdr+0x108/0x2b0 [ 572.918966][T12560] do_recvmmsg+0xdbb/0x22c0 [ 572.923455][T12560] __sys_recvmmsg+0x5dd/0x610 [ 572.928119][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.934181][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.940322][T12560] __do_fast_syscall_32+0x2af/0x480 [ 572.945509][T12560] do_fast_syscall_32+0x6b/0xd0 [ 572.950358][T12560] do_SYSENTER_32+0x73/0x90 [ 572.954846][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.961151][T12560] [ 572.963462][T12560] Uninit was stored to memory at: [ 572.968479][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 572.974186][T12560] __msan_chain_origin+0x50/0x90 [ 572.979108][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 572.984287][T12560] get_compat_msghdr+0x108/0x2b0 [ 572.989213][T12560] do_recvmmsg+0xdbb/0x22c0 [ 572.993705][T12560] __sys_recvmmsg+0x5dd/0x610 [ 572.998368][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.004423][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.010563][T12560] __do_fast_syscall_32+0x2af/0x480 [ 573.015744][T12560] do_fast_syscall_32+0x6b/0xd0 [ 573.020581][T12560] do_SYSENTER_32+0x73/0x90 [ 573.025070][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.031396][T12560] [ 573.033709][T12560] Uninit was stored to memory at: [ 573.038727][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 573.044438][T12560] __msan_chain_origin+0x50/0x90 [ 573.049363][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 573.054467][T12560] get_compat_msghdr+0x108/0x2b0 [ 573.059396][T12560] do_recvmmsg+0xdbb/0x22c0 [ 573.063887][T12560] __sys_recvmmsg+0x5dd/0x610 [ 573.068557][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.074616][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.080765][T12560] __do_fast_syscall_32+0x2af/0x480 [ 573.085951][T12560] do_fast_syscall_32+0x6b/0xd0 [ 573.090790][T12560] do_SYSENTER_32+0x73/0x90 [ 573.095279][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.101581][T12560] [ 573.103890][T12560] Uninit was stored to memory at: [ 573.108901][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 573.114607][T12560] __msan_chain_origin+0x50/0x90 [ 573.119529][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 573.124626][T12560] get_compat_msghdr+0x108/0x2b0 [ 573.129548][T12560] do_recvmmsg+0xdbb/0x22c0 [ 573.134037][T12560] __sys_recvmmsg+0x5dd/0x610 [ 573.138697][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.144751][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.150890][T12560] __do_fast_syscall_32+0x2af/0x480 [ 573.156074][T12560] do_fast_syscall_32+0x6b/0xd0 [ 573.160926][T12560] do_SYSENTER_32+0x73/0x90 [ 573.165420][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.171721][T12560] [ 573.174033][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 573.180689][T12560] do_recvmmsg+0xbf/0x22c0 [ 573.185088][T12560] do_recvmmsg+0xbf/0x22c0 [ 573.486240][T12564] not chained 1210000 origins [ 573.490954][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 573.499647][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.509707][T12564] Call Trace: [ 573.513007][T12564] dump_stack+0x21c/0x280 [ 573.517393][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 573.523118][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 573.529187][T12564] ? kmsan_get_metadata+0x116/0x180 [ 573.534386][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 573.540194][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 573.546265][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 573.551661][T12564] ? kmsan_get_metadata+0x116/0x180 [ 573.556867][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 573.562428][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 573.568503][T12564] ? _copy_from_user+0x201/0x310 [ 573.573468][T12564] ? kmsan_get_metadata+0x116/0x180 [ 573.578672][T12564] __msan_chain_origin+0x50/0x90 [ 573.583619][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 573.588750][T12564] get_compat_msghdr+0x108/0x2b0 [ 573.593718][T12564] do_recvmmsg+0xdbb/0x22c0 [ 573.598233][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 573.604069][T12564] ? kmsan_get_metadata+0x116/0x180 [ 573.609270][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 573.615163][T12564] ? kmsan_get_metadata+0x116/0x180 [ 573.620367][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 573.626003][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 573.631302][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 573.636066][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 573.640830][T12564] __sys_recvmmsg+0x5dd/0x610 [ 573.645533][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.651736][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.657895][T12564] __do_fast_syscall_32+0x2af/0x480 [ 573.663111][T12564] do_fast_syscall_32+0x6b/0xd0 [ 573.667970][T12564] do_SYSENTER_32+0x73/0x90 [ 573.672482][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.678819][T12564] RIP: 0023:0xf7fc1549 [ 573.682877][T12564] Code: Bad RIP value. [ 573.686938][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 573.695359][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 573.703329][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 573.711295][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.719270][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 573.727238][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.735223][T12564] Uninit was stored to memory at: [ 573.740253][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 573.745970][T12564] __msan_chain_origin+0x50/0x90 [ 573.750905][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 573.756012][T12564] get_compat_msghdr+0x108/0x2b0 [ 573.760946][T12564] do_recvmmsg+0xdbb/0x22c0 [ 573.765444][T12564] __sys_recvmmsg+0x5dd/0x610 [ 573.770128][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.776199][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.782355][T12564] __do_fast_syscall_32+0x2af/0x480 [ 573.787553][T12564] do_fast_syscall_32+0x6b/0xd0 [ 573.792405][T12564] do_SYSENTER_32+0x73/0x90 [ 573.796909][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.803225][T12564] [ 573.805546][T12564] Uninit was stored to memory at: [ 573.810570][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 573.816287][T12564] __msan_chain_origin+0x50/0x90 [ 573.821228][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 573.826336][T12564] get_compat_msghdr+0x108/0x2b0 [ 573.831274][T12564] do_recvmmsg+0xdbb/0x22c0 [ 573.835774][T12564] __sys_recvmmsg+0x5dd/0x610 [ 573.840462][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.846528][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.852680][T12564] __do_fast_syscall_32+0x2af/0x480 [ 573.857880][T12564] do_fast_syscall_32+0x6b/0xd0 [ 573.862730][T12564] do_SYSENTER_32+0x73/0x90 [ 573.867230][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.873539][T12564] [ 573.875858][T12564] Uninit was stored to memory at: [ 573.880881][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 573.886600][T12564] __msan_chain_origin+0x50/0x90 [ 573.891540][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 573.896653][T12564] get_compat_msghdr+0x108/0x2b0 [ 573.901684][T12564] do_recvmmsg+0xdbb/0x22c0 [ 573.906189][T12564] __sys_recvmmsg+0x5dd/0x610 [ 573.910867][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.916933][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.923085][T12564] __do_fast_syscall_32+0x2af/0x480 [ 573.928284][T12564] do_fast_syscall_32+0x6b/0xd0 [ 573.933134][T12564] do_SYSENTER_32+0x73/0x90 [ 573.937741][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.944055][T12564] [ 573.946374][T12564] Uninit was stored to memory at: [ 573.951397][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 573.957123][T12564] __msan_chain_origin+0x50/0x90 [ 573.962149][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 573.967256][T12564] get_compat_msghdr+0x108/0x2b0 [ 573.972189][T12564] do_recvmmsg+0xdbb/0x22c0 [ 573.976685][T12564] __sys_recvmmsg+0x5dd/0x610 [ 573.981360][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.987424][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.993579][T12564] __do_fast_syscall_32+0x2af/0x480 [ 573.998775][T12564] do_fast_syscall_32+0x6b/0xd0 [ 574.003621][T12564] do_SYSENTER_32+0x73/0x90 [ 574.008124][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.014438][T12564] [ 574.016757][T12564] Uninit was stored to memory at: [ 574.021779][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 574.027492][T12564] __msan_chain_origin+0x50/0x90 [ 574.032425][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 574.037538][T12564] get_compat_msghdr+0x108/0x2b0 [ 574.042467][T12564] do_recvmmsg+0xdbb/0x22c0 [ 574.046966][T12564] __sys_recvmmsg+0x5dd/0x610 [ 574.051660][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.057732][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.063879][T12564] __do_fast_syscall_32+0x2af/0x480 [ 574.069075][T12564] do_fast_syscall_32+0x6b/0xd0 [ 574.073921][T12564] do_SYSENTER_32+0x73/0x90 [ 574.078429][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.084736][T12564] [ 574.087054][T12564] Uninit was stored to memory at: [ 574.092079][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 574.097792][T12564] __msan_chain_origin+0x50/0x90 [ 574.102735][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 574.107840][T12564] get_compat_msghdr+0x108/0x2b0 [ 574.112769][T12564] do_recvmmsg+0xdbb/0x22c0 [ 574.117266][T12564] __sys_recvmmsg+0x5dd/0x610 [ 574.121943][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.128013][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.128880][T12560] not chained 1220000 origins [ 574.134164][T12564] __do_fast_syscall_32+0x2af/0x480 [ 574.138826][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 574.144006][T12564] do_fast_syscall_32+0x6b/0xd0 [ 574.152655][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.157483][T12564] do_SYSENTER_32+0x73/0x90 [ 574.167505][T12560] Call Trace: [ 574.172003][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.175263][T12560] dump_stack+0x21c/0x280 [ 574.181637][T12564] [ 574.185964][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 574.188262][T12564] Uninit was stored to memory at: [ 574.193975][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 574.198972][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 574.205015][T12560] ? kmsan_get_metadata+0x116/0x180 [ 574.210736][T12564] __msan_chain_origin+0x50/0x90 [ 574.215907][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 574.220813][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 574.226590][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 574.231671][T12564] get_compat_msghdr+0x108/0x2b0 [ 574.237711][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 574.242615][T12564] do_recvmmsg+0xdbb/0x22c0 [ 574.247959][T12560] ? kmsan_get_metadata+0x116/0x180 [ 574.252434][T12564] __sys_recvmmsg+0x5dd/0x610 [ 574.257605][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 574.262255][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.267771][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 574.273810][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.279856][T12560] ? _copy_from_user+0x201/0x310 [ 574.285984][T12564] __do_fast_syscall_32+0x2af/0x480 [ 574.290895][T12560] ? kmsan_get_metadata+0x116/0x180 [ 574.296064][T12564] do_fast_syscall_32+0x6b/0xd0 [ 574.301231][T12560] __msan_chain_origin+0x50/0x90 [ 574.306069][T12564] do_SYSENTER_32+0x73/0x90 [ 574.310984][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 574.315459][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.320637][T12560] get_compat_msghdr+0x108/0x2b0 [ 574.326917][T12564] [ 574.331837][T12560] do_recvmmsg+0xdbb/0x22c0 [ 574.334134][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 574.338640][T12560] ? kmsan_get_metadata+0x116/0x180 [ 574.345280][T12564] do_recvmmsg+0xbf/0x22c0 [ 574.350455][T12560] ? kmsan_get_metadata+0x116/0x180 [ 574.354839][T12564] do_recvmmsg+0xbf/0x22c0 [ 574.360016][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 574.370353][T12560] ? kmsan_get_metadata+0x116/0x180 [ 574.375571][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 574.381212][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 574.386509][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 574.391270][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 574.396047][T12560] __sys_recvmmsg+0x5dd/0x610 [ 574.400724][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.406788][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.412956][T12560] __do_fast_syscall_32+0x2af/0x480 [ 574.418148][T12560] do_fast_syscall_32+0x6b/0xd0 [ 574.422989][T12560] do_SYSENTER_32+0x73/0x90 [ 574.427512][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.433827][T12560] RIP: 0023:0xf7fc1549 [ 574.437873][T12560] Code: Bad RIP value. [ 574.441923][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 574.450323][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 574.458282][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 574.466241][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.474199][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 574.482249][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.490212][T12560] Uninit was stored to memory at: [ 574.495228][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 574.500934][T12560] __msan_chain_origin+0x50/0x90 [ 574.505859][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 574.510956][T12560] get_compat_msghdr+0x108/0x2b0 [ 574.515876][T12560] do_recvmmsg+0xdbb/0x22c0 [ 574.520365][T12560] __sys_recvmmsg+0x5dd/0x610 [ 574.525025][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.531081][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.537223][T12560] __do_fast_syscall_32+0x2af/0x480 [ 574.542418][T12560] do_fast_syscall_32+0x6b/0xd0 [ 574.547264][T12560] do_SYSENTER_32+0x73/0x90 [ 574.551756][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.558060][T12560] [ 574.560373][T12560] Uninit was stored to memory at: [ 574.565387][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 574.571095][T12560] __msan_chain_origin+0x50/0x90 [ 574.576016][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 574.581116][T12560] get_compat_msghdr+0x108/0x2b0 [ 574.586050][T12560] do_recvmmsg+0xdbb/0x22c0 [ 574.590544][T12560] __sys_recvmmsg+0x5dd/0x610 [ 574.595210][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.601268][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.607409][T12560] __do_fast_syscall_32+0x2af/0x480 [ 574.612596][T12560] do_fast_syscall_32+0x6b/0xd0 [ 574.617435][T12560] do_SYSENTER_32+0x73/0x90 [ 574.621931][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.628249][T12560] [ 574.630561][T12560] Uninit was stored to memory at: [ 574.635577][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 574.641294][T12560] __msan_chain_origin+0x50/0x90 [ 574.646220][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 574.651320][T12560] get_compat_msghdr+0x108/0x2b0 [ 574.656254][T12560] do_recvmmsg+0xdbb/0x22c0 [ 574.660744][T12560] __sys_recvmmsg+0x5dd/0x610 [ 574.665411][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.671475][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.677617][T12560] __do_fast_syscall_32+0x2af/0x480 [ 574.682803][T12560] do_fast_syscall_32+0x6b/0xd0 [ 574.687662][T12560] do_SYSENTER_32+0x73/0x90 [ 574.692151][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.698451][T12560] [ 574.700760][T12560] Uninit was stored to memory at: [ 574.705772][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 574.711477][T12560] __msan_chain_origin+0x50/0x90 [ 574.716404][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 574.721517][T12560] get_compat_msghdr+0x108/0x2b0 [ 574.726457][T12560] do_recvmmsg+0xdbb/0x22c0 [ 574.730944][T12560] __sys_recvmmsg+0x5dd/0x610 [ 574.735608][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.741660][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.747799][T12560] __do_fast_syscall_32+0x2af/0x480 [ 574.752987][T12560] do_fast_syscall_32+0x6b/0xd0 [ 574.758083][T12560] do_SYSENTER_32+0x73/0x90 [ 574.762575][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.768881][T12560] [ 574.771194][T12560] Uninit was stored to memory at: [ 574.776207][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 574.781911][T12560] __msan_chain_origin+0x50/0x90 [ 574.786851][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 574.791955][T12560] get_compat_msghdr+0x108/0x2b0 [ 574.796883][T12560] do_recvmmsg+0xdbb/0x22c0 [ 574.801370][T12560] __sys_recvmmsg+0x5dd/0x610 [ 574.806037][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.812092][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.818250][T12560] __do_fast_syscall_32+0x2af/0x480 [ 574.823437][T12560] do_fast_syscall_32+0x6b/0xd0 [ 574.828276][T12560] do_SYSENTER_32+0x73/0x90 [ 574.832767][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.839069][T12560] [ 574.841379][T12560] Uninit was stored to memory at: [ 574.846391][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 574.852110][T12560] __msan_chain_origin+0x50/0x90 [ 574.857036][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 574.862147][T12560] get_compat_msghdr+0x108/0x2b0 [ 574.867072][T12560] do_recvmmsg+0xdbb/0x22c0 [ 574.871558][T12560] __sys_recvmmsg+0x5dd/0x610 [ 574.876222][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.882277][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.888423][T12560] __do_fast_syscall_32+0x2af/0x480 [ 574.893609][T12560] do_fast_syscall_32+0x6b/0xd0 [ 574.898452][T12560] do_SYSENTER_32+0x73/0x90 [ 574.902945][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.909247][T12560] [ 574.911583][T12560] Uninit was stored to memory at: [ 574.916594][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 574.922296][T12560] __msan_chain_origin+0x50/0x90 [ 574.927217][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 574.932312][T12560] get_compat_msghdr+0x108/0x2b0 [ 574.937233][T12560] do_recvmmsg+0xdbb/0x22c0 [ 574.941719][T12560] __sys_recvmmsg+0x5dd/0x610 [ 574.946384][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.952439][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.958580][T12560] __do_fast_syscall_32+0x2af/0x480 [ 574.963766][T12560] do_fast_syscall_32+0x6b/0xd0 [ 574.968601][T12560] do_SYSENTER_32+0x73/0x90 [ 574.973091][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.979392][T12560] [ 574.981712][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 574.988371][T12560] do_recvmmsg+0xbf/0x22c0 [ 574.992768][T12560] do_recvmmsg+0xbf/0x22c0 [ 575.284159][T12564] not chained 1230000 origins [ 575.288877][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 575.297542][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.307593][T12564] Call Trace: [ 575.310892][T12564] dump_stack+0x21c/0x280 [ 575.315229][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 575.320949][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 575.327027][T12564] ? kmsan_get_metadata+0x116/0x180 [ 575.332230][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 575.338038][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 575.344106][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 575.349488][T12564] ? kmsan_get_metadata+0x116/0x180 [ 575.354688][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 575.360333][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 575.366406][T12564] ? _copy_from_user+0x201/0x310 [ 575.371350][T12564] ? kmsan_get_metadata+0x116/0x180 [ 575.376564][T12564] __msan_chain_origin+0x50/0x90 [ 575.381506][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 575.386631][T12564] get_compat_msghdr+0x108/0x2b0 [ 575.391587][T12564] do_recvmmsg+0xdbb/0x22c0 [ 575.396093][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 575.401912][T12564] ? kmsan_get_metadata+0x116/0x180 [ 575.407127][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 575.413034][T12564] ? kmsan_get_metadata+0x116/0x180 [ 575.418239][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 575.423880][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 575.429184][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 575.433954][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 575.438719][T12564] __sys_recvmmsg+0x5dd/0x610 [ 575.443414][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.449492][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.455652][T12564] __do_fast_syscall_32+0x2af/0x480 [ 575.460862][T12564] do_fast_syscall_32+0x6b/0xd0 [ 575.465715][T12564] do_SYSENTER_32+0x73/0x90 [ 575.470224][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.476546][T12564] RIP: 0023:0xf7fc1549 [ 575.480601][T12564] Code: Bad RIP value. [ 575.484659][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 575.493066][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 575.501036][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 575.509001][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.516969][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 575.524934][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.532909][T12564] Uninit was stored to memory at: [ 575.538027][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 575.543743][T12564] __msan_chain_origin+0x50/0x90 [ 575.548678][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 575.553783][T12564] get_compat_msghdr+0x108/0x2b0 [ 575.558712][T12564] do_recvmmsg+0xdbb/0x22c0 [ 575.563209][T12564] __sys_recvmmsg+0x5dd/0x610 [ 575.567884][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.573946][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.580114][T12564] __do_fast_syscall_32+0x2af/0x480 [ 575.582360][T12560] not chained 1240000 origins [ 575.585323][T12564] do_fast_syscall_32+0x6b/0xd0 [ 575.589981][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 575.594822][T12564] do_SYSENTER_32+0x73/0x90 [ 575.603454][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.607941][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.617966][T12560] Call Trace: [ 575.624259][T12564] [ 575.627532][T12560] dump_stack+0x21c/0x280 [ 575.629824][T12564] Uninit was stored to memory at: [ 575.634146][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 575.639142][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 575.644835][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 575.650524][T12564] __msan_chain_origin+0x50/0x90 [ 575.656563][T12560] ? kmsan_get_metadata+0x116/0x180 [ 575.661477][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 575.666647][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 575.671728][T12564] get_compat_msghdr+0x108/0x2b0 [ 575.677507][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 575.682434][T12564] do_recvmmsg+0xdbb/0x22c0 [ 575.688490][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 575.692962][T12564] __sys_recvmmsg+0x5dd/0x610 [ 575.698314][T12560] ? kmsan_get_metadata+0x116/0x180 [ 575.702966][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.708137][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 575.714175][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.719688][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 575.725812][T12564] __do_fast_syscall_32+0x2af/0x480 [ 575.731852][T12560] ? _copy_from_user+0x201/0x310 [ 575.737107][T12564] do_fast_syscall_32+0x6b/0xd0 [ 575.742015][T12560] ? kmsan_get_metadata+0x116/0x180 [ 575.746838][T12564] do_SYSENTER_32+0x73/0x90 [ 575.752006][T12560] __msan_chain_origin+0x50/0x90 [ 575.756572][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.761484][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 575.767768][T12564] [ 575.772876][T12560] get_compat_msghdr+0x108/0x2b0 [ 575.775163][T12564] Uninit was stored to memory at: [ 575.780083][T12560] do_recvmmsg+0xdbb/0x22c0 [ 575.785082][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 575.789561][T12560] ? kmsan_get_metadata+0x116/0x180 [ 575.795249][T12564] __msan_chain_origin+0x50/0x90 [ 575.800421][T12560] ? kmsan_get_metadata+0x116/0x180 [ 575.805329][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 575.810498][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 575.815581][T12564] get_compat_msghdr+0x108/0x2b0 [ 575.821445][T12560] ? kmsan_get_metadata+0x116/0x180 [ 575.826356][T12564] do_recvmmsg+0xdbb/0x22c0 [ 575.831541][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 575.836014][T12564] __sys_recvmmsg+0x5dd/0x610 [ 575.841622][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 575.846271][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.851524][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 575.857673][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.862404][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 575.868531][T12564] __do_fast_syscall_32+0x2af/0x480 [ 575.873267][T12560] __sys_recvmmsg+0x5dd/0x610 [ 575.878436][T12564] do_fast_syscall_32+0x6b/0xd0 [ 575.883092][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.887911][T12564] do_SYSENTER_32+0x73/0x90 [ 575.893958][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.898428][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.904554][T12560] __do_fast_syscall_32+0x2af/0x480 [ 575.910850][T12564] [ 575.916035][T12560] do_fast_syscall_32+0x6b/0xd0 [ 575.918465][T12564] Uninit was stored to memory at: [ 575.923298][T12560] do_SYSENTER_32+0x73/0x90 [ 575.928295][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 575.932770][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.938459][T12564] __msan_chain_origin+0x50/0x90 [ 575.944862][T12560] RIP: 0023:0xf7fc1549 [ 575.949776][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 575.953807][T12560] Code: Bad RIP value. [ 575.958896][T12564] get_compat_msghdr+0x108/0x2b0 [ 575.962942][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 575.967865][T12564] do_recvmmsg+0xdbb/0x22c0 [ 575.976243][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 575.980722][T12564] __sys_recvmmsg+0x5dd/0x610 [ 575.988668][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 575.993339][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.001450][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.007493][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.015435][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 576.015452][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.021582][T12564] __do_fast_syscall_32+0x2af/0x480 [ 576.029522][T12560] Uninit was stored to memory at: [ 576.037479][T12564] do_fast_syscall_32+0x6b/0xd0 [ 576.042734][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 576.047732][T12564] do_SYSENTER_32+0x73/0x90 [ 576.052555][T12560] __msan_chain_origin+0x50/0x90 [ 576.058244][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.062717][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 576.067614][T12564] [ 576.073926][T12560] get_compat_msghdr+0x108/0x2b0 [ 576.079009][T12564] Uninit was stored to memory at: [ 576.081323][T12560] do_recvmmsg+0xdbb/0x22c0 [ 576.086235][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 576.091229][T12560] __sys_recvmmsg+0x5dd/0x610 [ 576.095704][T12564] __msan_chain_origin+0x50/0x90 [ 576.101395][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.106042][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 576.110952][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.116987][T12564] get_compat_msghdr+0x108/0x2b0 [ 576.122070][T12560] __do_fast_syscall_32+0x2af/0x480 [ 576.128202][T12564] do_recvmmsg+0xdbb/0x22c0 [ 576.133113][T12560] do_fast_syscall_32+0x6b/0xd0 [ 576.138280][T12564] __sys_recvmmsg+0x5dd/0x610 [ 576.142865][T12560] do_SYSENTER_32+0x73/0x90 [ 576.147686][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.152337][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.156814][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.162844][T12560] [ 576.169153][T12564] __do_fast_syscall_32+0x2af/0x480 [ 576.175266][T12560] Uninit was stored to memory at: [ 576.177581][T12564] do_fast_syscall_32+0x6b/0xd0 [ 576.182751][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 576.187749][T12564] do_SYSENTER_32+0x73/0x90 [ 576.192572][T12560] __msan_chain_origin+0x50/0x90 [ 576.198264][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.202748][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 576.207646][T12564] [ 576.213969][T12560] get_compat_msghdr+0x108/0x2b0 [ 576.219041][T12564] Uninit was stored to memory at: [ 576.221355][T12560] do_recvmmsg+0xdbb/0x22c0 [ 576.226265][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 576.231263][T12560] __sys_recvmmsg+0x5dd/0x610 [ 576.235738][T12564] __msan_chain_origin+0x50/0x90 [ 576.241423][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.241447][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.246096][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 576.251008][T12560] __do_fast_syscall_32+0x2af/0x480 [ 576.257042][T12564] get_compat_msghdr+0x108/0x2b0 [ 576.263166][T12560] do_fast_syscall_32+0x6b/0xd0 [ 576.268247][T12564] do_recvmmsg+0xdbb/0x22c0 [ 576.273418][T12560] do_SYSENTER_32+0x73/0x90 [ 576.273441][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.278352][T12564] __sys_recvmmsg+0x5dd/0x610 [ 576.283165][T12560] [ 576.287653][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.292120][T12560] Uninit was stored to memory at: [ 576.298433][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.303083][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 576.305391][T12564] __do_fast_syscall_32+0x2af/0x480 [ 576.311441][T12560] __msan_chain_origin+0x50/0x90 [ 576.316436][T12564] do_fast_syscall_32+0x6b/0xd0 [ 576.322560][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 576.328249][T12564] do_SYSENTER_32+0x73/0x90 [ 576.333424][T12560] get_compat_msghdr+0x108/0x2b0 [ 576.338334][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.343171][T12560] do_recvmmsg+0xdbb/0x22c0 [ 576.348259][T12564] [ 576.352847][T12560] __sys_recvmmsg+0x5dd/0x610 [ 576.357749][T12564] Uninit was stored to memory at: [ 576.364059][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.368545][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 576.370849][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.375495][T12564] __msan_chain_origin+0x50/0x90 [ 576.380494][T12560] __do_fast_syscall_32+0x2af/0x480 [ 576.386532][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 576.392226][T12560] do_fast_syscall_32+0x6b/0xd0 [ 576.398348][T12564] get_compat_msghdr+0x108/0x2b0 [ 576.403258][T12560] do_SYSENTER_32+0x73/0x90 [ 576.408424][T12564] do_recvmmsg+0xdbb/0x22c0 [ 576.413510][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.418340][T12564] __sys_recvmmsg+0x5dd/0x610 [ 576.423254][T12560] [ 576.427749][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.432211][T12560] Uninit was stored to memory at: [ 576.438523][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.443178][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 576.445494][T12564] __do_fast_syscall_32+0x2af/0x480 [ 576.451538][T12560] __msan_chain_origin+0x50/0x90 [ 576.456540][T12564] do_fast_syscall_32+0x6b/0xd0 [ 576.462667][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 576.468358][T12564] do_SYSENTER_32+0x73/0x90 [ 576.473526][T12560] get_compat_msghdr+0x108/0x2b0 [ 576.478456][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.483365][T12560] do_recvmmsg+0xdbb/0x22c0 [ 576.488436][T12564] [ 576.492935][T12560] __sys_recvmmsg+0x5dd/0x610 [ 576.497851][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 576.504159][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.508631][T12564] do_recvmmsg+0xbf/0x22c0 [ 576.510938][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.515583][T12564] do_recvmmsg+0xbf/0x22c0 [ 576.522229][T12560] __do_fast_syscall_32+0x2af/0x480 [ 576.548397][T12560] do_fast_syscall_32+0x6b/0xd0 [ 576.553249][T12560] do_SYSENTER_32+0x73/0x90 [ 576.557776][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.564174][T12560] [ 576.566493][T12560] Uninit was stored to memory at: [ 576.571518][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 576.577324][T12560] __msan_chain_origin+0x50/0x90 [ 576.582294][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 576.587412][T12560] get_compat_msghdr+0x108/0x2b0 [ 576.592349][T12560] do_recvmmsg+0xdbb/0x22c0 [ 576.596850][T12560] __sys_recvmmsg+0x5dd/0x610 [ 576.601516][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.607579][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.613724][T12560] __do_fast_syscall_32+0x2af/0x480 [ 576.618915][T12560] do_fast_syscall_32+0x6b/0xd0 [ 576.623753][T12560] do_SYSENTER_32+0x73/0x90 [ 576.628247][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.634550][T12560] [ 576.636862][T12560] Uninit was stored to memory at: [ 576.641876][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 576.647586][T12560] __msan_chain_origin+0x50/0x90 [ 576.652509][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 576.657607][T12560] get_compat_msghdr+0x108/0x2b0 [ 576.662529][T12560] do_recvmmsg+0xdbb/0x22c0 [ 576.667021][T12560] __sys_recvmmsg+0x5dd/0x610 [ 576.671691][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.677748][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.683890][T12560] __do_fast_syscall_32+0x2af/0x480 [ 576.689077][T12560] do_fast_syscall_32+0x6b/0xd0 [ 576.693914][T12560] do_SYSENTER_32+0x73/0x90 [ 576.698419][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.704737][T12560] [ 576.707046][T12560] Uninit was stored to memory at: [ 576.713274][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 576.718980][T12560] __msan_chain_origin+0x50/0x90 [ 576.723902][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 576.729002][T12560] get_compat_msghdr+0x108/0x2b0 [ 576.733924][T12560] do_recvmmsg+0xdbb/0x22c0 [ 576.738414][T12560] __sys_recvmmsg+0x5dd/0x610 [ 576.743080][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.749137][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.755276][T12560] __do_fast_syscall_32+0x2af/0x480 [ 576.760461][T12560] do_fast_syscall_32+0x6b/0xd0 [ 576.765309][T12560] do_SYSENTER_32+0x73/0x90 [ 576.769799][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.776106][T12560] [ 576.778420][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 576.785082][T12560] do_recvmmsg+0xbf/0x22c0 [ 576.789506][T12560] do_recvmmsg+0xbf/0x22c0 [ 576.952638][T12564] not chained 1250000 origins [ 576.957349][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 576.966012][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.976062][T12564] Call Trace: [ 576.979358][T12564] dump_stack+0x21c/0x280 [ 576.983695][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 576.989420][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 576.995491][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.000689][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.006496][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 577.012559][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 577.017991][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.023196][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 577.028741][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 577.034812][T12564] ? _copy_from_user+0x201/0x310 [ 577.039755][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.044953][T12564] __msan_chain_origin+0x50/0x90 [ 577.053892][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.059026][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.063989][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.068494][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.074314][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.079516][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 577.085414][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.090618][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 577.096251][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 577.101536][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 577.106300][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 577.111074][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.115770][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.121850][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.128004][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.133219][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.138070][T12564] do_SYSENTER_32+0x73/0x90 [ 577.142574][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.148891][T12564] RIP: 0023:0xf7fc1549 [ 577.152945][T12564] Code: Bad RIP value. [ 577.157002][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 577.165425][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 577.173393][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 577.181362][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.189330][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 577.197295][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.205266][T12564] Uninit was stored to memory at: [ 577.210285][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 577.215990][T12564] __msan_chain_origin+0x50/0x90 [ 577.220916][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.226015][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.230941][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.235428][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.240095][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.246157][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.252299][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.257486][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.262321][T12564] do_SYSENTER_32+0x73/0x90 [ 577.266830][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.273136][T12564] [ 577.275444][T12564] Uninit was stored to memory at: [ 577.280456][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 577.286172][T12564] __msan_chain_origin+0x50/0x90 [ 577.291106][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.296207][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.301128][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.305701][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.310367][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.316420][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.322558][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.327740][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.332574][T12564] do_SYSENTER_32+0x73/0x90 [ 577.337061][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.343362][T12564] [ 577.345671][T12564] Uninit was stored to memory at: [ 577.350684][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 577.356388][T12564] __msan_chain_origin+0x50/0x90 [ 577.361313][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.366412][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.371336][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.375821][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.380484][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.386535][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.392673][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.397857][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.402705][T12564] do_SYSENTER_32+0x73/0x90 [ 577.407192][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.413493][T12564] [ 577.415812][T12564] Uninit was stored to memory at: [ 577.420838][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 577.426557][T12564] __msan_chain_origin+0x50/0x90 [ 577.431483][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.436582][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.441505][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.446095][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.450760][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.456820][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.462968][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.468162][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.473004][T12564] do_SYSENTER_32+0x73/0x90 [ 577.477508][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.483812][T12564] [ 577.486144][T12564] Uninit was stored to memory at: [ 577.491159][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 577.496867][T12564] __msan_chain_origin+0x50/0x90 [ 577.501790][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.506887][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.511913][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.516400][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.521081][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.527159][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.533302][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.538491][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.543326][T12564] do_SYSENTER_32+0x73/0x90 [ 577.547817][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.554126][T12564] [ 577.556440][T12564] Uninit was stored to memory at: [ 577.561455][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 577.567250][T12564] __msan_chain_origin+0x50/0x90 [ 577.572176][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.577286][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.582214][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.586710][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.591379][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.597444][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.603588][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.608777][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.613618][T12564] do_SYSENTER_32+0x73/0x90 [ 577.618113][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.624418][T12564] [ 577.626731][T12564] Uninit was stored to memory at: [ 577.631746][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 577.637456][T12564] __msan_chain_origin+0x50/0x90 [ 577.642384][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.647484][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.652450][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.656937][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.661624][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.667678][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.673820][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.679009][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.683853][T12564] do_SYSENTER_32+0x73/0x90 [ 577.688344][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.694645][T12564] [ 577.696955][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 577.703613][T12564] do_recvmmsg+0xbf/0x22c0 [ 577.708013][T12564] do_recvmmsg+0xbf/0x22c0 [ 577.761155][T12564] not chained 1260000 origins [ 577.765863][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 577.774515][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.784563][T12564] Call Trace: [ 577.787848][T12564] dump_stack+0x21c/0x280 [ 577.792180][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 577.797888][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 577.803946][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.809140][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.814936][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 577.820988][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 577.826354][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.831540][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 577.837074][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 577.843146][T12564] ? _copy_from_user+0x201/0x310 [ 577.848075][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.853261][T12564] __msan_chain_origin+0x50/0x90 [ 577.858190][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 577.863302][T12564] get_compat_msghdr+0x108/0x2b0 [ 577.868247][T12564] do_recvmmsg+0xdbb/0x22c0 [ 577.872743][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.878540][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.883727][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 577.889732][T12564] ? kmsan_get_metadata+0x116/0x180 [ 577.894918][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 577.900545][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 577.905917][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 577.910666][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 577.915419][T12564] __sys_recvmmsg+0x5dd/0x610 [ 577.920183][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.926244][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.932425][T12564] __do_fast_syscall_32+0x2af/0x480 [ 577.937620][T12564] do_fast_syscall_32+0x6b/0xd0 [ 577.942461][T12564] do_SYSENTER_32+0x73/0x90 [ 577.946956][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.953267][T12564] RIP: 0023:0xf7fc1549 [ 577.957312][T12564] Code: Bad RIP value. [ 577.961361][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 577.969757][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 577.977713][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 577.985668][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.993625][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.001583][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.009547][T12564] Uninit was stored to memory at: [ 578.014561][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 578.020265][T12564] __msan_chain_origin+0x50/0x90 [ 578.025279][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 578.030385][T12564] get_compat_msghdr+0x108/0x2b0 [ 578.035306][T12564] do_recvmmsg+0xdbb/0x22c0 [ 578.039796][T12564] __sys_recvmmsg+0x5dd/0x610 [ 578.044460][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.050514][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.056655][T12564] __do_fast_syscall_32+0x2af/0x480 [ 578.061841][T12564] do_fast_syscall_32+0x6b/0xd0 [ 578.066677][T12564] do_SYSENTER_32+0x73/0x90 [ 578.071169][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.077470][T12564] [ 578.079868][T12564] Uninit was stored to memory at: [ 578.084882][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 578.090592][T12564] __msan_chain_origin+0x50/0x90 [ 578.095526][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 578.100629][T12564] get_compat_msghdr+0x108/0x2b0 [ 578.105552][T12564] do_recvmmsg+0xdbb/0x22c0 [ 578.110040][T12564] __sys_recvmmsg+0x5dd/0x610 [ 578.114705][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.120760][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.126901][T12564] __do_fast_syscall_32+0x2af/0x480 [ 578.132084][T12564] do_fast_syscall_32+0x6b/0xd0 [ 578.136921][T12564] do_SYSENTER_32+0x73/0x90 [ 578.141410][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.147712][T12564] [ 578.150019][T12564] Uninit was stored to memory at: [ 578.155030][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 578.160732][T12564] __msan_chain_origin+0x50/0x90 [ 578.165664][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 578.170759][T12564] get_compat_msghdr+0x108/0x2b0 [ 578.175679][T12564] do_recvmmsg+0xdbb/0x22c0 [ 578.180168][T12564] __sys_recvmmsg+0x5dd/0x610 [ 578.184829][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.190878][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.197015][T12564] __do_fast_syscall_32+0x2af/0x480 [ 578.202292][T12564] do_fast_syscall_32+0x6b/0xd0 [ 578.207132][T12564] do_SYSENTER_32+0x73/0x90 [ 578.211634][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.217935][T12564] [ 578.220243][T12564] Uninit was stored to memory at: [ 578.225254][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 578.230958][T12564] __msan_chain_origin+0x50/0x90 [ 578.235882][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 578.240981][T12564] get_compat_msghdr+0x108/0x2b0 [ 578.245904][T12564] do_recvmmsg+0xdbb/0x22c0 [ 578.250390][T12564] __sys_recvmmsg+0x5dd/0x610 [ 578.255053][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.261109][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.267246][T12564] __do_fast_syscall_32+0x2af/0x480 [ 578.272431][T12564] do_fast_syscall_32+0x6b/0xd0 [ 578.277271][T12564] do_SYSENTER_32+0x73/0x90 [ 578.281761][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.288062][T12564] [ 578.290374][T12564] Uninit was stored to memory at: [ 578.295384][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 578.301085][T12564] __msan_chain_origin+0x50/0x90 [ 578.306008][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 578.311107][T12564] get_compat_msghdr+0x108/0x2b0 [ 578.316025][T12564] do_recvmmsg+0xdbb/0x22c0 [ 578.320529][T12564] __sys_recvmmsg+0x5dd/0x610 [ 578.325193][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.331244][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.337384][T12564] __do_fast_syscall_32+0x2af/0x480 [ 578.342570][T12564] do_fast_syscall_32+0x6b/0xd0 [ 578.347504][T12564] do_SYSENTER_32+0x73/0x90 [ 578.351994][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.358297][T12564] [ 578.360607][T12564] Uninit was stored to memory at: [ 578.365621][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 578.371327][T12564] __msan_chain_origin+0x50/0x90 [ 578.376261][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 578.381360][T12564] get_compat_msghdr+0x108/0x2b0 [ 578.386369][T12564] do_recvmmsg+0xdbb/0x22c0 [ 578.390862][T12564] __sys_recvmmsg+0x5dd/0x610 [ 578.395545][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.401605][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.407755][T12564] __do_fast_syscall_32+0x2af/0x480 [ 578.412944][T12564] do_fast_syscall_32+0x6b/0xd0 [ 578.417782][T12564] do_SYSENTER_32+0x73/0x90 [ 578.422365][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.428668][T12564] [ 578.430980][T12564] Uninit was stored to memory at: [ 578.436000][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 578.441710][T12564] __msan_chain_origin+0x50/0x90 [ 578.446642][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 578.451751][T12564] get_compat_msghdr+0x108/0x2b0 [ 578.456677][T12564] do_recvmmsg+0xdbb/0x22c0 [ 578.461256][T12564] __sys_recvmmsg+0x5dd/0x610 [ 578.465924][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.471981][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.478123][T12564] __do_fast_syscall_32+0x2af/0x480 [ 578.483307][T12564] do_fast_syscall_32+0x6b/0xd0 [ 578.488148][T12564] do_SYSENTER_32+0x73/0x90 [ 578.492638][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.499026][T12564] [ 578.501338][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 578.507995][T12564] do_recvmmsg+0xbf/0x22c0 [ 578.512404][T12564] do_recvmmsg+0xbf/0x22c0 [ 578.805635][T12560] not chained 1270000 origins [ 578.810464][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 578.819132][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.829177][T12560] Call Trace: [ 578.832472][T12560] dump_stack+0x21c/0x280 [ 578.836819][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 578.842548][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 578.848751][T12560] ? kmsan_get_metadata+0x116/0x180 [ 578.854090][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 578.859895][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 578.865954][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 578.871336][T12560] ? kmsan_get_metadata+0x116/0x180 [ 578.876539][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 578.882120][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 578.888205][T12560] ? _copy_from_user+0x201/0x310 [ 578.893148][T12560] ? kmsan_get_metadata+0x116/0x180 [ 578.898347][T12560] __msan_chain_origin+0x50/0x90 [ 578.903291][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 578.908421][T12560] get_compat_msghdr+0x108/0x2b0 [ 578.913368][T12560] do_recvmmsg+0xdbb/0x22c0 [ 578.917885][T12560] ? kmsan_get_metadata+0x116/0x180 [ 578.923087][T12560] ? kmsan_get_metadata+0x116/0x180 [ 578.928287][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 578.934180][T12560] ? kmsan_get_metadata+0x116/0x180 [ 578.939381][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 578.945014][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 578.950301][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 578.955064][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 578.959832][T12560] __sys_recvmmsg+0x5dd/0x610 [ 578.964627][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.970702][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.976854][T12560] __do_fast_syscall_32+0x2af/0x480 [ 578.982061][T12560] do_fast_syscall_32+0x6b/0xd0 [ 578.986915][T12560] do_SYSENTER_32+0x73/0x90 [ 578.991595][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.997927][T12560] RIP: 0023:0xf7fc1549 [ 579.001985][T12560] Code: Bad RIP value. [ 579.006048][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 579.014455][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 579.022524][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 579.030501][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.038474][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 579.046440][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.054422][T12560] Uninit was stored to memory at: [ 579.059464][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.065180][T12560] __msan_chain_origin+0x50/0x90 [ 579.070116][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.075229][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.080161][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.084681][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.089368][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.095450][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.101608][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.106816][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.111666][T12560] do_SYSENTER_32+0x73/0x90 [ 579.116171][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.122482][T12560] [ 579.124799][T12560] Uninit was stored to memory at: [ 579.129824][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.135540][T12560] __msan_chain_origin+0x50/0x90 [ 579.140487][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.145594][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.150525][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.155020][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.159693][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.165796][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.171955][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.177156][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.182006][T12560] do_SYSENTER_32+0x73/0x90 [ 579.186511][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.192823][T12560] [ 579.195146][T12560] Uninit was stored to memory at: [ 579.200171][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.205888][T12560] __msan_chain_origin+0x50/0x90 [ 579.210823][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.215934][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.220869][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.225367][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.230044][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.236122][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.242273][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.247471][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.252324][T12560] do_SYSENTER_32+0x73/0x90 [ 579.256923][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.263239][T12560] [ 579.265558][T12560] Uninit was stored to memory at: [ 579.270581][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.276298][T12560] __msan_chain_origin+0x50/0x90 [ 579.281233][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.286344][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.291289][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.295797][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.300479][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.306545][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.312700][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.317912][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.322780][T12560] do_SYSENTER_32+0x73/0x90 [ 579.327284][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.333594][T12560] [ 579.335916][T12560] Uninit was stored to memory at: [ 579.340942][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.346660][T12560] __msan_chain_origin+0x50/0x90 [ 579.351596][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.356702][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.361636][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.366136][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.370809][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.376871][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.383027][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.388222][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.393074][T12560] do_SYSENTER_32+0x73/0x90 [ 579.397579][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.403892][T12560] [ 579.406211][T12560] Uninit was stored to memory at: [ 579.411238][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.416957][T12560] __msan_chain_origin+0x50/0x90 [ 579.421989][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.427100][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.432038][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.436538][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.441219][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.447296][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.453450][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.458649][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.463501][T12560] do_SYSENTER_32+0x73/0x90 [ 579.468008][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.474320][T12560] [ 579.476638][T12560] Uninit was stored to memory at: [ 579.481665][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.487384][T12560] __msan_chain_origin+0x50/0x90 [ 579.492318][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.497427][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.502361][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.506863][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.511538][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.517605][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.523763][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.528967][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.533815][T12560] do_SYSENTER_32+0x73/0x90 [ 579.538316][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.544627][T12560] [ 579.546949][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 579.553616][T12560] do_recvmmsg+0xbf/0x22c0 [ 579.558043][T12560] do_recvmmsg+0xbf/0x22c0 [ 579.638128][T12560] not chained 1280000 origins [ 579.642843][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 579.651557][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.661608][T12560] Call Trace: [ 579.664905][T12560] dump_stack+0x21c/0x280 [ 579.669250][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 579.674998][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 579.681089][T12560] ? kmsan_get_metadata+0x116/0x180 [ 579.686289][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 579.692096][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 579.698174][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 579.703559][T12560] ? kmsan_get_metadata+0x116/0x180 [ 579.708765][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 579.714310][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 579.720383][T12560] ? _copy_from_user+0x201/0x310 [ 579.725330][T12560] ? kmsan_get_metadata+0x116/0x180 [ 579.730532][T12560] __msan_chain_origin+0x50/0x90 [ 579.735475][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.740603][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.745552][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.750073][T12560] ? kmsan_get_metadata+0x116/0x180 [ 579.755276][T12560] ? kmsan_get_metadata+0x116/0x180 [ 579.760479][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 579.766395][T12560] ? kmsan_get_metadata+0x116/0x180 [ 579.771698][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 579.777330][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 579.782616][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 579.787378][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 579.792149][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.796842][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.802958][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.809116][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.814330][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.819185][T12560] do_SYSENTER_32+0x73/0x90 [ 579.823694][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.830014][T12560] RIP: 0023:0xf7fc1549 [ 579.834071][T12560] Code: Bad RIP value. [ 579.838140][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 579.846539][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 579.854496][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 579.862453][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.870416][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 579.878377][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.886403][T12560] Uninit was stored to memory at: [ 579.891427][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.897133][T12560] __msan_chain_origin+0x50/0x90 [ 579.902059][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.907156][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.912081][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.916569][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.921234][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.927286][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.933426][T12560] __do_fast_syscall_32+0x2af/0x480 [ 579.938610][T12560] do_fast_syscall_32+0x6b/0xd0 [ 579.943446][T12560] do_SYSENTER_32+0x73/0x90 [ 579.947938][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.954239][T12560] [ 579.956551][T12560] Uninit was stored to memory at: [ 579.961572][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 579.967278][T12560] __msan_chain_origin+0x50/0x90 [ 579.972204][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 579.977299][T12560] get_compat_msghdr+0x108/0x2b0 [ 579.982223][T12560] do_recvmmsg+0xdbb/0x22c0 [ 579.986714][T12560] __sys_recvmmsg+0x5dd/0x610 [ 579.991380][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.997438][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.003579][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.008766][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.013604][T12560] do_SYSENTER_32+0x73/0x90 [ 580.018099][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.024401][T12560] [ 580.026715][T12560] Uninit was stored to memory at: [ 580.031728][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.037432][T12560] __msan_chain_origin+0x50/0x90 [ 580.042354][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.047455][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.052378][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.056869][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.061532][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.067586][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.073726][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.078913][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.083751][T12560] do_SYSENTER_32+0x73/0x90 [ 580.088243][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.094543][T12560] [ 580.096854][T12560] Uninit was stored to memory at: [ 580.101867][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.107584][T12560] __msan_chain_origin+0x50/0x90 [ 580.112505][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.117605][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.122545][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.127033][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.131699][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.137753][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.143894][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.149081][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.153917][T12560] do_SYSENTER_32+0x73/0x90 [ 580.158413][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.164723][T12560] [ 580.167060][T12560] Uninit was stored to memory at: [ 580.172075][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.177781][T12560] __msan_chain_origin+0x50/0x90 [ 580.182706][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.187802][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.192723][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.197212][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.201879][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.207931][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.214072][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.219260][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.224100][T12560] do_SYSENTER_32+0x73/0x90 [ 580.228592][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.234896][T12560] [ 580.237205][T12560] Uninit was stored to memory at: [ 580.242217][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.247924][T12560] __msan_chain_origin+0x50/0x90 [ 580.252852][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.257951][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.262872][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.267359][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.272027][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.278082][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.284223][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.289407][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.294245][T12560] do_SYSENTER_32+0x73/0x90 [ 580.298758][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.305062][T12560] [ 580.307375][T12560] Uninit was stored to memory at: [ 580.312386][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.318089][T12560] __msan_chain_origin+0x50/0x90 [ 580.323012][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.328114][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.333037][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.337526][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.342188][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.348243][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.354382][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.359567][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.364405][T12560] do_SYSENTER_32+0x73/0x90 [ 580.368896][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.375199][T12560] [ 580.377512][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 580.384172][T12560] do_recvmmsg+0xbf/0x22c0 [ 580.388574][T12560] do_recvmmsg+0xbf/0x22c0 [ 580.486608][T12560] not chained 1290000 origins [ 580.491324][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 580.499987][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.510035][T12560] Call Trace: [ 580.513330][T12560] dump_stack+0x21c/0x280 [ 580.517675][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 580.523400][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 580.529472][T12560] ? kmsan_get_metadata+0x116/0x180 [ 580.534689][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 580.540501][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 580.546571][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 580.551951][T12560] ? kmsan_get_metadata+0x116/0x180 [ 580.557151][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 580.562701][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 580.568774][T12560] ? _copy_from_user+0x201/0x310 [ 580.573718][T12560] ? kmsan_get_metadata+0x116/0x180 [ 580.578922][T12560] __msan_chain_origin+0x50/0x90 [ 580.583873][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.589005][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.593955][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.598509][T12560] ? kmsan_get_metadata+0x116/0x180 [ 580.603716][T12560] ? kmsan_get_metadata+0x116/0x180 [ 580.609702][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 580.615601][T12560] ? kmsan_get_metadata+0x116/0x180 [ 580.620810][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 580.626447][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 580.631733][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 580.636496][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 580.641263][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.645953][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.652034][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.658192][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.663403][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.668260][T12560] do_SYSENTER_32+0x73/0x90 [ 580.672770][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.679096][T12560] RIP: 0023:0xf7fc1549 [ 580.683154][T12560] Code: Bad RIP value. [ 580.687212][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 580.695627][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 580.703597][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 580.711566][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.719535][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 580.727503][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.735514][T12560] Uninit was stored to memory at: [ 580.740544][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.746264][T12560] __msan_chain_origin+0x50/0x90 [ 580.751205][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.756314][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.761249][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.765749][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.770429][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.776493][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.782647][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.787849][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.792701][T12560] do_SYSENTER_32+0x73/0x90 [ 580.797204][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.803516][T12560] [ 580.805852][T12560] Uninit was stored to memory at: [ 580.810882][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.816604][T12560] __msan_chain_origin+0x50/0x90 [ 580.821543][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.826656][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.831590][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.836089][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.840770][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.846845][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.852998][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.858198][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.863131][T12560] do_SYSENTER_32+0x73/0x90 [ 580.867635][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.873946][T12560] [ 580.876262][T12560] Uninit was stored to memory at: [ 580.881284][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.887004][T12560] __msan_chain_origin+0x50/0x90 [ 580.891938][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.897045][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.901980][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.906477][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.911156][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.917215][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.923356][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.928542][T12560] do_fast_syscall_32+0x6b/0xd0 [ 580.933379][T12560] do_SYSENTER_32+0x73/0x90 [ 580.937870][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.944174][T12560] [ 580.946487][T12560] Uninit was stored to memory at: [ 580.951501][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 580.957208][T12560] __msan_chain_origin+0x50/0x90 [ 580.962136][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 580.967237][T12560] get_compat_msghdr+0x108/0x2b0 [ 580.972165][T12560] do_recvmmsg+0xdbb/0x22c0 [ 580.976670][T12560] __sys_recvmmsg+0x5dd/0x610 [ 580.981334][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.987393][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.993534][T12560] __do_fast_syscall_32+0x2af/0x480 [ 580.998719][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.003563][T12560] do_SYSENTER_32+0x73/0x90 [ 581.008052][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.014355][T12560] [ 581.016666][T12560] Uninit was stored to memory at: [ 581.021677][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.027379][T12560] __msan_chain_origin+0x50/0x90 [ 581.032303][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.037400][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.042321][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.046814][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.051479][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.057531][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.063671][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.068857][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.073809][T12560] do_SYSENTER_32+0x73/0x90 [ 581.078306][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.084615][T12560] [ 581.086924][T12560] Uninit was stored to memory at: [ 581.091940][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.097645][T12560] __msan_chain_origin+0x50/0x90 [ 581.102573][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.107673][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.112595][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.117083][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.121750][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.127808][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.133952][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.139138][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.143974][T12560] do_SYSENTER_32+0x73/0x90 [ 581.148464][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.154769][T12560] [ 581.157083][T12560] Uninit was stored to memory at: [ 581.162096][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.167803][T12560] __msan_chain_origin+0x50/0x90 [ 581.172731][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.177827][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.182748][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.187237][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.191899][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.197954][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.204096][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.209281][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.214117][T12560] do_SYSENTER_32+0x73/0x90 [ 581.218606][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.224906][T12560] [ 581.227216][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 581.233871][T12560] do_recvmmsg+0xbf/0x22c0 [ 581.238274][T12560] do_recvmmsg+0xbf/0x22c0 [ 581.352292][T12560] not chained 1300000 origins [ 581.357004][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 581.365663][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.375712][T12560] Call Trace: [ 581.379009][T12560] dump_stack+0x21c/0x280 [ 581.383345][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 581.389068][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 581.395188][T12560] ? kmsan_get_metadata+0x116/0x180 [ 581.400390][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 581.406303][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 581.412377][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 581.417761][T12560] ? kmsan_get_metadata+0x116/0x180 [ 581.422966][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 581.428520][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 581.434594][T12560] ? _copy_from_user+0x201/0x310 [ 581.439543][T12560] ? kmsan_get_metadata+0x116/0x180 [ 581.444737][T12560] __msan_chain_origin+0x50/0x90 [ 581.449671][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.454784][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.459806][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.464315][T12560] ? kmsan_get_metadata+0x116/0x180 [ 581.469525][T12560] ? kmsan_get_metadata+0x116/0x180 [ 581.474720][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 581.480605][T12560] ? kmsan_get_metadata+0x116/0x180 [ 581.485888][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 581.491513][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 581.496786][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 581.501539][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 581.506296][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.510978][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.517041][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.523185][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.528381][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.533226][T12560] do_SYSENTER_32+0x73/0x90 [ 581.537724][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.544035][T12560] RIP: 0023:0xf7fc1549 [ 581.548082][T12560] Code: Bad RIP value. [ 581.552132][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 581.560530][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 581.568488][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 581.576458][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.584430][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 581.592404][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.600375][T12560] Uninit was stored to memory at: [ 581.605393][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.611103][T12560] __msan_chain_origin+0x50/0x90 [ 581.616032][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.621130][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.626063][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.630558][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.635228][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.641390][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.647548][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.652737][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.657576][T12560] do_SYSENTER_32+0x73/0x90 [ 581.662071][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.668376][T12560] [ 581.670689][T12560] Uninit was stored to memory at: [ 581.675704][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.681411][T12560] __msan_chain_origin+0x50/0x90 [ 581.686336][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.691434][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.696358][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.700845][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.705513][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.711565][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.717701][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.722892][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.727729][T12560] do_SYSENTER_32+0x73/0x90 [ 581.732217][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.738521][T12560] [ 581.740829][T12560] Uninit was stored to memory at: [ 581.745841][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.751549][T12560] __msan_chain_origin+0x50/0x90 [ 581.756471][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.761565][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.766488][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.770982][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.775645][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.781699][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.787839][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.793030][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.797870][T12560] do_SYSENTER_32+0x73/0x90 [ 581.802361][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.808667][T12560] [ 581.810978][T12560] Uninit was stored to memory at: [ 581.815990][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.821695][T12560] __msan_chain_origin+0x50/0x90 [ 581.826620][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.831719][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.836641][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.841127][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.845789][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.851844][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.857987][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.863173][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.868017][T12560] do_SYSENTER_32+0x73/0x90 [ 581.872510][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.878816][T12560] [ 581.881128][T12560] Uninit was stored to memory at: [ 581.886192][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.891896][T12560] __msan_chain_origin+0x50/0x90 [ 581.896818][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.901913][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.906833][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.911326][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.915990][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.922131][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.928271][T12560] __do_fast_syscall_32+0x2af/0x480 [ 581.933458][T12560] do_fast_syscall_32+0x6b/0xd0 [ 581.938295][T12560] do_SYSENTER_32+0x73/0x90 [ 581.942785][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.949088][T12560] [ 581.951401][T12560] Uninit was stored to memory at: [ 581.956413][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 581.962119][T12560] __msan_chain_origin+0x50/0x90 [ 581.967042][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 581.972142][T12560] get_compat_msghdr+0x108/0x2b0 [ 581.977066][T12560] do_recvmmsg+0xdbb/0x22c0 [ 581.981553][T12560] __sys_recvmmsg+0x5dd/0x610 [ 581.986217][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.992275][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.998417][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.003603][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.008442][T12560] do_SYSENTER_32+0x73/0x90 [ 582.012931][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.019231][T12560] [ 582.021543][T12560] Uninit was stored to memory at: [ 582.026555][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 582.032272][T12560] __msan_chain_origin+0x50/0x90 [ 582.037197][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.042557][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.047482][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.051974][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.056639][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.062695][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.068843][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.074030][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.078869][T12560] do_SYSENTER_32+0x73/0x90 [ 582.083360][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.089680][T12560] [ 582.091992][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 582.098649][T12560] do_recvmmsg+0xbf/0x22c0 [ 582.103050][T12560] do_recvmmsg+0xbf/0x22c0 [ 582.284078][T12560] not chained 1310000 origins [ 582.288794][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 582.297458][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.307505][T12560] Call Trace: [ 582.310803][T12560] dump_stack+0x21c/0x280 [ 582.315146][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 582.320902][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 582.326971][T12560] ? kmsan_get_metadata+0x116/0x180 [ 582.332174][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 582.337989][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 582.344056][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 582.349436][T12560] ? kmsan_get_metadata+0x116/0x180 [ 582.354636][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 582.360185][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 582.366260][T12560] ? _copy_from_user+0x201/0x310 [ 582.371234][T12560] ? kmsan_get_metadata+0x116/0x180 [ 582.376439][T12560] __msan_chain_origin+0x50/0x90 [ 582.381386][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.386625][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.391571][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.396090][T12560] ? kmsan_get_metadata+0x116/0x180 [ 582.401295][T12560] ? kmsan_get_metadata+0x116/0x180 [ 582.406500][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 582.412401][T12560] ? kmsan_get_metadata+0x116/0x180 [ 582.417720][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 582.423383][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 582.428676][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 582.433438][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 582.438204][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.442903][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.448984][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.455142][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.460359][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.465212][T12560] do_SYSENTER_32+0x73/0x90 [ 582.469757][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.476084][T12560] RIP: 0023:0xf7fc1549 [ 582.480140][T12560] Code: Bad RIP value. [ 582.484202][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 582.492611][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 582.500579][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 582.508547][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.516514][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 582.524486][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.532453][T12560] Uninit was stored to memory at: [ 582.537471][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 582.543180][T12560] __msan_chain_origin+0x50/0x90 [ 582.548103][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.553198][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.558122][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.562616][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.567283][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.573338][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.579479][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.584665][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.589513][T12560] do_SYSENTER_32+0x73/0x90 [ 582.594008][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.600311][T12560] [ 582.602621][T12560] Uninit was stored to memory at: [ 582.607637][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 582.613348][T12560] __msan_chain_origin+0x50/0x90 [ 582.618282][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.623385][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.628313][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.632804][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.637468][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.643525][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.649759][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.654944][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.659781][T12560] do_SYSENTER_32+0x73/0x90 [ 582.664273][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.670579][T12560] [ 582.672893][T12560] Uninit was stored to memory at: [ 582.677902][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 582.683605][T12560] __msan_chain_origin+0x50/0x90 [ 582.688531][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.693626][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.698549][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.703033][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.707697][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.713751][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.719893][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.725082][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.729920][T12560] do_SYSENTER_32+0x73/0x90 [ 582.734427][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.740727][T12560] [ 582.743035][T12560] Uninit was stored to memory at: [ 582.748044][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 582.753746][T12560] __msan_chain_origin+0x50/0x90 [ 582.758670][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.763770][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.768691][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.773180][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.777845][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.783899][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.790038][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.795223][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.800058][T12560] do_SYSENTER_32+0x73/0x90 [ 582.804549][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.810859][T12560] [ 582.813168][T12560] Uninit was stored to memory at: [ 582.818178][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 582.823884][T12560] __msan_chain_origin+0x50/0x90 [ 582.828809][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.833902][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.838826][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.843313][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.847979][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.854031][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.860169][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.865359][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.870196][T12560] do_SYSENTER_32+0x73/0x90 [ 582.882065][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.888366][T12560] [ 582.890676][T12560] Uninit was stored to memory at: [ 582.895690][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 582.901395][T12560] __msan_chain_origin+0x50/0x90 [ 582.906318][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.911424][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.916347][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.920833][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.925497][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.931552][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.937693][T12560] __do_fast_syscall_32+0x2af/0x480 [ 582.942878][T12560] do_fast_syscall_32+0x6b/0xd0 [ 582.947718][T12560] do_SYSENTER_32+0x73/0x90 [ 582.952208][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.959908][T12560] [ 582.962310][T12560] Uninit was stored to memory at: [ 582.967334][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 582.973046][T12560] __msan_chain_origin+0x50/0x90 [ 582.977977][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 582.983079][T12560] get_compat_msghdr+0x108/0x2b0 [ 582.988004][T12560] do_recvmmsg+0xdbb/0x22c0 [ 582.992491][T12560] __sys_recvmmsg+0x5dd/0x610 [ 582.997160][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.003212][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.009353][T12560] __do_fast_syscall_32+0x2af/0x480 [ 583.014539][T12560] do_fast_syscall_32+0x6b/0xd0 [ 583.019374][T12560] do_SYSENTER_32+0x73/0x90 [ 583.023865][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.030166][T12560] [ 583.032478][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 583.039136][T12560] do_recvmmsg+0xbf/0x22c0 [ 583.043541][T12560] do_recvmmsg+0xbf/0x22c0 [ 583.240986][T12564] not chained 1320000 origins [ 583.245701][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 583.254364][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.264412][T12564] Call Trace: [ 583.267711][T12564] dump_stack+0x21c/0x280 [ 583.272055][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 583.277781][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 583.283854][T12564] ? kmsan_get_metadata+0x116/0x180 [ 583.289061][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.294869][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 583.300936][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 583.306315][T12564] ? kmsan_get_metadata+0x116/0x180 [ 583.311516][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 583.317090][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 583.323164][T12564] ? _copy_from_user+0x201/0x310 [ 583.328102][T12564] ? kmsan_get_metadata+0x116/0x180 [ 583.333306][T12564] __msan_chain_origin+0x50/0x90 [ 583.338253][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 583.343382][T12564] get_compat_msghdr+0x108/0x2b0 [ 583.348332][T12564] do_recvmmsg+0xdbb/0x22c0 [ 583.352848][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.358668][T12564] ? kmsan_get_metadata+0x116/0x180 [ 583.363867][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 583.369761][T12564] ? kmsan_get_metadata+0x116/0x180 [ 583.374960][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 583.380593][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 583.385879][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 583.390638][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 583.395403][T12564] __sys_recvmmsg+0x5dd/0x610 [ 583.400093][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.406170][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.412334][T12564] __do_fast_syscall_32+0x2af/0x480 [ 583.417541][T12564] do_fast_syscall_32+0x6b/0xd0 [ 583.422393][T12564] do_SYSENTER_32+0x73/0x90 [ 583.426904][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.433224][T12564] RIP: 0023:0xf7fc1549 [ 583.437277][T12564] Code: Bad RIP value. [ 583.441334][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 583.449745][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 583.457711][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 583.465679][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.473656][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 583.481621][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.489597][T12564] Uninit was stored to memory at: [ 583.494621][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 583.500336][T12564] __msan_chain_origin+0x50/0x90 [ 583.505269][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 583.506479][T12560] not chained 1330000 origins [ 583.510380][T12564] get_compat_msghdr+0x108/0x2b0 [ 583.515063][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 583.519971][T12564] do_recvmmsg+0xdbb/0x22c0 [ 583.528606][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.533103][T12564] __sys_recvmmsg+0x5dd/0x610 [ 583.533127][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.543161][T12560] Call Trace: [ 583.547832][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.553868][T12560] dump_stack+0x21c/0x280 [ 583.557128][T12564] __do_fast_syscall_32+0x2af/0x480 [ 583.563253][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 583.567556][T12564] do_fast_syscall_32+0x6b/0xd0 [ 583.572727][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 583.578416][T12564] do_SYSENTER_32+0x73/0x90 [ 583.583260][T12560] ? kmsan_get_metadata+0x116/0x180 [ 583.589299][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.593775][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.598931][T12564] [ 583.605248][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 583.611036][T12564] Uninit was stored to memory at: [ 583.613357][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 583.619410][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 583.624411][T12560] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 583.629759][T12564] __msan_chain_origin+0x50/0x90 [ 583.635448][T12560] ? idle_cpu+0x9a/0x1d0 [ 583.641489][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 583.646400][T12560] ? kmsan_get_metadata+0x116/0x180 [ 583.650617][T12564] get_compat_msghdr+0x108/0x2b0 [ 583.655700][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 583.660868][T12564] do_recvmmsg+0xdbb/0x22c0 [ 583.665780][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 583.671313][T12564] __sys_recvmmsg+0x5dd/0x610 [ 583.675780][T12560] ? _copy_from_user+0x201/0x310 [ 583.681819][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.686470][T12560] ? kmsan_get_metadata+0x116/0x180 [ 583.691391][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.697429][T12560] __msan_chain_origin+0x50/0x90 [ 583.702614][T12564] __do_fast_syscall_32+0x2af/0x480 [ 583.708740][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 583.713654][T12564] do_fast_syscall_32+0x6b/0xd0 [ 583.718832][T12560] get_compat_msghdr+0x108/0x2b0 [ 583.723910][T12564] do_SYSENTER_32+0x73/0x90 [ 583.728737][T12560] do_recvmmsg+0xdbb/0x22c0 [ 583.733648][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.738131][T12560] ? kmsan_get_metadata+0x116/0x180 [ 583.742592][T12564] [ 583.748902][T12560] ? kmsan_get_metadata+0x116/0x180 [ 583.754062][T12564] Uninit was stored to memory at: [ 583.756380][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 583.761551][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 583.766566][T12560] ? kmsan_get_metadata+0x116/0x180 [ 583.772432][T12564] __msan_chain_origin+0x50/0x90 [ 583.778124][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 583.783292][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 583.788202][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 583.793804][T12564] get_compat_msghdr+0x108/0x2b0 [ 583.798886][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 583.804142][T12564] do_recvmmsg+0xdbb/0x22c0 [ 583.809054][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 583.813788][T12564] __sys_recvmmsg+0x5dd/0x610 [ 583.818264][T12560] __sys_recvmmsg+0x5dd/0x610 [ 583.823000][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.827659][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.832304][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.838344][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.844380][T12564] __do_fast_syscall_32+0x2af/0x480 [ 583.850506][T12560] __do_fast_syscall_32+0x2af/0x480 [ 583.856630][T12564] do_fast_syscall_32+0x6b/0xd0 [ 583.861801][T12560] do_fast_syscall_32+0x6b/0xd0 [ 583.866969][T12564] do_SYSENTER_32+0x73/0x90 [ 583.871792][T12560] do_SYSENTER_32+0x73/0x90 [ 583.876615][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.881109][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.885577][T12564] [ 583.891895][T12560] RIP: 0023:0xf7fc1549 [ 583.898189][T12564] Uninit was stored to memory at: [ 583.900493][T12560] Code: Bad RIP value. [ 583.904548][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 583.909537][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 583.913585][T12564] __msan_chain_origin+0x50/0x90 [ 583.919270][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 583.927657][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 583.932561][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 583.940513][T12564] get_compat_msghdr+0x108/0x2b0 [ 583.945592][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.953542][T12564] do_recvmmsg+0xdbb/0x22c0 [ 583.958453][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 583.966403][T12564] __sys_recvmmsg+0x5dd/0x610 [ 583.970876][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.978829][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.983481][T12560] Uninit was stored to memory at: [ 583.991436][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.997477][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 584.002473][T12564] __do_fast_syscall_32+0x2af/0x480 [ 584.008598][T12560] __msan_chain_origin+0x50/0x90 [ 584.014291][T12564] do_fast_syscall_32+0x6b/0xd0 [ 584.019459][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 584.024371][T12564] do_SYSENTER_32+0x73/0x90 [ 584.029195][T12560] get_compat_msghdr+0x108/0x2b0 [ 584.034280][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.038767][T12560] do_recvmmsg+0xdbb/0x22c0 [ 584.043666][T12564] [ 584.049972][T12560] __sys_recvmmsg+0x5dd/0x610 [ 584.054436][T12564] Uninit was stored to memory at: [ 584.056752][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.061399][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 584.066396][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.072432][T12564] __msan_chain_origin+0x50/0x90 [ 584.078123][T12560] __do_fast_syscall_32+0x2af/0x480 [ 584.084247][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 584.089159][T12560] do_fast_syscall_32+0x6b/0xd0 [ 584.094329][T12564] get_compat_msghdr+0x108/0x2b0 [ 584.099411][T12560] do_SYSENTER_32+0x73/0x90 [ 584.104230][T12564] do_recvmmsg+0xdbb/0x22c0 [ 584.109145][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.113618][T12564] __sys_recvmmsg+0x5dd/0x610 [ 584.118085][T12560] [ 584.124397][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.129036][T12560] Uninit was stored to memory at: [ 584.131353][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.137387][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 584.142384][T12564] __do_fast_syscall_32+0x2af/0x480 [ 584.148509][T12560] __msan_chain_origin+0x50/0x90 [ 584.154200][T12564] do_fast_syscall_32+0x6b/0xd0 [ 584.159371][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 584.164281][T12564] do_SYSENTER_32+0x73/0x90 [ 584.169103][T12560] get_compat_msghdr+0x108/0x2b0 [ 584.174191][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.178662][T12560] do_recvmmsg+0xdbb/0x22c0 [ 584.183563][T12564] [ 584.189869][T12560] __sys_recvmmsg+0x5dd/0x610 [ 584.194335][T12564] Uninit was stored to memory at: [ 584.196664][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.201332][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 584.206332][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.212371][T12564] __msan_chain_origin+0x50/0x90 [ 584.218076][T12560] __do_fast_syscall_32+0x2af/0x480 [ 584.224200][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 584.229107][T12560] do_fast_syscall_32+0x6b/0xd0 [ 584.234275][T12564] get_compat_msghdr+0x108/0x2b0 [ 584.239358][T12560] do_SYSENTER_32+0x73/0x90 [ 584.244179][T12564] do_recvmmsg+0xdbb/0x22c0 [ 584.249093][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.253566][T12564] __sys_recvmmsg+0x5dd/0x610 [ 584.258029][T12560] [ 584.264338][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.269061][T12560] Uninit was stored to memory at: [ 584.271380][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.277416][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 584.282415][T12564] __do_fast_syscall_32+0x2af/0x480 [ 584.288539][T12560] __msan_chain_origin+0x50/0x90 [ 584.294231][T12564] do_fast_syscall_32+0x6b/0xd0 [ 584.299407][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 584.304317][T12564] do_SYSENTER_32+0x73/0x90 [ 584.309142][T12560] get_compat_msghdr+0x108/0x2b0 [ 584.314224][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.318696][T12560] do_recvmmsg+0xdbb/0x22c0 [ 584.323599][T12564] [ 584.330004][T12560] __sys_recvmmsg+0x5dd/0x610 [ 584.334471][T12564] Uninit was stored to memory at: [ 584.336788][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.341434][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 584.346433][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.352467][T12564] __msan_chain_origin+0x50/0x90 [ 584.358158][T12560] __do_fast_syscall_32+0x2af/0x480 [ 584.364297][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 584.369209][T12560] do_fast_syscall_32+0x6b/0xd0 [ 584.374377][T12564] get_compat_msghdr+0x108/0x2b0 [ 584.379461][T12560] do_SYSENTER_32+0x73/0x90 [ 584.384283][T12564] do_recvmmsg+0xdbb/0x22c0 [ 584.389196][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.393672][T12564] __sys_recvmmsg+0x5dd/0x610 [ 584.398136][T12560] [ 584.404447][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.409081][T12560] Uninit was stored to memory at: [ 584.411397][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.417435][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 584.422443][T12564] __do_fast_syscall_32+0x2af/0x480 [ 584.428569][T12560] __msan_chain_origin+0x50/0x90 [ 584.434263][T12564] do_fast_syscall_32+0x6b/0xd0 [ 584.439435][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 584.444343][T12564] do_SYSENTER_32+0x73/0x90 [ 584.449166][T12560] get_compat_msghdr+0x108/0x2b0 [ 584.454249][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.458734][T12560] do_recvmmsg+0xdbb/0x22c0 [ 584.463633][T12564] [ 584.469939][T12560] __sys_recvmmsg+0x5dd/0x610 [ 584.474407][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 584.476724][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.481366][T12564] do_recvmmsg+0xbf/0x22c0 [ 584.488006][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.488030][T12560] __do_fast_syscall_32+0x2af/0x480 [ 584.494068][T12564] do_recvmmsg+0xbf/0x22c0 [ 584.498459][T12560] do_fast_syscall_32+0x6b/0xd0 [ 584.518974][T12560] do_SYSENTER_32+0x73/0x90 [ 584.523467][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.529772][T12560] [ 584.532081][T12560] Uninit was stored to memory at: [ 584.537235][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 584.542945][T12560] __msan_chain_origin+0x50/0x90 [ 584.547871][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 584.552968][T12560] get_compat_msghdr+0x108/0x2b0 [ 584.557892][T12560] do_recvmmsg+0xdbb/0x22c0 [ 584.562382][T12560] __sys_recvmmsg+0x5dd/0x610 [ 584.567052][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.573113][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.579257][T12560] __do_fast_syscall_32+0x2af/0x480 [ 584.584441][T12560] do_fast_syscall_32+0x6b/0xd0 [ 584.589373][T12560] do_SYSENTER_32+0x73/0x90 [ 584.593871][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.600175][T12560] [ 584.602488][T12560] Uninit was stored to memory at: [ 584.607502][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 584.613208][T12560] __msan_chain_origin+0x50/0x90 [ 584.618132][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 584.623229][T12560] get_compat_msghdr+0x108/0x2b0 [ 584.628152][T12560] do_recvmmsg+0xdbb/0x22c0 [ 584.632638][T12560] __sys_recvmmsg+0x5dd/0x610 [ 584.637303][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.643357][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.649507][T12560] __do_fast_syscall_32+0x2af/0x480 [ 584.654696][T12560] do_fast_syscall_32+0x6b/0xd0 [ 584.659535][T12560] do_SYSENTER_32+0x73/0x90 [ 584.664029][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.670329][T12560] [ 584.672640][T12560] Uninit was stored to memory at: [ 584.677649][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 584.683358][T12560] __msan_chain_origin+0x50/0x90 [ 584.688282][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 584.693379][T12560] get_compat_msghdr+0x108/0x2b0 [ 584.698303][T12560] do_recvmmsg+0xdbb/0x22c0 [ 584.702791][T12560] __sys_recvmmsg+0x5dd/0x610 [ 584.707455][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.713509][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.719650][T12560] __do_fast_syscall_32+0x2af/0x480 [ 584.724839][T12560] do_fast_syscall_32+0x6b/0xd0 [ 584.729683][T12560] do_SYSENTER_32+0x73/0x90 [ 584.734173][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.740476][T12560] [ 584.742788][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 584.749446][T12560] do_recvmmsg+0xbf/0x22c0 [ 584.753846][T12560] do_recvmmsg+0xbf/0x22c0 [ 584.979827][T12564] not chained 1340000 origins [ 584.984536][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 584.993202][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.003250][T12564] Call Trace: [ 585.006546][T12564] dump_stack+0x21c/0x280 [ 585.010892][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 585.016616][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 585.022683][T12564] ? kmsan_get_metadata+0x116/0x180 [ 585.027883][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 585.033692][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 585.039760][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 585.045141][T12564] ? kmsan_get_metadata+0x116/0x180 [ 585.050347][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 585.055898][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 585.061984][T12564] ? _copy_from_user+0x201/0x310 [ 585.066926][T12564] ? kmsan_get_metadata+0x116/0x180 [ 585.072130][T12564] __msan_chain_origin+0x50/0x90 [ 585.077080][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 585.082208][T12564] get_compat_msghdr+0x108/0x2b0 [ 585.087162][T12564] do_recvmmsg+0xdbb/0x22c0 [ 585.091671][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 585.097489][T12564] ? kmsan_get_metadata+0x116/0x180 [ 585.102726][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 585.108625][T12564] ? kmsan_get_metadata+0x116/0x180 [ 585.113826][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 585.119464][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 585.124754][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 585.129528][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 585.134313][T12564] __sys_recvmmsg+0x5dd/0x610 [ 585.139006][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.145084][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.151243][T12564] __do_fast_syscall_32+0x2af/0x480 [ 585.156454][T12564] do_fast_syscall_32+0x6b/0xd0 [ 585.161320][T12564] do_SYSENTER_32+0x73/0x90 [ 585.165828][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.172154][T12564] RIP: 0023:0xf7fc1549 [ 585.176213][T12564] Code: Bad RIP value. [ 585.180272][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 585.188682][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 585.196649][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 585.204618][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.212584][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 585.220589][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.228567][T12564] Uninit was stored to memory at: [ 585.233595][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 585.239314][T12564] __msan_chain_origin+0x50/0x90 [ 585.244251][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 585.249360][T12564] get_compat_msghdr+0x108/0x2b0 [ 585.254299][T12564] do_recvmmsg+0xdbb/0x22c0 [ 585.258802][T12564] __sys_recvmmsg+0x5dd/0x610 [ 585.263480][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.269547][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.275699][T12564] __do_fast_syscall_32+0x2af/0x480 [ 585.280900][T12564] do_fast_syscall_32+0x6b/0xd0 [ 585.285750][T12564] do_SYSENTER_32+0x73/0x90 [ 585.290255][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.296570][T12564] [ 585.298891][T12564] Uninit was stored to memory at: [ 585.303918][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 585.309648][T12564] __msan_chain_origin+0x50/0x90 [ 585.314581][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 585.319690][T12564] get_compat_msghdr+0x108/0x2b0 [ 585.324624][T12564] do_recvmmsg+0xdbb/0x22c0 [ 585.329127][T12564] __sys_recvmmsg+0x5dd/0x610 [ 585.333803][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.339865][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.346145][T12564] __do_fast_syscall_32+0x2af/0x480 [ 585.351352][T12564] do_fast_syscall_32+0x6b/0xd0 [ 585.356206][T12564] do_SYSENTER_32+0x73/0x90 [ 585.360713][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.367027][T12564] [ 585.369347][T12564] Uninit was stored to memory at: [ 585.374377][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 585.380103][T12564] __msan_chain_origin+0x50/0x90 [ 585.385046][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 585.390159][T12564] get_compat_msghdr+0x108/0x2b0 [ 585.395095][T12564] do_recvmmsg+0xdbb/0x22c0 [ 585.399598][T12564] __sys_recvmmsg+0x5dd/0x610 [ 585.404280][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.410355][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.416516][T12564] __do_fast_syscall_32+0x2af/0x480 [ 585.421722][T12564] do_fast_syscall_32+0x6b/0xd0 [ 585.426575][T12564] do_SYSENTER_32+0x73/0x90 [ 585.431079][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.437506][T12564] [ 585.439829][T12564] Uninit was stored to memory at: [ 585.444856][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 585.450682][T12564] __msan_chain_origin+0x50/0x90 [ 585.455619][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 585.460733][T12564] get_compat_msghdr+0x108/0x2b0 [ 585.465667][T12564] do_recvmmsg+0xdbb/0x22c0 [ 585.470183][T12564] __sys_recvmmsg+0x5dd/0x610 [ 585.474864][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.480943][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.487093][T12564] __do_fast_syscall_32+0x2af/0x480 [ 585.492290][T12564] do_fast_syscall_32+0x6b/0xd0 [ 585.497135][T12564] do_SYSENTER_32+0x73/0x90 [ 585.501640][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.507951][T12564] [ 585.510270][T12564] Uninit was stored to memory at: [ 585.515292][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 585.521008][T12564] __msan_chain_origin+0x50/0x90 [ 585.525942][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 585.531048][T12564] get_compat_msghdr+0x108/0x2b0 [ 585.535980][T12564] do_recvmmsg+0xdbb/0x22c0 [ 585.540478][T12564] __sys_recvmmsg+0x5dd/0x610 [ 585.545152][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.551216][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.557367][T12564] __do_fast_syscall_32+0x2af/0x480 [ 585.562562][T12564] do_fast_syscall_32+0x6b/0xd0 [ 585.567407][T12564] do_SYSENTER_32+0x73/0x90 [ 585.571909][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.578216][T12564] [ 585.580531][T12564] Uninit was stored to memory at: [ 585.585565][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 585.591384][T12564] __msan_chain_origin+0x50/0x90 [ 585.596320][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 585.601426][T12564] get_compat_msghdr+0x108/0x2b0 [ 585.606355][T12564] do_recvmmsg+0xdbb/0x22c0 [ 585.610856][T12564] __sys_recvmmsg+0x5dd/0x610 [ 585.615529][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.621590][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.625208][T12560] not chained 1350000 origins [ 585.627745][T12564] __do_fast_syscall_32+0x2af/0x480 [ 585.632407][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 585.637582][T12564] do_fast_syscall_32+0x6b/0xd0 [ 585.646231][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.651065][T12564] do_SYSENTER_32+0x73/0x90 [ 585.661081][T12560] Call Trace: [ 585.665572][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.668845][T12560] dump_stack+0x21c/0x280 [ 585.675145][T12564] [ 585.679463][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 585.681770][T12564] Uninit was stored to memory at: [ 585.687472][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 585.692467][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 585.698506][T12560] ? kmsan_get_metadata+0x116/0x180 [ 585.704212][T12564] __msan_chain_origin+0x50/0x90 [ 585.709388][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 585.714292][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 585.720071][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 585.725156][T12564] get_compat_msghdr+0x108/0x2b0 [ 585.731209][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 585.736116][T12564] do_recvmmsg+0xdbb/0x22c0 [ 585.741475][T12560] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 585.745949][T12564] __sys_recvmmsg+0x5dd/0x610 [ 585.752077][T12560] ? kmsan_get_metadata+0x116/0x180 [ 585.756738][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.761908][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 585.767947][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.773465][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 585.779588][T12564] __do_fast_syscall_32+0x2af/0x480 [ 585.785630][T12560] ? _copy_from_user+0x201/0x310 [ 585.790812][T12564] do_fast_syscall_32+0x6b/0xd0 [ 585.795721][T12560] ? kmsan_get_metadata+0x116/0x180 [ 585.800541][T12564] do_SYSENTER_32+0x73/0x90 [ 585.805712][T12560] __msan_chain_origin+0x50/0x90 [ 585.810191][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.815100][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 585.821389][T12564] [ 585.826490][T12560] get_compat_msghdr+0x108/0x2b0 [ 585.828781][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 585.833701][T12560] do_recvmmsg+0xdbb/0x22c0 [ 585.840346][T12564] do_recvmmsg+0xbf/0x22c0 [ 585.844830][T12560] ? kmsan_get_metadata+0x116/0x180 [ 585.849225][T12564] do_recvmmsg+0xbf/0x22c0 [ 585.854409][T12560] ? kmsan_get_metadata+0x116/0x180 [ 585.864032][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 585.869963][T12560] ? kmsan_get_metadata+0x116/0x180 [ 585.875163][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 585.880790][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 585.886067][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 585.890820][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 585.895584][T12560] __sys_recvmmsg+0x5dd/0x610 [ 585.900434][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.906498][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.912642][T12560] __do_fast_syscall_32+0x2af/0x480 [ 585.917843][T12560] do_fast_syscall_32+0x6b/0xd0 [ 585.922698][T12560] do_SYSENTER_32+0x73/0x90 [ 585.927198][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.933511][T12560] RIP: 0023:0xf7fc1549 [ 585.937559][T12560] Code: Bad RIP value. [ 585.944735][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 585.953134][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 585.961091][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 585.969048][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.977004][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 585.984962][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.992940][T12560] Uninit was stored to memory at: [ 585.997955][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 586.003676][T12560] __msan_chain_origin+0x50/0x90 [ 586.008600][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 586.013697][T12560] get_compat_msghdr+0x108/0x2b0 [ 586.018620][T12560] do_recvmmsg+0xdbb/0x22c0 [ 586.023116][T12560] __sys_recvmmsg+0x5dd/0x610 [ 586.027783][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.033843][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.039986][T12560] __do_fast_syscall_32+0x2af/0x480 [ 586.045171][T12560] do_fast_syscall_32+0x6b/0xd0 [ 586.050008][T12560] do_SYSENTER_32+0x73/0x90 [ 586.054503][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.060806][T12560] [ 586.063119][T12560] Uninit was stored to memory at: [ 586.068139][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 586.073845][T12560] __msan_chain_origin+0x50/0x90 [ 586.078771][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 586.083870][T12560] get_compat_msghdr+0x108/0x2b0 [ 586.088794][T12560] do_recvmmsg+0xdbb/0x22c0 [ 586.093283][T12560] __sys_recvmmsg+0x5dd/0x610 [ 586.097945][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.103998][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.110139][T12560] __do_fast_syscall_32+0x2af/0x480 [ 586.115324][T12560] do_fast_syscall_32+0x6b/0xd0 [ 586.120163][T12560] do_SYSENTER_32+0x73/0x90 [ 586.124690][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.131079][T12560] [ 586.133390][T12560] Uninit was stored to memory at: [ 586.138404][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 586.144111][T12560] __msan_chain_origin+0x50/0x90 [ 586.149034][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 586.154133][T12560] get_compat_msghdr+0x108/0x2b0 [ 586.159065][T12560] do_recvmmsg+0xdbb/0x22c0 [ 586.163555][T12560] __sys_recvmmsg+0x5dd/0x610 [ 586.168220][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.174274][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.180413][T12560] __do_fast_syscall_32+0x2af/0x480 [ 586.185599][T12560] do_fast_syscall_32+0x6b/0xd0 [ 586.190436][T12560] do_SYSENTER_32+0x73/0x90 [ 586.194931][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.201230][T12560] [ 586.203540][T12560] Uninit was stored to memory at: [ 586.208552][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 586.214259][T12560] __msan_chain_origin+0x50/0x90 [ 586.219186][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 586.224281][T12560] get_compat_msghdr+0x108/0x2b0 [ 586.229204][T12560] do_recvmmsg+0xdbb/0x22c0 [ 586.233693][T12560] __sys_recvmmsg+0x5dd/0x610 [ 586.238362][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.244414][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.250554][T12560] __do_fast_syscall_32+0x2af/0x480 [ 586.255741][T12560] do_fast_syscall_32+0x6b/0xd0 [ 586.260576][T12560] do_SYSENTER_32+0x73/0x90 [ 586.265064][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.271368][T12560] [ 586.273680][T12560] Uninit was stored to memory at: [ 586.278691][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 586.284395][T12560] __msan_chain_origin+0x50/0x90 [ 586.289321][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 586.294423][T12560] get_compat_msghdr+0x108/0x2b0 [ 586.299349][T12560] do_recvmmsg+0xdbb/0x22c0 [ 586.303838][T12560] __sys_recvmmsg+0x5dd/0x610 [ 586.308500][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.314554][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.320694][T12560] __do_fast_syscall_32+0x2af/0x480 [ 586.325878][T12560] do_fast_syscall_32+0x6b/0xd0 [ 586.330715][T12560] do_SYSENTER_32+0x73/0x90 [ 586.335206][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.341506][T12560] [ 586.343816][T12560] Uninit was stored to memory at: [ 586.348829][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 586.354532][T12560] __msan_chain_origin+0x50/0x90 [ 586.359456][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 586.364555][T12560] get_compat_msghdr+0x108/0x2b0 [ 586.369483][T12560] do_recvmmsg+0xdbb/0x22c0 [ 586.373970][T12560] __sys_recvmmsg+0x5dd/0x610 [ 586.378636][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.384691][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.390833][T12560] __do_fast_syscall_32+0x2af/0x480 [ 586.396020][T12560] do_fast_syscall_32+0x6b/0xd0 [ 586.400871][T12560] do_SYSENTER_32+0x73/0x90 [ 586.405360][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.411663][T12560] [ 586.413976][T12560] Uninit was stored to memory at: [ 586.419000][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 586.424709][T12560] __msan_chain_origin+0x50/0x90 [ 586.429636][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 586.434731][T12560] get_compat_msghdr+0x108/0x2b0 [ 586.439656][T12560] do_recvmmsg+0xdbb/0x22c0 [ 586.444148][T12560] __sys_recvmmsg+0x5dd/0x610 [ 586.448813][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.454957][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.461103][T12560] __do_fast_syscall_32+0x2af/0x480 [ 586.466294][T12560] do_fast_syscall_32+0x6b/0xd0 [ 586.471154][T12560] do_SYSENTER_32+0x73/0x90 [ 586.475647][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.481950][T12560] [ 586.484263][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 586.490926][T12560] do_recvmmsg+0xbf/0x22c0 [ 586.495331][T12560] do_recvmmsg+0xbf/0x22c0 [ 586.719998][T12564] not chained 1360000 origins [ 586.724701][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 586.733475][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.743610][T12564] Call Trace: [ 586.746914][T12564] dump_stack+0x21c/0x280 [ 586.751255][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 586.756981][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 586.763050][T12564] ? kmsan_get_metadata+0x116/0x180 [ 586.768342][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 586.774182][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 586.780250][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 586.785629][T12564] ? kmsan_get_metadata+0x116/0x180 [ 586.790894][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 586.796444][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 586.802523][T12564] ? _copy_from_user+0x201/0x310 [ 586.807466][T12564] ? kmsan_get_metadata+0x116/0x180 [ 586.812666][T12564] __msan_chain_origin+0x50/0x90 [ 586.817611][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 586.822735][T12564] get_compat_msghdr+0x108/0x2b0 [ 586.827681][T12564] do_recvmmsg+0xdbb/0x22c0 [ 586.832218][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 586.838033][T12564] ? kmsan_get_metadata+0x116/0x180 [ 586.843255][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 586.849338][T12564] ? kmsan_get_metadata+0x116/0x180 [ 586.854539][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 586.860175][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 586.865460][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 586.870225][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 586.874993][T12564] __sys_recvmmsg+0x5dd/0x610 [ 586.879693][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.885770][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.891927][T12564] __do_fast_syscall_32+0x2af/0x480 [ 586.897136][T12564] do_fast_syscall_32+0x6b/0xd0 [ 586.901991][T12564] do_SYSENTER_32+0x73/0x90 [ 586.906499][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.912824][T12564] RIP: 0023:0xf7fc1549 [ 586.916889][T12564] Code: Bad RIP value. [ 586.920955][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 586.929366][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 586.937335][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 586.945301][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.953271][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 586.961240][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.969216][T12564] Uninit was stored to memory at: [ 586.974260][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 586.979978][T12564] __msan_chain_origin+0x50/0x90 [ 586.984916][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 586.990027][T12564] get_compat_msghdr+0x108/0x2b0 [ 586.994959][T12564] do_recvmmsg+0xdbb/0x22c0 [ 586.999460][T12564] __sys_recvmmsg+0x5dd/0x610 [ 587.004143][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.010212][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.016363][T12564] __do_fast_syscall_32+0x2af/0x480 [ 587.021650][T12564] do_fast_syscall_32+0x6b/0xd0 [ 587.026503][T12564] do_SYSENTER_32+0x73/0x90 [ 587.031006][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.037404][T12564] [ 587.039728][T12564] Uninit was stored to memory at: [ 587.044753][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 587.050469][T12564] __msan_chain_origin+0x50/0x90 [ 587.056445][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 587.061550][T12564] get_compat_msghdr+0x108/0x2b0 [ 587.066482][T12564] do_recvmmsg+0xdbb/0x22c0 [ 587.070982][T12564] __sys_recvmmsg+0x5dd/0x610 [ 587.075654][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.081716][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.087871][T12564] __do_fast_syscall_32+0x2af/0x480 [ 587.093064][T12564] do_fast_syscall_32+0x6b/0xd0 [ 587.097916][T12564] do_SYSENTER_32+0x73/0x90 [ 587.102414][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.108722][T12564] [ 587.111039][T12564] Uninit was stored to memory at: [ 587.116057][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 587.121771][T12564] __msan_chain_origin+0x50/0x90 [ 587.126704][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 587.131808][T12564] get_compat_msghdr+0x108/0x2b0 [ 587.136741][T12564] do_recvmmsg+0xdbb/0x22c0 [ 587.141237][T12564] __sys_recvmmsg+0x5dd/0x610 [ 587.145909][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.151969][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.158125][T12564] __do_fast_syscall_32+0x2af/0x480 [ 587.163320][T12564] do_fast_syscall_32+0x6b/0xd0 [ 587.168165][T12564] do_SYSENTER_32+0x73/0x90 [ 587.172667][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.179063][T12564] [ 587.181380][T12564] Uninit was stored to memory at: [ 587.185671][T12560] not chained 1370000 origins [ 587.186402][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 587.191062][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 587.196929][T12564] __msan_chain_origin+0x50/0x90 [ 587.205566][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.210484][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 587.220503][T12560] Call Trace: [ 587.225601][T12564] get_compat_msghdr+0x108/0x2b0 [ 587.228863][T12560] dump_stack+0x21c/0x280 [ 587.233771][T12564] do_recvmmsg+0xdbb/0x22c0 [ 587.238077][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 587.242551][T12564] __sys_recvmmsg+0x5dd/0x610 [ 587.248244][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 587.252893][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.258930][T12560] ? kmsan_get_metadata+0x116/0x180 [ 587.264966][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.270139][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 587.276261][T12564] __do_fast_syscall_32+0x2af/0x480 [ 587.282138][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 587.287307][T12564] do_fast_syscall_32+0x6b/0xd0 [ 587.293352][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 587.298170][T12564] do_SYSENTER_32+0x73/0x90 [ 587.303516][T12560] ? kmsan_get_metadata+0x116/0x180 [ 587.307992][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.313161][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 587.319446][T12564] [ 587.324972][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 587.327266][T12564] Uninit was stored to memory at: [ 587.333315][T12560] ? _copy_from_user+0x201/0x310 [ 587.338320][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 587.343232][T12560] ? kmsan_get_metadata+0x116/0x180 [ 587.348922][T12564] __msan_chain_origin+0x50/0x90 [ 587.354096][T12560] __msan_chain_origin+0x50/0x90 [ 587.359023][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 587.363944][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 587.369029][T12564] get_compat_msghdr+0x108/0x2b0 [ 587.374124][T12560] get_compat_msghdr+0x108/0x2b0 [ 587.379023][T12564] do_recvmmsg+0xdbb/0x22c0 [ 587.383936][T12560] do_recvmmsg+0xdbb/0x22c0 [ 587.388422][T12564] __sys_recvmmsg+0x5dd/0x610 [ 587.392928][T12560] ? kmsan_get_metadata+0x116/0x180 [ 587.397588][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.402868][T12560] ? kmsan_get_metadata+0x116/0x180 [ 587.408911][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.414085][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 587.420226][T12564] __do_fast_syscall_32+0x2af/0x480 [ 587.426094][T12560] ? kmsan_get_metadata+0x116/0x180 [ 587.431264][T12564] do_fast_syscall_32+0x6b/0xd0 [ 587.436436][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 587.441262][T12564] do_SYSENTER_32+0x73/0x90 [ 587.446868][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 587.451352][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.456613][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 587.462904][T12564] [ 587.467670][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 587.469968][T12564] Uninit was stored to memory at: [ 587.474890][T12560] __sys_recvmmsg+0x5dd/0x610 [ 587.479894][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 587.484550][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.490235][T12564] __msan_chain_origin+0x50/0x90 [ 587.496278][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.501184][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 587.507314][T12560] __do_fast_syscall_32+0x2af/0x480 [ 587.512393][T12564] get_compat_msghdr+0x108/0x2b0 [ 587.518349][T12560] do_fast_syscall_32+0x6b/0xd0 [ 587.523256][T12564] do_recvmmsg+0xdbb/0x22c0 [ 587.528082][T12560] do_SYSENTER_32+0x73/0x90 [ 587.532698][T12564] __sys_recvmmsg+0x5dd/0x610 [ 587.537177][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.541833][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.548135][T12560] RIP: 0023:0xf7fc1549 [ 587.554182][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.558212][T12560] Code: Bad RIP value. [ 587.564348][T12564] __do_fast_syscall_32+0x2af/0x480 [ 587.568383][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 587.573566][T12564] do_fast_syscall_32+0x6b/0xd0 [ 587.581946][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 587.586781][T12564] do_SYSENTER_32+0x73/0x90 [ 587.594734][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 587.599226][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.607251][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.613542][T12564] [ 587.621493][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 587.623793][T12564] Uninit was stored to memory at: [ 587.631747][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.636766][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 587.644708][T12560] Uninit was stored to memory at: [ 587.650409][T12564] __msan_chain_origin+0x50/0x90 [ 587.655409][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 587.660318][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 587.666007][T12560] __msan_chain_origin+0x50/0x90 [ 587.671089][T12564] get_compat_msghdr+0x108/0x2b0 [ 587.676001][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 587.680923][T12564] do_recvmmsg+0xdbb/0x22c0 [ 587.686007][T12560] get_compat_msghdr+0x108/0x2b0 [ 587.690480][T12564] __sys_recvmmsg+0x5dd/0x610 [ 587.695386][T12560] do_recvmmsg+0xdbb/0x22c0 [ 587.700050][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.704522][T12560] __sys_recvmmsg+0x5dd/0x610 [ 587.710570][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.715222][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.721349][T12564] __do_fast_syscall_32+0x2af/0x480 [ 587.727388][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.732559][T12564] do_fast_syscall_32+0x6b/0xd0 [ 587.738685][T12560] __do_fast_syscall_32+0x2af/0x480 [ 587.743508][T12564] do_SYSENTER_32+0x73/0x90 [ 587.748676][T12560] do_fast_syscall_32+0x6b/0xd0 [ 587.753153][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.757974][T12560] do_SYSENTER_32+0x73/0x90 [ 587.764260][T12564] [ 587.768748][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.771042][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 587.777337][T12560] [ 587.783989][T12564] do_recvmmsg+0xbf/0x22c0 [ 587.786283][T12560] Uninit was stored to memory at: [ 587.790687][T12564] do_recvmmsg+0xbf/0x22c0 [ 587.795685][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 587.805851][T12560] __msan_chain_origin+0x50/0x90 [ 587.810818][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 587.815926][T12560] get_compat_msghdr+0x108/0x2b0 [ 587.820852][T12560] do_recvmmsg+0xdbb/0x22c0 [ 587.825344][T12560] __sys_recvmmsg+0x5dd/0x610 [ 587.830008][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.836060][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.842198][T12560] __do_fast_syscall_32+0x2af/0x480 [ 587.847381][T12560] do_fast_syscall_32+0x6b/0xd0 [ 587.852219][T12560] do_SYSENTER_32+0x73/0x90 [ 587.856707][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.863009][T12560] [ 587.865317][T12560] Uninit was stored to memory at: [ 587.870330][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 587.876032][T12560] __msan_chain_origin+0x50/0x90 [ 587.880956][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 587.886055][T12560] get_compat_msghdr+0x108/0x2b0 [ 587.890975][T12560] do_recvmmsg+0xdbb/0x22c0 [ 587.895464][T12560] __sys_recvmmsg+0x5dd/0x610 [ 587.900123][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.906172][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.912310][T12560] __do_fast_syscall_32+0x2af/0x480 [ 587.917493][T12560] do_fast_syscall_32+0x6b/0xd0 [ 587.922331][T12560] do_SYSENTER_32+0x73/0x90 [ 587.926820][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.933122][T12560] [ 587.935432][T12560] Uninit was stored to memory at: [ 587.940442][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 587.946145][T12560] __msan_chain_origin+0x50/0x90 [ 587.951068][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 587.956256][T12560] get_compat_msghdr+0x108/0x2b0 [ 587.961180][T12560] do_recvmmsg+0xdbb/0x22c0 [ 587.965667][T12560] __sys_recvmmsg+0x5dd/0x610 [ 587.970348][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 587.976405][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 587.982545][T12560] __do_fast_syscall_32+0x2af/0x480 [ 587.987731][T12560] do_fast_syscall_32+0x6b/0xd0 [ 587.992567][T12560] do_SYSENTER_32+0x73/0x90 [ 587.997056][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.003358][T12560] [ 588.005677][T12560] Uninit was stored to memory at: [ 588.010687][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 588.016390][T12560] __msan_chain_origin+0x50/0x90 [ 588.021317][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 588.026419][T12560] get_compat_msghdr+0x108/0x2b0 [ 588.031340][T12560] do_recvmmsg+0xdbb/0x22c0 [ 588.035828][T12560] __sys_recvmmsg+0x5dd/0x610 [ 588.040492][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 588.046547][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 588.052685][T12560] __do_fast_syscall_32+0x2af/0x480 [ 588.057870][T12560] do_fast_syscall_32+0x6b/0xd0 [ 588.062708][T12560] do_SYSENTER_32+0x73/0x90 [ 588.067200][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.073501][T12560] [ 588.075810][T12560] Uninit was stored to memory at: [ 588.080817][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 588.086621][T12560] __msan_chain_origin+0x50/0x90 [ 588.091546][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 588.096644][T12560] get_compat_msghdr+0x108/0x2b0 [ 588.101568][T12560] do_recvmmsg+0xdbb/0x22c0 [ 588.106055][T12560] __sys_recvmmsg+0x5dd/0x610 [ 588.110717][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 588.116770][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 588.122917][T12560] __do_fast_syscall_32+0x2af/0x480 [ 588.128100][T12560] do_fast_syscall_32+0x6b/0xd0 [ 588.132949][T12560] do_SYSENTER_32+0x73/0x90 [ 588.137440][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.143740][T12560] [ 588.146049][T12560] Uninit was stored to memory at: [ 588.151060][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 588.156771][T12560] __msan_chain_origin+0x50/0x90 [ 588.161694][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 588.166790][T12560] get_compat_msghdr+0x108/0x2b0 [ 588.171723][T12560] do_recvmmsg+0xdbb/0x22c0 [ 588.176212][T12560] __sys_recvmmsg+0x5dd/0x610 [ 588.180875][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 588.186928][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 588.193087][T12560] __do_fast_syscall_32+0x2af/0x480 [ 588.198274][T12560] do_fast_syscall_32+0x6b/0xd0 [ 588.203111][T12560] do_SYSENTER_32+0x73/0x90 [ 588.208647][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.214977][T12560] [ 588.217289][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 588.223946][T12560] do_recvmmsg+0xbf/0x22c0 [ 588.228346][T12560] do_recvmmsg+0xbf/0x22c0 [ 588.447864][T12564] not chained 1380000 origins [ 588.452567][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 588.461227][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.471292][T12564] Call Trace: [ 588.474592][T12564] dump_stack+0x21c/0x280 [ 588.478933][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 588.484655][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 588.490728][T12564] ? kmsan_get_metadata+0x116/0x180 [ 588.495992][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 588.501800][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 588.507866][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 588.513275][T12564] ? kmsan_get_metadata+0x116/0x180 [ 588.518506][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 588.524063][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 588.530128][T12564] ? _copy_from_user+0x201/0x310 [ 588.535176][T12564] ? kmsan_get_metadata+0x116/0x180 [ 588.540488][T12564] __msan_chain_origin+0x50/0x90 [ 588.545432][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 588.550559][T12564] get_compat_msghdr+0x108/0x2b0 [ 588.555505][T12564] do_recvmmsg+0xdbb/0x22c0 [ 588.560015][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 588.565832][T12564] ? kmsan_get_metadata+0x116/0x180 [ 588.571035][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 588.576935][T12564] ? kmsan_get_metadata+0x116/0x180 [ 588.582138][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 588.587794][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 588.593088][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 588.597850][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 588.602610][T12564] __sys_recvmmsg+0x5dd/0x610 [ 588.607297][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 588.613372][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 588.619528][T12564] __do_fast_syscall_32+0x2af/0x480 [ 588.624735][T12564] do_fast_syscall_32+0x6b/0xd0 [ 588.629589][T12564] do_SYSENTER_32+0x73/0x90 [ 588.634254][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.640689][T12564] RIP: 0023:0xf7fc1549 [ 588.644739][T12564] Code: Bad RIP value. [ 588.648798][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 588.657205][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 588.665173][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 588.673145][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.681115][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 588.689084][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.697060][T12564] Uninit was stored to memory at: [ 588.702089][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 588.707808][T12564] __msan_chain_origin+0x50/0x90 [ 588.712741][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 588.717847][T12564] get_compat_msghdr+0x108/0x2b0 [ 588.722781][T12564] do_recvmmsg+0xdbb/0x22c0 [ 588.727279][T12564] __sys_recvmmsg+0x5dd/0x610 [ 588.731954][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 588.738018][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 588.744277][T12564] __do_fast_syscall_32+0x2af/0x480 [ 588.749476][T12564] do_fast_syscall_32+0x6b/0xd0 [ 588.754327][T12564] do_SYSENTER_32+0x73/0x90 [ 588.758828][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.765246][T12564] [ 588.767564][T12564] Uninit was stored to memory at: [ 588.772587][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 588.778311][T12564] __msan_chain_origin+0x50/0x90 [ 588.783247][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 588.788376][T12564] get_compat_msghdr+0x108/0x2b0 [ 588.797303][T12564] do_recvmmsg+0xdbb/0x22c0 [ 588.801800][T12564] __sys_recvmmsg+0x5dd/0x610 [ 588.806479][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 588.812542][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 588.818693][T12564] __do_fast_syscall_32+0x2af/0x480 [ 588.823893][T12564] do_fast_syscall_32+0x6b/0xd0 [ 588.828742][T12564] do_SYSENTER_32+0x73/0x90 [ 588.833330][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.839640][T12564] [ 588.841956][T12564] Uninit was stored to memory at: [ 588.846976][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 588.852689][T12564] __msan_chain_origin+0x50/0x90 [ 588.857621][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 588.862738][T12564] get_compat_msghdr+0x108/0x2b0 [ 588.867670][T12564] do_recvmmsg+0xdbb/0x22c0 [ 588.872163][T12564] __sys_recvmmsg+0x5dd/0x610 [ 588.876832][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 588.882895][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 588.889046][T12564] __do_fast_syscall_32+0x2af/0x480 [ 588.894242][T12564] do_fast_syscall_32+0x6b/0xd0 [ 588.899084][T12564] do_SYSENTER_32+0x73/0x90 [ 588.903584][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.909892][T12564] [ 588.912207][T12564] Uninit was stored to memory at: [ 588.917224][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 588.922935][T12564] __msan_chain_origin+0x50/0x90 [ 588.927866][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 588.932972][T12564] get_compat_msghdr+0x108/0x2b0 [ 588.937902][T12564] do_recvmmsg+0xdbb/0x22c0 [ 588.942397][T12564] __sys_recvmmsg+0x5dd/0x610 [ 588.947068][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 588.953135][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 588.959280][T12564] __do_fast_syscall_32+0x2af/0x480 [ 588.964473][T12564] do_fast_syscall_32+0x6b/0xd0 [ 588.969316][T12564] do_SYSENTER_32+0x73/0x90 [ 588.973836][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.980143][T12564] [ 588.982470][T12564] Uninit was stored to memory at: [ 588.987496][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 588.989054][T12560] not chained 1390000 origins [ 588.993209][T12564] __msan_chain_origin+0x50/0x90 [ 588.997875][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 589.002798][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 589.011430][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.016517][T12564] get_compat_msghdr+0x108/0x2b0 [ 589.026540][T12560] Call Trace: [ 589.031455][T12564] do_recvmmsg+0xdbb/0x22c0 [ 589.034718][T12560] dump_stack+0x21c/0x280 [ 589.039191][T12564] __sys_recvmmsg+0x5dd/0x610 [ 589.043498][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 589.048146][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.053839][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 589.059898][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.065937][T12560] ? kmsan_get_metadata+0x116/0x180 [ 589.072062][T12564] __do_fast_syscall_32+0x2af/0x480 [ 589.077232][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 589.082399][T12564] do_fast_syscall_32+0x6b/0xd0 [ 589.088174][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 589.093080][T12564] do_SYSENTER_32+0x73/0x90 [ 589.099140][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 589.103628][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.108975][T12560] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 589.115272][T12564] [ 589.121319][T12560] ? idle_cpu+0x9a/0x1d0 [ 589.123616][T12564] Uninit was stored to memory at: [ 589.127839][T12560] ? kmsan_get_metadata+0x116/0x180 [ 589.132833][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 589.138009][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 589.143700][T12564] __msan_chain_origin+0x50/0x90 [ 589.149222][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 589.154130][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 589.160170][T12560] ? _copy_from_user+0x201/0x310 [ 589.165249][T12564] get_compat_msghdr+0x108/0x2b0 [ 589.170164][T12560] ? kmsan_get_metadata+0x116/0x180 [ 589.175068][T12564] do_recvmmsg+0xdbb/0x22c0 [ 589.180238][T12560] __msan_chain_origin+0x50/0x90 [ 589.184709][T12564] __sys_recvmmsg+0x5dd/0x610 [ 589.189623][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 589.194271][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.199475][T12560] get_compat_msghdr+0x108/0x2b0 [ 589.205509][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.210440][T12560] do_recvmmsg+0xdbb/0x22c0 [ 589.216568][T12564] __do_fast_syscall_32+0x2af/0x480 [ 589.221047][T12560] ? kmsan_get_metadata+0x116/0x180 [ 589.226212][T12564] do_fast_syscall_32+0x6b/0xd0 [ 589.231394][T12560] ? kmsan_get_metadata+0x116/0x180 [ 589.236212][T12564] do_SYSENTER_32+0x73/0x90 [ 589.241384][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 589.245973][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.251835][T12560] ? kmsan_get_metadata+0x116/0x180 [ 589.258118][T12564] [ 589.263300][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 589.265593][T12564] Uninit was stored to memory at: [ 589.271223][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 589.276219][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 589.281474][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 589.287162][T12564] __msan_chain_origin+0x50/0x90 [ 589.291895][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 589.296806][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 589.301539][T12560] __sys_recvmmsg+0x5dd/0x610 [ 589.306623][T12564] get_compat_msghdr+0x108/0x2b0 [ 589.311285][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.316186][T12564] do_recvmmsg+0xdbb/0x22c0 [ 589.322363][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.326837][T12564] __sys_recvmmsg+0x5dd/0x610 [ 589.333053][T12560] __do_fast_syscall_32+0x2af/0x480 [ 589.337703][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.342881][T12560] do_fast_syscall_32+0x6b/0xd0 [ 589.348920][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.353743][T12560] do_SYSENTER_32+0x73/0x90 [ 589.359866][T12564] __do_fast_syscall_32+0x2af/0x480 [ 589.364346][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.369512][T12564] do_fast_syscall_32+0x6b/0xd0 [ 589.375805][T12560] RIP: 0023:0xf7fc1549 [ 589.380625][T12564] do_SYSENTER_32+0x73/0x90 [ 589.384658][T12560] Code: Bad RIP value. [ 589.389403][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.393439][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 589.399729][T12564] [ 589.408114][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 589.410414][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 589.418368][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 589.425042][T12564] do_recvmmsg+0xbf/0x22c0 [ 589.432993][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.437394][T12564] do_recvmmsg+0xbf/0x22c0 [ 589.445337][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 589.457693][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.465666][T12560] Uninit was stored to memory at: [ 589.470694][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 589.476398][T12560] __msan_chain_origin+0x50/0x90 [ 589.481320][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 589.486416][T12560] get_compat_msghdr+0x108/0x2b0 [ 589.491339][T12560] do_recvmmsg+0xdbb/0x22c0 [ 589.495828][T12560] __sys_recvmmsg+0x5dd/0x610 [ 589.500492][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.506544][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.512683][T12560] __do_fast_syscall_32+0x2af/0x480 [ 589.517870][T12560] do_fast_syscall_32+0x6b/0xd0 [ 589.522712][T12560] do_SYSENTER_32+0x73/0x90 [ 589.527209][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.533510][T12560] [ 589.535818][T12560] Uninit was stored to memory at: [ 589.540830][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 589.546550][T12560] __msan_chain_origin+0x50/0x90 [ 589.551480][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 589.556585][T12560] get_compat_msghdr+0x108/0x2b0 [ 589.561514][T12560] do_recvmmsg+0xdbb/0x22c0 [ 589.566007][T12560] __sys_recvmmsg+0x5dd/0x610 [ 589.570677][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.576735][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.583158][T12560] __do_fast_syscall_32+0x2af/0x480 [ 589.588357][T12560] do_fast_syscall_32+0x6b/0xd0 [ 589.593196][T12560] do_SYSENTER_32+0x73/0x90 [ 589.597690][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.603997][T12560] [ 589.606311][T12560] Uninit was stored to memory at: [ 589.611327][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 589.617029][T12560] __msan_chain_origin+0x50/0x90 [ 589.621954][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 589.627054][T12560] get_compat_msghdr+0x108/0x2b0 [ 589.631976][T12560] do_recvmmsg+0xdbb/0x22c0 [ 589.636463][T12560] __sys_recvmmsg+0x5dd/0x610 [ 589.641131][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.647293][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.653458][T12560] __do_fast_syscall_32+0x2af/0x480 [ 589.658642][T12560] do_fast_syscall_32+0x6b/0xd0 [ 589.663650][T12560] do_SYSENTER_32+0x73/0x90 [ 589.668142][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.674442][T12560] [ 589.676750][T12560] Uninit was stored to memory at: [ 589.681760][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 589.687465][T12560] __msan_chain_origin+0x50/0x90 [ 589.692386][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 589.697484][T12560] get_compat_msghdr+0x108/0x2b0 [ 589.702420][T12560] do_recvmmsg+0xdbb/0x22c0 [ 589.706916][T12560] __sys_recvmmsg+0x5dd/0x610 [ 589.711581][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.717635][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.723774][T12560] __do_fast_syscall_32+0x2af/0x480 [ 589.728957][T12560] do_fast_syscall_32+0x6b/0xd0 [ 589.733794][T12560] do_SYSENTER_32+0x73/0x90 [ 589.738282][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.744580][T12560] [ 589.746887][T12560] Uninit was stored to memory at: [ 589.751899][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 589.757602][T12560] __msan_chain_origin+0x50/0x90 [ 589.762527][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 589.767623][T12560] get_compat_msghdr+0x108/0x2b0 [ 589.772565][T12560] do_recvmmsg+0xdbb/0x22c0 [ 589.777057][T12560] __sys_recvmmsg+0x5dd/0x610 [ 589.781734][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.787786][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.793928][T12560] __do_fast_syscall_32+0x2af/0x480 [ 589.799110][T12560] do_fast_syscall_32+0x6b/0xd0 [ 589.803952][T12560] do_SYSENTER_32+0x73/0x90 [ 589.808442][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.814742][T12560] [ 589.817056][T12560] Uninit was stored to memory at: [ 589.822068][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 589.827773][T12560] __msan_chain_origin+0x50/0x90 [ 589.832696][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 589.837793][T12560] get_compat_msghdr+0x108/0x2b0 [ 589.842713][T12560] do_recvmmsg+0xdbb/0x22c0 [ 589.847197][T12560] __sys_recvmmsg+0x5dd/0x610 [ 589.851864][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.857917][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.864056][T12560] __do_fast_syscall_32+0x2af/0x480 [ 589.869252][T12560] do_fast_syscall_32+0x6b/0xd0 [ 589.874088][T12560] do_SYSENTER_32+0x73/0x90 [ 589.878579][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.884879][T12560] [ 589.887188][T12560] Uninit was stored to memory at: [ 589.892196][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 589.897910][T12560] __msan_chain_origin+0x50/0x90 [ 589.902865][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 589.907976][T12560] get_compat_msghdr+0x108/0x2b0 [ 589.912915][T12560] do_recvmmsg+0xdbb/0x22c0 [ 589.917403][T12560] __sys_recvmmsg+0x5dd/0x610 [ 589.922065][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 589.928121][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 589.934258][T12560] __do_fast_syscall_32+0x2af/0x480 [ 589.939441][T12560] do_fast_syscall_32+0x6b/0xd0 [ 589.944299][T12560] do_SYSENTER_32+0x73/0x90 [ 589.948790][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 589.955108][T12560] [ 589.957419][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 589.964080][T12560] do_recvmmsg+0xbf/0x22c0 [ 589.968479][T12560] do_recvmmsg+0xbf/0x22c0 [ 590.208949][T12564] not chained 1400000 origins [ 590.213657][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 590.222318][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.232467][T12564] Call Trace: [ 590.235760][T12564] dump_stack+0x21c/0x280 [ 590.240107][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 590.245831][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.251902][T12564] ? kmsan_get_metadata+0x116/0x180 [ 590.257104][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 590.262934][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 590.269000][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 590.274378][T12564] ? kmsan_get_metadata+0x116/0x180 [ 590.279593][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 590.285139][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.291211][T12564] ? _copy_from_user+0x201/0x310 [ 590.296149][T12564] ? kmsan_get_metadata+0x116/0x180 [ 590.301349][T12564] __msan_chain_origin+0x50/0x90 [ 590.306288][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 590.311411][T12564] get_compat_msghdr+0x108/0x2b0 [ 590.316357][T12564] do_recvmmsg+0xdbb/0x22c0 [ 590.320876][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 590.326695][T12564] ? kmsan_get_metadata+0x116/0x180 [ 590.331896][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 590.337810][T12564] ? kmsan_get_metadata+0x116/0x180 [ 590.343008][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 590.348648][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 590.353944][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 590.358701][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 590.363465][T12564] __sys_recvmmsg+0x5dd/0x610 [ 590.368159][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 590.374238][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 590.380393][T12564] __do_fast_syscall_32+0x2af/0x480 [ 590.385616][T12564] do_fast_syscall_32+0x6b/0xd0 [ 590.390469][T12564] do_SYSENTER_32+0x73/0x90 [ 590.394981][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 590.401401][T12564] RIP: 0023:0xf7fc1549 [ 590.405475][T12564] Code: Bad RIP value. [ 590.409541][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 590.418061][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 590.426031][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 590.433999][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.441968][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 590.449934][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.457910][T12564] Uninit was stored to memory at: [ 590.462939][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 590.468657][T12564] __msan_chain_origin+0x50/0x90 [ 590.473593][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 590.478705][T12564] get_compat_msghdr+0x108/0x2b0 [ 590.483640][T12564] do_recvmmsg+0xdbb/0x22c0 [ 590.488154][T12564] __sys_recvmmsg+0x5dd/0x610 [ 590.492923][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 590.498987][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 590.505137][T12564] __do_fast_syscall_32+0x2af/0x480 [ 590.510335][T12564] do_fast_syscall_32+0x6b/0xd0 [ 590.515183][T12564] do_SYSENTER_32+0x73/0x90 [ 590.519692][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 590.526001][T12564] [ 590.528318][T12564] Uninit was stored to memory at: [ 590.533340][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 590.539061][T12564] __msan_chain_origin+0x50/0x90 [ 590.543994][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 590.549106][T12564] get_compat_msghdr+0x108/0x2b0 [ 590.554037][T12564] do_recvmmsg+0xdbb/0x22c0 [ 590.558552][T12564] __sys_recvmmsg+0x5dd/0x610 [ 590.563231][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 590.569300][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 590.575448][T12564] __do_fast_syscall_32+0x2af/0x480 [ 590.580642][T12564] do_fast_syscall_32+0x6b/0xd0 [ 590.585488][T12564] do_SYSENTER_32+0x73/0x90 [ 590.589998][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 590.596311][T12564] [ 590.598625][T12564] Uninit was stored to memory at: [ 590.603656][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 590.609368][T12564] __msan_chain_origin+0x50/0x90 [ 590.614304][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 590.619409][T12564] get_compat_msghdr+0x108/0x2b0 [ 590.624339][T12564] do_recvmmsg+0xdbb/0x22c0 [ 590.628834][T12564] __sys_recvmmsg+0x5dd/0x610 [ 590.633504][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 590.639568][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 590.645718][T12564] __do_fast_syscall_32+0x2af/0x480 [ 590.651000][T12564] do_fast_syscall_32+0x6b/0xd0 [ 590.653386][T12560] not chained 1410000 origins [ 590.655859][T12564] do_SYSENTER_32+0x73/0x90 [ 590.660515][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 590.664997][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 590.673633][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.679924][T12564] [ 590.689955][T12560] Call Trace: [ 590.692259][T12564] Uninit was stored to memory at: [ 590.695551][T12560] dump_stack+0x21c/0x280 [ 590.700541][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 590.704848][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 590.710542][T12564] __msan_chain_origin+0x50/0x90 [ 590.716232][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.721140][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 590.727178][T12560] ? kmsan_get_metadata+0x116/0x180 [ 590.732257][T12564] get_compat_msghdr+0x108/0x2b0 [ 590.737428][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 590.742334][T12564] do_recvmmsg+0xdbb/0x22c0 [ 590.748114][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 590.752589][T12564] __sys_recvmmsg+0x5dd/0x610 [ 590.758647][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 590.763306][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 590.768657][T12560] ? kmsan_get_metadata+0x116/0x180 [ 590.774696][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 590.779875][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 590.786021][T12564] __do_fast_syscall_32+0x2af/0x480 [ 590.791547][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.796718][T12564] do_fast_syscall_32+0x6b/0xd0 [ 590.802757][T12560] ? _copy_from_user+0x201/0x310 [ 590.807582][T12564] do_SYSENTER_32+0x73/0x90 [ 590.812493][T12560] ? kmsan_get_metadata+0x116/0x180 [ 590.816970][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 590.822140][T12560] __msan_chain_origin+0x50/0x90 [ 590.828428][T12564] [ 590.833349][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 590.835645][T12564] Uninit was stored to memory at: [ 590.840753][T12560] get_compat_msghdr+0x108/0x2b0 [ 590.845740][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 590.850651][T12560] do_recvmmsg+0xdbb/0x22c0 [ 590.856343][T12564] __msan_chain_origin+0x50/0x90 [ 590.860910][T12560] ? kmsan_get_metadata+0x116/0x180 [ 590.865815][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 590.870990][T12560] ? kmsan_get_metadata+0x116/0x180 [ 590.876072][T12564] get_compat_msghdr+0x108/0x2b0 [ 590.881248][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 590.886157][T12564] do_recvmmsg+0xdbb/0x22c0 [ 590.892026][T12560] ? kmsan_get_metadata+0x116/0x180 [ 590.896500][T12564] __sys_recvmmsg+0x5dd/0x610 [ 590.901672][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 590.906335][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 590.911939][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 590.917977][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 590.923232][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 590.929358][T12564] __do_fast_syscall_32+0x2af/0x480 [ 590.934092][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 590.939264][T12564] do_fast_syscall_32+0x6b/0xd0 [ 590.943999][T12560] __sys_recvmmsg+0x5dd/0x610 [ 590.948822][T12564] do_SYSENTER_32+0x73/0x90 [ 590.953490][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 590.957962][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 590.964005][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 590.970290][T12564] [ 590.976424][T12560] __do_fast_syscall_32+0x2af/0x480 [ 590.978713][T12564] Uninit was stored to memory at: [ 590.983897][T12560] do_fast_syscall_32+0x6b/0xd0 [ 590.988899][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 590.993727][T12560] do_SYSENTER_32+0x73/0x90 [ 590.999417][T12564] __msan_chain_origin+0x50/0x90 [ 591.003896][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.008820][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 591.015128][T12560] RIP: 0023:0xf7fc1549 [ 591.020213][T12564] get_compat_msghdr+0x108/0x2b0 [ 591.024245][T12560] Code: Bad RIP value. [ 591.029162][T12564] do_recvmmsg+0xdbb/0x22c0 [ 591.033196][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 591.037679][T12564] __sys_recvmmsg+0x5dd/0x610 [ 591.046061][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 591.050729][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.058669][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 591.064716][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.072655][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 591.078783][T12564] __do_fast_syscall_32+0x2af/0x480 [ 591.086722][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 591.091892][T12564] do_fast_syscall_32+0x6b/0xd0 [ 591.099830][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.104657][T12564] do_SYSENTER_32+0x73/0x90 [ 591.112684][T12560] Uninit was stored to memory at: [ 591.117182][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.122177][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 591.128468][T12564] [ 591.134166][T12560] __msan_chain_origin+0x50/0x90 [ 591.136462][T12564] Uninit was stored to memory at: [ 591.141553][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 591.146545][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 591.151722][T12560] get_compat_msghdr+0x108/0x2b0 [ 591.157412][T12564] __msan_chain_origin+0x50/0x90 [ 591.162320][T12560] do_recvmmsg+0xdbb/0x22c0 [ 591.167232][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 591.171709][T12560] __sys_recvmmsg+0x5dd/0x610 [ 591.176795][T12564] get_compat_msghdr+0x108/0x2b0 [ 591.181454][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.186372][T12564] do_recvmmsg+0xdbb/0x22c0 [ 591.192406][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.196893][T12564] __sys_recvmmsg+0x5dd/0x610 [ 591.203023][T12560] __do_fast_syscall_32+0x2af/0x480 [ 591.207669][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.212837][T12560] do_fast_syscall_32+0x6b/0xd0 [ 591.218875][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.223699][T12560] do_SYSENTER_32+0x73/0x90 [ 591.229821][T12564] __do_fast_syscall_32+0x2af/0x480 [ 591.234298][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.239465][T12564] do_fast_syscall_32+0x6b/0xd0 [ 591.245751][T12560] [ 591.250579][T12564] do_SYSENTER_32+0x73/0x90 [ 591.250604][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.252923][T12560] Uninit was stored to memory at: [ 591.257398][T12564] [ 591.263706][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 591.268692][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 591.271009][T12560] __msan_chain_origin+0x50/0x90 [ 591.276699][T12564] do_recvmmsg+0xbf/0x22c0 [ 591.283345][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 591.288252][T12564] do_recvmmsg+0xbf/0x22c0 [ 591.292641][T12560] get_compat_msghdr+0x108/0x2b0 [ 591.307032][T12560] do_recvmmsg+0xdbb/0x22c0 [ 591.311534][T12560] __sys_recvmmsg+0x5dd/0x610 [ 591.316208][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.322267][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.328421][T12560] __do_fast_syscall_32+0x2af/0x480 [ 591.333618][T12560] do_fast_syscall_32+0x6b/0xd0 [ 591.338469][T12560] do_SYSENTER_32+0x73/0x90 [ 591.342969][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.349271][T12560] [ 591.351576][T12560] Uninit was stored to memory at: [ 591.356592][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 591.362312][T12560] __msan_chain_origin+0x50/0x90 [ 591.367242][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 591.372345][T12560] get_compat_msghdr+0x108/0x2b0 [ 591.377271][T12560] do_recvmmsg+0xdbb/0x22c0 [ 591.381760][T12560] __sys_recvmmsg+0x5dd/0x610 [ 591.386423][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.392485][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.398643][T12560] __do_fast_syscall_32+0x2af/0x480 [ 591.403835][T12560] do_fast_syscall_32+0x6b/0xd0 [ 591.408692][T12560] do_SYSENTER_32+0x73/0x90 [ 591.413185][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.419489][T12560] [ 591.421798][T12560] Uninit was stored to memory at: [ 591.426809][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 591.432512][T12560] __msan_chain_origin+0x50/0x90 [ 591.437435][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 591.442527][T12560] get_compat_msghdr+0x108/0x2b0 [ 591.447447][T12560] do_recvmmsg+0xdbb/0x22c0 [ 591.451932][T12560] __sys_recvmmsg+0x5dd/0x610 [ 591.456596][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.462653][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.468811][T12560] __do_fast_syscall_32+0x2af/0x480 [ 591.474006][T12560] do_fast_syscall_32+0x6b/0xd0 [ 591.478839][T12560] do_SYSENTER_32+0x73/0x90 [ 591.483327][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.489631][T12560] [ 591.491943][T12560] Uninit was stored to memory at: [ 591.496954][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 591.502677][T12560] __msan_chain_origin+0x50/0x90 [ 591.507612][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 591.512707][T12560] get_compat_msghdr+0x108/0x2b0 [ 591.517630][T12560] do_recvmmsg+0xdbb/0x22c0 [ 591.522120][T12560] __sys_recvmmsg+0x5dd/0x610 [ 591.526782][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.532832][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.538973][T12560] __do_fast_syscall_32+0x2af/0x480 [ 591.544156][T12560] do_fast_syscall_32+0x6b/0xd0 [ 591.548992][T12560] do_SYSENTER_32+0x73/0x90 [ 591.553481][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.559781][T12560] [ 591.562094][T12560] Uninit was stored to memory at: [ 591.567102][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 591.572814][T12560] __msan_chain_origin+0x50/0x90 [ 591.577742][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 591.582837][T12560] get_compat_msghdr+0x108/0x2b0 [ 591.587776][T12560] do_recvmmsg+0xdbb/0x22c0 [ 591.592268][T12560] __sys_recvmmsg+0x5dd/0x610 [ 591.596935][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.602990][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.609139][T12560] __do_fast_syscall_32+0x2af/0x480 [ 591.614324][T12560] do_fast_syscall_32+0x6b/0xd0 [ 591.619165][T12560] do_SYSENTER_32+0x73/0x90 [ 591.623653][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.629952][T12560] [ 591.632257][T12560] Uninit was stored to memory at: [ 591.637267][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 591.642973][T12560] __msan_chain_origin+0x50/0x90 [ 591.647903][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 591.652999][T12560] get_compat_msghdr+0x108/0x2b0 [ 591.657920][T12560] do_recvmmsg+0xdbb/0x22c0 [ 591.662405][T12560] __sys_recvmmsg+0x5dd/0x610 [ 591.667070][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 591.673127][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 591.679268][T12560] __do_fast_syscall_32+0x2af/0x480 [ 591.684458][T12560] do_fast_syscall_32+0x6b/0xd0 [ 591.689299][T12560] do_SYSENTER_32+0x73/0x90 [ 591.693793][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 591.700091][T12560] [ 591.702399][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 591.710272][T12560] do_recvmmsg+0xbf/0x22c0 [ 591.714673][T12560] do_recvmmsg+0xbf/0x22c0 [ 591.971865][T12560] not chained 1420000 origins [ 591.976578][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 591.985239][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.995285][T12560] Call Trace: [ 591.998580][T12560] dump_stack+0x21c/0x280 [ 592.002926][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 592.008667][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 592.014748][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.019952][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 592.025769][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 592.031836][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 592.037217][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.042415][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 592.047962][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 592.054036][T12560] ? _copy_from_user+0x201/0x310 [ 592.058980][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.064212][T12560] __msan_chain_origin+0x50/0x90 [ 592.069171][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.074296][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.079243][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.083764][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.088966][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.094343][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 592.100243][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.105443][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 592.111078][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 592.116366][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 592.121130][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 592.125898][T12560] __sys_recvmmsg+0x5dd/0x610 [ 592.130595][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 592.136671][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 592.142826][T12560] __do_fast_syscall_32+0x2af/0x480 [ 592.148040][T12560] do_fast_syscall_32+0x6b/0xd0 [ 592.152938][T12560] do_SYSENTER_32+0x73/0x90 [ 592.157445][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 592.163764][T12560] RIP: 0023:0xf7fc1549 [ 592.167924][T12560] Code: Bad RIP value. [ 592.171983][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 592.180390][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 592.188353][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 592.196317][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 592.204282][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 592.212250][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.220247][T12560] Uninit was stored to memory at: [ 592.225279][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 592.230996][T12560] __msan_chain_origin+0x50/0x90 [ 592.235935][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.241042][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.245974][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.250475][T12560] __sys_recvmmsg+0x5dd/0x610 [ 592.255150][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 592.261227][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 592.267377][T12560] __do_fast_syscall_32+0x2af/0x480 [ 592.272574][T12560] do_fast_syscall_32+0x6b/0xd0 [ 592.277423][T12560] do_SYSENTER_32+0x73/0x90 [ 592.281935][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 592.288241][T12560] [ 592.290552][T12560] Uninit was stored to memory at: [ 592.295588][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 592.301300][T12560] __msan_chain_origin+0x50/0x90 [ 592.306234][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.311338][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.316261][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.320751][T12560] __sys_recvmmsg+0x5dd/0x610 [ 592.325422][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 592.331484][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 592.337637][T12560] __do_fast_syscall_32+0x2af/0x480 [ 592.342827][T12560] do_fast_syscall_32+0x6b/0xd0 [ 592.347674][T12560] do_SYSENTER_32+0x73/0x90 [ 592.352165][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 592.358466][T12560] [ 592.360774][T12560] Uninit was stored to memory at: [ 592.365784][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 592.371488][T12560] __msan_chain_origin+0x50/0x90 [ 592.376412][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.381509][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.386429][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.390928][T12560] __sys_recvmmsg+0x5dd/0x610 [ 592.395598][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 592.401652][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 592.407801][T12560] __do_fast_syscall_32+0x2af/0x480 [ 592.412989][T12560] do_fast_syscall_32+0x6b/0xd0 [ 592.418261][T12560] do_SYSENTER_32+0x73/0x90 [ 592.422751][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 592.429055][T12560] [ 592.431369][T12560] Uninit was stored to memory at: [ 592.436388][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 592.442098][T12560] __msan_chain_origin+0x50/0x90 [ 592.447026][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.452125][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.457047][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.461631][T12560] __sys_recvmmsg+0x5dd/0x610 [ 592.466298][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 592.472354][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 592.478495][T12560] __do_fast_syscall_32+0x2af/0x480 [ 592.483681][T12560] do_fast_syscall_32+0x6b/0xd0 [ 592.488519][T12560] do_SYSENTER_32+0x73/0x90 [ 592.493014][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 592.499403][T12560] [ 592.501717][T12560] Uninit was stored to memory at: [ 592.506731][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 592.512434][T12560] __msan_chain_origin+0x50/0x90 [ 592.517358][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.522556][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.527477][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.531963][T12560] __sys_recvmmsg+0x5dd/0x610 [ 592.536628][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 592.542685][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 592.548827][T12560] __do_fast_syscall_32+0x2af/0x480 [ 592.554013][T12560] do_fast_syscall_32+0x6b/0xd0 [ 592.558859][T12560] do_SYSENTER_32+0x73/0x90 [ 592.563352][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 592.569655][T12560] [ 592.571967][T12560] Uninit was stored to memory at: [ 592.576980][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 592.582687][T12560] __msan_chain_origin+0x50/0x90 [ 592.587624][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.592722][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.597641][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.602125][T12560] __sys_recvmmsg+0x5dd/0x610 [ 592.606793][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 592.612850][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 592.618993][T12560] __do_fast_syscall_32+0x2af/0x480 [ 592.624177][T12560] do_fast_syscall_32+0x6b/0xd0 [ 592.629015][T12560] do_SYSENTER_32+0x73/0x90 [ 592.633504][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 592.639981][T12560] [ 592.642291][T12560] Uninit was stored to memory at: [ 592.647310][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 592.653018][T12560] __msan_chain_origin+0x50/0x90 [ 592.657941][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.663037][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.667957][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.672444][T12560] __sys_recvmmsg+0x5dd/0x610 [ 592.677113][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 592.683166][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 592.689305][T12560] __do_fast_syscall_32+0x2af/0x480 [ 592.694488][T12560] do_fast_syscall_32+0x6b/0xd0 [ 592.699413][T12560] do_SYSENTER_32+0x73/0x90 [ 592.703904][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 592.710207][T12560] [ 592.712517][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 592.719172][T12560] do_recvmmsg+0xbf/0x22c0 [ 592.723573][T12560] do_recvmmsg+0xbf/0x22c0 [ 592.835607][T12560] not chained 1430000 origins [ 592.840310][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 592.848971][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.859018][T12560] Call Trace: [ 592.862313][T12560] dump_stack+0x21c/0x280 [ 592.866661][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 592.878542][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 592.884600][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.889797][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 592.895595][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 592.901647][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 592.907008][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.912190][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 592.917719][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 592.923776][T12560] ? _copy_from_user+0x201/0x310 [ 592.928713][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.933902][T12560] __msan_chain_origin+0x50/0x90 [ 592.938826][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 592.943953][T12560] get_compat_msghdr+0x108/0x2b0 [ 592.948884][T12560] do_recvmmsg+0xdbb/0x22c0 [ 592.953383][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.958571][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.963764][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 592.969659][T12560] ? kmsan_get_metadata+0x116/0x180 [ 592.974843][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 592.980568][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 592.985841][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 592.990588][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 592.995337][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.000011][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.006071][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 593.012223][T12560] __do_fast_syscall_32+0x2af/0x480 [ 593.017433][T12560] do_fast_syscall_32+0x6b/0xd0 [ 593.022272][T12560] do_SYSENTER_32+0x73/0x90 [ 593.026772][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 593.033085][T12560] RIP: 0023:0xf7fc1549 [ 593.037132][T12560] Code: Bad RIP value. [ 593.041183][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 593.049580][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 593.057540][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 593.065497][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.073454][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 593.081410][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.089374][T12560] Uninit was stored to memory at: [ 593.094389][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 593.100097][T12560] __msan_chain_origin+0x50/0x90 [ 593.105043][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 593.110141][T12560] get_compat_msghdr+0x108/0x2b0 [ 593.115065][T12560] do_recvmmsg+0xdbb/0x22c0 [ 593.119554][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.124221][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.130278][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 593.136416][T12560] __do_fast_syscall_32+0x2af/0x480 [ 593.141703][T12560] do_fast_syscall_32+0x6b/0xd0 [ 593.146543][T12560] do_SYSENTER_32+0x73/0x90 [ 593.151037][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 593.157342][T12560] [ 593.159770][T12560] Uninit was stored to memory at: [ 593.164778][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 593.170495][T12560] __msan_chain_origin+0x50/0x90 [ 593.175419][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 593.180518][T12560] get_compat_msghdr+0x108/0x2b0 [ 593.185441][T12560] do_recvmmsg+0xdbb/0x22c0 [ 593.189928][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.194594][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.200647][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 593.206787][T12560] __do_fast_syscall_32+0x2af/0x480 [ 593.211974][T12560] do_fast_syscall_32+0x6b/0xd0 [ 593.216808][T12560] do_SYSENTER_32+0x73/0x90 [ 593.221298][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 593.227597][T12560] [ 593.229906][T12560] Uninit was stored to memory at: [ 593.234913][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 593.240616][T12560] __msan_chain_origin+0x50/0x90 [ 593.245538][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 593.250630][T12560] get_compat_msghdr+0x108/0x2b0 [ 593.255550][T12560] do_recvmmsg+0xdbb/0x22c0 [ 593.260035][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.264695][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.270756][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 593.276910][T12560] __do_fast_syscall_32+0x2af/0x480 [ 593.282110][T12560] do_fast_syscall_32+0x6b/0xd0 [ 593.286943][T12560] do_SYSENTER_32+0x73/0x90 [ 593.291435][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 593.297744][T12560] [ 593.300067][T12560] Uninit was stored to memory at: [ 593.305075][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 593.310781][T12560] __msan_chain_origin+0x50/0x90 [ 593.315701][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 593.320808][T12560] get_compat_msghdr+0x108/0x2b0 [ 593.325734][T12560] do_recvmmsg+0xdbb/0x22c0 [ 593.330220][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.334883][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.340934][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 593.347073][T12560] __do_fast_syscall_32+0x2af/0x480 [ 593.352252][T12560] do_fast_syscall_32+0x6b/0xd0 [ 593.357087][T12560] do_SYSENTER_32+0x73/0x90 [ 593.361575][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 593.367874][T12560] [ 593.370184][T12560] Uninit was stored to memory at: [ 593.375281][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 593.380994][T12560] __msan_chain_origin+0x50/0x90 [ 593.385914][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 593.396132][T12560] get_compat_msghdr+0x108/0x2b0 [ 593.401140][T12560] do_recvmmsg+0xdbb/0x22c0 [ 593.405626][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.410291][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.416344][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 593.422589][T12560] __do_fast_syscall_32+0x2af/0x480 [ 593.427777][T12560] do_fast_syscall_32+0x6b/0xd0 [ 593.432613][T12560] do_SYSENTER_32+0x73/0x90 [ 593.437103][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 593.443407][T12560] [ 593.445723][T12560] Uninit was stored to memory at: [ 593.450739][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 593.456442][T12560] __msan_chain_origin+0x50/0x90 [ 593.461366][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 593.466461][T12560] get_compat_msghdr+0x108/0x2b0 [ 593.471384][T12560] do_recvmmsg+0xdbb/0x22c0 [ 593.475871][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.480535][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.486581][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 593.492739][T12560] __do_fast_syscall_32+0x2af/0x480 [ 593.497919][T12560] do_fast_syscall_32+0x6b/0xd0 [ 593.502760][T12560] do_SYSENTER_32+0x73/0x90 [ 593.507244][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 593.513546][T12560] [ 593.515856][T12560] Uninit was stored to memory at: [ 593.520878][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 593.526582][T12560] __msan_chain_origin+0x50/0x90 [ 593.531502][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 593.536596][T12560] get_compat_msghdr+0x108/0x2b0 [ 593.541520][T12560] do_recvmmsg+0xdbb/0x22c0 [ 593.546007][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.550781][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.556836][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 593.562973][T12560] __do_fast_syscall_32+0x2af/0x480 [ 593.568156][T12560] do_fast_syscall_32+0x6b/0xd0 [ 593.572990][T12560] do_SYSENTER_32+0x73/0x90 [ 593.577479][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 593.583783][T12560] [ 593.586098][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 593.592782][T12560] do_recvmmsg+0xbf/0x22c0 [ 593.597181][T12560] do_recvmmsg+0xbf/0x22c0 [ 593.830828][T12560] not chained 1440000 origins [ 593.835548][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 593.844220][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.854270][T12560] Call Trace: [ 593.857567][T12560] dump_stack+0x21c/0x280 [ 593.861904][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 593.867625][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 593.873696][T12560] ? kmsan_get_metadata+0x116/0x180 [ 593.878902][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 593.884709][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 593.890779][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 593.896158][T12560] ? kmsan_get_metadata+0x116/0x180 [ 593.901358][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 593.906908][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 593.912982][T12560] ? _copy_from_user+0x201/0x310 [ 593.917922][T12560] ? kmsan_get_metadata+0x116/0x180 [ 593.923124][T12560] __msan_chain_origin+0x50/0x90 [ 593.928066][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 593.933191][T12560] get_compat_msghdr+0x108/0x2b0 [ 593.938164][T12560] do_recvmmsg+0xdbb/0x22c0 [ 593.942678][T12560] ? kmsan_get_metadata+0x116/0x180 [ 593.947880][T12560] ? kmsan_get_metadata+0x116/0x180 [ 593.953081][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 593.958989][T12560] ? kmsan_get_metadata+0x116/0x180 [ 593.964190][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 593.969829][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 593.975125][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 593.979885][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 593.984650][T12560] __sys_recvmmsg+0x5dd/0x610 [ 593.989343][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 593.995420][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.001577][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.006871][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.011727][T12560] do_SYSENTER_32+0x73/0x90 [ 594.016253][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.022577][T12560] RIP: 0023:0xf7fc1549 [ 594.026635][T12560] Code: Bad RIP value. [ 594.030702][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 594.039114][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 594.047088][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 594.055056][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 594.063026][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 594.070994][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.078970][T12560] Uninit was stored to memory at: [ 594.084000][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.089718][T12560] __msan_chain_origin+0x50/0x90 [ 594.094657][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.099768][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.104715][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.109237][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.113912][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.120099][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.126248][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.131450][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.136300][T12560] do_SYSENTER_32+0x73/0x90 [ 594.140803][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.147115][T12560] [ 594.149431][T12560] Uninit was stored to memory at: [ 594.154454][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.160168][T12560] __msan_chain_origin+0x50/0x90 [ 594.165100][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.170203][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.175130][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.179628][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.184300][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.190365][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.196513][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.201700][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.206549][T12560] do_SYSENTER_32+0x73/0x90 [ 594.211052][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.217352][T12560] [ 594.219662][T12560] Uninit was stored to memory at: [ 594.224675][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.230381][T12560] __msan_chain_origin+0x50/0x90 [ 594.235306][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.240403][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.245327][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.249822][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.254485][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.260535][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.266674][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.271853][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.276683][T12560] do_SYSENTER_32+0x73/0x90 [ 594.281170][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.287469][T12560] [ 594.289778][T12560] Uninit was stored to memory at: [ 594.294791][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.300493][T12560] __msan_chain_origin+0x50/0x90 [ 594.305416][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.310516][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.315435][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.319921][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.324583][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.330638][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.336774][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.341959][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.346812][T12560] do_SYSENTER_32+0x73/0x90 [ 594.351298][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.357596][T12560] [ 594.359905][T12560] Uninit was stored to memory at: [ 594.364918][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.370620][T12560] __msan_chain_origin+0x50/0x90 [ 594.375538][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.380731][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.385673][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.390173][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.394844][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.400901][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.407052][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.412256][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.417092][T12560] do_SYSENTER_32+0x73/0x90 [ 594.421584][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.427886][T12560] [ 594.430198][T12560] Uninit was stored to memory at: [ 594.435212][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.440935][T12560] __msan_chain_origin+0x50/0x90 [ 594.445862][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.450963][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.455890][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.460381][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.465050][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.471106][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.477365][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.482548][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.487383][T12560] do_SYSENTER_32+0x73/0x90 [ 594.491875][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.498178][T12560] [ 594.500498][T12560] Uninit was stored to memory at: [ 594.505510][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.511216][T12560] __msan_chain_origin+0x50/0x90 [ 594.516140][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.521236][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.526157][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.530644][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.535306][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.541372][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.547511][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.552701][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.557537][T12560] do_SYSENTER_32+0x73/0x90 [ 594.562035][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.568345][T12560] [ 594.570665][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 594.577331][T12560] do_recvmmsg+0xbf/0x22c0 [ 594.581738][T12560] do_recvmmsg+0xbf/0x22c0 [ 594.620388][T12560] not chained 1450000 origins [ 594.625090][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 594.633741][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.643778][T12560] Call Trace: [ 594.647066][T12560] dump_stack+0x21c/0x280 [ 594.651390][T12560] ? kmsan_get_metadata+0x116/0x180 [ 594.656580][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 594.662307][T12560] ? pvclock_clocksource_read+0x2ee/0x520 [ 594.668016][T12560] ? kmsan_get_metadata+0x116/0x180 [ 594.673206][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 594.678999][T12560] ? kmsan_get_metadata+0x116/0x180 [ 594.684189][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 594.689984][T12560] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 594.696041][T12560] ? sched_clock_cpu+0x65/0x8e0 [ 594.700883][T12560] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 594.706935][T12560] ? sched_clock_cpu+0x65/0x8e0 [ 594.711768][T12560] ? kmsan_get_metadata+0x116/0x180 [ 594.716953][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 594.722488][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 594.728559][T12560] ? _copy_from_user+0x201/0x310 [ 594.733486][T12560] ? kmsan_get_metadata+0x116/0x180 [ 594.738676][T12560] __msan_chain_origin+0x50/0x90 [ 594.743608][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.748726][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.753660][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.758161][T12560] ? kmsan_get_metadata+0x116/0x180 [ 594.763353][T12560] ? kmsan_get_metadata+0x116/0x180 [ 594.768645][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 594.774529][T12560] ? kmsan_get_metadata+0x116/0x180 [ 594.779713][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 594.785337][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 594.790614][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 594.795364][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 594.800119][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.804797][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.810861][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.817007][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.822201][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.827040][T12560] do_SYSENTER_32+0x73/0x90 [ 594.831535][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.837847][T12560] RIP: 0023:0xf7fc1549 [ 594.841894][T12560] Code: Bad RIP value. [ 594.845941][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 594.854354][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 594.862313][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 594.870278][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 594.878242][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 594.886200][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.894164][T12560] Uninit was stored to memory at: [ 594.899178][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.904893][T12560] __msan_chain_origin+0x50/0x90 [ 594.909812][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.914907][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.919825][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.924312][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.928976][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 594.935029][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 594.941170][T12560] __do_fast_syscall_32+0x2af/0x480 [ 594.946358][T12560] do_fast_syscall_32+0x6b/0xd0 [ 594.951197][T12560] do_SYSENTER_32+0x73/0x90 [ 594.955688][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.961993][T12560] [ 594.964304][T12560] Uninit was stored to memory at: [ 594.969313][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 594.975018][T12560] __msan_chain_origin+0x50/0x90 [ 594.979940][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 594.985033][T12560] get_compat_msghdr+0x108/0x2b0 [ 594.989950][T12560] do_recvmmsg+0xdbb/0x22c0 [ 594.994433][T12560] __sys_recvmmsg+0x5dd/0x610 [ 594.999111][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.005163][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.011297][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.016479][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.021313][T12560] do_SYSENTER_32+0x73/0x90 [ 595.025813][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.032112][T12560] [ 595.034418][T12560] Uninit was stored to memory at: [ 595.039446][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 595.045150][T12560] __msan_chain_origin+0x50/0x90 [ 595.050071][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 595.055164][T12560] get_compat_msghdr+0x108/0x2b0 [ 595.060089][T12560] do_recvmmsg+0xdbb/0x22c0 [ 595.064577][T12560] __sys_recvmmsg+0x5dd/0x610 [ 595.069248][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.075302][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.081440][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.086628][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.091464][T12560] do_SYSENTER_32+0x73/0x90 [ 595.095952][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.102355][T12560] [ 595.104680][T12560] Uninit was stored to memory at: [ 595.109799][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 595.115511][T12560] __msan_chain_origin+0x50/0x90 [ 595.120440][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 595.125547][T12560] get_compat_msghdr+0x108/0x2b0 [ 595.130477][T12560] do_recvmmsg+0xdbb/0x22c0 [ 595.134965][T12560] __sys_recvmmsg+0x5dd/0x610 [ 595.139631][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.145688][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.151829][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.157012][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.161849][T12560] do_SYSENTER_32+0x73/0x90 [ 595.166348][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.172651][T12560] [ 595.174988][T12560] Uninit was stored to memory at: [ 595.180001][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 595.185705][T12560] __msan_chain_origin+0x50/0x90 [ 595.190630][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 595.195728][T12560] get_compat_msghdr+0x108/0x2b0 [ 595.200652][T12560] do_recvmmsg+0xdbb/0x22c0 [ 595.205156][T12560] __sys_recvmmsg+0x5dd/0x610 [ 595.209827][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.215879][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.222022][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.227210][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.232047][T12560] do_SYSENTER_32+0x73/0x90 [ 595.236543][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.242857][T12560] [ 595.245170][T12560] Uninit was stored to memory at: [ 595.250187][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 595.255896][T12560] __msan_chain_origin+0x50/0x90 [ 595.260822][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 595.265920][T12560] get_compat_msghdr+0x108/0x2b0 [ 595.270849][T12560] do_recvmmsg+0xdbb/0x22c0 [ 595.275342][T12560] __sys_recvmmsg+0x5dd/0x610 [ 595.280004][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.286059][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.292201][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.297388][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.302238][T12560] do_SYSENTER_32+0x73/0x90 [ 595.306730][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.313119][T12560] [ 595.315428][T12560] Uninit was stored to memory at: [ 595.320537][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 595.326242][T12560] __msan_chain_origin+0x50/0x90 [ 595.331166][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 595.336262][T12560] get_compat_msghdr+0x108/0x2b0 [ 595.341185][T12560] do_recvmmsg+0xdbb/0x22c0 [ 595.345685][T12560] __sys_recvmmsg+0x5dd/0x610 [ 595.350354][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.356400][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.362542][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.367725][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.372577][T12560] do_SYSENTER_32+0x73/0x90 [ 595.377064][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.383367][T12560] [ 595.385679][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 595.392350][T12560] do_recvmmsg+0xbf/0x22c0 [ 595.396764][T12560] do_recvmmsg+0xbf/0x22c0 [ 595.592152][T12560] not chained 1460000 origins [ 595.596995][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 595.605656][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.615791][T12560] Call Trace: [ 595.619083][T12560] dump_stack+0x21c/0x280 [ 595.623420][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 595.629142][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 595.635212][T12560] ? kmsan_get_metadata+0x116/0x180 [ 595.640410][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 595.646217][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 595.652370][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 595.657747][T12560] ? kmsan_get_metadata+0x116/0x180 [ 595.662946][T12560] ? kmsan_get_metadata+0x116/0x180 [ 595.668324][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 595.673973][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 595.680062][T12560] ? _copy_from_user+0x201/0x310 [ 595.685001][T12560] ? kmsan_get_metadata+0x116/0x180 [ 595.690198][T12560] __msan_chain_origin+0x50/0x90 [ 595.695137][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 595.700294][T12560] get_compat_msghdr+0x108/0x2b0 [ 595.705242][T12560] do_recvmmsg+0xdbb/0x22c0 [ 595.709752][T12560] ? kmsan_get_metadata+0x116/0x180 [ 595.714948][T12560] ? kmsan_get_metadata+0x116/0x180 [ 595.720148][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 595.726048][T12560] ? kmsan_get_metadata+0x116/0x180 [ 595.731247][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 595.736881][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 595.742166][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 595.746925][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 595.751690][T12560] __sys_recvmmsg+0x5dd/0x610 [ 595.756378][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.762456][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.768612][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.773824][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.778698][T12560] do_SYSENTER_32+0x73/0x90 [ 595.783204][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.789526][T12560] RIP: 0023:0xf7fc1549 [ 595.793582][T12560] Code: Bad RIP value. [ 595.797643][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 595.806054][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 595.814037][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 595.822002][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 595.829968][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 595.837935][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 595.845938][T12560] Uninit was stored to memory at: [ 595.850974][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 595.856681][T12560] __msan_chain_origin+0x50/0x90 [ 595.861634][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 595.866745][T12560] get_compat_msghdr+0x108/0x2b0 [ 595.871679][T12560] do_recvmmsg+0xdbb/0x22c0 [ 595.876178][T12560] __sys_recvmmsg+0x5dd/0x610 [ 595.880853][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.886918][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.893068][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.898262][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.903113][T12560] do_SYSENTER_32+0x73/0x90 [ 595.907615][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.913943][T12560] [ 595.916260][T12560] Uninit was stored to memory at: [ 595.921285][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 595.927003][T12560] __msan_chain_origin+0x50/0x90 [ 595.931938][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 595.937046][T12560] get_compat_msghdr+0x108/0x2b0 [ 595.941976][T12560] do_recvmmsg+0xdbb/0x22c0 [ 595.946475][T12560] __sys_recvmmsg+0x5dd/0x610 [ 595.951151][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 595.957246][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 595.963395][T12560] __do_fast_syscall_32+0x2af/0x480 [ 595.968593][T12560] do_fast_syscall_32+0x6b/0xd0 [ 595.973528][T12560] do_SYSENTER_32+0x73/0x90 [ 595.978050][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 595.984379][T12560] [ 595.986698][T12560] Uninit was stored to memory at: [ 595.991723][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 595.997438][T12560] __msan_chain_origin+0x50/0x90 [ 596.002381][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 596.007496][T12560] get_compat_msghdr+0x108/0x2b0 [ 596.012440][T12560] do_recvmmsg+0xdbb/0x22c0 [ 596.016935][T12560] __sys_recvmmsg+0x5dd/0x610 [ 596.021609][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.027696][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.033845][T12560] __do_fast_syscall_32+0x2af/0x480 [ 596.039044][T12560] do_fast_syscall_32+0x6b/0xd0 [ 596.043894][T12560] do_SYSENTER_32+0x73/0x90 [ 596.048397][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.054709][T12560] [ 596.057029][T12560] Uninit was stored to memory at: [ 596.062072][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 596.067803][T12560] __msan_chain_origin+0x50/0x90 [ 596.072739][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 596.077854][T12560] get_compat_msghdr+0x108/0x2b0 [ 596.082878][T12560] do_recvmmsg+0xdbb/0x22c0 [ 596.087403][T12560] __sys_recvmmsg+0x5dd/0x610 [ 596.092063][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.098111][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.104247][T12560] __do_fast_syscall_32+0x2af/0x480 [ 596.109536][T12560] do_fast_syscall_32+0x6b/0xd0 [ 596.114375][T12560] do_SYSENTER_32+0x73/0x90 [ 596.118864][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.125165][T12560] [ 596.127478][T12560] Uninit was stored to memory at: [ 596.132488][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 596.138191][T12560] __msan_chain_origin+0x50/0x90 [ 596.143114][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 596.148212][T12560] get_compat_msghdr+0x108/0x2b0 [ 596.153133][T12560] do_recvmmsg+0xdbb/0x22c0 [ 596.157629][T12560] __sys_recvmmsg+0x5dd/0x610 [ 596.162290][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.168342][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.174485][T12560] __do_fast_syscall_32+0x2af/0x480 [ 596.179669][T12560] do_fast_syscall_32+0x6b/0xd0 [ 596.184508][T12560] do_SYSENTER_32+0x73/0x90 [ 596.189100][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.195400][T12560] [ 596.197707][T12560] Uninit was stored to memory at: [ 596.202717][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 596.208421][T12560] __msan_chain_origin+0x50/0x90 [ 596.213344][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 596.218453][T12560] get_compat_msghdr+0x108/0x2b0 [ 596.223375][T12560] do_recvmmsg+0xdbb/0x22c0 [ 596.227862][T12560] __sys_recvmmsg+0x5dd/0x610 [ 596.232526][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.238582][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.244727][T12560] __do_fast_syscall_32+0x2af/0x480 [ 596.249926][T12560] do_fast_syscall_32+0x6b/0xd0 [ 596.254762][T12560] do_SYSENTER_32+0x73/0x90 [ 596.259254][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.265556][T12560] [ 596.267868][T12560] Uninit was stored to memory at: [ 596.272908][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 596.278618][T12560] __msan_chain_origin+0x50/0x90 [ 596.283539][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 596.288633][T12560] get_compat_msghdr+0x108/0x2b0 [ 596.293556][T12560] do_recvmmsg+0xdbb/0x22c0 [ 596.298048][T12560] __sys_recvmmsg+0x5dd/0x610 [ 596.302714][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.308773][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.314913][T12560] __do_fast_syscall_32+0x2af/0x480 [ 596.320115][T12560] do_fast_syscall_32+0x6b/0xd0 [ 596.324954][T12560] do_SYSENTER_32+0x73/0x90 [ 596.329445][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.335833][T12560] [ 596.338143][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 596.344800][T12560] do_recvmmsg+0xbf/0x22c0 [ 596.349201][T12560] do_recvmmsg+0xbf/0x22c0 [ 596.525352][T12564] not chained 1470000 origins [ 596.530072][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 596.538728][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.548788][T12564] Call Trace: [ 596.552106][T12564] dump_stack+0x21c/0x280 [ 596.556442][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 596.562165][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 596.568242][T12564] ? kmsan_get_metadata+0x116/0x180 [ 596.573432][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 596.579225][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 596.585281][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 596.590633][T12564] ? sched_clock_cpu+0x65/0x8e0 [ 596.595457][T12564] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 596.601494][T12564] ? sched_clock_cpu+0x65/0x8e0 [ 596.606357][T12564] ? kmsan_get_metadata+0x116/0x180 [ 596.611650][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 596.617174][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 596.623237][T12564] ? _copy_from_user+0x201/0x310 [ 596.628150][T12564] ? kmsan_get_metadata+0x116/0x180 [ 596.633320][T12564] __msan_chain_origin+0x50/0x90 [ 596.638235][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 596.643329][T12564] get_compat_msghdr+0x108/0x2b0 [ 596.648247][T12564] do_recvmmsg+0xdbb/0x22c0 [ 596.652728][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 596.658523][T12564] ? kmsan_get_metadata+0x116/0x180 [ 596.663698][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 596.669566][T12564] ? kmsan_get_metadata+0x116/0x180 [ 596.674736][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 596.680343][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 596.685600][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 596.690336][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 596.695082][T12564] __sys_recvmmsg+0x5dd/0x610 [ 596.699740][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.705788][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.711920][T12564] __do_fast_syscall_32+0x2af/0x480 [ 596.717101][T12564] do_fast_syscall_32+0x6b/0xd0 [ 596.721926][T12564] do_SYSENTER_32+0x73/0x90 [ 596.726402][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.732701][T12564] RIP: 0023:0xf7fc1549 [ 596.736738][T12564] Code: Bad RIP value. [ 596.740775][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 596.749173][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 596.757113][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 596.765055][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.773000][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 596.780954][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 596.788925][T12564] Uninit was stored to memory at: [ 596.793941][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 596.799647][T12564] __msan_chain_origin+0x50/0x90 [ 596.804571][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 596.809669][T12564] get_compat_msghdr+0x108/0x2b0 [ 596.814591][T12564] do_recvmmsg+0xdbb/0x22c0 [ 596.819083][T12564] __sys_recvmmsg+0x5dd/0x610 [ 596.823748][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.829800][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.835945][T12564] __do_fast_syscall_32+0x2af/0x480 [ 596.841130][T12564] do_fast_syscall_32+0x6b/0xd0 [ 596.845967][T12564] do_SYSENTER_32+0x73/0x90 [ 596.850459][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.856759][T12564] [ 596.859067][T12564] Uninit was stored to memory at: [ 596.864078][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 596.869783][T12564] __msan_chain_origin+0x50/0x90 [ 596.874707][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 596.879806][T12564] get_compat_msghdr+0x108/0x2b0 [ 596.884731][T12564] do_recvmmsg+0xdbb/0x22c0 [ 596.889219][T12564] __sys_recvmmsg+0x5dd/0x610 [ 596.893881][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.899966][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.906106][T12564] __do_fast_syscall_32+0x2af/0x480 [ 596.911298][T12564] do_fast_syscall_32+0x6b/0xd0 [ 596.916133][T12564] do_SYSENTER_32+0x73/0x90 [ 596.920622][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.926921][T12564] [ 596.929231][T12564] Uninit was stored to memory at: [ 596.934241][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 596.939945][T12564] __msan_chain_origin+0x50/0x90 [ 596.944871][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 596.949967][T12564] get_compat_msghdr+0x108/0x2b0 [ 596.954888][T12564] do_recvmmsg+0xdbb/0x22c0 [ 596.959379][T12564] __sys_recvmmsg+0x5dd/0x610 [ 596.964042][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 596.970095][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 596.976233][T12564] __do_fast_syscall_32+0x2af/0x480 [ 596.981428][T12564] do_fast_syscall_32+0x6b/0xd0 [ 596.986264][T12564] do_SYSENTER_32+0x73/0x90 [ 596.990755][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 596.997058][T12564] [ 596.999368][T12564] Uninit was stored to memory at: [ 597.004379][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 597.010086][T12564] __msan_chain_origin+0x50/0x90 [ 597.015011][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.020106][T12564] get_compat_msghdr+0x108/0x2b0 [ 597.025028][T12564] do_recvmmsg+0xdbb/0x22c0 [ 597.029515][T12564] __sys_recvmmsg+0x5dd/0x610 [ 597.034179][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 597.040232][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 597.046372][T12564] __do_fast_syscall_32+0x2af/0x480 [ 597.051644][T12564] do_fast_syscall_32+0x6b/0xd0 [ 597.056480][T12564] do_SYSENTER_32+0x73/0x90 [ 597.060989][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 597.075830][T12564] [ 597.078141][T12564] Uninit was stored to memory at: [ 597.083152][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 597.088855][T12564] __msan_chain_origin+0x50/0x90 [ 597.093776][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.098868][T12564] get_compat_msghdr+0x108/0x2b0 [ 597.103791][T12564] do_recvmmsg+0xdbb/0x22c0 [ 597.108279][T12564] __sys_recvmmsg+0x5dd/0x610 [ 597.113049][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 597.119105][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 597.125241][T12564] __do_fast_syscall_32+0x2af/0x480 [ 597.130425][T12564] do_fast_syscall_32+0x6b/0xd0 [ 597.135268][T12564] do_SYSENTER_32+0x73/0x90 [ 597.139866][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 597.146167][T12564] [ 597.148474][T12564] Uninit was stored to memory at: [ 597.153483][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 597.159187][T12564] __msan_chain_origin+0x50/0x90 [ 597.164105][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.169289][T12564] get_compat_msghdr+0x108/0x2b0 [ 597.174210][T12564] do_recvmmsg+0xdbb/0x22c0 [ 597.178702][T12564] __sys_recvmmsg+0x5dd/0x610 [ 597.183367][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 597.189424][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 597.195565][T12564] __do_fast_syscall_32+0x2af/0x480 [ 597.200750][T12564] do_fast_syscall_32+0x6b/0xd0 [ 597.205587][T12564] do_SYSENTER_32+0x73/0x90 [ 597.210078][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 597.216379][T12564] [ 597.218695][T12564] Uninit was stored to memory at: [ 597.223708][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 597.229445][T12564] __msan_chain_origin+0x50/0x90 [ 597.234364][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.239460][T12564] get_compat_msghdr+0x108/0x2b0 [ 597.244382][T12564] do_recvmmsg+0xdbb/0x22c0 [ 597.248873][T12564] __sys_recvmmsg+0x5dd/0x610 [ 597.253538][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 597.259604][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 597.265738][T12564] __do_fast_syscall_32+0x2af/0x480 [ 597.270939][T12564] do_fast_syscall_32+0x6b/0xd0 [ 597.275776][T12564] do_SYSENTER_32+0x73/0x90 [ 597.280262][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 597.286560][T12564] [ 597.288871][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 597.295531][T12564] do_recvmmsg+0xbf/0x22c0 [ 597.299940][T12564] do_recvmmsg+0xbf/0x22c0 [ 597.514558][T12564] not chained 1480000 origins [ 597.519273][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 597.527946][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.538080][T12564] Call Trace: [ 597.541384][T12564] dump_stack+0x21c/0x280 [ 597.545724][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 597.551454][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 597.557546][T12564] ? kmsan_get_metadata+0x116/0x180 [ 597.562745][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 597.568667][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 597.574737][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 597.580114][T12564] ? kmsan_get_metadata+0x116/0x180 [ 597.585320][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 597.590871][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 597.596946][T12564] ? _copy_from_user+0x201/0x310 [ 597.601890][T12564] ? kmsan_get_metadata+0x116/0x180 [ 597.607086][T12564] __msan_chain_origin+0x50/0x90 [ 597.612031][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.617159][T12564] get_compat_msghdr+0x108/0x2b0 [ 597.622112][T12564] do_recvmmsg+0xdbb/0x22c0 [ 597.626641][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 597.632492][T12564] ? kmsan_get_metadata+0x116/0x180 [ 597.637822][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 597.643719][T12564] ? kmsan_get_metadata+0x116/0x180 [ 597.648919][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 597.654642][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 597.659928][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 597.664690][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 597.669458][T12564] __sys_recvmmsg+0x5dd/0x610 [ 597.674147][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 597.680221][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 597.686379][T12564] __do_fast_syscall_32+0x2af/0x480 [ 597.691584][T12564] do_fast_syscall_32+0x6b/0xd0 [ 597.696433][T12564] do_SYSENTER_32+0x73/0x90 [ 597.700935][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 597.707264][T12564] RIP: 0023:0xf7fc1549 [ 597.711314][T12564] Code: Bad RIP value. [ 597.715368][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 597.723774][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 597.731737][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 597.739694][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.747652][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 597.755616][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 597.763592][T12564] Uninit was stored to memory at: [ 597.768614][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 597.774333][T12564] __msan_chain_origin+0x50/0x90 [ 597.779361][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.784466][T12564] get_compat_msghdr+0x108/0x2b0 [ 597.789394][T12564] do_recvmmsg+0xdbb/0x22c0 [ 597.793886][T12564] __sys_recvmmsg+0x5dd/0x610 [ 597.798554][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 597.804612][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 597.810755][T12564] __do_fast_syscall_32+0x2af/0x480 [ 597.816044][T12564] do_fast_syscall_32+0x6b/0xd0 [ 597.820902][T12564] do_SYSENTER_32+0x73/0x90 [ 597.825394][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 597.831695][T12564] [ 597.834004][T12564] Uninit was stored to memory at: [ 597.839017][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 597.844722][T12564] __msan_chain_origin+0x50/0x90 [ 597.849643][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.854827][T12564] get_compat_msghdr+0x108/0x2b0 [ 597.859749][T12564] do_recvmmsg+0xdbb/0x22c0 [ 597.864236][T12564] __sys_recvmmsg+0x5dd/0x610 [ 597.868916][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 597.874968][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 597.881115][T12564] __do_fast_syscall_32+0x2af/0x480 [ 597.886308][T12564] do_fast_syscall_32+0x6b/0xd0 [ 597.891147][T12564] do_SYSENTER_32+0x73/0x90 [ 597.895638][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 597.901938][T12564] [ 597.904247][T12564] Uninit was stored to memory at: [ 597.909257][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 597.914964][T12564] __msan_chain_origin+0x50/0x90 [ 597.919887][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.925098][T12564] get_compat_msghdr+0x108/0x2b0 [ 597.930018][T12564] do_recvmmsg+0xdbb/0x22c0 [ 597.934523][T12564] __sys_recvmmsg+0x5dd/0x610 [ 597.939195][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 597.945248][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 597.951405][T12564] __do_fast_syscall_32+0x2af/0x480 [ 597.956608][T12564] do_fast_syscall_32+0x6b/0xd0 [ 597.961440][T12564] do_SYSENTER_32+0x73/0x90 [ 597.965925][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 597.972224][T12564] [ 597.974530][T12564] Uninit was stored to memory at: [ 597.979534][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 597.985238][T12564] __msan_chain_origin+0x50/0x90 [ 597.990160][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 597.995259][T12564] get_compat_msghdr+0x108/0x2b0 [ 598.000181][T12564] do_recvmmsg+0xdbb/0x22c0 [ 598.004670][T12564] __sys_recvmmsg+0x5dd/0x610 [ 598.009423][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.015476][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.021619][T12564] __do_fast_syscall_32+0x2af/0x480 [ 598.026903][T12564] do_fast_syscall_32+0x6b/0xd0 [ 598.031738][T12564] do_SYSENTER_32+0x73/0x90 [ 598.036224][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.042527][T12564] [ 598.044836][T12564] Uninit was stored to memory at: [ 598.049848][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 598.055550][T12564] __msan_chain_origin+0x50/0x90 [ 598.060485][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 598.065585][T12564] get_compat_msghdr+0x108/0x2b0 [ 598.070509][T12564] do_recvmmsg+0xdbb/0x22c0 [ 598.075006][T12564] __sys_recvmmsg+0x5dd/0x610 [ 598.079673][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.085725][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.091865][T12564] __do_fast_syscall_32+0x2af/0x480 [ 598.097051][T12564] do_fast_syscall_32+0x6b/0xd0 [ 598.101886][T12564] do_SYSENTER_32+0x73/0x90 [ 598.106376][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.112678][T12564] [ 598.114987][T12564] Uninit was stored to memory at: [ 598.119999][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 598.125704][T12564] __msan_chain_origin+0x50/0x90 [ 598.130647][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 598.135741][T12564] get_compat_msghdr+0x108/0x2b0 [ 598.140661][T12564] do_recvmmsg+0xdbb/0x22c0 [ 598.145148][T12564] __sys_recvmmsg+0x5dd/0x610 [ 598.149810][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.155960][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.162100][T12564] __do_fast_syscall_32+0x2af/0x480 [ 598.167283][T12564] do_fast_syscall_32+0x6b/0xd0 [ 598.172118][T12564] do_SYSENTER_32+0x73/0x90 [ 598.176605][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.182904][T12564] [ 598.185211][T12564] Uninit was stored to memory at: [ 598.190223][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 598.195924][T12564] __msan_chain_origin+0x50/0x90 [ 598.200842][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 598.205934][T12564] get_compat_msghdr+0x108/0x2b0 [ 598.210851][T12564] do_recvmmsg+0xdbb/0x22c0 [ 598.215338][T12564] __sys_recvmmsg+0x5dd/0x610 [ 598.220000][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.226050][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.232196][T12564] __do_fast_syscall_32+0x2af/0x480 [ 598.237375][T12564] do_fast_syscall_32+0x6b/0xd0 [ 598.242209][T12564] do_SYSENTER_32+0x73/0x90 [ 598.246710][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.253010][T12564] [ 598.255322][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 598.261977][T12564] do_recvmmsg+0xbf/0x22c0 [ 598.266376][T12564] do_recvmmsg+0xbf/0x22c0 [ 598.345558][T12560] not chained 1490000 origins [ 598.350356][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 598.359011][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.369146][T12560] Call Trace: [ 598.372446][T12560] dump_stack+0x21c/0x280 [ 598.376793][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 598.382516][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 598.388584][T12560] ? kmsan_get_metadata+0x116/0x180 [ 598.393795][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 598.399605][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 598.405674][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 598.411099][T12560] ? kmsan_get_metadata+0x116/0x180 [ 598.416299][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 598.421849][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 598.427914][T12560] ? _copy_from_user+0x201/0x310 [ 598.432846][T12560] ? kmsan_get_metadata+0x116/0x180 [ 598.438037][T12560] __msan_chain_origin+0x50/0x90 [ 598.442977][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 598.448220][T12560] get_compat_msghdr+0x108/0x2b0 [ 598.453172][T12560] do_recvmmsg+0xdbb/0x22c0 [ 598.457677][T12560] ? kmsan_get_metadata+0x116/0x180 [ 598.462870][T12560] ? kmsan_get_metadata+0x116/0x180 [ 598.468064][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 598.473951][T12560] ? kmsan_get_metadata+0x116/0x180 [ 598.479140][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 598.484763][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 598.490036][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 598.494787][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 598.499547][T12560] __sys_recvmmsg+0x5dd/0x610 [ 598.504223][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.510368][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.516517][T12560] __do_fast_syscall_32+0x2af/0x480 [ 598.521820][T12560] do_fast_syscall_32+0x6b/0xd0 [ 598.526678][T12560] do_SYSENTER_32+0x73/0x90 [ 598.531183][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.537518][T12560] RIP: 0023:0xf7fc1549 [ 598.541568][T12560] Code: Bad RIP value. [ 598.545619][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 598.554021][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 598.561982][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 598.569944][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.577904][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 598.585861][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.593945][T12560] Uninit was stored to memory at: [ 598.598964][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 598.604667][T12560] __msan_chain_origin+0x50/0x90 [ 598.609593][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 598.614690][T12560] get_compat_msghdr+0x108/0x2b0 [ 598.619613][T12560] do_recvmmsg+0xdbb/0x22c0 [ 598.624101][T12560] __sys_recvmmsg+0x5dd/0x610 [ 598.628768][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.634819][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.640957][T12560] __do_fast_syscall_32+0x2af/0x480 [ 598.646143][T12560] do_fast_syscall_32+0x6b/0xd0 [ 598.650984][T12560] do_SYSENTER_32+0x73/0x90 [ 598.655478][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.661780][T12560] [ 598.664090][T12560] Uninit was stored to memory at: [ 598.669103][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 598.674804][T12560] __msan_chain_origin+0x50/0x90 [ 598.679727][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 598.684824][T12560] get_compat_msghdr+0x108/0x2b0 [ 598.689747][T12560] do_recvmmsg+0xdbb/0x22c0 [ 598.694236][T12560] __sys_recvmmsg+0x5dd/0x610 [ 598.698902][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.704964][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.711106][T12560] __do_fast_syscall_32+0x2af/0x480 [ 598.716460][T12560] do_fast_syscall_32+0x6b/0xd0 [ 598.721296][T12560] do_SYSENTER_32+0x73/0x90 [ 598.725787][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.732087][T12560] [ 598.734427][T12560] Uninit was stored to memory at: [ 598.739439][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 598.745155][T12560] __msan_chain_origin+0x50/0x90 [ 598.750104][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 598.755209][T12560] get_compat_msghdr+0x108/0x2b0 [ 598.760133][T12560] do_recvmmsg+0xdbb/0x22c0 [ 598.764618][T12560] __sys_recvmmsg+0x5dd/0x610 [ 598.769285][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.775339][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.781478][T12560] __do_fast_syscall_32+0x2af/0x480 [ 598.786680][T12560] do_fast_syscall_32+0x6b/0xd0 [ 598.791516][T12560] do_SYSENTER_32+0x73/0x90 [ 598.796006][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.802331][T12560] [ 598.804649][T12560] Uninit was stored to memory at: [ 598.809666][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 598.815371][T12560] __msan_chain_origin+0x50/0x90 [ 598.820309][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 598.825405][T12560] get_compat_msghdr+0x108/0x2b0 [ 598.830328][T12560] do_recvmmsg+0xdbb/0x22c0 [ 598.834819][T12560] __sys_recvmmsg+0x5dd/0x610 [ 598.839486][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.845542][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.851682][T12560] __do_fast_syscall_32+0x2af/0x480 [ 598.856870][T12560] do_fast_syscall_32+0x6b/0xd0 [ 598.861718][T12560] do_SYSENTER_32+0x73/0x90 [ 598.866206][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.872681][T12560] [ 598.874995][T12560] Uninit was stored to memory at: [ 598.880008][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 598.885714][T12560] __msan_chain_origin+0x50/0x90 [ 598.890641][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 598.895756][T12560] get_compat_msghdr+0x108/0x2b0 [ 598.900684][T12560] do_recvmmsg+0xdbb/0x22c0 [ 598.905176][T12560] __sys_recvmmsg+0x5dd/0x610 [ 598.909841][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.915897][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.922053][T12560] __do_fast_syscall_32+0x2af/0x480 [ 598.927239][T12560] do_fast_syscall_32+0x6b/0xd0 [ 598.932074][T12560] do_SYSENTER_32+0x73/0x90 [ 598.936563][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 598.942864][T12560] [ 598.945177][T12560] Uninit was stored to memory at: [ 598.950199][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 598.955901][T12560] __msan_chain_origin+0x50/0x90 [ 598.960825][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 598.965924][T12560] get_compat_msghdr+0x108/0x2b0 [ 598.970844][T12560] do_recvmmsg+0xdbb/0x22c0 [ 598.975351][T12560] __sys_recvmmsg+0x5dd/0x610 [ 598.980025][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 598.986077][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 598.992221][T12560] __do_fast_syscall_32+0x2af/0x480 [ 598.997450][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.002288][T12560] do_SYSENTER_32+0x73/0x90 [ 599.006778][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.013083][T12560] [ 599.015403][T12560] Uninit was stored to memory at: [ 599.020418][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 599.026125][T12560] __msan_chain_origin+0x50/0x90 [ 599.031050][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.036150][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.041096][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.045587][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.050259][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.056314][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.062454][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.067638][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.072472][T12560] do_SYSENTER_32+0x73/0x90 [ 599.076962][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.083265][T12560] [ 599.085575][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 599.092235][T12560] do_recvmmsg+0xbf/0x22c0 [ 599.096635][T12560] do_recvmmsg+0xbf/0x22c0 [ 599.270425][T12560] not chained 1500000 origins [ 599.275220][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 599.283880][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.293933][T12560] Call Trace: [ 599.297230][T12560] dump_stack+0x21c/0x280 [ 599.301675][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 599.307397][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 599.313472][T12560] ? kmsan_get_metadata+0x116/0x180 [ 599.318678][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 599.324490][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 599.330559][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 599.335938][T12560] ? kmsan_get_metadata+0x116/0x180 [ 599.341151][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 599.346703][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 599.352775][T12560] ? _copy_from_user+0x201/0x310 [ 599.357736][T12560] ? kmsan_get_metadata+0x116/0x180 [ 599.362962][T12560] __msan_chain_origin+0x50/0x90 [ 599.367907][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.373035][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.377993][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.382512][T12560] ? kmsan_get_metadata+0x116/0x180 [ 599.387719][T12560] ? kmsan_get_metadata+0x116/0x180 [ 599.392927][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 599.398953][T12560] ? kmsan_get_metadata+0x116/0x180 [ 599.404163][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 599.409801][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 599.415089][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 599.419848][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 599.424612][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.429311][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.435395][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.441559][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.446763][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.451609][T12560] do_SYSENTER_32+0x73/0x90 [ 599.456113][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.462434][T12560] RIP: 0023:0xf7fc1549 [ 599.466494][T12560] Code: Bad RIP value. [ 599.470552][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 599.478980][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 599.486950][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 599.494914][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.502886][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 599.510851][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.518826][T12560] Uninit was stored to memory at: [ 599.523855][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 599.529575][T12560] __msan_chain_origin+0x50/0x90 [ 599.534512][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.539632][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.544566][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.549065][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.553744][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.559814][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.565968][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.571166][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.576014][T12560] do_SYSENTER_32+0x73/0x90 [ 599.580520][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.586840][T12560] [ 599.589161][T12560] Uninit was stored to memory at: [ 599.594188][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 599.599910][T12560] __msan_chain_origin+0x50/0x90 [ 599.604851][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.609962][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.614917][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.619420][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.624099][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.630177][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.636328][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.641524][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.646372][T12560] do_SYSENTER_32+0x73/0x90 [ 599.650873][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.657178][T12560] [ 599.659499][T12560] Uninit was stored to memory at: [ 599.664520][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 599.670235][T12560] __msan_chain_origin+0x50/0x90 [ 599.675257][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.680368][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.685302][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.689800][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.694483][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.700651][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.706843][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.712039][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.716911][T12560] do_SYSENTER_32+0x73/0x90 [ 599.721430][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.727736][T12560] [ 599.730052][T12560] Uninit was stored to memory at: [ 599.735076][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 599.740790][T12560] __msan_chain_origin+0x50/0x90 [ 599.745724][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.750832][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.755766][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.760271][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.764951][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.771021][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.777170][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.782382][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.787230][T12560] do_SYSENTER_32+0x73/0x90 [ 599.791729][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.798040][T12560] [ 599.800356][T12560] Uninit was stored to memory at: [ 599.805376][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 599.811087][T12560] __msan_chain_origin+0x50/0x90 [ 599.816017][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.821124][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.826053][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.830566][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.835240][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.841306][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.847455][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.852651][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.857499][T12560] do_SYSENTER_32+0x73/0x90 [ 599.862012][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.868323][T12560] [ 599.870640][T12560] Uninit was stored to memory at: [ 599.875658][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 599.881370][T12560] __msan_chain_origin+0x50/0x90 [ 599.886300][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.891407][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.896336][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.900831][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.905501][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.911563][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.917710][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.922932][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.927781][T12560] do_SYSENTER_32+0x73/0x90 [ 599.932282][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 599.938593][T12560] [ 599.940910][T12560] Uninit was stored to memory at: [ 599.945939][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 599.951657][T12560] __msan_chain_origin+0x50/0x90 [ 599.956594][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 599.961697][T12560] get_compat_msghdr+0x108/0x2b0 [ 599.966631][T12560] do_recvmmsg+0xdbb/0x22c0 [ 599.971117][T12560] __sys_recvmmsg+0x5dd/0x610 [ 599.975799][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 599.981850][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 599.987984][T12560] __do_fast_syscall_32+0x2af/0x480 [ 599.993169][T12560] do_fast_syscall_32+0x6b/0xd0 [ 599.998005][T12560] do_SYSENTER_32+0x73/0x90 [ 600.002494][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.008798][T12560] [ 600.011106][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 600.017765][T12560] do_recvmmsg+0xbf/0x22c0 [ 600.022167][T12560] do_recvmmsg+0xbf/0x22c0 [ 600.079764][T12564] not chained 1510000 origins [ 600.084470][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 600.093130][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.103177][T12564] Call Trace: [ 600.106475][T12564] dump_stack+0x21c/0x280 [ 600.110815][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 600.116544][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 600.122624][T12564] ? kmsan_get_metadata+0x116/0x180 [ 600.127861][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 600.133666][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 600.139728][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 600.145125][T12564] ? kmsan_get_metadata+0x116/0x180 [ 600.150325][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 600.155872][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 600.161965][T12564] ? _copy_from_user+0x201/0x310 [ 600.166906][T12564] ? kmsan_get_metadata+0x116/0x180 [ 600.172102][T12564] __msan_chain_origin+0x50/0x90 [ 600.177037][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 600.182157][T12564] get_compat_msghdr+0x108/0x2b0 [ 600.187097][T12564] do_recvmmsg+0xdbb/0x22c0 [ 600.191590][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 600.197405][T12564] ? kmsan_get_metadata+0x116/0x180 [ 600.202591][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 600.208474][T12564] ? kmsan_get_metadata+0x116/0x180 [ 600.213658][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 600.219282][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 600.224552][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 600.229393][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 600.234144][T12564] __sys_recvmmsg+0x5dd/0x610 [ 600.238822][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 600.244887][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 600.251032][T12564] __do_fast_syscall_32+0x2af/0x480 [ 600.256223][T12564] do_fast_syscall_32+0x6b/0xd0 [ 600.261062][T12564] do_SYSENTER_32+0x73/0x90 [ 600.265564][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.271888][T12564] RIP: 0023:0xf7fc1549 [ 600.275933][T12564] Code: Bad RIP value. [ 600.279997][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 600.288391][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 600.296348][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 600.304306][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 600.312276][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 600.320228][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.328189][T12564] Uninit was stored to memory at: [ 600.333199][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 600.338903][T12564] __msan_chain_origin+0x50/0x90 [ 600.343822][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 600.348936][T12564] get_compat_msghdr+0x108/0x2b0 [ 600.353860][T12564] do_recvmmsg+0xdbb/0x22c0 [ 600.358353][T12564] __sys_recvmmsg+0x5dd/0x610 [ 600.363016][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 600.369081][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 600.375228][T12564] __do_fast_syscall_32+0x2af/0x480 [ 600.380412][T12564] do_fast_syscall_32+0x6b/0xd0 [ 600.385247][T12564] do_SYSENTER_32+0x73/0x90 [ 600.389737][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.396037][T12564] [ 600.398348][T12564] Uninit was stored to memory at: [ 600.403375][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 600.409085][T12564] __msan_chain_origin+0x50/0x90 [ 600.414021][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 600.419127][T12564] get_compat_msghdr+0x108/0x2b0 [ 600.424052][T12564] do_recvmmsg+0xdbb/0x22c0 [ 600.428539][T12564] __sys_recvmmsg+0x5dd/0x610 [ 600.433205][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 600.439259][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 600.445402][T12564] __do_fast_syscall_32+0x2af/0x480 [ 600.450586][T12564] do_fast_syscall_32+0x6b/0xd0 [ 600.455423][T12564] do_SYSENTER_32+0x73/0x90 [ 600.459915][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.466216][T12564] [ 600.468524][T12564] Uninit was stored to memory at: [ 600.473536][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 600.479254][T12564] __msan_chain_origin+0x50/0x90 [ 600.484176][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 600.489354][T12564] get_compat_msghdr+0x108/0x2b0 [ 600.494275][T12564] do_recvmmsg+0xdbb/0x22c0 [ 600.498764][T12564] __sys_recvmmsg+0x5dd/0x610 [ 600.503428][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 600.509482][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 600.515624][T12564] __do_fast_syscall_32+0x2af/0x480 [ 600.520806][T12564] do_fast_syscall_32+0x6b/0xd0 [ 600.525638][T12564] do_SYSENTER_32+0x73/0x90 [ 600.530131][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.536431][T12564] [ 600.538739][T12564] Uninit was stored to memory at: [ 600.543752][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 600.549458][T12564] __msan_chain_origin+0x50/0x90 [ 600.554486][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 600.559585][T12564] get_compat_msghdr+0x108/0x2b0 [ 600.564507][T12564] do_recvmmsg+0xdbb/0x22c0 [ 600.568994][T12564] __sys_recvmmsg+0x5dd/0x610 [ 600.573677][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 600.579733][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 600.585875][T12564] __do_fast_syscall_32+0x2af/0x480 [ 600.591062][T12564] do_fast_syscall_32+0x6b/0xd0 [ 600.595901][T12564] do_SYSENTER_32+0x73/0x90 [ 600.600394][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.606696][T12564] [ 600.609009][T12564] Uninit was stored to memory at: [ 600.614024][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 600.619737][T12564] __msan_chain_origin+0x50/0x90 [ 600.624662][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 600.629765][T12564] get_compat_msghdr+0x108/0x2b0 [ 600.634689][T12564] do_recvmmsg+0xdbb/0x22c0 [ 600.639176][T12564] __sys_recvmmsg+0x5dd/0x610 [ 600.643858][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 600.649912][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 600.656053][T12564] __do_fast_syscall_32+0x2af/0x480 [ 600.661240][T12564] do_fast_syscall_32+0x6b/0xd0 [ 600.666076][T12564] do_SYSENTER_32+0x73/0x90 [ 600.670670][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.676972][T12564] [ 600.679282][T12564] Uninit was stored to memory at: [ 600.684292][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 600.689997][T12564] __msan_chain_origin+0x50/0x90 [ 600.694921][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 600.700016][T12564] get_compat_msghdr+0x108/0x2b0 [ 600.704935][T12564] do_recvmmsg+0xdbb/0x22c0 [ 600.709435][T12564] __sys_recvmmsg+0x5dd/0x610 [ 600.714099][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 600.720149][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 600.726375][T12564] __do_fast_syscall_32+0x2af/0x480 [ 600.731568][T12564] do_fast_syscall_32+0x6b/0xd0 [ 600.736404][T12564] do_SYSENTER_32+0x73/0x90 [ 600.740891][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.747191][T12564] [ 600.749499][T12564] Uninit was stored to memory at: [ 600.754506][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 600.760227][T12564] __msan_chain_origin+0x50/0x90 [ 600.765155][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 600.770250][T12564] get_compat_msghdr+0x108/0x2b0 [ 600.775171][T12564] do_recvmmsg+0xdbb/0x22c0 [ 600.779658][T12564] __sys_recvmmsg+0x5dd/0x610 [ 600.784321][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 600.790370][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 600.796508][T12564] __do_fast_syscall_32+0x2af/0x480 [ 600.801691][T12564] do_fast_syscall_32+0x6b/0xd0 [ 600.806526][T12564] do_SYSENTER_32+0x73/0x90 [ 600.811015][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.817316][T12564] [ 600.819639][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 600.826297][T12564] do_recvmmsg+0xbf/0x22c0 [ 600.830697][T12564] do_recvmmsg+0xbf/0x22c0 [ 601.022905][T12564] not chained 1520000 origins [ 601.027614][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 601.036275][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.046324][T12564] Call Trace: [ 601.049629][T12564] dump_stack+0x21c/0x280 [ 601.053963][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 601.059687][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 601.065757][T12564] ? kmsan_get_metadata+0x116/0x180 [ 601.070977][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 601.076786][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 601.082857][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 601.088235][T12564] ? kmsan_get_metadata+0x116/0x180 [ 601.093433][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 601.098982][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 601.105057][T12564] ? _copy_from_user+0x201/0x310 [ 601.110031][T12564] ? kmsan_get_metadata+0x116/0x180 [ 601.115232][T12564] __msan_chain_origin+0x50/0x90 [ 601.120171][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 601.125302][T12564] get_compat_msghdr+0x108/0x2b0 [ 601.130465][T12564] do_recvmmsg+0xdbb/0x22c0 [ 601.134973][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 601.140793][T12564] ? kmsan_get_metadata+0x116/0x180 [ 601.145995][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 601.151920][T12564] ? kmsan_get_metadata+0x116/0x180 [ 601.157112][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 601.162743][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 601.168029][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 601.172787][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 601.177546][T12564] __sys_recvmmsg+0x5dd/0x610 [ 601.182234][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 601.188308][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 601.194467][T12564] __do_fast_syscall_32+0x2af/0x480 [ 601.199668][T12564] do_fast_syscall_32+0x6b/0xd0 [ 601.204517][T12564] do_SYSENTER_32+0x73/0x90 [ 601.209020][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.215349][T12564] RIP: 0023:0xf7fc1549 [ 601.219403][T12564] Code: Bad RIP value. [ 601.223459][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 601.231866][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 601.239836][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 601.247805][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 601.255770][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 601.263735][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 601.271712][T12564] Uninit was stored to memory at: [ 601.276740][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 601.282456][T12564] __msan_chain_origin+0x50/0x90 [ 601.287382][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 601.292480][T12564] get_compat_msghdr+0x108/0x2b0 [ 601.297404][T12564] do_recvmmsg+0xdbb/0x22c0 [ 601.301888][T12564] __sys_recvmmsg+0x5dd/0x610 [ 601.306550][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 601.312602][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 601.318745][T12564] __do_fast_syscall_32+0x2af/0x480 [ 601.323930][T12564] do_fast_syscall_32+0x6b/0xd0 [ 601.328767][T12564] do_SYSENTER_32+0x73/0x90 [ 601.333268][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.339570][T12564] [ 601.341894][T12564] Uninit was stored to memory at: [ 601.346902][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 601.352616][T12564] __msan_chain_origin+0x50/0x90 [ 601.357542][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 601.362648][T12564] get_compat_msghdr+0x108/0x2b0 [ 601.367580][T12564] do_recvmmsg+0xdbb/0x22c0 [ 601.372067][T12564] __sys_recvmmsg+0x5dd/0x610 [ 601.376745][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 601.382808][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 601.388953][T12564] __do_fast_syscall_32+0x2af/0x480 [ 601.394141][T12564] do_fast_syscall_32+0x6b/0xd0 [ 601.398979][T12564] do_SYSENTER_32+0x73/0x90 [ 601.403473][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.409778][T12564] [ 601.412110][T12564] Uninit was stored to memory at: [ 601.417224][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 601.422930][T12564] __msan_chain_origin+0x50/0x90 [ 601.427858][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 601.432962][T12564] get_compat_msghdr+0x108/0x2b0 [ 601.437884][T12564] do_recvmmsg+0xdbb/0x22c0 [ 601.442374][T12564] __sys_recvmmsg+0x5dd/0x610 [ 601.447037][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 601.453115][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 601.459256][T12564] __do_fast_syscall_32+0x2af/0x480 [ 601.464440][T12564] do_fast_syscall_32+0x6b/0xd0 [ 601.469283][T12564] do_SYSENTER_32+0x73/0x90 [ 601.473772][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.480077][T12564] [ 601.482389][T12564] Uninit was stored to memory at: [ 601.487490][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 601.493200][T12564] __msan_chain_origin+0x50/0x90 [ 601.498146][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 601.503247][T12564] get_compat_msghdr+0x108/0x2b0 [ 601.508192][T12564] do_recvmmsg+0xdbb/0x22c0 [ 601.512680][T12564] __sys_recvmmsg+0x5dd/0x610 [ 601.517349][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 601.523416][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 601.529561][T12564] __do_fast_syscall_32+0x2af/0x480 [ 601.534748][T12564] do_fast_syscall_32+0x6b/0xd0 [ 601.539604][T12564] do_SYSENTER_32+0x73/0x90 [ 601.544097][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.550411][T12564] [ 601.552721][T12564] Uninit was stored to memory at: [ 601.557732][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 601.563433][T12564] __msan_chain_origin+0x50/0x90 [ 601.568359][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 601.573457][T12564] get_compat_msghdr+0x108/0x2b0 [ 601.578488][T12564] do_recvmmsg+0xdbb/0x22c0 [ 601.582985][T12564] __sys_recvmmsg+0x5dd/0x610 [ 601.587668][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 601.593727][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 601.599890][T12564] __do_fast_syscall_32+0x2af/0x480 [ 601.605081][T12564] do_fast_syscall_32+0x6b/0xd0 [ 601.609921][T12564] do_SYSENTER_32+0x73/0x90 [ 601.614411][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.620710][T12564] [ 601.623018][T12564] Uninit was stored to memory at: [ 601.628045][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 601.633755][T12564] __msan_chain_origin+0x50/0x90 [ 601.638707][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 601.643805][T12564] get_compat_msghdr+0x108/0x2b0 [ 601.648729][T12564] do_recvmmsg+0xdbb/0x22c0 [ 601.653216][T12564] __sys_recvmmsg+0x5dd/0x610 [ 601.657879][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 601.663932][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 601.670073][T12564] __do_fast_syscall_32+0x2af/0x480 [ 601.675255][T12564] do_fast_syscall_32+0x6b/0xd0 [ 601.680096][T12564] do_SYSENTER_32+0x73/0x90 [ 601.684586][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.690887][T12564] [ 601.693197][T12564] Uninit was stored to memory at: [ 601.698212][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 601.703920][T12564] __msan_chain_origin+0x50/0x90 [ 601.708845][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 601.713941][T12564] get_compat_msghdr+0x108/0x2b0 [ 601.718866][T12564] do_recvmmsg+0xdbb/0x22c0 [ 601.723354][T12564] __sys_recvmmsg+0x5dd/0x610 [ 601.728019][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 601.734074][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 601.740215][T12564] __do_fast_syscall_32+0x2af/0x480 [ 601.745574][T12564] do_fast_syscall_32+0x6b/0xd0 [ 601.750419][T12564] do_SYSENTER_32+0x73/0x90 [ 601.754922][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.761223][T12564] [ 601.763533][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 601.770276][T12564] do_recvmmsg+0xbf/0x22c0 [ 601.774676][T12564] do_recvmmsg+0xbf/0x22c0 [ 601.825713][T12560] not chained 1530000 origins [ 601.830417][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 601.839070][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.849108][T12560] Call Trace: [ 601.852394][T12560] dump_stack+0x21c/0x280 [ 601.856720][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 601.862429][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 601.868498][T12560] ? kmsan_get_metadata+0x116/0x180 [ 601.873703][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 601.879583][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 601.885638][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 601.891006][T12560] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 601.897060][T12560] ? idle_cpu+0x9a/0x1d0 [ 601.901291][T12560] ? kmsan_get_metadata+0x116/0x180 [ 601.906476][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 601.912017][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 601.918077][T12560] ? _copy_from_user+0x201/0x310 [ 601.923005][T12560] ? kmsan_get_metadata+0x116/0x180 [ 601.928192][T12560] __msan_chain_origin+0x50/0x90 [ 601.933120][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 601.938232][T12560] get_compat_msghdr+0x108/0x2b0 [ 601.943163][T12560] do_recvmmsg+0xdbb/0x22c0 [ 601.947667][T12560] ? kmsan_get_metadata+0x116/0x180 [ 601.952859][T12560] ? kmsan_get_metadata+0x116/0x180 [ 601.958051][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 601.963934][T12560] ? kmsan_get_metadata+0x116/0x180 [ 601.969122][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 601.974744][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 601.980015][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 601.984762][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 601.989515][T12560] __sys_recvmmsg+0x5dd/0x610 [ 601.994190][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 602.000334][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 602.006480][T12560] __do_fast_syscall_32+0x2af/0x480 [ 602.011667][T12560] do_fast_syscall_32+0x6b/0xd0 [ 602.016514][T12560] do_SYSENTER_32+0x73/0x90 [ 602.021019][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 602.027329][T12560] RIP: 0023:0xf7fc1549 [ 602.031373][T12560] Code: Bad RIP value. [ 602.035425][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 602.043822][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 602.051780][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 602.059739][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 602.067695][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 602.075650][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.083611][T12560] Uninit was stored to memory at: [ 602.088623][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 602.094328][T12560] __msan_chain_origin+0x50/0x90 [ 602.099250][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 602.104346][T12560] get_compat_msghdr+0x108/0x2b0 [ 602.109266][T12560] do_recvmmsg+0xdbb/0x22c0 [ 602.113769][T12560] __sys_recvmmsg+0x5dd/0x610 [ 602.118432][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 602.124493][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 602.130629][T12560] __do_fast_syscall_32+0x2af/0x480 [ 602.135812][T12560] do_fast_syscall_32+0x6b/0xd0 [ 602.140646][T12560] do_SYSENTER_32+0x73/0x90 [ 602.145135][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 602.151453][T12560] [ 602.153766][T12560] Uninit was stored to memory at: [ 602.158779][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 602.164483][T12560] __msan_chain_origin+0x50/0x90 [ 602.169504][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 602.174598][T12560] get_compat_msghdr+0x108/0x2b0 [ 602.179522][T12560] do_recvmmsg+0xdbb/0x22c0 [ 602.184009][T12560] __sys_recvmmsg+0x5dd/0x610 [ 602.188674][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 602.194741][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 602.200882][T12560] __do_fast_syscall_32+0x2af/0x480 [ 602.206066][T12560] do_fast_syscall_32+0x6b/0xd0 [ 602.210905][T12560] do_SYSENTER_32+0x73/0x90 [ 602.215396][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 602.221709][T12560] [ 602.224021][T12560] Uninit was stored to memory at: [ 602.229032][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 602.234734][T12560] __msan_chain_origin+0x50/0x90 [ 602.239659][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 602.244758][T12560] get_compat_msghdr+0x108/0x2b0 [ 602.249681][T12560] do_recvmmsg+0xdbb/0x22c0 [ 602.254171][T12560] __sys_recvmmsg+0x5dd/0x610 [ 602.258835][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 602.264903][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 602.271043][T12560] __do_fast_syscall_32+0x2af/0x480 [ 602.276227][T12560] do_fast_syscall_32+0x6b/0xd0 [ 602.281063][T12560] do_SYSENTER_32+0x73/0x90 [ 602.285553][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 602.291859][T12560] [ 602.294167][T12560] Uninit was stored to memory at: [ 602.299194][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 602.305006][T12560] __msan_chain_origin+0x50/0x90 [ 602.309930][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 602.315028][T12560] get_compat_msghdr+0x108/0x2b0 [ 602.319958][T12560] do_recvmmsg+0xdbb/0x22c0 [ 602.324448][T12560] __sys_recvmmsg+0x5dd/0x610 [ 602.329113][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 602.335164][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 602.341303][T12560] __do_fast_syscall_32+0x2af/0x480 [ 602.346488][T12560] do_fast_syscall_32+0x6b/0xd0 [ 602.351324][T12560] do_SYSENTER_32+0x73/0x90 [ 602.355813][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 602.362114][T12560] [ 602.364423][T12560] Uninit was stored to memory at: [ 602.369448][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 602.375169][T12560] __msan_chain_origin+0x50/0x90 [ 602.380091][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 602.385185][T12560] get_compat_msghdr+0x108/0x2b0 [ 602.390106][T12560] do_recvmmsg+0xdbb/0x22c0 [ 602.394596][T12560] __sys_recvmmsg+0x5dd/0x610 [ 602.399268][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 602.405330][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 602.411470][T12560] __do_fast_syscall_32+0x2af/0x480 [ 602.416667][T12560] do_fast_syscall_32+0x6b/0xd0 [ 602.421518][T12560] do_SYSENTER_32+0x73/0x90 [ 602.426012][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 602.432316][T12560] [ 602.434628][T12560] Uninit was stored to memory at: [ 602.439644][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 602.445354][T12560] __msan_chain_origin+0x50/0x90 [ 602.450285][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 602.455384][T12560] get_compat_msghdr+0x108/0x2b0 [ 602.460312][T12560] do_recvmmsg+0xdbb/0x22c0 [ 602.464805][T12560] __sys_recvmmsg+0x5dd/0x610 [ 602.469472][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 602.475533][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 602.481687][T12560] __do_fast_syscall_32+0x2af/0x480 [ 602.486874][T12560] do_fast_syscall_32+0x6b/0xd0 [ 602.491719][T12560] do_SYSENTER_32+0x73/0x90 [ 602.496321][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 602.502637][T12560] [ 602.504952][T12560] Uninit was stored to memory at: [ 602.509968][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 602.515671][T12560] __msan_chain_origin+0x50/0x90 [ 602.520605][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 602.525702][T12560] get_compat_msghdr+0x108/0x2b0 [ 602.530620][T12560] do_recvmmsg+0xdbb/0x22c0 [ 602.535105][T12560] __sys_recvmmsg+0x5dd/0x610 [ 602.539769][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 602.545842][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 602.551993][T12560] __do_fast_syscall_32+0x2af/0x480 [ 602.557176][T12560] do_fast_syscall_32+0x6b/0xd0 [ 602.562097][T12560] do_SYSENTER_32+0x73/0x90 [ 602.566585][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 602.572978][T12560] [ 602.575288][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 602.582040][T12560] do_recvmmsg+0xbf/0x22c0 [ 602.586527][T12560] do_recvmmsg+0xbf/0x22c0 [ 602.866917][T12560] not chained 1540000 origins [ 602.871725][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 602.880398][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.890463][T12560] Call Trace: [ 602.893765][T12560] dump_stack+0x21c/0x280 [ 602.898105][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 602.903828][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 602.909899][T12560] ? kmsan_get_metadata+0x116/0x180 [ 602.915099][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 602.920903][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 602.926971][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 602.932347][T12560] ? kmsan_get_metadata+0x116/0x180 [ 602.937546][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 602.943096][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 602.949168][T12560] ? _copy_from_user+0x201/0x310 [ 602.954117][T12560] ? kmsan_get_metadata+0x116/0x180 [ 602.959322][T12560] __msan_chain_origin+0x50/0x90 [ 602.964284][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 602.969432][T12560] get_compat_msghdr+0x108/0x2b0 [ 602.974384][T12560] do_recvmmsg+0xdbb/0x22c0 [ 602.978908][T12560] ? kmsan_get_metadata+0x116/0x180 [ 602.984113][T12560] ? kmsan_get_metadata+0x116/0x180 [ 602.989350][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 602.995248][T12560] ? kmsan_get_metadata+0x116/0x180 [ 603.000447][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 603.006086][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 603.011378][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 603.016140][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 603.020911][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.025603][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.031683][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.037848][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.043059][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.047924][T12560] do_SYSENTER_32+0x73/0x90 [ 603.052436][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.058770][T12560] RIP: 0023:0xf7fc1549 [ 603.062826][T12560] Code: Bad RIP value. [ 603.066893][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 603.075300][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 603.083290][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 603.091259][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 603.099226][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 603.107202][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 603.115178][T12560] Uninit was stored to memory at: [ 603.120333][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 603.126053][T12560] __msan_chain_origin+0x50/0x90 [ 603.131091][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.136205][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.141227][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.145731][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.150408][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.156505][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.162668][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.167868][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.172719][T12560] do_SYSENTER_32+0x73/0x90 [ 603.177221][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.183530][T12560] [ 603.185848][T12560] Uninit was stored to memory at: [ 603.190868][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 603.196583][T12560] __msan_chain_origin+0x50/0x90 [ 603.201515][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.206622][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.211639][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.216134][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.220811][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.226878][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.233038][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.238233][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.243079][T12560] do_SYSENTER_32+0x73/0x90 [ 603.247583][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.253894][T12560] [ 603.256210][T12560] Uninit was stored to memory at: [ 603.261233][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 603.266947][T12560] __msan_chain_origin+0x50/0x90 [ 603.271897][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.277009][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.281941][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.286440][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.291113][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.297258][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.303409][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.308609][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.313456][T12560] do_SYSENTER_32+0x73/0x90 [ 603.317955][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.324261][T12560] [ 603.326572][T12560] Uninit was stored to memory at: [ 603.331589][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 603.337295][T12560] __msan_chain_origin+0x50/0x90 [ 603.342222][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.347321][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.352242][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.356728][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.361387][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.367445][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.373586][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.378772][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.383606][T12560] do_SYSENTER_32+0x73/0x90 [ 603.388094][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.394394][T12560] [ 603.396700][T12560] Uninit was stored to memory at: [ 603.401710][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 603.407414][T12560] __msan_chain_origin+0x50/0x90 [ 603.412336][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.417452][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.422373][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.426861][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.431523][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.437572][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.443712][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.448898][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.453733][T12560] do_SYSENTER_32+0x73/0x90 [ 603.458224][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.464526][T12560] [ 603.466837][T12560] Uninit was stored to memory at: [ 603.471853][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 603.477555][T12560] __msan_chain_origin+0x50/0x90 [ 603.482479][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.487573][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.492503][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.497097][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.501758][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.507812][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.513959][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.519144][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.523980][T12560] do_SYSENTER_32+0x73/0x90 [ 603.528472][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.534772][T12560] [ 603.537082][T12560] Uninit was stored to memory at: [ 603.542089][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 603.547794][T12560] __msan_chain_origin+0x50/0x90 [ 603.552717][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.557811][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.562730][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.567218][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.571968][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.578020][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.584169][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.589445][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.594282][T12560] do_SYSENTER_32+0x73/0x90 [ 603.598770][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.605073][T12560] [ 603.607385][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 603.614043][T12560] do_recvmmsg+0xbf/0x22c0 [ 603.618444][T12560] do_recvmmsg+0xbf/0x22c0 [ 603.694450][T12560] not chained 1550000 origins [ 603.699251][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 603.707928][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.717973][T12560] Call Trace: [ 603.721265][T12560] dump_stack+0x21c/0x280 [ 603.725602][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 603.731327][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 603.737415][T12560] ? kmsan_get_metadata+0x116/0x180 [ 603.742634][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 603.748533][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 603.754601][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 603.759980][T12560] ? kmsan_get_metadata+0x116/0x180 [ 603.765178][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 603.770726][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 603.776800][T12560] ? _copy_from_user+0x201/0x310 [ 603.781739][T12560] ? kmsan_get_metadata+0x116/0x180 [ 603.786943][T12560] __msan_chain_origin+0x50/0x90 [ 603.791883][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.797009][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.801955][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.806466][T12560] ? kmsan_get_metadata+0x116/0x180 [ 603.811673][T12560] ? kmsan_get_metadata+0x116/0x180 [ 603.816890][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 603.822787][T12560] ? kmsan_get_metadata+0x116/0x180 [ 603.828005][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 603.833657][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 603.838968][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 603.843732][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 603.848500][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.853192][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.859267][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.865423][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.870629][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.875481][T12560] do_SYSENTER_32+0x73/0x90 [ 603.879980][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 603.886292][T12560] RIP: 0023:0xf7fc1549 [ 603.890339][T12560] Code: Bad RIP value. [ 603.894388][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 603.902785][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 603.910753][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 603.918711][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 603.926667][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 603.934624][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 603.942589][T12560] Uninit was stored to memory at: [ 603.947705][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 603.953494][T12560] __msan_chain_origin+0x50/0x90 [ 603.958419][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 603.963514][T12560] get_compat_msghdr+0x108/0x2b0 [ 603.968440][T12560] do_recvmmsg+0xdbb/0x22c0 [ 603.972928][T12560] __sys_recvmmsg+0x5dd/0x610 [ 603.977596][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 603.983664][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 603.989812][T12560] __do_fast_syscall_32+0x2af/0x480 [ 603.995002][T12560] do_fast_syscall_32+0x6b/0xd0 [ 603.999843][T12560] do_SYSENTER_32+0x73/0x90 [ 604.004333][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.010638][T12560] [ 604.012960][T12560] Uninit was stored to memory at: [ 604.017976][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 604.023684][T12560] __msan_chain_origin+0x50/0x90 [ 604.028607][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 604.033702][T12560] get_compat_msghdr+0x108/0x2b0 [ 604.038629][T12560] do_recvmmsg+0xdbb/0x22c0 [ 604.043117][T12560] __sys_recvmmsg+0x5dd/0x610 [ 604.047782][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 604.053839][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 604.059991][T12560] __do_fast_syscall_32+0x2af/0x480 [ 604.065178][T12560] do_fast_syscall_32+0x6b/0xd0 [ 604.070013][T12560] do_SYSENTER_32+0x73/0x90 [ 604.074591][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.080894][T12560] [ 604.083205][T12560] Uninit was stored to memory at: [ 604.088216][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 604.093924][T12560] __msan_chain_origin+0x50/0x90 [ 604.098849][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 604.103963][T12560] get_compat_msghdr+0x108/0x2b0 [ 604.108887][T12560] do_recvmmsg+0xdbb/0x22c0 [ 604.113477][T12560] __sys_recvmmsg+0x5dd/0x610 [ 604.118157][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 604.124210][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 604.130358][T12560] __do_fast_syscall_32+0x2af/0x480 [ 604.135540][T12560] do_fast_syscall_32+0x6b/0xd0 [ 604.140378][T12560] do_SYSENTER_32+0x73/0x90 [ 604.144880][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.151269][T12560] [ 604.153577][T12560] Uninit was stored to memory at: [ 604.158588][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 604.164295][T12560] __msan_chain_origin+0x50/0x90 [ 604.169216][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 604.174415][T12560] get_compat_msghdr+0x108/0x2b0 [ 604.179338][T12560] do_recvmmsg+0xdbb/0x22c0 [ 604.183831][T12560] __sys_recvmmsg+0x5dd/0x610 [ 604.188495][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 604.195229][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 604.201368][T12560] __do_fast_syscall_32+0x2af/0x480 [ 604.206555][T12560] do_fast_syscall_32+0x6b/0xd0 [ 604.211478][T12560] do_SYSENTER_32+0x73/0x90 [ 604.215969][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.222272][T12560] [ 604.224587][T12560] Uninit was stored to memory at: [ 604.229597][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 604.235324][T12560] __msan_chain_origin+0x50/0x90 [ 604.240250][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 604.245348][T12560] get_compat_msghdr+0x108/0x2b0 [ 604.250272][T12560] do_recvmmsg+0xdbb/0x22c0 [ 604.254761][T12560] __sys_recvmmsg+0x5dd/0x610 [ 604.259425][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 604.265478][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 604.271619][T12560] __do_fast_syscall_32+0x2af/0x480 [ 604.276807][T12560] do_fast_syscall_32+0x6b/0xd0 [ 604.281642][T12560] do_SYSENTER_32+0x73/0x90 [ 604.286222][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.292548][T12560] [ 604.294857][T12560] Uninit was stored to memory at: [ 604.299869][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 604.305585][T12560] __msan_chain_origin+0x50/0x90 [ 604.310600][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 604.315695][T12560] get_compat_msghdr+0x108/0x2b0 [ 604.320616][T12560] do_recvmmsg+0xdbb/0x22c0 [ 604.325101][T12560] __sys_recvmmsg+0x5dd/0x610 [ 604.329763][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 604.335906][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 604.342064][T12560] __do_fast_syscall_32+0x2af/0x480 [ 604.347249][T12560] do_fast_syscall_32+0x6b/0xd0 [ 604.352085][T12560] do_SYSENTER_32+0x73/0x90 [ 604.356576][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.362878][T12560] [ 604.365186][T12560] Uninit was stored to memory at: [ 604.370194][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 604.375895][T12560] __msan_chain_origin+0x50/0x90 [ 604.380848][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 604.385957][T12560] get_compat_msghdr+0x108/0x2b0 [ 604.390895][T12560] do_recvmmsg+0xdbb/0x22c0 [ 604.395384][T12560] __sys_recvmmsg+0x5dd/0x610 [ 604.400045][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 604.406094][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 604.412228][T12560] __do_fast_syscall_32+0x2af/0x480 [ 604.417412][T12560] do_fast_syscall_32+0x6b/0xd0 [ 604.422242][T12560] do_SYSENTER_32+0x73/0x90 [ 604.426737][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.433052][T12560] [ 604.435399][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 604.442057][T12560] do_recvmmsg+0xbf/0x22c0 [ 604.446459][T12560] do_recvmmsg+0xbf/0x22c0 [ 604.674893][T12560] not chained 1560000 origins [ 604.679608][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 604.688273][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.698318][T12560] Call Trace: [ 604.701613][T12560] dump_stack+0x21c/0x280 [ 604.705949][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 604.711668][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 604.717729][T12560] ? kmsan_get_metadata+0x116/0x180 [ 604.722939][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 604.728739][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 604.734798][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 604.740170][T12560] ? kmsan_get_metadata+0x116/0x180 [ 604.745366][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 604.750911][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 604.756981][T12560] ? _copy_from_user+0x201/0x310 [ 604.761922][T12560] ? kmsan_get_metadata+0x116/0x180 [ 604.767116][T12560] __msan_chain_origin+0x50/0x90 [ 604.772053][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 604.777177][T12560] get_compat_msghdr+0x108/0x2b0 [ 604.782120][T12560] do_recvmmsg+0xdbb/0x22c0 [ 604.786627][T12560] ? kmsan_get_metadata+0x116/0x180 [ 604.791822][T12560] ? kmsan_get_metadata+0x116/0x180 [ 604.797018][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 604.802932][T12560] ? kmsan_get_metadata+0x116/0x180 [ 604.808130][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 604.813765][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 604.819047][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 604.823803][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 604.828571][T12560] __sys_recvmmsg+0x5dd/0x610 [ 604.833265][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 604.839339][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 604.845483][T12560] __do_fast_syscall_32+0x2af/0x480 [ 604.850675][T12560] do_fast_syscall_32+0x6b/0xd0 [ 604.855515][T12560] do_SYSENTER_32+0x73/0x90 [ 604.860010][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.866320][T12560] RIP: 0023:0xf7fc1549 [ 604.870368][T12560] Code: Bad RIP value. [ 604.874416][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 604.882822][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 604.890780][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 604.898738][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.906713][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 604.914670][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.922644][T12560] Uninit was stored to memory at: [ 604.927657][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 604.933360][T12560] __msan_chain_origin+0x50/0x90 [ 604.938285][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 604.943381][T12560] get_compat_msghdr+0x108/0x2b0 [ 604.948303][T12560] do_recvmmsg+0xdbb/0x22c0 [ 604.952789][T12560] __sys_recvmmsg+0x5dd/0x610 [ 604.957476][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 604.963531][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 604.969669][T12560] __do_fast_syscall_32+0x2af/0x480 [ 604.974852][T12560] do_fast_syscall_32+0x6b/0xd0 [ 604.979687][T12560] do_SYSENTER_32+0x73/0x90 [ 604.984178][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 604.990483][T12560] [ 604.992795][T12560] Uninit was stored to memory at: [ 604.997806][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 605.003514][T12560] __msan_chain_origin+0x50/0x90 [ 605.008435][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 605.013617][T12560] get_compat_msghdr+0x108/0x2b0 [ 605.018540][T12560] do_recvmmsg+0xdbb/0x22c0 [ 605.023027][T12560] __sys_recvmmsg+0x5dd/0x610 [ 605.027687][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.033850][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.039988][T12560] __do_fast_syscall_32+0x2af/0x480 [ 605.045173][T12560] do_fast_syscall_32+0x6b/0xd0 [ 605.050010][T12560] do_SYSENTER_32+0x73/0x90 [ 605.054515][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.060822][T12560] [ 605.063130][T12560] Uninit was stored to memory at: [ 605.068143][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 605.073851][T12560] __msan_chain_origin+0x50/0x90 [ 605.078867][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 605.084055][T12560] get_compat_msghdr+0x108/0x2b0 [ 605.089079][T12560] do_recvmmsg+0xdbb/0x22c0 [ 605.093693][T12560] __sys_recvmmsg+0x5dd/0x610 [ 605.098368][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.104430][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.110580][T12560] __do_fast_syscall_32+0x2af/0x480 [ 605.115778][T12560] do_fast_syscall_32+0x6b/0xd0 [ 605.120613][T12560] do_SYSENTER_32+0x73/0x90 [ 605.125105][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.131407][T12560] [ 605.133720][T12560] Uninit was stored to memory at: [ 605.138733][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 605.144556][T12560] __msan_chain_origin+0x50/0x90 [ 605.149484][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 605.154583][T12560] get_compat_msghdr+0x108/0x2b0 [ 605.159506][T12560] do_recvmmsg+0xdbb/0x22c0 [ 605.163994][T12560] __sys_recvmmsg+0x5dd/0x610 [ 605.168658][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.174717][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.180863][T12560] __do_fast_syscall_32+0x2af/0x480 [ 605.186047][T12560] do_fast_syscall_32+0x6b/0xd0 [ 605.190883][T12560] do_SYSENTER_32+0x73/0x90 [ 605.195376][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.201678][T12560] [ 605.203988][T12560] Uninit was stored to memory at: [ 605.209009][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 605.214714][T12560] __msan_chain_origin+0x50/0x90 [ 605.219638][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 605.224734][T12560] get_compat_msghdr+0x108/0x2b0 [ 605.229675][T12560] do_recvmmsg+0xdbb/0x22c0 [ 605.234164][T12560] __sys_recvmmsg+0x5dd/0x610 [ 605.238842][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.244898][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.251041][T12560] __do_fast_syscall_32+0x2af/0x480 [ 605.256224][T12560] do_fast_syscall_32+0x6b/0xd0 [ 605.261060][T12560] do_SYSENTER_32+0x73/0x90 [ 605.265550][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.272985][T12560] [ 605.275294][T12560] Uninit was stored to memory at: [ 605.280303][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 605.286022][T12560] __msan_chain_origin+0x50/0x90 [ 605.290942][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 605.296056][T12560] get_compat_msghdr+0x108/0x2b0 [ 605.300983][T12560] do_recvmmsg+0xdbb/0x22c0 [ 605.305472][T12560] __sys_recvmmsg+0x5dd/0x610 [ 605.310134][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.316188][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.322325][T12560] __do_fast_syscall_32+0x2af/0x480 [ 605.327523][T12560] do_fast_syscall_32+0x6b/0xd0 [ 605.332356][T12560] do_SYSENTER_32+0x73/0x90 [ 605.336844][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.343145][T12560] [ 605.345457][T12560] Uninit was stored to memory at: [ 605.350481][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 605.356188][T12560] __msan_chain_origin+0x50/0x90 [ 605.361124][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 605.366234][T12560] get_compat_msghdr+0x108/0x2b0 [ 605.371155][T12560] do_recvmmsg+0xdbb/0x22c0 [ 605.375649][T12560] __sys_recvmmsg+0x5dd/0x610 [ 605.380306][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.386353][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.392489][T12560] __do_fast_syscall_32+0x2af/0x480 [ 605.397671][T12560] do_fast_syscall_32+0x6b/0xd0 [ 605.402519][T12560] do_SYSENTER_32+0x73/0x90 [ 605.407010][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.413314][T12560] [ 605.415626][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 605.422285][T12560] do_recvmmsg+0xbf/0x22c0 [ 605.426685][T12560] do_recvmmsg+0xbf/0x22c0 [ 605.467709][T12564] not chained 1570000 origins [ 605.472399][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 605.481046][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.491082][T12564] Call Trace: [ 605.494362][T12564] dump_stack+0x21c/0x280 [ 605.498705][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 605.504415][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 605.510470][T12564] ? kmsan_get_metadata+0x116/0x180 [ 605.515766][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 605.521567][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 605.527621][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 605.532990][T12564] ? kmsan_get_metadata+0x116/0x180 [ 605.538178][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 605.543816][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 605.549882][T12564] ? _copy_from_user+0x201/0x310 [ 605.554812][T12564] ? kmsan_get_metadata+0x116/0x180 [ 605.560005][T12564] __msan_chain_origin+0x50/0x90 [ 605.564937][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 605.570050][T12564] get_compat_msghdr+0x108/0x2b0 [ 605.574982][T12564] do_recvmmsg+0xdbb/0x22c0 [ 605.579478][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 605.585285][T12564] ? kmsan_get_metadata+0x116/0x180 [ 605.590482][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 605.596367][T12564] ? kmsan_get_metadata+0x116/0x180 [ 605.601552][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 605.607172][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 605.612526][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 605.617276][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 605.622025][T12564] __sys_recvmmsg+0x5dd/0x610 [ 605.626699][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.632762][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.638913][T12564] __do_fast_syscall_32+0x2af/0x480 [ 605.644108][T12564] do_fast_syscall_32+0x6b/0xd0 [ 605.648951][T12564] do_SYSENTER_32+0x73/0x90 [ 605.653448][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.659759][T12564] RIP: 0023:0xf7fc1549 [ 605.663806][T12564] Code: Bad RIP value. [ 605.667869][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 605.676280][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 605.684240][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 605.692198][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 605.700157][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 605.708114][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 605.716077][T12564] Uninit was stored to memory at: [ 605.721089][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 605.726793][T12564] __msan_chain_origin+0x50/0x90 [ 605.731715][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 605.736813][T12564] get_compat_msghdr+0x108/0x2b0 [ 605.741741][T12564] do_recvmmsg+0xdbb/0x22c0 [ 605.746229][T12564] __sys_recvmmsg+0x5dd/0x610 [ 605.750891][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.757048][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.763186][T12564] __do_fast_syscall_32+0x2af/0x480 [ 605.768374][T12564] do_fast_syscall_32+0x6b/0xd0 [ 605.773209][T12564] do_SYSENTER_32+0x73/0x90 [ 605.777698][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.783997][T12564] [ 605.786308][T12564] Uninit was stored to memory at: [ 605.791355][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 605.797056][T12564] __msan_chain_origin+0x50/0x90 [ 605.801978][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 605.807074][T12564] get_compat_msghdr+0x108/0x2b0 [ 605.811990][T12564] do_recvmmsg+0xdbb/0x22c0 [ 605.816479][T12564] __sys_recvmmsg+0x5dd/0x610 [ 605.821143][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.827192][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.833326][T12564] __do_fast_syscall_32+0x2af/0x480 [ 605.838513][T12564] do_fast_syscall_32+0x6b/0xd0 [ 605.843348][T12564] do_SYSENTER_32+0x73/0x90 [ 605.847843][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.854144][T12564] [ 605.856455][T12564] Uninit was stored to memory at: [ 605.861464][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 605.867188][T12564] __msan_chain_origin+0x50/0x90 [ 605.872111][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 605.877208][T12564] get_compat_msghdr+0x108/0x2b0 [ 605.882133][T12564] do_recvmmsg+0xdbb/0x22c0 [ 605.886620][T12564] __sys_recvmmsg+0x5dd/0x610 [ 605.891283][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.897336][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.903478][T12564] __do_fast_syscall_32+0x2af/0x480 [ 605.908663][T12564] do_fast_syscall_32+0x6b/0xd0 [ 605.913497][T12564] do_SYSENTER_32+0x73/0x90 [ 605.917988][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.924289][T12564] [ 605.926599][T12564] Uninit was stored to memory at: [ 605.931624][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 605.937342][T12564] __msan_chain_origin+0x50/0x90 [ 605.942265][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 605.947364][T12564] get_compat_msghdr+0x108/0x2b0 [ 605.952285][T12564] do_recvmmsg+0xdbb/0x22c0 [ 605.956786][T12564] __sys_recvmmsg+0x5dd/0x610 [ 605.961452][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 605.967505][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 605.973645][T12564] __do_fast_syscall_32+0x2af/0x480 [ 605.978834][T12564] do_fast_syscall_32+0x6b/0xd0 [ 605.983671][T12564] do_SYSENTER_32+0x73/0x90 [ 605.988161][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 605.994463][T12564] [ 605.996772][T12564] Uninit was stored to memory at: [ 606.001793][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 606.007511][T12564] __msan_chain_origin+0x50/0x90 [ 606.012430][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 606.017531][T12564] get_compat_msghdr+0x108/0x2b0 [ 606.022461][T12564] do_recvmmsg+0xdbb/0x22c0 [ 606.026946][T12564] __sys_recvmmsg+0x5dd/0x610 [ 606.031604][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 606.037673][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 606.043817][T12564] __do_fast_syscall_32+0x2af/0x480 [ 606.049004][T12564] do_fast_syscall_32+0x6b/0xd0 [ 606.053844][T12564] do_SYSENTER_32+0x73/0x90 [ 606.058334][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 606.064643][T12564] [ 606.066953][T12564] Uninit was stored to memory at: [ 606.071964][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 606.077668][T12564] __msan_chain_origin+0x50/0x90 [ 606.082608][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 606.087707][T12564] get_compat_msghdr+0x108/0x2b0 [ 606.092646][T12564] do_recvmmsg+0xdbb/0x22c0 [ 606.097135][T12564] __sys_recvmmsg+0x5dd/0x610 [ 606.101799][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 606.107853][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 606.113993][T12564] __do_fast_syscall_32+0x2af/0x480 [ 606.119192][T12564] do_fast_syscall_32+0x6b/0xd0 [ 606.124026][T12564] do_SYSENTER_32+0x73/0x90 [ 606.128528][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 606.134829][T12564] [ 606.137139][T12564] Uninit was stored to memory at: [ 606.142150][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 606.147865][T12564] __msan_chain_origin+0x50/0x90 [ 606.152787][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 606.157885][T12564] get_compat_msghdr+0x108/0x2b0 [ 606.162809][T12564] do_recvmmsg+0xdbb/0x22c0 [ 606.167311][T12564] __sys_recvmmsg+0x5dd/0x610 [ 606.171975][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 606.178029][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 606.184168][T12564] __do_fast_syscall_32+0x2af/0x480 [ 606.189355][T12564] do_fast_syscall_32+0x6b/0xd0 [ 606.194193][T12564] do_SYSENTER_32+0x73/0x90 [ 606.198685][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 606.204987][T12564] [ 606.207302][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 606.213961][T12564] do_recvmmsg+0xbf/0x22c0 [ 606.218370][T12564] do_recvmmsg+0xbf/0x22c0 [ 606.440148][T12560] not chained 1580000 origins [ 606.444872][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 606.453536][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.463590][T12560] Call Trace: [ 606.466889][T12560] dump_stack+0x21c/0x280 [ 606.471231][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 606.476958][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 606.483379][T12560] ? kmsan_get_metadata+0x116/0x180 [ 606.488586][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 606.494396][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 606.500467][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 606.505866][T12560] ? kmsan_get_metadata+0x116/0x180 [ 606.511084][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 606.517080][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 606.523155][T12560] ? _copy_from_user+0x201/0x310 [ 606.528094][T12560] ? kmsan_get_metadata+0x116/0x180 [ 606.533299][T12560] __msan_chain_origin+0x50/0x90 [ 606.538244][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 606.543370][T12560] get_compat_msghdr+0x108/0x2b0 [ 606.548319][T12560] do_recvmmsg+0xdbb/0x22c0 [ 606.552834][T12560] ? kmsan_get_metadata+0x116/0x180 [ 606.558042][T12560] ? kmsan_get_metadata+0x116/0x180 [ 606.563248][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 606.569149][T12560] ? kmsan_get_metadata+0x116/0x180 [ 606.574347][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 606.579984][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 606.585273][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 606.590036][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 606.594803][T12560] __sys_recvmmsg+0x5dd/0x610 [ 606.599497][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 606.605576][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 606.611841][T12560] __do_fast_syscall_32+0x2af/0x480 [ 606.617051][T12560] do_fast_syscall_32+0x6b/0xd0 [ 606.621916][T12560] do_SYSENTER_32+0x73/0x90 [ 606.626424][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 606.632744][T12560] RIP: 0023:0xf7fc1549 [ 606.636797][T12560] Code: Bad RIP value. [ 606.640873][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 606.649280][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 606.657251][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 606.665221][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 606.673189][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 606.681174][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 606.689151][T12560] Uninit was stored to memory at: [ 606.694195][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 606.699911][T12560] __msan_chain_origin+0x50/0x90 [ 606.704849][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 606.709957][T12560] get_compat_msghdr+0x108/0x2b0 [ 606.714891][T12560] do_recvmmsg+0xdbb/0x22c0 [ 606.719389][T12560] __sys_recvmmsg+0x5dd/0x610 [ 606.724067][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 606.730132][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 606.736305][T12560] __do_fast_syscall_32+0x2af/0x480 [ 606.741518][T12560] do_fast_syscall_32+0x6b/0xd0 [ 606.746369][T12560] do_SYSENTER_32+0x73/0x90 [ 606.750870][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 606.757179][T12560] [ 606.759500][T12560] Uninit was stored to memory at: [ 606.764524][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 606.770243][T12560] __msan_chain_origin+0x50/0x90 [ 606.775180][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 606.780393][T12560] get_compat_msghdr+0x108/0x2b0 [ 606.785325][T12560] do_recvmmsg+0xdbb/0x22c0 [ 606.789822][T12560] __sys_recvmmsg+0x5dd/0x610 [ 606.794533][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 606.800610][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 606.806777][T12560] __do_fast_syscall_32+0x2af/0x480 [ 606.811994][T12560] do_fast_syscall_32+0x6b/0xd0 [ 606.817019][T12560] do_SYSENTER_32+0x73/0x90 [ 606.821546][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 606.827863][T12560] [ 606.830200][T12560] Uninit was stored to memory at: [ 606.835224][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 606.840957][T12560] __msan_chain_origin+0x50/0x90 [ 606.845898][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 606.851007][T12560] get_compat_msghdr+0x108/0x2b0 [ 606.855939][T12560] do_recvmmsg+0xdbb/0x22c0 [ 606.860442][T12560] __sys_recvmmsg+0x5dd/0x610 [ 606.865123][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 606.871187][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 606.877361][T12560] __do_fast_syscall_32+0x2af/0x480 [ 606.882560][T12560] do_fast_syscall_32+0x6b/0xd0 [ 606.887413][T12560] do_SYSENTER_32+0x73/0x90 [ 606.891920][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 606.898234][T12560] [ 606.900568][T12560] Uninit was stored to memory at: [ 606.905598][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 606.911315][T12560] __msan_chain_origin+0x50/0x90 [ 606.916258][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 606.921464][T12560] get_compat_msghdr+0x108/0x2b0 [ 606.926399][T12560] do_recvmmsg+0xdbb/0x22c0 [ 606.930897][T12560] __sys_recvmmsg+0x5dd/0x610 [ 606.935580][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 606.941652][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 606.947830][T12560] __do_fast_syscall_32+0x2af/0x480 [ 606.953029][T12560] do_fast_syscall_32+0x6b/0xd0 [ 606.957877][T12560] do_SYSENTER_32+0x73/0x90 [ 606.962467][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 606.968865][T12560] [ 606.971182][T12560] Uninit was stored to memory at: [ 606.976210][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 606.981927][T12560] __msan_chain_origin+0x50/0x90 [ 606.986862][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 606.991981][T12560] get_compat_msghdr+0x108/0x2b0 [ 606.996913][T12560] do_recvmmsg+0xdbb/0x22c0 [ 607.001416][T12560] __sys_recvmmsg+0x5dd/0x610 [ 607.006092][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.012168][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.018338][T12560] __do_fast_syscall_32+0x2af/0x480 [ 607.023549][T12560] do_fast_syscall_32+0x6b/0xd0 [ 607.028405][T12560] do_SYSENTER_32+0x73/0x90 [ 607.032915][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.039244][T12560] [ 607.041573][T12560] Uninit was stored to memory at: [ 607.046605][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 607.052327][T12560] __msan_chain_origin+0x50/0x90 [ 607.057268][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 607.062378][T12560] get_compat_msghdr+0x108/0x2b0 [ 607.067314][T12560] do_recvmmsg+0xdbb/0x22c0 [ 607.071815][T12560] __sys_recvmmsg+0x5dd/0x610 [ 607.076489][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.082557][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.088708][T12560] __do_fast_syscall_32+0x2af/0x480 [ 607.093919][T12560] do_fast_syscall_32+0x6b/0xd0 [ 607.098773][T12560] do_SYSENTER_32+0x73/0x90 [ 607.103281][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.109596][T12560] [ 607.111915][T12560] Uninit was stored to memory at: [ 607.116941][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 607.122657][T12560] __msan_chain_origin+0x50/0x90 [ 607.127603][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 607.132707][T12560] get_compat_msghdr+0x108/0x2b0 [ 607.137637][T12560] do_recvmmsg+0xdbb/0x22c0 [ 607.142136][T12560] __sys_recvmmsg+0x5dd/0x610 [ 607.146811][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.152878][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.159033][T12560] __do_fast_syscall_32+0x2af/0x480 [ 607.164226][T12560] do_fast_syscall_32+0x6b/0xd0 [ 607.169072][T12560] do_SYSENTER_32+0x73/0x90 [ 607.173578][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.179899][T12560] [ 607.182216][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 607.188903][T12560] do_recvmmsg+0xbf/0x22c0 [ 607.193314][T12560] do_recvmmsg+0xbf/0x22c0 [ 607.321322][T12564] not chained 1590000 origins [ 607.326036][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 607.334686][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.344724][T12564] Call Trace: [ 607.348008][T12564] dump_stack+0x21c/0x280 [ 607.352437][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 607.358151][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 607.364216][T12564] ? kmsan_get_metadata+0x116/0x180 [ 607.369403][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 607.375201][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 607.381354][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 607.386721][T12564] ? kmsan_get_metadata+0x116/0x180 [ 607.391902][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 607.397432][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 607.403489][T12564] ? _copy_from_user+0x201/0x310 [ 607.408679][T12564] ? kmsan_get_metadata+0x116/0x180 [ 607.413880][T12564] __msan_chain_origin+0x50/0x90 [ 607.418826][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 607.423939][T12564] get_compat_msghdr+0x108/0x2b0 [ 607.428871][T12564] do_recvmmsg+0xdbb/0x22c0 [ 607.433370][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 607.439185][T12564] ? kmsan_get_metadata+0x116/0x180 [ 607.444390][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 607.450361][T12564] ? kmsan_get_metadata+0x116/0x180 [ 607.455560][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 607.461189][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 607.466811][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 607.471561][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 607.476350][T12564] __sys_recvmmsg+0x5dd/0x610 [ 607.481035][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.487188][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.493331][T12564] __do_fast_syscall_32+0x2af/0x480 [ 607.498547][T12564] do_fast_syscall_32+0x6b/0xd0 [ 607.503390][T12564] do_SYSENTER_32+0x73/0x90 [ 607.507885][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.514197][T12564] RIP: 0023:0xf7fc1549 [ 607.518243][T12564] Code: Bad RIP value. [ 607.522309][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 607.530706][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 607.538660][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 607.546614][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 607.554660][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 607.562619][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 607.570585][T12564] Uninit was stored to memory at: [ 607.575613][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 607.581334][T12564] __msan_chain_origin+0x50/0x90 [ 607.586271][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 607.591469][T12564] get_compat_msghdr+0x108/0x2b0 [ 607.596405][T12564] do_recvmmsg+0xdbb/0x22c0 [ 607.600893][T12564] __sys_recvmmsg+0x5dd/0x610 [ 607.605557][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.611732][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.617871][T12564] __do_fast_syscall_32+0x2af/0x480 [ 607.623059][T12564] do_fast_syscall_32+0x6b/0xd0 [ 607.627895][T12564] do_SYSENTER_32+0x73/0x90 [ 607.632386][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.638687][T12564] [ 607.641001][T12564] Uninit was stored to memory at: [ 607.646016][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 607.651723][T12564] __msan_chain_origin+0x50/0x90 [ 607.656651][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 607.661749][T12564] get_compat_msghdr+0x108/0x2b0 [ 607.666672][T12564] do_recvmmsg+0xdbb/0x22c0 [ 607.671164][T12564] __sys_recvmmsg+0x5dd/0x610 [ 607.675829][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.681927][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.688070][T12564] __do_fast_syscall_32+0x2af/0x480 [ 607.693270][T12564] do_fast_syscall_32+0x6b/0xd0 [ 607.698110][T12564] do_SYSENTER_32+0x73/0x90 [ 607.702605][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.708909][T12564] [ 607.711219][T12564] Uninit was stored to memory at: [ 607.716231][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 607.721935][T12564] __msan_chain_origin+0x50/0x90 [ 607.726861][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 607.731961][T12564] get_compat_msghdr+0x108/0x2b0 [ 607.736884][T12564] do_recvmmsg+0xdbb/0x22c0 [ 607.741370][T12564] __sys_recvmmsg+0x5dd/0x610 [ 607.746040][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.752103][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.758266][T12564] __do_fast_syscall_32+0x2af/0x480 [ 607.763539][T12564] do_fast_syscall_32+0x6b/0xd0 [ 607.768399][T12564] do_SYSENTER_32+0x73/0x90 [ 607.772909][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.779212][T12564] [ 607.781541][T12564] Uninit was stored to memory at: [ 607.786551][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 607.792256][T12564] __msan_chain_origin+0x50/0x90 [ 607.797179][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 607.802296][T12564] get_compat_msghdr+0x108/0x2b0 [ 607.807219][T12564] do_recvmmsg+0xdbb/0x22c0 [ 607.811706][T12564] __sys_recvmmsg+0x5dd/0x610 [ 607.816374][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.822448][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.828588][T12564] __do_fast_syscall_32+0x2af/0x480 [ 607.833777][T12564] do_fast_syscall_32+0x6b/0xd0 [ 607.838615][T12564] do_SYSENTER_32+0x73/0x90 [ 607.843108][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.849410][T12564] [ 607.851731][T12564] Uninit was stored to memory at: [ 607.856743][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 607.862447][T12564] __msan_chain_origin+0x50/0x90 [ 607.867369][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 607.872467][T12564] get_compat_msghdr+0x108/0x2b0 [ 607.877386][T12564] do_recvmmsg+0xdbb/0x22c0 [ 607.881873][T12564] __sys_recvmmsg+0x5dd/0x610 [ 607.886534][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.892588][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.898729][T12564] __do_fast_syscall_32+0x2af/0x480 [ 607.903917][T12564] do_fast_syscall_32+0x6b/0xd0 [ 607.908755][T12564] do_SYSENTER_32+0x73/0x90 [ 607.913244][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.919550][T12564] [ 607.921863][T12564] Uninit was stored to memory at: [ 607.926888][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 607.932593][T12564] __msan_chain_origin+0x50/0x90 [ 607.937520][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 607.942620][T12564] get_compat_msghdr+0x108/0x2b0 [ 607.947545][T12564] do_recvmmsg+0xdbb/0x22c0 [ 607.952034][T12564] __sys_recvmmsg+0x5dd/0x610 [ 607.956701][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 607.962756][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 607.968895][T12564] __do_fast_syscall_32+0x2af/0x480 [ 607.974081][T12564] do_fast_syscall_32+0x6b/0xd0 [ 607.978917][T12564] do_SYSENTER_32+0x73/0x90 [ 607.983407][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 607.989712][T12564] [ 607.992024][T12564] Uninit was stored to memory at: [ 607.997035][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 608.002742][T12564] __msan_chain_origin+0x50/0x90 [ 608.007667][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 608.012764][T12564] get_compat_msghdr+0x108/0x2b0 [ 608.017685][T12564] do_recvmmsg+0xdbb/0x22c0 [ 608.022190][T12564] __sys_recvmmsg+0x5dd/0x610 [ 608.026864][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.032922][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.039062][T12564] __do_fast_syscall_32+0x2af/0x480 [ 608.044249][T12564] do_fast_syscall_32+0x6b/0xd0 [ 608.049088][T12564] do_SYSENTER_32+0x73/0x90 [ 608.053579][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.059902][T12564] [ 608.062217][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 608.068881][T12564] do_recvmmsg+0xbf/0x22c0 [ 608.073283][T12564] do_recvmmsg+0xbf/0x22c0 [ 608.255982][T12560] not chained 1600000 origins [ 608.260702][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 608.269368][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.279417][T12560] Call Trace: [ 608.282733][T12560] dump_stack+0x21c/0x280 [ 608.287072][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 608.292796][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 608.298896][T12560] ? kmsan_get_metadata+0x116/0x180 [ 608.304101][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 608.309914][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 608.315993][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 608.321373][T12560] ? __msan_get_context_state+0x9/0x20 [ 608.326848][T12560] ? kmsan_get_metadata+0x116/0x180 [ 608.332059][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 608.337633][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 608.343739][T12560] ? _copy_from_user+0x201/0x310 [ 608.348686][T12560] ? kmsan_get_metadata+0x116/0x180 [ 608.353889][T12560] __msan_chain_origin+0x50/0x90 [ 608.358840][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 608.363978][T12560] get_compat_msghdr+0x108/0x2b0 [ 608.368933][T12560] do_recvmmsg+0xdbb/0x22c0 [ 608.373459][T12560] ? kmsan_get_metadata+0x116/0x180 [ 608.378668][T12560] ? kmsan_get_metadata+0x116/0x180 [ 608.383872][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 608.389774][T12560] ? kmsan_get_metadata+0x116/0x180 [ 608.394978][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 608.400618][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 608.405916][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 608.410685][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 608.415453][T12560] __sys_recvmmsg+0x5dd/0x610 [ 608.420154][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.426234][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.432395][T12560] __do_fast_syscall_32+0x2af/0x480 [ 608.437607][T12560] do_fast_syscall_32+0x6b/0xd0 [ 608.442472][T12560] do_SYSENTER_32+0x73/0x90 [ 608.447001][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.453329][T12560] RIP: 0023:0xf7fc1549 [ 608.457386][T12560] Code: Bad RIP value. [ 608.461448][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 608.469864][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 608.477840][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 608.485807][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 608.493773][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 608.501741][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.509718][T12560] Uninit was stored to memory at: [ 608.514750][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 608.520480][T12560] __msan_chain_origin+0x50/0x90 [ 608.525416][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 608.530535][T12560] get_compat_msghdr+0x108/0x2b0 [ 608.535473][T12560] do_recvmmsg+0xdbb/0x22c0 [ 608.539971][T12560] __sys_recvmmsg+0x5dd/0x610 [ 608.544647][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.550715][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.556868][T12560] __do_fast_syscall_32+0x2af/0x480 [ 608.562064][T12560] do_fast_syscall_32+0x6b/0xd0 [ 608.566913][T12560] do_SYSENTER_32+0x73/0x90 [ 608.571439][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.577755][T12560] [ 608.580077][T12560] Uninit was stored to memory at: [ 608.585109][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 608.590838][T12560] __msan_chain_origin+0x50/0x90 [ 608.595773][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 608.600879][T12560] get_compat_msghdr+0x108/0x2b0 [ 608.605809][T12560] do_recvmmsg+0xdbb/0x22c0 [ 608.610312][T12560] __sys_recvmmsg+0x5dd/0x610 [ 608.614990][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.621058][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.627214][T12560] __do_fast_syscall_32+0x2af/0x480 [ 608.632415][T12560] do_fast_syscall_32+0x6b/0xd0 [ 608.637264][T12560] do_SYSENTER_32+0x73/0x90 [ 608.641770][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.648083][T12560] [ 608.650412][T12560] Uninit was stored to memory at: [ 608.655440][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 608.661171][T12560] __msan_chain_origin+0x50/0x90 [ 608.666114][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 608.671226][T12560] get_compat_msghdr+0x108/0x2b0 [ 608.676162][T12560] do_recvmmsg+0xdbb/0x22c0 [ 608.680663][T12560] __sys_recvmmsg+0x5dd/0x610 [ 608.685338][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.691411][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.697563][T12560] __do_fast_syscall_32+0x2af/0x480 [ 608.702759][T12560] do_fast_syscall_32+0x6b/0xd0 [ 608.707610][T12560] do_SYSENTER_32+0x73/0x90 [ 608.712113][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.718424][T12560] [ 608.720744][T12560] Uninit was stored to memory at: [ 608.725769][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 608.731482][T12560] __msan_chain_origin+0x50/0x90 [ 608.736424][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 608.741534][T12560] get_compat_msghdr+0x108/0x2b0 [ 608.746471][T12560] do_recvmmsg+0xdbb/0x22c0 [ 608.750969][T12560] __sys_recvmmsg+0x5dd/0x610 [ 608.755645][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.761706][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.767845][T12560] __do_fast_syscall_32+0x2af/0x480 [ 608.773028][T12560] do_fast_syscall_32+0x6b/0xd0 [ 608.777868][T12560] do_SYSENTER_32+0x73/0x90 [ 608.782361][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.788668][T12560] [ 608.790980][T12560] Uninit was stored to memory at: [ 608.795995][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 608.801712][T12560] __msan_chain_origin+0x50/0x90 [ 608.806636][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 608.811735][T12560] get_compat_msghdr+0x108/0x2b0 [ 608.816659][T12560] do_recvmmsg+0xdbb/0x22c0 [ 608.821151][T12560] __sys_recvmmsg+0x5dd/0x610 [ 608.825816][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.831869][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.838010][T12560] __do_fast_syscall_32+0x2af/0x480 [ 608.843200][T12560] do_fast_syscall_32+0x6b/0xd0 [ 608.848039][T12560] do_SYSENTER_32+0x73/0x90 [ 608.852553][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.858869][T12560] [ 608.861197][T12560] Uninit was stored to memory at: [ 608.866207][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 608.871910][T12560] __msan_chain_origin+0x50/0x90 [ 608.876832][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 608.881930][T12560] get_compat_msghdr+0x108/0x2b0 [ 608.886853][T12560] do_recvmmsg+0xdbb/0x22c0 [ 608.891348][T12560] __sys_recvmmsg+0x5dd/0x610 [ 608.896018][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.902072][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.908480][T12560] __do_fast_syscall_32+0x2af/0x480 [ 608.913667][T12560] do_fast_syscall_32+0x6b/0xd0 [ 608.918507][T12560] do_SYSENTER_32+0x73/0x90 [ 608.923002][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.929305][T12560] [ 608.931615][T12560] Uninit was stored to memory at: [ 608.936623][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 608.942324][T12560] __msan_chain_origin+0x50/0x90 [ 608.947248][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 608.952346][T12560] get_compat_msghdr+0x108/0x2b0 [ 608.957271][T12560] do_recvmmsg+0xdbb/0x22c0 [ 608.961757][T12560] __sys_recvmmsg+0x5dd/0x610 [ 608.966418][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 608.972471][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 608.978610][T12560] __do_fast_syscall_32+0x2af/0x480 [ 608.983816][T12560] do_fast_syscall_32+0x6b/0xd0 [ 608.988670][T12560] do_SYSENTER_32+0x73/0x90 [ 608.993380][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 608.999683][T12560] [ 609.001999][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 609.008658][T12560] do_recvmmsg+0xbf/0x22c0 [ 609.013061][T12560] do_recvmmsg+0xbf/0x22c0 [ 609.063295][T12564] not chained 1610000 origins [ 609.068016][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 609.076676][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.086737][T12564] Call Trace: [ 609.090033][T12564] dump_stack+0x21c/0x280 [ 609.094374][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 609.100099][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 609.106171][T12564] ? kmsan_get_metadata+0x116/0x180 [ 609.111380][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 609.117191][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 609.123261][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 609.128730][T12564] ? kmsan_get_metadata+0x116/0x180 [ 609.133932][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 609.139481][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 609.145553][T12564] ? _copy_from_user+0x201/0x310 [ 609.150496][T12564] ? kmsan_get_metadata+0x116/0x180 [ 609.155695][T12564] __msan_chain_origin+0x50/0x90 [ 609.160644][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 609.165775][T12564] get_compat_msghdr+0x108/0x2b0 [ 609.170731][T12564] do_recvmmsg+0xdbb/0x22c0 [ 609.175244][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 609.181065][T12564] ? kmsan_get_metadata+0x116/0x180 [ 609.186283][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 609.192202][T12564] ? kmsan_get_metadata+0x116/0x180 [ 609.197405][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 609.203047][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 609.208340][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 609.213110][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 609.217917][T12564] __sys_recvmmsg+0x5dd/0x610 [ 609.222623][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 609.228705][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 609.234865][T12564] __do_fast_syscall_32+0x2af/0x480 [ 609.240076][T12564] do_fast_syscall_32+0x6b/0xd0 [ 609.244933][T12564] do_SYSENTER_32+0x73/0x90 [ 609.249447][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 609.255769][T12564] RIP: 0023:0xf7fc1549 [ 609.259826][T12564] Code: Bad RIP value. [ 609.263883][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 609.272293][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 609.280262][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 609.288226][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 609.296195][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 609.304163][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 609.318673][T12564] Uninit was stored to memory at: [ 609.323705][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 609.329428][T12564] __msan_chain_origin+0x50/0x90 [ 609.334373][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 609.339492][T12564] get_compat_msghdr+0x108/0x2b0 [ 609.344469][T12564] do_recvmmsg+0xdbb/0x22c0 [ 609.348986][T12564] __sys_recvmmsg+0x5dd/0x610 [ 609.353665][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 609.359727][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 609.365877][T12564] __do_fast_syscall_32+0x2af/0x480 [ 609.371066][T12564] do_fast_syscall_32+0x6b/0xd0 [ 609.375910][T12564] do_SYSENTER_32+0x73/0x90 [ 609.380403][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 609.386709][T12564] [ 609.389025][T12564] Uninit was stored to memory at: [ 609.394043][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 609.399754][T12564] __msan_chain_origin+0x50/0x90 [ 609.404693][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 609.409801][T12564] get_compat_msghdr+0x108/0x2b0 [ 609.414733][T12564] do_recvmmsg+0xdbb/0x22c0 [ 609.419247][T12564] __sys_recvmmsg+0x5dd/0x610 [ 609.423921][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 609.429977][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 609.436127][T12564] __do_fast_syscall_32+0x2af/0x480 [ 609.441316][T12564] do_fast_syscall_32+0x6b/0xd0 [ 609.446177][T12564] do_SYSENTER_32+0x73/0x90 [ 609.450674][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 609.456981][T12564] [ 609.459298][T12564] Uninit was stored to memory at: [ 609.464314][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 609.470146][T12564] __msan_chain_origin+0x50/0x90 [ 609.475069][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 609.480166][T12564] get_compat_msghdr+0x108/0x2b0 [ 609.485088][T12564] do_recvmmsg+0xdbb/0x22c0 [ 609.489579][T12564] __sys_recvmmsg+0x5dd/0x610 [ 609.494250][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 609.500326][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 609.506476][T12564] __do_fast_syscall_32+0x2af/0x480 [ 609.511676][T12564] do_fast_syscall_32+0x6b/0xd0 [ 609.516515][T12564] do_SYSENTER_32+0x73/0x90 [ 609.521008][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 609.527311][T12564] [ 609.529624][T12564] Uninit was stored to memory at: [ 609.534638][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 609.540347][T12564] __msan_chain_origin+0x50/0x90 [ 609.545273][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 609.550382][T12564] get_compat_msghdr+0x108/0x2b0 [ 609.555301][T12564] do_recvmmsg+0xdbb/0x22c0 [ 609.559791][T12564] __sys_recvmmsg+0x5dd/0x610 [ 609.564453][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 609.570506][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 609.576647][T12564] __do_fast_syscall_32+0x2af/0x480 [ 609.581832][T12564] do_fast_syscall_32+0x6b/0xd0 [ 609.586686][T12564] do_SYSENTER_32+0x73/0x90 [ 609.591196][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 609.597514][T12564] [ 609.599820][T12564] Uninit was stored to memory at: [ 609.604833][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 609.610542][T12564] __msan_chain_origin+0x50/0x90 [ 609.615473][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 609.620573][T12564] get_compat_msghdr+0x108/0x2b0 [ 609.625498][T12564] do_recvmmsg+0xdbb/0x22c0 [ 609.629988][T12564] __sys_recvmmsg+0x5dd/0x610 [ 609.634656][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 609.640712][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 609.646860][T12564] __do_fast_syscall_32+0x2af/0x480 [ 609.652049][T12564] do_fast_syscall_32+0x6b/0xd0 [ 609.656890][T12564] do_SYSENTER_32+0x73/0x90 [ 609.661385][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 609.667687][T12564] [ 609.669995][T12564] Uninit was stored to memory at: [ 609.675010][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 609.680723][T12564] __msan_chain_origin+0x50/0x90 [ 609.685652][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 609.690751][T12564] get_compat_msghdr+0x108/0x2b0 [ 609.695677][T12564] do_recvmmsg+0xdbb/0x22c0 [ 609.700169][T12564] __sys_recvmmsg+0x5dd/0x610 [ 609.704921][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 609.710976][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 609.717119][T12564] __do_fast_syscall_32+0x2af/0x480 [ 609.722327][T12564] do_fast_syscall_32+0x6b/0xd0 [ 609.727169][T12564] do_SYSENTER_32+0x73/0x90 [ 609.731661][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 609.737964][T12564] [ 609.740274][T12564] Uninit was stored to memory at: [ 609.745286][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 609.750997][T12564] __msan_chain_origin+0x50/0x90 [ 609.755935][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 609.761057][T12564] get_compat_msghdr+0x108/0x2b0 [ 609.765981][T12564] do_recvmmsg+0xdbb/0x22c0 [ 609.770468][T12564] __sys_recvmmsg+0x5dd/0x610 [ 609.775135][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 609.781190][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 609.787334][T12564] __do_fast_syscall_32+0x2af/0x480 [ 609.792521][T12564] do_fast_syscall_32+0x6b/0xd0 [ 609.797363][T12564] do_SYSENTER_32+0x73/0x90 [ 609.801858][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 609.808160][T12564] [ 609.810473][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 609.817132][T12564] do_recvmmsg+0xbf/0x22c0 [ 609.821535][T12564] do_recvmmsg+0xbf/0x22c0 [ 610.052461][T12564] not chained 1620000 origins [ 610.057171][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 610.065835][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.076150][T12564] Call Trace: [ 610.079447][T12564] dump_stack+0x21c/0x280 [ 610.083785][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 610.089519][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 610.095586][T12564] ? kmsan_get_metadata+0x116/0x180 [ 610.100782][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 610.106594][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 610.112656][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 610.118032][T12564] ? kmsan_get_metadata+0x116/0x180 [ 610.123229][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 610.128774][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 610.134846][T12564] ? _copy_from_user+0x201/0x310 [ 610.139788][T12564] ? kmsan_get_metadata+0x116/0x180 [ 610.144987][T12564] __msan_chain_origin+0x50/0x90 [ 610.149927][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.155050][T12564] get_compat_msghdr+0x108/0x2b0 [ 610.159990][T12564] do_recvmmsg+0xdbb/0x22c0 [ 610.164495][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 610.170313][T12564] ? kmsan_get_metadata+0x116/0x180 [ 610.175513][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 610.181400][T12564] ? kmsan_get_metadata+0x116/0x180 [ 610.186719][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 610.192343][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 610.197615][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 610.202366][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 610.207117][T12564] __sys_recvmmsg+0x5dd/0x610 [ 610.211796][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 610.217976][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 610.224137][T12564] __do_fast_syscall_32+0x2af/0x480 [ 610.229347][T12564] do_fast_syscall_32+0x6b/0xd0 [ 610.234189][T12564] do_SYSENTER_32+0x73/0x90 [ 610.238702][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 610.245014][T12564] RIP: 0023:0xf7fc1549 [ 610.249060][T12564] Code: Bad RIP value. [ 610.253121][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 610.261609][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 610.269566][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 610.277522][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 610.285479][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 610.293435][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.301398][T12564] Uninit was stored to memory at: [ 610.306411][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 610.312117][T12564] __msan_chain_origin+0x50/0x90 [ 610.317041][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.322138][T12564] get_compat_msghdr+0x108/0x2b0 [ 610.327063][T12564] do_recvmmsg+0xdbb/0x22c0 [ 610.331554][T12564] __sys_recvmmsg+0x5dd/0x610 [ 610.336653][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 610.342710][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 610.348854][T12564] __do_fast_syscall_32+0x2af/0x480 [ 610.354042][T12564] do_fast_syscall_32+0x6b/0xd0 [ 610.358883][T12564] do_SYSENTER_32+0x73/0x90 [ 610.363375][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 610.369682][T12564] [ 610.371993][T12564] Uninit was stored to memory at: [ 610.377005][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 610.382714][T12564] __msan_chain_origin+0x50/0x90 [ 610.387637][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.392730][T12564] get_compat_msghdr+0x108/0x2b0 [ 610.397667][T12564] do_recvmmsg+0xdbb/0x22c0 [ 610.402155][T12564] __sys_recvmmsg+0x5dd/0x610 [ 610.406834][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 610.412972][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 610.419121][T12564] __do_fast_syscall_32+0x2af/0x480 [ 610.424309][T12564] do_fast_syscall_32+0x6b/0xd0 [ 610.429149][T12564] do_SYSENTER_32+0x73/0x90 [ 610.433645][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 610.440037][T12564] [ 610.442352][T12564] Uninit was stored to memory at: [ 610.447374][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 610.453088][T12564] __msan_chain_origin+0x50/0x90 [ 610.458021][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.463137][T12564] get_compat_msghdr+0x108/0x2b0 [ 610.468065][T12564] do_recvmmsg+0xdbb/0x22c0 [ 610.472554][T12564] __sys_recvmmsg+0x5dd/0x610 [ 610.477220][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 610.483273][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 610.489420][T12564] __do_fast_syscall_32+0x2af/0x480 [ 610.494606][T12564] do_fast_syscall_32+0x6b/0xd0 [ 610.499445][T12564] do_SYSENTER_32+0x73/0x90 [ 610.503944][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 610.510247][T12564] [ 610.512560][T12564] Uninit was stored to memory at: [ 610.517575][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 610.523281][T12564] __msan_chain_origin+0x50/0x90 [ 610.528225][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.533332][T12564] get_compat_msghdr+0x108/0x2b0 [ 610.538280][T12564] do_recvmmsg+0xdbb/0x22c0 [ 610.542770][T12564] __sys_recvmmsg+0x5dd/0x610 [ 610.547439][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 610.553501][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 610.559650][T12564] __do_fast_syscall_32+0x2af/0x480 [ 610.564842][T12564] do_fast_syscall_32+0x6b/0xd0 [ 610.569698][T12564] do_SYSENTER_32+0x73/0x90 [ 610.574188][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 610.580499][T12564] [ 610.582812][T12564] Uninit was stored to memory at: [ 610.587823][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 610.593527][T12564] __msan_chain_origin+0x50/0x90 [ 610.598454][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.603553][T12564] get_compat_msghdr+0x108/0x2b0 [ 610.608477][T12564] do_recvmmsg+0xdbb/0x22c0 [ 610.612969][T12564] __sys_recvmmsg+0x5dd/0x610 [ 610.617636][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 610.623689][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 610.629832][T12564] __do_fast_syscall_32+0x2af/0x480 [ 610.635016][T12564] do_fast_syscall_32+0x6b/0xd0 [ 610.639855][T12564] do_SYSENTER_32+0x73/0x90 [ 610.644348][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 610.650651][T12564] [ 610.652962][T12564] Uninit was stored to memory at: [ 610.657974][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 610.663682][T12564] __msan_chain_origin+0x50/0x90 [ 610.668605][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.673701][T12564] get_compat_msghdr+0x108/0x2b0 [ 610.678628][T12564] do_recvmmsg+0xdbb/0x22c0 [ 610.683118][T12564] __sys_recvmmsg+0x5dd/0x610 [ 610.687786][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 610.693853][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 610.699995][T12564] __do_fast_syscall_32+0x2af/0x480 [ 610.705181][T12564] do_fast_syscall_32+0x6b/0xd0 [ 610.710022][T12564] do_SYSENTER_32+0x73/0x90 [ 610.714516][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 610.720846][T12564] [ 610.723156][T12564] Uninit was stored to memory at: [ 610.728167][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 610.733874][T12564] __msan_chain_origin+0x50/0x90 [ 610.738801][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.743918][T12564] get_compat_msghdr+0x108/0x2b0 [ 610.748843][T12564] do_recvmmsg+0xdbb/0x22c0 [ 610.753334][T12564] __sys_recvmmsg+0x5dd/0x610 [ 610.757996][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 610.764066][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 610.770205][T12564] __do_fast_syscall_32+0x2af/0x480 [ 610.775388][T12564] do_fast_syscall_32+0x6b/0xd0 [ 610.780227][T12564] do_SYSENTER_32+0x73/0x90 [ 610.784719][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 610.791037][T12564] [ 610.793349][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 610.800013][T12564] do_recvmmsg+0xbf/0x22c0 [ 610.804415][T12564] do_recvmmsg+0xbf/0x22c0 [ 610.896293][T12564] not chained 1630000 origins [ 610.901003][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 610.909668][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.919811][T12564] Call Trace: [ 610.923119][T12564] dump_stack+0x21c/0x280 [ 610.927460][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 610.933185][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 610.939257][T12564] ? kmsan_get_metadata+0x116/0x180 [ 610.944461][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 610.950270][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 610.956337][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 610.961719][T12564] ? kmsan_get_metadata+0x116/0x180 [ 610.966922][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 610.972471][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 610.978544][T12564] ? _copy_from_user+0x201/0x310 [ 610.983496][T12564] ? kmsan_get_metadata+0x116/0x180 [ 610.988708][T12564] __msan_chain_origin+0x50/0x90 [ 610.993652][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 610.998785][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.003737][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.008250][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 611.014069][T12564] ? kmsan_get_metadata+0x116/0x180 [ 611.019273][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 611.025168][T12564] ? kmsan_get_metadata+0x116/0x180 [ 611.030370][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 611.036007][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 611.041293][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 611.046089][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 611.050856][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.055550][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.061631][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.067809][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.073017][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.077878][T12564] do_SYSENTER_32+0x73/0x90 [ 611.082382][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.088717][T12564] RIP: 0023:0xf7fc1549 [ 611.092789][T12564] Code: Bad RIP value. [ 611.096849][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 611.105261][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 611.113231][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 611.121198][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 611.129166][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 611.137133][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.145109][T12564] Uninit was stored to memory at: [ 611.150135][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 611.155847][T12564] __msan_chain_origin+0x50/0x90 [ 611.160782][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 611.165905][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.170838][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.175342][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.180029][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.186084][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.192312][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.197508][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.202361][T12564] do_SYSENTER_32+0x73/0x90 [ 611.206855][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.213165][T12564] [ 611.215477][T12564] Uninit was stored to memory at: [ 611.220488][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 611.226192][T12564] __msan_chain_origin+0x50/0x90 [ 611.231116][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 611.236215][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.241141][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.245636][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.250301][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.256355][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.262496][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.267681][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.272518][T12564] do_SYSENTER_32+0x73/0x90 [ 611.277013][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.283316][T12564] [ 611.285628][T12564] Uninit was stored to memory at: [ 611.290638][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 611.296485][T12564] __msan_chain_origin+0x50/0x90 [ 611.301412][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 611.306507][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.311448][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.315938][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.320600][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.326657][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.332800][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.337986][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.342824][T12564] do_SYSENTER_32+0x73/0x90 [ 611.347321][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.353625][T12564] [ 611.355945][T12564] Uninit was stored to memory at: [ 611.360973][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 611.366687][T12564] __msan_chain_origin+0x50/0x90 [ 611.371625][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 611.376732][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.381662][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.386163][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.390831][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.396888][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.403035][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.408238][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.413082][T12564] do_SYSENTER_32+0x73/0x90 [ 611.417581][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.423893][T12564] [ 611.426207][T12564] Uninit was stored to memory at: [ 611.431226][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 611.436950][T12564] __msan_chain_origin+0x50/0x90 [ 611.441881][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 611.446983][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.451907][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.456396][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.461058][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.467110][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.473249][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.478534][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.483370][T12564] do_SYSENTER_32+0x73/0x90 [ 611.487864][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.494169][T12564] [ 611.496478][T12564] Uninit was stored to memory at: [ 611.501497][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 611.507202][T12564] __msan_chain_origin+0x50/0x90 [ 611.512126][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 611.517225][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.522152][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.526645][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.531335][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.537387][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.543527][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.548715][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.553551][T12564] do_SYSENTER_32+0x73/0x90 [ 611.558045][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.564351][T12564] [ 611.566662][T12564] Uninit was stored to memory at: [ 611.571677][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 611.577384][T12564] __msan_chain_origin+0x50/0x90 [ 611.582310][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 611.587428][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.592354][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.596844][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.601512][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.607566][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.613724][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.618908][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.623744][T12564] do_SYSENTER_32+0x73/0x90 [ 611.628252][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.634556][T12564] [ 611.636871][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 611.643531][T12564] do_recvmmsg+0xbf/0x22c0 [ 611.647935][T12564] do_recvmmsg+0xbf/0x22c0 [ 611.783388][T12564] not chained 1640000 origins [ 611.788102][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 611.796763][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.806813][T12564] Call Trace: [ 611.810112][T12564] dump_stack+0x21c/0x280 [ 611.814452][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 611.820197][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 611.826273][T12564] ? kmsan_get_metadata+0x116/0x180 [ 611.831508][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 611.837320][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 611.843381][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 611.848750][T12564] ? kmsan_get_metadata+0x116/0x180 [ 611.853940][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 611.859479][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 611.865545][T12564] ? _copy_from_user+0x201/0x310 [ 611.870485][T12564] ? kmsan_get_metadata+0x116/0x180 [ 611.875673][T12564] __msan_chain_origin+0x50/0x90 [ 611.880603][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 611.885714][T12564] get_compat_msghdr+0x108/0x2b0 [ 611.890646][T12564] do_recvmmsg+0xdbb/0x22c0 [ 611.895146][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 611.900954][T12564] ? kmsan_get_metadata+0x116/0x180 [ 611.906146][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 611.912032][T12564] ? kmsan_get_metadata+0x116/0x180 [ 611.917224][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 611.922847][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 611.928127][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 611.932881][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 611.937638][T12564] __sys_recvmmsg+0x5dd/0x610 [ 611.942316][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 611.948383][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 611.954529][T12564] __do_fast_syscall_32+0x2af/0x480 [ 611.959723][T12564] do_fast_syscall_32+0x6b/0xd0 [ 611.964572][T12564] do_SYSENTER_32+0x73/0x90 [ 611.969156][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 611.975471][T12564] RIP: 0023:0xf7fc1549 [ 611.979517][T12564] Code: Bad RIP value. [ 611.983576][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 611.991993][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 611.999950][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 612.007907][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.015866][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 612.023824][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.031790][T12564] Uninit was stored to memory at: [ 612.036811][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 612.042514][T12564] __msan_chain_origin+0x50/0x90 [ 612.047461][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 612.052561][T12564] get_compat_msghdr+0x108/0x2b0 [ 612.057494][T12564] do_recvmmsg+0xdbb/0x22c0 [ 612.061982][T12564] __sys_recvmmsg+0x5dd/0x610 [ 612.066652][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.072705][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 612.078846][T12564] __do_fast_syscall_32+0x2af/0x480 [ 612.084037][T12564] do_fast_syscall_32+0x6b/0xd0 [ 612.088874][T12564] do_SYSENTER_32+0x73/0x90 [ 612.093365][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 612.099676][T12564] [ 612.101987][T12564] Uninit was stored to memory at: [ 612.107002][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 612.112709][T12564] __msan_chain_origin+0x50/0x90 [ 612.117635][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 612.122735][T12564] get_compat_msghdr+0x108/0x2b0 [ 612.127659][T12564] do_recvmmsg+0xdbb/0x22c0 [ 612.132146][T12564] __sys_recvmmsg+0x5dd/0x610 [ 612.136812][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.142869][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 612.149011][T12564] __do_fast_syscall_32+0x2af/0x480 [ 612.154209][T12564] do_fast_syscall_32+0x6b/0xd0 [ 612.159046][T12564] do_SYSENTER_32+0x73/0x90 [ 612.163540][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 612.169843][T12564] [ 612.172153][T12564] Uninit was stored to memory at: [ 612.177168][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 612.182881][T12564] __msan_chain_origin+0x50/0x90 [ 612.187808][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 612.192925][T12564] get_compat_msghdr+0x108/0x2b0 [ 612.197858][T12564] do_recvmmsg+0xdbb/0x22c0 [ 612.202348][T12564] __sys_recvmmsg+0x5dd/0x610 [ 612.207015][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.213074][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 612.219218][T12564] __do_fast_syscall_32+0x2af/0x480 [ 612.224406][T12564] do_fast_syscall_32+0x6b/0xd0 [ 612.229246][T12564] do_SYSENTER_32+0x73/0x90 [ 612.233738][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 612.240041][T12564] [ 612.242355][T12564] Uninit was stored to memory at: [ 612.247368][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 612.253074][T12564] __msan_chain_origin+0x50/0x90 [ 612.257999][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 612.263097][T12564] get_compat_msghdr+0x108/0x2b0 [ 612.268019][T12564] do_recvmmsg+0xdbb/0x22c0 [ 612.272508][T12564] __sys_recvmmsg+0x5dd/0x610 [ 612.277171][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.283227][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 612.289366][T12564] __do_fast_syscall_32+0x2af/0x480 [ 612.294551][T12564] do_fast_syscall_32+0x6b/0xd0 [ 612.299388][T12564] do_SYSENTER_32+0x73/0x90 [ 612.303881][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 612.310195][T12564] [ 612.312506][T12564] Uninit was stored to memory at: [ 612.317517][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 612.323219][T12564] __msan_chain_origin+0x50/0x90 [ 612.328162][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 612.333262][T12564] get_compat_msghdr+0x108/0x2b0 [ 612.338189][T12564] do_recvmmsg+0xdbb/0x22c0 [ 612.342681][T12564] __sys_recvmmsg+0x5dd/0x610 [ 612.347348][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.353404][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 612.359546][T12564] __do_fast_syscall_32+0x2af/0x480 [ 612.364732][T12564] do_fast_syscall_32+0x6b/0xd0 [ 612.369569][T12564] do_SYSENTER_32+0x73/0x90 [ 612.374063][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 612.380367][T12564] [ 612.382688][T12564] Uninit was stored to memory at: [ 612.387716][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 612.393430][T12564] __msan_chain_origin+0x50/0x90 [ 612.398360][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 612.403468][T12564] get_compat_msghdr+0x108/0x2b0 [ 612.408412][T12564] do_recvmmsg+0xdbb/0x22c0 [ 612.412911][T12564] __sys_recvmmsg+0x5dd/0x610 [ 612.417580][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.423656][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 612.429802][T12564] __do_fast_syscall_32+0x2af/0x480 [ 612.434993][T12564] do_fast_syscall_32+0x6b/0xd0 [ 612.439835][T12564] do_SYSENTER_32+0x73/0x90 [ 612.444332][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 612.450639][T12564] [ 612.452957][T12564] Uninit was stored to memory at: [ 612.457974][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 612.463682][T12564] __msan_chain_origin+0x50/0x90 [ 612.468608][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 612.473710][T12564] get_compat_msghdr+0x108/0x2b0 [ 612.478643][T12564] do_recvmmsg+0xdbb/0x22c0 [ 612.483135][T12564] __sys_recvmmsg+0x5dd/0x610 [ 612.487801][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.493857][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 612.500002][T12564] __do_fast_syscall_32+0x2af/0x480 [ 612.505190][T12564] do_fast_syscall_32+0x6b/0xd0 [ 612.510029][T12564] do_SYSENTER_32+0x73/0x90 [ 612.514524][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 612.520827][T12564] [ 612.523150][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 612.529822][T12564] do_recvmmsg+0xbf/0x22c0 [ 612.534233][T12564] do_recvmmsg+0xbf/0x22c0 [ 612.706108][T12560] not chained 1650000 origins [ 612.710843][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 612.719506][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.729552][T12560] Call Trace: [ 612.732857][T12560] dump_stack+0x21c/0x280 [ 612.737198][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 612.742924][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 612.748996][T12560] ? kmsan_get_metadata+0x116/0x180 [ 612.754546][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 612.760356][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 612.766425][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 612.771809][T12560] ? kmsan_get_metadata+0x116/0x180 [ 612.777012][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 612.782560][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 612.788631][T12560] ? _copy_from_user+0x201/0x310 [ 612.793571][T12560] ? kmsan_get_metadata+0x116/0x180 [ 612.798772][T12560] __msan_chain_origin+0x50/0x90 [ 612.803719][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 612.808845][T12560] get_compat_msghdr+0x108/0x2b0 [ 612.813789][T12560] do_recvmmsg+0xdbb/0x22c0 [ 612.818305][T12560] ? kmsan_get_metadata+0x116/0x180 [ 612.823509][T12560] ? kmsan_get_metadata+0x116/0x180 [ 612.828724][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 612.834620][T12560] ? kmsan_get_metadata+0x116/0x180 [ 612.839819][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 612.845458][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 612.850745][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 612.855512][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 612.860279][T12560] __sys_recvmmsg+0x5dd/0x610 [ 612.864973][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.871049][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 612.877205][T12560] __do_fast_syscall_32+0x2af/0x480 [ 612.882413][T12560] do_fast_syscall_32+0x6b/0xd0 [ 612.887271][T12560] do_SYSENTER_32+0x73/0x90 [ 612.891795][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 612.898144][T12560] RIP: 0023:0xf7fc1549 [ 612.902201][T12560] Code: Bad RIP value. [ 612.906261][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 612.914679][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 612.922733][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 612.930702][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.938670][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 612.946638][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.954637][T12560] Uninit was stored to memory at: [ 612.959664][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 612.965381][T12560] __msan_chain_origin+0x50/0x90 [ 612.970318][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 612.975427][T12560] get_compat_msghdr+0x108/0x2b0 [ 612.980361][T12560] do_recvmmsg+0xdbb/0x22c0 [ 612.984889][T12560] __sys_recvmmsg+0x5dd/0x610 [ 612.989566][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 612.995628][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 613.001778][T12560] __do_fast_syscall_32+0x2af/0x480 [ 613.006987][T12560] do_fast_syscall_32+0x6b/0xd0 [ 613.011834][T12560] do_SYSENTER_32+0x73/0x90 [ 613.016333][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 613.022640][T12560] [ 613.024961][T12560] Uninit was stored to memory at: [ 613.029988][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 613.035708][T12560] __msan_chain_origin+0x50/0x90 [ 613.040645][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 613.045755][T12560] get_compat_msghdr+0x108/0x2b0 [ 613.050690][T12560] do_recvmmsg+0xdbb/0x22c0 [ 613.055213][T12560] __sys_recvmmsg+0x5dd/0x610 [ 613.059892][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 613.065964][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 613.072119][T12560] __do_fast_syscall_32+0x2af/0x480 [ 613.077318][T12560] do_fast_syscall_32+0x6b/0xd0 [ 613.082165][T12560] do_SYSENTER_32+0x73/0x90 [ 613.086680][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 613.092986][T12560] [ 613.095298][T12560] Uninit was stored to memory at: [ 613.100311][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 613.106019][T12560] __msan_chain_origin+0x50/0x90 [ 613.110945][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 613.116051][T12560] get_compat_msghdr+0x108/0x2b0 [ 613.120985][T12560] do_recvmmsg+0xdbb/0x22c0 [ 613.125475][T12560] __sys_recvmmsg+0x5dd/0x610 [ 613.130142][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 613.136196][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 613.142338][T12560] __do_fast_syscall_32+0x2af/0x480 [ 613.147528][T12560] do_fast_syscall_32+0x6b/0xd0 [ 613.152368][T12560] do_SYSENTER_32+0x73/0x90 [ 613.156892][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 613.163215][T12560] [ 613.165528][T12560] Uninit was stored to memory at: [ 613.170541][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 613.176249][T12560] __msan_chain_origin+0x50/0x90 [ 613.181194][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 613.186296][T12560] get_compat_msghdr+0x108/0x2b0 [ 613.191246][T12560] do_recvmmsg+0xdbb/0x22c0 [ 613.195739][T12560] __sys_recvmmsg+0x5dd/0x610 [ 613.200406][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 613.206462][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 613.212602][T12560] __do_fast_syscall_32+0x2af/0x480 [ 613.217790][T12560] do_fast_syscall_32+0x6b/0xd0 [ 613.222628][T12560] do_SYSENTER_32+0x73/0x90 [ 613.227119][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 613.236287][T12560] [ 613.238599][T12560] Uninit was stored to memory at: [ 613.243613][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 613.249319][T12560] __msan_chain_origin+0x50/0x90 [ 613.254241][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 613.259338][T12560] get_compat_msghdr+0x108/0x2b0 [ 613.264261][T12560] do_recvmmsg+0xdbb/0x22c0 [ 613.268749][T12560] __sys_recvmmsg+0x5dd/0x610 [ 613.273415][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 613.279467][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 613.285632][T12560] __do_fast_syscall_32+0x2af/0x480 [ 613.290814][T12560] do_fast_syscall_32+0x6b/0xd0 [ 613.295651][T12560] do_SYSENTER_32+0x73/0x90 [ 613.300145][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 613.306446][T12560] [ 613.308763][T12560] Uninit was stored to memory at: [ 613.313775][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 613.319481][T12560] __msan_chain_origin+0x50/0x90 [ 613.324433][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 613.329534][T12560] get_compat_msghdr+0x108/0x2b0 [ 613.334458][T12560] do_recvmmsg+0xdbb/0x22c0 [ 613.338946][T12560] __sys_recvmmsg+0x5dd/0x610 [ 613.343612][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 613.349665][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 613.355806][T12560] __do_fast_syscall_32+0x2af/0x480 [ 613.361008][T12560] do_fast_syscall_32+0x6b/0xd0 [ 613.365846][T12560] do_SYSENTER_32+0x73/0x90 [ 613.370336][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 613.376638][T12560] [ 613.378949][T12560] Uninit was stored to memory at: [ 613.383960][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 613.389668][T12560] __msan_chain_origin+0x50/0x90 [ 613.394604][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 613.399724][T12560] get_compat_msghdr+0x108/0x2b0 [ 613.404649][T12560] do_recvmmsg+0xdbb/0x22c0 [ 613.409147][T12560] __sys_recvmmsg+0x5dd/0x610 [ 613.413816][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 613.419873][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 613.426021][T12560] __do_fast_syscall_32+0x2af/0x480 [ 613.431210][T12560] do_fast_syscall_32+0x6b/0xd0 [ 613.436051][T12560] do_SYSENTER_32+0x73/0x90 [ 613.440546][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 613.446848][T12560] [ 613.449179][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 613.455839][T12560] do_recvmmsg+0xbf/0x22c0 [ 613.460242][T12560] do_recvmmsg+0xbf/0x22c0 [ 613.713912][T12564] not chained 1660000 origins [ 613.718638][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 613.727914][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.737967][T12564] Call Trace: [ 613.741265][T12564] dump_stack+0x21c/0x280 [ 613.745618][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 613.751344][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 613.757425][T12564] ? kmsan_get_metadata+0x116/0x180 [ 613.762625][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 613.768439][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 613.774539][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 613.779930][T12564] ? kmsan_get_metadata+0x116/0x180 [ 613.785136][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 613.790676][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 613.796736][T12564] ? _copy_from_user+0x201/0x310 [ 613.801667][T12564] ? kmsan_get_metadata+0x116/0x180 [ 613.806863][T12564] __msan_chain_origin+0x50/0x90 [ 613.811795][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 613.816910][T12564] get_compat_msghdr+0x108/0x2b0 [ 613.821850][T12564] do_recvmmsg+0xdbb/0x22c0 [ 613.826345][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 613.832151][T12564] ? kmsan_get_metadata+0x116/0x180 [ 613.837344][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 613.843229][T12564] ? kmsan_get_metadata+0x116/0x180 [ 613.848416][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 613.854043][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 613.859317][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 613.864067][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 613.868819][T12564] __sys_recvmmsg+0x5dd/0x610 [ 613.873498][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 613.879558][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 613.885704][T12564] __do_fast_syscall_32+0x2af/0x480 [ 613.890899][T12564] do_fast_syscall_32+0x6b/0xd0 [ 613.895792][T12564] do_SYSENTER_32+0x73/0x90 [ 613.900290][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 613.906603][T12564] RIP: 0023:0xf7fc1549 [ 613.910652][T12564] Code: Bad RIP value. [ 613.914705][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 613.923115][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 613.931077][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 613.939056][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.947023][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 613.954986][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 613.962961][T12564] Uninit was stored to memory at: [ 613.967977][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 613.973683][T12564] __msan_chain_origin+0x50/0x90 [ 613.978630][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 613.983730][T12564] get_compat_msghdr+0x108/0x2b0 [ 613.988653][T12564] do_recvmmsg+0xdbb/0x22c0 [ 613.993141][T12564] __sys_recvmmsg+0x5dd/0x610 [ 613.997808][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.003863][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.010004][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.015190][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.020026][T12564] do_SYSENTER_32+0x73/0x90 [ 614.024517][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.030829][T12564] [ 614.033141][T12564] Uninit was stored to memory at: [ 614.038157][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 614.043872][T12564] __msan_chain_origin+0x50/0x90 [ 614.048798][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.053898][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.058823][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.063312][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.067989][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.074044][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.080187][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.085376][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.090214][T12564] do_SYSENTER_32+0x73/0x90 [ 614.094710][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.101011][T12564] [ 614.103320][T12564] Uninit was stored to memory at: [ 614.108332][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 614.114038][T12564] __msan_chain_origin+0x50/0x90 [ 614.118966][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.124064][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.128989][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.133479][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.138147][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.144201][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.150341][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.155527][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.160364][T12564] do_SYSENTER_32+0x73/0x90 [ 614.164857][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.171168][T12564] [ 614.173493][T12564] Uninit was stored to memory at: [ 614.178506][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 614.184212][T12564] __msan_chain_origin+0x50/0x90 [ 614.189140][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.194240][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.199164][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.203653][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.208321][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.214376][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.220539][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.225726][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.230562][T12564] do_SYSENTER_32+0x73/0x90 [ 614.235059][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.241456][T12564] [ 614.243767][T12564] Uninit was stored to memory at: [ 614.248777][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 614.254494][T12564] __msan_chain_origin+0x50/0x90 [ 614.259421][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.264523][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.269448][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.273936][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.278604][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.284657][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.290801][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.295987][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.300824][T12564] do_SYSENTER_32+0x73/0x90 [ 614.305317][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.311622][T12564] [ 614.313936][T12564] Uninit was stored to memory at: [ 614.318949][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 614.324652][T12564] __msan_chain_origin+0x50/0x90 [ 614.329578][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.334677][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.339602][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.344102][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.348766][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.354820][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.360965][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.366150][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.370987][T12564] do_SYSENTER_32+0x73/0x90 [ 614.375477][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.381782][T12564] [ 614.384091][T12564] Uninit was stored to memory at: [ 614.389104][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 614.394807][T12564] __msan_chain_origin+0x50/0x90 [ 614.399732][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.404830][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.409756][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.414247][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.418912][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.424972][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.431115][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.436301][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.441142][T12564] do_SYSENTER_32+0x73/0x90 [ 614.445636][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.451941][T12564] [ 614.454251][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 614.460910][T12564] do_recvmmsg+0xbf/0x22c0 [ 614.465315][T12564] do_recvmmsg+0xbf/0x22c0 [ 614.599002][T12564] not chained 1670000 origins [ 614.603794][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 614.612449][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.622520][T12564] Call Trace: [ 614.625812][T12564] dump_stack+0x21c/0x280 [ 614.630141][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 614.635857][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 614.641935][T12564] ? kmsan_get_metadata+0x116/0x180 [ 614.647131][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 614.652932][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 614.658992][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 614.664357][T12564] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 614.670506][T12564] ? kmsan_get_metadata+0x116/0x180 [ 614.675695][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 614.681234][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 614.687297][T12564] ? _copy_from_user+0x201/0x310 [ 614.692230][T12564] ? kmsan_get_metadata+0x116/0x180 [ 614.697425][T12564] __msan_chain_origin+0x50/0x90 [ 614.702355][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.707478][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.712414][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.716910][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 614.722715][T12564] ? kmsan_get_metadata+0x116/0x180 [ 614.727929][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 614.733815][T12564] ? kmsan_get_metadata+0x116/0x180 [ 614.739005][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 614.744629][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 614.749907][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 614.754661][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 614.759437][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.764117][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.770184][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.776331][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.781528][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.786373][T12564] do_SYSENTER_32+0x73/0x90 [ 614.790874][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.797187][T12564] RIP: 0023:0xf7fc1549 [ 614.801340][T12564] Code: Bad RIP value. [ 614.805399][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 614.813799][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 614.821758][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 614.829717][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.837679][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 614.845638][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.853606][T12564] Uninit was stored to memory at: [ 614.858624][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 614.864330][T12564] __msan_chain_origin+0x50/0x90 [ 614.869255][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.874352][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.879304][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.883797][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.888466][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.894522][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.900667][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.905873][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.910801][T12564] do_SYSENTER_32+0x73/0x90 [ 614.915292][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.921596][T12564] [ 614.923918][T12564] Uninit was stored to memory at: [ 614.928946][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 614.934737][T12564] __msan_chain_origin+0x50/0x90 [ 614.939657][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 614.944753][T12564] get_compat_msghdr+0x108/0x2b0 [ 614.949675][T12564] do_recvmmsg+0xdbb/0x22c0 [ 614.954188][T12564] __sys_recvmmsg+0x5dd/0x610 [ 614.958853][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 614.964914][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 614.971060][T12564] __do_fast_syscall_32+0x2af/0x480 [ 614.976247][T12564] do_fast_syscall_32+0x6b/0xd0 [ 614.981082][T12564] do_SYSENTER_32+0x73/0x90 [ 614.985586][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.991888][T12564] [ 614.994198][T12564] Uninit was stored to memory at: [ 614.999208][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 615.004916][T12564] __msan_chain_origin+0x50/0x90 [ 615.009864][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 615.014963][T12564] get_compat_msghdr+0x108/0x2b0 [ 615.019889][T12564] do_recvmmsg+0xdbb/0x22c0 [ 615.024382][T12564] __sys_recvmmsg+0x5dd/0x610 [ 615.029048][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 615.035114][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 615.041256][T12564] __do_fast_syscall_32+0x2af/0x480 [ 615.046444][T12564] do_fast_syscall_32+0x6b/0xd0 [ 615.051280][T12564] do_SYSENTER_32+0x73/0x90 [ 615.055795][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.062094][T12564] [ 615.064418][T12564] Uninit was stored to memory at: [ 615.069430][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 615.075135][T12564] __msan_chain_origin+0x50/0x90 [ 615.080061][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 615.085157][T12564] get_compat_msghdr+0x108/0x2b0 [ 615.090076][T12564] do_recvmmsg+0xdbb/0x22c0 [ 615.094563][T12564] __sys_recvmmsg+0x5dd/0x610 [ 615.099228][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 615.105281][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 615.111418][T12564] __do_fast_syscall_32+0x2af/0x480 [ 615.116601][T12564] do_fast_syscall_32+0x6b/0xd0 [ 615.121438][T12564] do_SYSENTER_32+0x73/0x90 [ 615.125929][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.132231][T12564] [ 615.134538][T12564] Uninit was stored to memory at: [ 615.139551][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 615.145258][T12564] __msan_chain_origin+0x50/0x90 [ 615.150180][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 615.155275][T12564] get_compat_msghdr+0x108/0x2b0 [ 615.160209][T12564] do_recvmmsg+0xdbb/0x22c0 [ 615.164701][T12564] __sys_recvmmsg+0x5dd/0x610 [ 615.169369][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 615.175427][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 615.181570][T12564] __do_fast_syscall_32+0x2af/0x480 [ 615.186790][T12564] do_fast_syscall_32+0x6b/0xd0 [ 615.191629][T12564] do_SYSENTER_32+0x73/0x90 [ 615.196123][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.202427][T12564] [ 615.204737][T12564] Uninit was stored to memory at: [ 615.209836][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 615.215546][T12564] __msan_chain_origin+0x50/0x90 [ 615.220471][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 615.225571][T12564] get_compat_msghdr+0x108/0x2b0 [ 615.230504][T12564] do_recvmmsg+0xdbb/0x22c0 [ 615.234999][T12564] __sys_recvmmsg+0x5dd/0x610 [ 615.239664][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 615.245718][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 615.251859][T12564] __do_fast_syscall_32+0x2af/0x480 [ 615.257043][T12564] do_fast_syscall_32+0x6b/0xd0 [ 615.261879][T12564] do_SYSENTER_32+0x73/0x90 [ 615.266369][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.272674][T12564] [ 615.274982][T12564] Uninit was stored to memory at: [ 615.280532][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 615.286238][T12564] __msan_chain_origin+0x50/0x90 [ 615.291165][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 615.296263][T12564] get_compat_msghdr+0x108/0x2b0 [ 615.301184][T12564] do_recvmmsg+0xdbb/0x22c0 [ 615.305672][T12564] __sys_recvmmsg+0x5dd/0x610 [ 615.310344][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 615.316402][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 615.322542][T12564] __do_fast_syscall_32+0x2af/0x480 [ 615.327727][T12564] do_fast_syscall_32+0x6b/0xd0 [ 615.332567][T12564] do_SYSENTER_32+0x73/0x90 [ 615.337062][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.343366][T12564] [ 615.345680][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 615.352343][T12564] do_recvmmsg+0xbf/0x22c0 [ 615.356749][T12564] do_recvmmsg+0xbf/0x22c0 [ 615.515087][ T9121] Bluetooth: hci1: command 0x0406 tx timeout [ 615.521235][ T9121] Bluetooth: hci3: command 0x0406 tx timeout [ 615.535929][ T9121] Bluetooth: hci4: command 0x0406 tx timeout [ 615.542049][ T9121] Bluetooth: hci5: command 0x0406 tx timeout [ 615.657386][T12564] not chained 1680000 origins [ 615.662102][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 615.670762][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.680896][T12564] Call Trace: [ 615.684199][T12564] dump_stack+0x21c/0x280 [ 615.688537][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 615.694261][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 615.700331][T12564] ? kmsan_get_metadata+0x116/0x180 [ 615.705535][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 615.711345][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 615.717410][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 615.722792][T12564] ? kmsan_get_metadata+0x116/0x180 [ 615.727990][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 615.733540][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 615.739614][T12564] ? _copy_from_user+0x201/0x310 [ 615.744558][T12564] ? kmsan_get_metadata+0x116/0x180 [ 615.749760][T12564] __msan_chain_origin+0x50/0x90 [ 615.754703][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 615.759829][T12564] get_compat_msghdr+0x108/0x2b0 [ 615.764780][T12564] do_recvmmsg+0xdbb/0x22c0 [ 615.769286][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 615.775103][T12564] ? kmsan_get_metadata+0x116/0x180 [ 615.780309][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 615.786207][T12564] ? kmsan_get_metadata+0x116/0x180 [ 615.791407][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 615.797053][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 615.802342][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 615.807108][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 615.811877][T12564] __sys_recvmmsg+0x5dd/0x610 [ 615.816576][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 615.822652][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 615.828809][T12564] __do_fast_syscall_32+0x2af/0x480 [ 615.834029][T12564] do_fast_syscall_32+0x6b/0xd0 [ 615.838882][T12564] do_SYSENTER_32+0x73/0x90 [ 615.843392][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.849725][T12564] RIP: 0023:0xf7fc1549 [ 615.853782][T12564] Code: Bad RIP value. [ 615.857844][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 615.866256][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 615.874224][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 615.882193][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.890181][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 615.898150][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.906129][T12564] Uninit was stored to memory at: [ 615.911158][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 615.916877][T12564] __msan_chain_origin+0x50/0x90 [ 615.921818][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 615.926930][T12564] get_compat_msghdr+0x108/0x2b0 [ 615.931869][T12564] do_recvmmsg+0xdbb/0x22c0 [ 615.936375][T12564] __sys_recvmmsg+0x5dd/0x610 [ 615.941054][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 615.947141][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 615.953293][T12564] __do_fast_syscall_32+0x2af/0x480 [ 615.958503][T12564] do_fast_syscall_32+0x6b/0xd0 [ 615.963353][T12564] do_SYSENTER_32+0x73/0x90 [ 615.967863][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.974182][T12564] [ 615.976501][T12564] Uninit was stored to memory at: [ 615.981545][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 615.987266][T12564] __msan_chain_origin+0x50/0x90 [ 615.992203][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 615.997316][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.002253][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.006754][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.011449][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.017517][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.023668][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.028885][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.033743][T12564] do_SYSENTER_32+0x73/0x90 [ 616.038245][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.044554][T12564] [ 616.046873][T12564] Uninit was stored to memory at: [ 616.051906][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.057624][T12564] __msan_chain_origin+0x50/0x90 [ 616.062560][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.067673][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.072607][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.077108][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.081796][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.087863][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.094022][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.099216][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.104060][T12564] do_SYSENTER_32+0x73/0x90 [ 616.108577][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.114889][T12564] [ 616.117208][T12564] Uninit was stored to memory at: [ 616.122231][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.127946][T12564] __msan_chain_origin+0x50/0x90 [ 616.132888][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.137995][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.142933][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.147435][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.152111][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.158176][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.164343][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.169538][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.174387][T12564] do_SYSENTER_32+0x73/0x90 [ 616.178890][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.185200][T12564] [ 616.187516][T12564] Uninit was stored to memory at: [ 616.192533][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.198238][T12564] __msan_chain_origin+0x50/0x90 [ 616.203178][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.208277][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.213199][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.217689][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.222356][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.228431][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.234571][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.239755][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.244593][T12564] do_SYSENTER_32+0x73/0x90 [ 616.249083][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.255384][T12564] [ 616.257692][T12564] Uninit was stored to memory at: [ 616.262712][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.268421][T12564] __msan_chain_origin+0x50/0x90 [ 616.273346][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.278444][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.283366][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.287855][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.292525][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.298582][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.304726][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.309943][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.314787][T12564] do_SYSENTER_32+0x73/0x90 [ 616.319280][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.325581][T12564] [ 616.327893][T12564] Uninit was stored to memory at: [ 616.333181][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.338889][T12564] __msan_chain_origin+0x50/0x90 [ 616.343815][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.348923][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.353846][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.358343][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.363270][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.369324][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.375481][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.380675][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.385517][T12564] do_SYSENTER_32+0x73/0x90 [ 616.390012][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.396321][T12564] [ 616.398638][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 616.405304][T12564] do_recvmmsg+0xbf/0x22c0 [ 616.409722][T12564] do_recvmmsg+0xbf/0x22c0 [ 616.440853][T12564] not chained 1690000 origins [ 616.445560][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 616.454218][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.464260][T12564] Call Trace: [ 616.467549][T12564] dump_stack+0x21c/0x280 [ 616.471877][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 616.477594][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 616.483655][T12564] ? kmsan_get_metadata+0x116/0x180 [ 616.488846][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 616.494644][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 616.500703][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 616.506090][T12564] ? kmsan_get_metadata+0x116/0x180 [ 616.511285][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 616.516824][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 616.522896][T12564] ? _copy_from_user+0x201/0x310 [ 616.527827][T12564] ? kmsan_get_metadata+0x116/0x180 [ 616.533018][T12564] __msan_chain_origin+0x50/0x90 [ 616.537952][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.543067][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.548002][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.552505][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 616.558315][T12564] ? kmsan_get_metadata+0x116/0x180 [ 616.563511][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 616.569399][T12564] ? kmsan_get_metadata+0x116/0x180 [ 616.574590][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 616.580328][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 616.585610][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 616.590364][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 616.595121][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.599815][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.605887][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.612043][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.617249][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.622098][T12564] do_SYSENTER_32+0x73/0x90 [ 616.626601][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.633017][T12564] RIP: 0023:0xf7fc1549 [ 616.637066][T12564] Code: Bad RIP value. [ 616.641116][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 616.649607][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 616.657566][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 616.665542][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.673502][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 616.681470][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.689443][T12564] Uninit was stored to memory at: [ 616.694467][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.700172][T12564] __msan_chain_origin+0x50/0x90 [ 616.705103][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.710204][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.715130][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.719619][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.724290][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.730346][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.736614][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.741800][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.746657][T12564] do_SYSENTER_32+0x73/0x90 [ 616.751150][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.757454][T12564] [ 616.759777][T12564] Uninit was stored to memory at: [ 616.764790][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.770495][T12564] __msan_chain_origin+0x50/0x90 [ 616.775421][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.780545][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.785472][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.789960][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.794625][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.800690][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.806833][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.812022][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.816860][T12564] do_SYSENTER_32+0x73/0x90 [ 616.821351][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.827656][T12564] [ 616.829968][T12564] Uninit was stored to memory at: [ 616.834982][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.840687][T12564] __msan_chain_origin+0x50/0x90 [ 616.845613][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.850712][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.855648][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.860135][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.864802][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.870855][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.876995][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.882184][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.887029][T12564] do_SYSENTER_32+0x73/0x90 [ 616.891521][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.897825][T12564] [ 616.900137][T12564] Uninit was stored to memory at: [ 616.905149][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.910854][T12564] __msan_chain_origin+0x50/0x90 [ 616.915901][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.920997][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.925928][T12564] do_recvmmsg+0xdbb/0x22c0 [ 616.930415][T12564] __sys_recvmmsg+0x5dd/0x610 [ 616.935082][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 616.941137][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 616.947279][T12564] __do_fast_syscall_32+0x2af/0x480 [ 616.952466][T12564] do_fast_syscall_32+0x6b/0xd0 [ 616.957304][T12564] do_SYSENTER_32+0x73/0x90 [ 616.961793][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.968096][T12564] [ 616.970409][T12564] Uninit was stored to memory at: [ 616.975423][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 616.981127][T12564] __msan_chain_origin+0x50/0x90 [ 616.986053][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 616.991149][T12564] get_compat_msghdr+0x108/0x2b0 [ 616.996071][T12564] do_recvmmsg+0xdbb/0x22c0 [ 617.000558][T12564] __sys_recvmmsg+0x5dd/0x610 [ 617.005226][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 617.011300][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 617.017440][T12564] __do_fast_syscall_32+0x2af/0x480 [ 617.022621][T12564] do_fast_syscall_32+0x6b/0xd0 [ 617.027467][T12564] do_SYSENTER_32+0x73/0x90 [ 617.031955][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.038258][T12564] [ 617.040571][T12564] Uninit was stored to memory at: [ 617.045585][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 617.051289][T12564] __msan_chain_origin+0x50/0x90 [ 617.056217][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 617.061313][T12564] get_compat_msghdr+0x108/0x2b0 [ 617.066234][T12564] do_recvmmsg+0xdbb/0x22c0 [ 617.070723][T12564] __sys_recvmmsg+0x5dd/0x610 [ 617.075389][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 617.081449][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 617.087594][T12564] __do_fast_syscall_32+0x2af/0x480 [ 617.092780][T12564] do_fast_syscall_32+0x6b/0xd0 [ 617.097618][T12564] do_SYSENTER_32+0x73/0x90 [ 617.102110][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.108414][T12564] [ 617.110722][T12564] Uninit was stored to memory at: [ 617.115734][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 617.121447][T12564] __msan_chain_origin+0x50/0x90 [ 617.126373][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 617.131480][T12564] get_compat_msghdr+0x108/0x2b0 [ 617.136404][T12564] do_recvmmsg+0xdbb/0x22c0 [ 617.140895][T12564] __sys_recvmmsg+0x5dd/0x610 [ 617.145561][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 617.151717][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 617.157865][T12564] __do_fast_syscall_32+0x2af/0x480 [ 617.163051][T12564] do_fast_syscall_32+0x6b/0xd0 [ 617.167888][T12564] do_SYSENTER_32+0x73/0x90 [ 617.172378][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.178683][T12564] [ 617.180998][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 617.187658][T12564] do_recvmmsg+0xbf/0x22c0 [ 617.192059][T12564] do_recvmmsg+0xbf/0x22c0 [ 617.443451][T12564] not chained 1700000 origins [ 617.448156][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 617.456931][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.466979][T12564] Call Trace: [ 617.470280][T12564] dump_stack+0x21c/0x280 [ 617.474620][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 617.480351][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 617.486438][T12564] ? kmsan_get_metadata+0x116/0x180 [ 617.491641][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 617.497458][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 617.503530][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 617.508921][T12564] ? kmsan_get_metadata+0x116/0x180 [ 617.514122][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 617.519679][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 617.525757][T12564] ? _copy_from_user+0x201/0x310 [ 617.530716][T12564] ? kmsan_get_metadata+0x116/0x180 [ 617.535918][T12564] __msan_chain_origin+0x50/0x90 [ 617.540865][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 617.545995][T12564] get_compat_msghdr+0x108/0x2b0 [ 617.550944][T12564] do_recvmmsg+0xdbb/0x22c0 [ 617.555459][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 617.561277][T12564] ? kmsan_get_metadata+0x116/0x180 [ 617.566486][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 617.572384][T12564] ? kmsan_get_metadata+0x116/0x180 [ 617.577590][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 617.583235][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 617.588527][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 617.593291][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 617.598063][T12564] __sys_recvmmsg+0x5dd/0x610 [ 617.602761][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 617.608841][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 617.615012][T12564] __do_fast_syscall_32+0x2af/0x480 [ 617.620220][T12564] do_fast_syscall_32+0x6b/0xd0 [ 617.625078][T12564] do_SYSENTER_32+0x73/0x90 [ 617.629588][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.635912][T12564] RIP: 0023:0xf7fc1549 [ 617.639971][T12564] Code: Bad RIP value. [ 617.644046][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 617.652455][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 617.660435][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 617.668410][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.676381][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 617.684349][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 617.692336][T12564] Uninit was stored to memory at: [ 617.697366][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 617.703087][T12564] __msan_chain_origin+0x50/0x90 [ 617.708025][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 617.713135][T12564] get_compat_msghdr+0x108/0x2b0 [ 617.718075][T12564] do_recvmmsg+0xdbb/0x22c0 [ 617.722577][T12564] __sys_recvmmsg+0x5dd/0x610 [ 617.727260][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 617.733334][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 617.739489][T12564] __do_fast_syscall_32+0x2af/0x480 [ 617.744689][T12564] do_fast_syscall_32+0x6b/0xd0 [ 617.749540][T12564] do_SYSENTER_32+0x73/0x90 [ 617.754044][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.760878][T12564] [ 617.763200][T12564] Uninit was stored to memory at: [ 617.768227][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 617.773948][T12564] __msan_chain_origin+0x50/0x90 [ 617.778889][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 617.783999][T12564] get_compat_msghdr+0x108/0x2b0 [ 617.788950][T12564] do_recvmmsg+0xdbb/0x22c0 [ 617.793453][T12564] __sys_recvmmsg+0x5dd/0x610 [ 617.798130][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 617.804205][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 617.810356][T12564] __do_fast_syscall_32+0x2af/0x480 [ 617.815578][T12564] do_fast_syscall_32+0x6b/0xd0 [ 617.820445][T12564] do_SYSENTER_32+0x73/0x90 [ 617.824946][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.831255][T12564] [ 617.833578][T12564] Uninit was stored to memory at: [ 617.838602][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 617.844317][T12564] __msan_chain_origin+0x50/0x90 [ 617.849251][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 617.854364][T12564] get_compat_msghdr+0x108/0x2b0 [ 617.859302][T12564] do_recvmmsg+0xdbb/0x22c0 [ 617.863801][T12564] __sys_recvmmsg+0x5dd/0x610 [ 617.868474][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 617.874619][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 617.880771][T12564] __do_fast_syscall_32+0x2af/0x480 [ 617.885965][T12564] do_fast_syscall_32+0x6b/0xd0 [ 617.890811][T12564] do_SYSENTER_32+0x73/0x90 [ 617.895318][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.901641][T12564] [ 617.903957][T12564] Uninit was stored to memory at: [ 617.908987][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 617.914708][T12564] __msan_chain_origin+0x50/0x90 [ 617.919650][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 617.924789][T12564] get_compat_msghdr+0x108/0x2b0 [ 617.929723][T12564] do_recvmmsg+0xdbb/0x22c0 [ 617.934239][T12564] __sys_recvmmsg+0x5dd/0x610 [ 617.938915][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 617.944983][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 617.951134][T12564] __do_fast_syscall_32+0x2af/0x480 [ 617.956328][T12564] do_fast_syscall_32+0x6b/0xd0 [ 617.961174][T12564] do_SYSENTER_32+0x73/0x90 [ 617.965212][T12560] not chained 1710000 origins [ 617.965678][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 617.970338][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 617.976624][T12564] [ 617.985273][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.987579][T12564] Uninit was stored to memory at: [ 617.997610][T12560] Call Trace: [ 618.002618][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 618.005879][T12560] dump_stack+0x21c/0x280 [ 618.011564][T12564] __msan_chain_origin+0x50/0x90 [ 618.015869][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 618.020779][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 618.026499][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 618.031588][T12564] get_compat_msghdr+0x108/0x2b0 [ 618.037631][T12560] ? kmsan_get_metadata+0x116/0x180 [ 618.042541][T12564] do_recvmmsg+0xdbb/0x22c0 [ 618.047718][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 618.052191][T12564] __sys_recvmmsg+0x5dd/0x610 [ 618.057972][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 618.062625][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.068661][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 618.074699][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.080061][T12560] ? kmsan_get_metadata+0x116/0x180 [ 618.086185][T12564] __do_fast_syscall_32+0x2af/0x480 [ 618.091354][T12560] ? kmsan_get_metadata+0x116/0x180 [ 618.096528][T12564] do_fast_syscall_32+0x6b/0xd0 [ 618.101710][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 618.106530][T12564] do_SYSENTER_32+0x73/0x90 [ 618.112052][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 618.116529][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.122571][T12560] ? _copy_from_user+0x201/0x310 [ 618.128856][T12564] [ 618.133779][T12560] ? kmsan_get_metadata+0x116/0x180 [ 618.136074][T12564] Uninit was stored to memory at: [ 618.141272][T12560] __msan_chain_origin+0x50/0x90 [ 618.146294][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 618.151208][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 618.156900][T12564] __msan_chain_origin+0x50/0x90 [ 618.162009][T12560] get_compat_msghdr+0x108/0x2b0 [ 618.166951][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 618.171864][T12560] do_recvmmsg+0xdbb/0x22c0 [ 618.177121][T12564] get_compat_msghdr+0x108/0x2b0 [ 618.181606][T12560] ? kmsan_get_metadata+0x116/0x180 [ 618.186510][T12564] do_recvmmsg+0xdbb/0x22c0 [ 618.191681][T12560] ? kmsan_get_metadata+0x116/0x180 [ 618.196153][T12564] __sys_recvmmsg+0x5dd/0x610 [ 618.201336][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 618.206003][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.211869][T12560] ? kmsan_get_metadata+0x116/0x180 [ 618.217911][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.223083][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 618.229209][T12564] __do_fast_syscall_32+0x2af/0x480 [ 618.234817][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 618.239990][T12564] do_fast_syscall_32+0x6b/0xd0 [ 618.245248][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 618.250075][T12564] do_SYSENTER_32+0x73/0x90 [ 618.254810][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 618.259297][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.264034][T12560] __sys_recvmmsg+0x5dd/0x610 [ 618.270335][T12564] [ 618.275005][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.277295][T12564] Uninit was stored to memory at: [ 618.283347][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.288353][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 618.294500][T12560] __do_fast_syscall_32+0x2af/0x480 [ 618.300189][T12564] __msan_chain_origin+0x50/0x90 [ 618.305364][T12560] do_fast_syscall_32+0x6b/0xd0 [ 618.310278][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 618.315104][T12560] do_SYSENTER_32+0x73/0x90 [ 618.320190][T12564] get_compat_msghdr+0x108/0x2b0 [ 618.324669][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.329577][T12564] do_recvmmsg+0xdbb/0x22c0 [ 618.335874][T12560] RIP: 0023:0xf7fc1549 [ 618.340352][T12564] __sys_recvmmsg+0x5dd/0x610 [ 618.344388][T12560] Code: Bad RIP value. [ 618.349047][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.353085][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 618.359157][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.367539][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 618.373677][T12564] __do_fast_syscall_32+0x2af/0x480 [ 618.381637][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 618.386819][T12564] do_fast_syscall_32+0x6b/0xd0 [ 618.394760][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.399589][T12564] do_SYSENTER_32+0x73/0x90 [ 618.407542][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 618.412056][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.420007][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.426306][T12564] [ 618.434263][T12560] Uninit was stored to memory at: [ 618.436567][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 618.441582][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 618.448223][T12564] do_recvmmsg+0xbf/0x22c0 [ 618.453919][T12560] __msan_chain_origin+0x50/0x90 [ 618.458306][T12564] do_recvmmsg+0xbf/0x22c0 [ 618.463224][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 618.472778][T12560] get_compat_msghdr+0x108/0x2b0 [ 618.477750][T12560] do_recvmmsg+0xdbb/0x22c0 [ 618.482335][T12560] __sys_recvmmsg+0x5dd/0x610 [ 618.487047][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.493114][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.499266][T12560] __do_fast_syscall_32+0x2af/0x480 [ 618.504463][T12560] do_fast_syscall_32+0x6b/0xd0 [ 618.509311][T12560] do_SYSENTER_32+0x73/0x90 [ 618.513810][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.520118][T12560] [ 618.522455][T12560] Uninit was stored to memory at: [ 618.527489][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 618.533209][T12560] __msan_chain_origin+0x50/0x90 [ 618.538150][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 618.543263][T12560] get_compat_msghdr+0x108/0x2b0 [ 618.548211][T12560] do_recvmmsg+0xdbb/0x22c0 [ 618.552718][T12560] __sys_recvmmsg+0x5dd/0x610 [ 618.557404][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.563480][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.569644][T12560] __do_fast_syscall_32+0x2af/0x480 [ 618.574850][T12560] do_fast_syscall_32+0x6b/0xd0 [ 618.579704][T12560] do_SYSENTER_32+0x73/0x90 [ 618.584209][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.590527][T12560] [ 618.592862][T12560] Uninit was stored to memory at: [ 618.597889][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 618.603605][T12560] __msan_chain_origin+0x50/0x90 [ 618.608557][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 618.613665][T12560] get_compat_msghdr+0x108/0x2b0 [ 618.618603][T12560] do_recvmmsg+0xdbb/0x22c0 [ 618.623102][T12560] __sys_recvmmsg+0x5dd/0x610 [ 618.627779][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.633845][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.640003][T12560] __do_fast_syscall_32+0x2af/0x480 [ 618.645202][T12560] do_fast_syscall_32+0x6b/0xd0 [ 618.650047][T12560] do_SYSENTER_32+0x73/0x90 [ 618.654553][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.657708][T12564] not chained 1720000 origins [ 618.660875][T12560] [ 618.665543][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 618.667841][T12560] Uninit was stored to memory at: [ 618.676484][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.681491][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 618.691510][T12564] Call Trace: [ 618.697219][T12560] __msan_chain_origin+0x50/0x90 [ 618.700483][T12564] dump_stack+0x21c/0x280 [ 618.705395][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 618.709700][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 618.714783][T12560] get_compat_msghdr+0x108/0x2b0 [ 618.720481][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 618.725395][T12560] do_recvmmsg+0xdbb/0x22c0 [ 618.731437][T12564] ? kmsan_get_metadata+0x116/0x180 [ 618.735912][T12560] __sys_recvmmsg+0x5dd/0x610 [ 618.741086][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 618.745734][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.751514][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 618.757560][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.763600][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 618.769728][T12560] __do_fast_syscall_32+0x2af/0x480 [ 618.775075][T12564] ? kmsan_get_metadata+0x116/0x180 [ 618.780247][T12560] do_fast_syscall_32+0x6b/0xd0 [ 618.785421][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 618.790245][T12560] do_SYSENTER_32+0x73/0x90 [ 618.795765][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 618.800242][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.806292][T12564] ? _copy_from_user+0x201/0x310 [ 618.812583][T12560] [ 618.817523][T12564] ? kmsan_get_metadata+0x116/0x180 [ 618.819824][T12560] Uninit was stored to memory at: [ 618.825006][T12564] __msan_chain_origin+0x50/0x90 [ 618.830004][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 618.834918][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 618.840609][T12560] __msan_chain_origin+0x50/0x90 [ 618.845713][T12564] get_compat_msghdr+0x108/0x2b0 [ 618.850704][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 618.855619][T12564] do_recvmmsg+0xdbb/0x22c0 [ 618.860723][T12560] get_compat_msghdr+0x108/0x2b0 [ 618.865203][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 618.870111][T12560] do_recvmmsg+0xdbb/0x22c0 [ 618.875897][T12564] ? kmsan_get_metadata+0x116/0x180 [ 618.880381][T12560] __sys_recvmmsg+0x5dd/0x610 [ 618.885555][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 618.890206][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.896071][T12564] ? kmsan_get_metadata+0x116/0x180 [ 618.902114][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.907288][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 618.913502][T12560] __do_fast_syscall_32+0x2af/0x480 [ 618.919108][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 618.924282][T12560] do_fast_syscall_32+0x6b/0xd0 [ 618.929540][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 618.934364][T12560] do_SYSENTER_32+0x73/0x90 [ 618.939100][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 618.943581][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 618.948320][T12564] __sys_recvmmsg+0x5dd/0x610 [ 618.954610][T12560] [ 618.959277][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 618.961570][T12560] Uninit was stored to memory at: [ 618.967623][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 618.972619][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 618.978743][T12564] __do_fast_syscall_32+0x2af/0x480 [ 618.984430][T12560] __msan_chain_origin+0x50/0x90 [ 618.989609][T12564] do_fast_syscall_32+0x6b/0xd0 [ 618.994522][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 618.999354][T12564] do_SYSENTER_32+0x73/0x90 [ 619.004458][T12560] get_compat_msghdr+0x108/0x2b0 [ 619.008934][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.013845][T12560] do_recvmmsg+0xdbb/0x22c0 [ 619.020152][T12564] RIP: 0023:0xf7fc1549 [ 619.024628][T12560] __sys_recvmmsg+0x5dd/0x610 [ 619.028661][T12564] Code: Bad RIP value. [ 619.033321][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.037358][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 619.043405][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.051785][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 619.057916][T12560] __do_fast_syscall_32+0x2af/0x480 [ 619.065874][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 619.071053][T12560] do_fast_syscall_32+0x6b/0xd0 [ 619.078998][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 619.083828][T12560] do_SYSENTER_32+0x73/0x90 [ 619.091771][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 619.096255][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.104198][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 619.110490][T12560] [ 619.118446][T12564] Uninit was stored to memory at: [ 619.120758][T12560] Uninit was stored to memory at: [ 619.125780][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 619.130782][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 619.136475][T12564] __msan_chain_origin+0x50/0x90 [ 619.142168][T12560] __msan_chain_origin+0x50/0x90 [ 619.147080][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 619.151989][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 619.157076][T12564] get_compat_msghdr+0x108/0x2b0 [ 619.162159][T12560] get_compat_msghdr+0x108/0x2b0 [ 619.167067][T12564] do_recvmmsg+0xdbb/0x22c0 [ 619.171980][T12560] do_recvmmsg+0xdbb/0x22c0 [ 619.176455][T12564] __sys_recvmmsg+0x5dd/0x610 [ 619.181033][T12560] __sys_recvmmsg+0x5dd/0x610 [ 619.185685][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.190347][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.196386][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.202426][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.208729][T12564] __do_fast_syscall_32+0x2af/0x480 [ 619.214854][T12560] __do_fast_syscall_32+0x2af/0x480 [ 619.220025][T12564] do_fast_syscall_32+0x6b/0xd0 [ 619.225197][T12560] do_fast_syscall_32+0x6b/0xd0 [ 619.230022][T12564] do_SYSENTER_32+0x73/0x90 [ 619.234846][T12560] do_SYSENTER_32+0x73/0x90 [ 619.239325][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.243803][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.250091][T12564] [ 619.256390][T12560] [ 619.258700][T12564] Uninit was stored to memory at: [ 619.261010][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 619.266017][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 619.272662][T12560] do_recvmmsg+0xbf/0x22c0 [ 619.278355][T12564] __msan_chain_origin+0x50/0x90 [ 619.282746][T12560] do_recvmmsg+0xbf/0x22c0 [ 619.287657][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 619.297147][T12564] get_compat_msghdr+0x108/0x2b0 [ 619.302088][T12564] do_recvmmsg+0xdbb/0x22c0 [ 619.306592][T12564] __sys_recvmmsg+0x5dd/0x610 [ 619.311274][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.317352][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.323502][T12564] __do_fast_syscall_32+0x2af/0x480 [ 619.328701][T12564] do_fast_syscall_32+0x6b/0xd0 [ 619.333552][T12564] do_SYSENTER_32+0x73/0x90 [ 619.338061][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.344377][T12564] [ 619.346699][T12564] Uninit was stored to memory at: [ 619.351730][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 619.357453][T12564] __msan_chain_origin+0x50/0x90 [ 619.362393][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 619.367503][T12564] get_compat_msghdr+0x108/0x2b0 [ 619.372438][T12564] do_recvmmsg+0xdbb/0x22c0 [ 619.376943][T12564] __sys_recvmmsg+0x5dd/0x610 [ 619.381623][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.387692][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.393843][T12564] __do_fast_syscall_32+0x2af/0x480 [ 619.399042][T12564] do_fast_syscall_32+0x6b/0xd0 [ 619.403892][T12564] do_SYSENTER_32+0x73/0x90 [ 619.408830][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.415146][T12564] [ 619.417473][T12564] Uninit was stored to memory at: [ 619.422520][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 619.428244][T12564] __msan_chain_origin+0x50/0x90 [ 619.433183][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 619.438293][T12564] get_compat_msghdr+0x108/0x2b0 [ 619.443230][T12564] do_recvmmsg+0xdbb/0x22c0 [ 619.447731][T12564] __sys_recvmmsg+0x5dd/0x610 [ 619.452407][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.458481][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.464640][T12564] __do_fast_syscall_32+0x2af/0x480 [ 619.469842][T12564] do_fast_syscall_32+0x6b/0xd0 [ 619.474693][T12564] do_SYSENTER_32+0x73/0x90 [ 619.479197][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.485513][T12564] [ 619.487836][T12564] Uninit was stored to memory at: [ 619.492870][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 619.498589][T12564] __msan_chain_origin+0x50/0x90 [ 619.503529][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 619.508641][T12564] get_compat_msghdr+0x108/0x2b0 [ 619.513578][T12564] do_recvmmsg+0xdbb/0x22c0 [ 619.518080][T12564] __sys_recvmmsg+0x5dd/0x610 [ 619.522756][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.528823][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.534980][T12564] __do_fast_syscall_32+0x2af/0x480 [ 619.540179][T12564] do_fast_syscall_32+0x6b/0xd0 [ 619.545061][T12564] do_SYSENTER_32+0x73/0x90 [ 619.549564][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.555880][T12564] [ 619.558200][T12564] Uninit was stored to memory at: [ 619.563227][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 619.568946][T12564] __msan_chain_origin+0x50/0x90 [ 619.573883][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 619.579024][T12564] get_compat_msghdr+0x108/0x2b0 [ 619.583982][T12564] do_recvmmsg+0xdbb/0x22c0 [ 619.588496][T12564] __sys_recvmmsg+0x5dd/0x610 [ 619.593177][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.599248][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.605406][T12564] __do_fast_syscall_32+0x2af/0x480 [ 619.610694][T12564] do_fast_syscall_32+0x6b/0xd0 [ 619.615545][T12564] do_SYSENTER_32+0x73/0x90 [ 619.620048][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.626364][T12564] [ 619.628683][T12564] Uninit was stored to memory at: [ 619.633709][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 619.639429][T12564] __msan_chain_origin+0x50/0x90 [ 619.644374][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 619.649485][T12564] get_compat_msghdr+0x108/0x2b0 [ 619.654425][T12564] do_recvmmsg+0xdbb/0x22c0 [ 619.658929][T12564] __sys_recvmmsg+0x5dd/0x610 [ 619.663615][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 619.669683][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 619.675836][T12564] __do_fast_syscall_32+0x2af/0x480 [ 619.681036][T12564] do_fast_syscall_32+0x6b/0xd0 [ 619.685884][T12564] do_SYSENTER_32+0x73/0x90 [ 619.690388][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 619.696837][T12564] [ 619.699161][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 619.705831][T12564] do_recvmmsg+0xbf/0x22c0 [ 619.710246][T12564] do_recvmmsg+0xbf/0x22c0 [ 620.099013][T12564] not chained 1730000 origins [ 620.103727][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 620.112408][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.122453][T12564] Call Trace: [ 620.125749][T12564] dump_stack+0x21c/0x280 [ 620.130091][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 620.135811][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 620.141879][T12564] ? kmsan_get_metadata+0x116/0x180 [ 620.147086][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.152897][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 620.158968][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 620.164346][T12564] ? kmsan_get_metadata+0x116/0x180 [ 620.169546][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 620.175094][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 620.181179][T12564] ? _copy_from_user+0x201/0x310 [ 620.186138][T12564] ? kmsan_get_metadata+0x116/0x180 [ 620.191337][T12564] __msan_chain_origin+0x50/0x90 [ 620.196276][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 620.201401][T12564] get_compat_msghdr+0x108/0x2b0 [ 620.206344][T12564] do_recvmmsg+0xdbb/0x22c0 [ 620.210852][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.216668][T12564] ? kmsan_get_metadata+0x116/0x180 [ 620.221870][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 620.227784][T12564] ? kmsan_get_metadata+0x116/0x180 [ 620.233008][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 620.238639][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 620.243926][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 620.248696][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 620.253459][T12564] __sys_recvmmsg+0x5dd/0x610 [ 620.253504][T12560] not chained 1740000 origins [ 620.258142][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 620.268835][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 620.274978][T12564] __do_fast_syscall_32+0x2af/0x480 [ 620.280169][T12564] do_fast_syscall_32+0x6b/0xd0 [ 620.285006][T12564] do_SYSENTER_32+0x73/0x90 [ 620.289553][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.295860][T12564] RIP: 0023:0xf7fc1549 [ 620.299923][T12564] Code: Bad RIP value. [ 620.303969][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 620.312363][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 620.320319][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 620.328273][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.336242][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 620.344212][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.352176][T12564] Uninit was stored to memory at: [ 620.352190][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 620.352206][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.357217][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 620.365851][T12560] Call Trace: [ 620.375895][T12564] __msan_chain_origin+0x50/0x90 [ 620.381587][T12560] dump_stack+0x21c/0x280 [ 620.384847][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 620.389760][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 620.394063][T12564] get_compat_msghdr+0x108/0x2b0 [ 620.399147][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 620.404835][T12564] do_recvmmsg+0xdbb/0x22c0 [ 620.409748][T12560] ? kmsan_get_metadata+0x116/0x180 [ 620.415795][T12564] __sys_recvmmsg+0x5dd/0x610 [ 620.420279][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.425454][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 620.430105][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 620.435884][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 620.441946][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 620.447988][T12564] __do_fast_syscall_32+0x2af/0x480 [ 620.454121][T12560] ? kmsan_get_metadata+0x116/0x180 [ 620.459470][T12564] do_fast_syscall_32+0x6b/0xd0 [ 620.464668][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 620.469841][T12564] do_SYSENTER_32+0x73/0x90 [ 620.474666][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 620.480186][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.484663][T12560] ? _copy_from_user+0x201/0x310 [ 620.490691][T12564] [ 620.497001][T12560] ? kmsan_get_metadata+0x116/0x180 [ 620.501899][T12564] Uninit was stored to memory at: [ 620.506301][T12560] __msan_chain_origin+0x50/0x90 [ 620.511473][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 620.516473][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 620.521382][T12564] __msan_chain_origin+0x50/0x90 [ 620.527086][T12560] get_compat_msghdr+0x108/0x2b0 [ 620.532165][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 620.537081][T12560] do_recvmmsg+0xdbb/0x22c0 [ 620.541998][T12564] get_compat_msghdr+0x108/0x2b0 [ 620.547087][T12560] ? kmsan_get_metadata+0x116/0x180 [ 620.551559][T12564] do_recvmmsg+0xdbb/0x22c0 [ 620.556477][T12560] ? kmsan_get_metadata+0x116/0x180 [ 620.561645][T12564] __sys_recvmmsg+0x5dd/0x610 [ 620.566137][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 620.571326][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 620.575989][T12560] ? kmsan_get_metadata+0x116/0x180 [ 620.581859][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 620.587901][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 620.593088][T12564] __do_fast_syscall_32+0x2af/0x480 [ 620.599214][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 620.604822][T12564] do_fast_syscall_32+0x6b/0xd0 [ 620.609993][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 620.615250][T12564] do_SYSENTER_32+0x73/0x90 [ 620.620074][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 620.624818][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.629295][T12560] __sys_recvmmsg+0x5dd/0x610 [ 620.634022][T12564] [ 620.640359][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 620.644994][T12564] Uninit was stored to memory at: [ 620.647312][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 620.653353][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 620.658349][T12560] __do_fast_syscall_32+0x2af/0x480 [ 620.664476][T12564] __msan_chain_origin+0x50/0x90 [ 620.670285][T12560] do_fast_syscall_32+0x6b/0xd0 [ 620.675458][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 620.680372][T12560] do_SYSENTER_32+0x73/0x90 [ 620.685197][T12564] get_compat_msghdr+0x108/0x2b0 [ 620.690281][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.694753][T12564] do_recvmmsg+0xdbb/0x22c0 [ 620.699693][T12560] RIP: 0023:0xf7fc1549 [ 620.705996][T12564] __sys_recvmmsg+0x5dd/0x610 [ 620.710462][T12560] Code: Bad RIP value. [ 620.714514][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 620.719167][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 620.723219][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 620.729251][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 620.737642][T12564] __do_fast_syscall_32+0x2af/0x480 [ 620.743761][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 620.751714][T12564] do_fast_syscall_32+0x6b/0xd0 [ 620.756880][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.764835][T12564] do_SYSENTER_32+0x73/0x90 [ 620.769654][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 620.777608][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.782079][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.790020][T12564] [ 620.796326][T12560] Uninit was stored to memory at: [ 620.804274][T12564] Uninit was stored to memory at: [ 620.806592][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 620.811587][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 620.816581][T12560] __msan_chain_origin+0x50/0x90 [ 620.822276][T12564] __msan_chain_origin+0x50/0x90 [ 620.827970][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 620.832882][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 620.837791][T12560] get_compat_msghdr+0x108/0x2b0 [ 620.842898][T12564] get_compat_msghdr+0x108/0x2b0 [ 620.847980][T12560] do_recvmmsg+0xdbb/0x22c0 [ 620.852894][T12564] do_recvmmsg+0xdbb/0x22c0 [ 620.857805][T12560] __sys_recvmmsg+0x5dd/0x610 [ 620.862282][T12564] __sys_recvmmsg+0x5dd/0x610 [ 620.866761][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 620.871418][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 620.876067][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 620.882108][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 620.888148][T12560] __do_fast_syscall_32+0x2af/0x480 [ 620.894275][T12564] __do_fast_syscall_32+0x2af/0x480 [ 620.900400][T12560] do_fast_syscall_32+0x6b/0xd0 [ 620.905583][T12564] do_fast_syscall_32+0x6b/0xd0 [ 620.910751][T12560] do_SYSENTER_32+0x73/0x90 [ 620.915581][T12564] do_SYSENTER_32+0x73/0x90 [ 620.920406][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.927226][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 620.931699][T12560] [ 620.937996][T12564] [ 620.944303][T12560] Uninit was stored to memory at: [ 620.946607][T12564] Uninit was stored to memory at: [ 620.948922][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 620.953920][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 620.958915][T12560] __msan_chain_origin+0x50/0x90 [ 620.964628][T12564] __msan_chain_origin+0x50/0x90 [ 620.970337][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 620.975247][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 620.980165][T12560] get_compat_msghdr+0x108/0x2b0 [ 620.985249][T12564] get_compat_msghdr+0x108/0x2b0 [ 620.990346][T12560] do_recvmmsg+0xdbb/0x22c0 [ 620.995257][T12564] do_recvmmsg+0xdbb/0x22c0 [ 621.000169][T12560] __sys_recvmmsg+0x5dd/0x610 [ 621.004668][T12564] __sys_recvmmsg+0x5dd/0x610 [ 621.009149][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.013799][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.018466][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.024528][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.030652][T12560] __do_fast_syscall_32+0x2af/0x480 [ 621.036780][T12564] __do_fast_syscall_32+0x2af/0x480 [ 621.042907][T12560] do_fast_syscall_32+0x6b/0xd0 [ 621.048087][T12564] do_fast_syscall_32+0x6b/0xd0 [ 621.053262][T12560] do_SYSENTER_32+0x73/0x90 [ 621.058081][T12564] do_SYSENTER_32+0x73/0x90 [ 621.062907][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.067381][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.071849][T12560] [ 621.078149][T12564] [ 621.084447][T12560] Uninit was stored to memory at: [ 621.086751][T12564] Uninit was stored to memory at: [ 621.089067][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 621.094185][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 621.099182][T12560] __msan_chain_origin+0x50/0x90 [ 621.104873][T12564] __msan_chain_origin+0x50/0x90 [ 621.110562][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 621.115471][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 621.120379][T12560] get_compat_msghdr+0x108/0x2b0 [ 621.125461][T12564] get_compat_msghdr+0x108/0x2b0 [ 621.130544][T12560] do_recvmmsg+0xdbb/0x22c0 [ 621.135454][T12564] do_recvmmsg+0xdbb/0x22c0 [ 621.140363][T12560] __sys_recvmmsg+0x5dd/0x610 [ 621.144839][T12564] __sys_recvmmsg+0x5dd/0x610 [ 621.149318][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.153968][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.158618][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.164659][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.170696][T12560] __do_fast_syscall_32+0x2af/0x480 [ 621.176819][T12564] __do_fast_syscall_32+0x2af/0x480 [ 621.182949][T12560] do_fast_syscall_32+0x6b/0xd0 [ 621.188120][T12564] do_fast_syscall_32+0x6b/0xd0 [ 621.193289][T12560] do_SYSENTER_32+0x73/0x90 [ 621.198111][T12564] do_SYSENTER_32+0x73/0x90 [ 621.202937][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.207414][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.211881][T12560] [ 621.218179][T12564] [ 621.224479][T12560] Uninit was stored to memory at: [ 621.226788][T12564] Uninit was stored to memory at: [ 621.229123][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 621.234122][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 621.239381][T12560] __msan_chain_origin+0x50/0x90 [ 621.245073][T12564] __msan_chain_origin+0x50/0x90 [ 621.250764][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 621.255675][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 621.260584][T12560] get_compat_msghdr+0x108/0x2b0 [ 621.265669][T12564] get_compat_msghdr+0x108/0x2b0 [ 621.270749][T12560] do_recvmmsg+0xdbb/0x22c0 [ 621.275655][T12564] do_recvmmsg+0xdbb/0x22c0 [ 621.280568][T12560] __sys_recvmmsg+0x5dd/0x610 [ 621.285044][T12564] __sys_recvmmsg+0x5dd/0x610 [ 621.289514][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.289538][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.294194][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.298841][T12560] __do_fast_syscall_32+0x2af/0x480 [ 621.304881][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.311012][T12560] do_fast_syscall_32+0x6b/0xd0 [ 621.317045][T12564] __do_fast_syscall_32+0x2af/0x480 [ 621.322217][T12560] do_SYSENTER_32+0x73/0x90 [ 621.328343][T12564] do_fast_syscall_32+0x6b/0xd0 [ 621.333168][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.338339][T12564] do_SYSENTER_32+0x73/0x90 [ 621.342803][T12560] [ 621.347636][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.353934][T12560] Uninit was stored to memory at: [ 621.358414][T12564] [ 621.360738][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 621.367030][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 621.372040][T12560] __msan_chain_origin+0x50/0x90 [ 621.374349][T12564] do_recvmmsg+0xbf/0x22c0 [ 621.380046][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 621.386707][T12564] do_recvmmsg+0xbf/0x22c0 [ 621.391623][T12560] get_compat_msghdr+0x108/0x2b0 [ 621.410426][T12560] do_recvmmsg+0xdbb/0x22c0 [ 621.414932][T12560] __sys_recvmmsg+0x5dd/0x610 [ 621.419619][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.425693][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.431854][T12560] __do_fast_syscall_32+0x2af/0x480 [ 621.437053][T12560] do_fast_syscall_32+0x6b/0xd0 [ 621.441903][T12560] do_SYSENTER_32+0x73/0x90 [ 621.446411][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.452724][T12560] [ 621.455045][T12560] Uninit was stored to memory at: [ 621.460080][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 621.465797][T12560] __msan_chain_origin+0x50/0x90 [ 621.470734][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 621.475844][T12560] get_compat_msghdr+0x108/0x2b0 [ 621.480778][T12560] do_recvmmsg+0xdbb/0x22c0 [ 621.485278][T12560] __sys_recvmmsg+0x5dd/0x610 [ 621.489960][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.496033][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.502274][T12560] __do_fast_syscall_32+0x2af/0x480 [ 621.507474][T12560] do_fast_syscall_32+0x6b/0xd0 [ 621.512328][T12560] do_SYSENTER_32+0x73/0x90 [ 621.516830][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.523140][T12560] [ 621.525460][T12560] Uninit was stored to memory at: [ 621.530486][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 621.536208][T12560] __msan_chain_origin+0x50/0x90 [ 621.541143][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 621.546253][T12560] get_compat_msghdr+0x108/0x2b0 [ 621.551191][T12560] do_recvmmsg+0xdbb/0x22c0 [ 621.555690][T12560] __sys_recvmmsg+0x5dd/0x610 [ 621.560366][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.566431][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.572584][T12560] __do_fast_syscall_32+0x2af/0x480 [ 621.577867][T12560] do_fast_syscall_32+0x6b/0xd0 [ 621.582726][T12560] do_SYSENTER_32+0x73/0x90 [ 621.587236][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.593550][T12560] [ 621.595880][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 621.602551][T12560] do_recvmmsg+0xbf/0x22c0 [ 621.606966][T12560] do_recvmmsg+0xbf/0x22c0 [ 621.687958][T12564] not chained 1750000 origins [ 621.692668][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 621.701328][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.711375][T12564] Call Trace: [ 621.714676][T12564] dump_stack+0x21c/0x280 [ 621.719025][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 621.724753][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 621.730831][T12564] ? kmsan_get_metadata+0x116/0x180 [ 621.736036][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 621.741852][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 621.747921][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 621.753323][T12564] ? kmsan_get_metadata+0x116/0x180 [ 621.758526][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 621.764075][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 621.770147][T12564] ? _copy_from_user+0x201/0x310 [ 621.775112][T12564] ? kmsan_get_metadata+0x116/0x180 [ 621.780318][T12564] __msan_chain_origin+0x50/0x90 [ 621.785261][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 621.790390][T12564] get_compat_msghdr+0x108/0x2b0 [ 621.795355][T12564] do_recvmmsg+0xdbb/0x22c0 [ 621.799864][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 621.805686][T12564] ? kmsan_get_metadata+0x116/0x180 [ 621.810889][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 621.816788][T12564] ? kmsan_get_metadata+0x116/0x180 [ 621.821999][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 621.827636][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 621.832941][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 621.837705][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 621.842479][T12564] __sys_recvmmsg+0x5dd/0x610 [ 621.847179][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.853257][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.859418][T12564] __do_fast_syscall_32+0x2af/0x480 [ 621.864631][T12564] do_fast_syscall_32+0x6b/0xd0 [ 621.869486][T12564] do_SYSENTER_32+0x73/0x90 [ 621.874004][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 621.880331][T12564] RIP: 0023:0xf7fc1549 [ 621.884391][T12564] Code: Bad RIP value. [ 621.888453][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 621.896863][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 621.904832][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 621.912798][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.920772][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 621.928760][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.936743][T12564] Uninit was stored to memory at: [ 621.941784][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 621.947501][T12564] __msan_chain_origin+0x50/0x90 [ 621.952435][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 621.957547][T12564] get_compat_msghdr+0x108/0x2b0 [ 621.962496][T12564] do_recvmmsg+0xdbb/0x22c0 [ 621.967000][T12564] __sys_recvmmsg+0x5dd/0x610 [ 621.971696][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 621.977769][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 621.983924][T12564] __do_fast_syscall_32+0x2af/0x480 [ 621.989260][T12564] do_fast_syscall_32+0x6b/0xd0 [ 621.991989][T12560] not chained 1760000 origins [ 621.994112][T12564] do_SYSENTER_32+0x73/0x90 [ 621.998790][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 622.003277][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.011914][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.018211][T12564] [ 622.028244][T12560] Call Trace: [ 622.030550][T12564] Uninit was stored to memory at: [ 622.033827][T12560] dump_stack+0x21c/0x280 [ 622.038825][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 622.043131][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 622.048824][T12564] __msan_chain_origin+0x50/0x90 [ 622.054521][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 622.059432][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 622.065476][T12560] ? kmsan_get_metadata+0x116/0x180 [ 622.070563][T12564] get_compat_msghdr+0x108/0x2b0 [ 622.075738][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 622.080650][T12564] do_recvmmsg+0xdbb/0x22c0 [ 622.086431][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 622.090906][T12564] __sys_recvmmsg+0x5dd/0x610 [ 622.096949][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 622.101599][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.106946][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 622.112987][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.118772][T12560] ? kmsan_get_metadata+0x116/0x180 [ 622.124901][T12564] __do_fast_syscall_32+0x2af/0x480 [ 622.130074][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 622.135246][T12564] do_fast_syscall_32+0x6b/0xd0 [ 622.140771][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 622.145597][T12564] do_SYSENTER_32+0x73/0x90 [ 622.151642][T12560] ? _copy_from_user+0x201/0x310 [ 622.156120][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.161032][T12560] ? kmsan_get_metadata+0x116/0x180 [ 622.167322][T12564] [ 622.172528][T12560] __msan_chain_origin+0x50/0x90 [ 622.174825][T12564] Uninit was stored to memory at: [ 622.179744][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 622.184750][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 622.189840][T12560] get_compat_msghdr+0x108/0x2b0 [ 622.195526][T12564] __msan_chain_origin+0x50/0x90 [ 622.200439][T12560] do_recvmmsg+0xdbb/0x22c0 [ 622.205349][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 622.209835][T12560] ? kmsan_get_metadata+0x116/0x180 [ 622.214914][T12564] get_compat_msghdr+0x108/0x2b0 [ 622.220104][T12560] ? kmsan_get_metadata+0x116/0x180 [ 622.225030][T12564] do_recvmmsg+0xdbb/0x22c0 [ 622.230205][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 622.234704][T12564] __sys_recvmmsg+0x5dd/0x610 [ 622.240574][T12560] ? kmsan_get_metadata+0x116/0x180 [ 622.245225][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.250399][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 622.256441][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.262049][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 622.268175][T12564] __do_fast_syscall_32+0x2af/0x480 [ 622.273544][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 622.278719][T12564] do_fast_syscall_32+0x6b/0xd0 [ 622.283471][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 622.288296][T12564] do_SYSENTER_32+0x73/0x90 [ 622.293034][T12560] __sys_recvmmsg+0x5dd/0x610 [ 622.297512][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.302171][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.308454][T12564] [ 622.314507][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.316802][T12564] Uninit was stored to memory at: [ 622.322939][T12560] __do_fast_syscall_32+0x2af/0x480 [ 622.327935][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 622.333202][T12560] do_fast_syscall_32+0x6b/0xd0 [ 622.338892][T12564] __msan_chain_origin+0x50/0x90 [ 622.343717][T12560] do_SYSENTER_32+0x73/0x90 [ 622.348627][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 622.353111][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.358209][T12564] get_compat_msghdr+0x108/0x2b0 [ 622.364507][T12560] RIP: 0023:0xf7fc1549 [ 622.369418][T12564] do_recvmmsg+0xdbb/0x22c0 [ 622.373453][T12560] Code: Bad RIP value. [ 622.377938][T12564] __sys_recvmmsg+0x5dd/0x610 [ 622.381977][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 622.386634][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.395014][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 622.401050][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.401078][T12564] __do_fast_syscall_32+0x2af/0x480 [ 622.409023][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 622.415169][T12564] do_fast_syscall_32+0x6b/0xd0 [ 622.420338][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.428307][T12564] do_SYSENTER_32+0x73/0x90 [ 622.433127][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 622.441087][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.445557][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.453500][T12564] [ 622.459807][T12560] Uninit was stored to memory at: [ 622.467771][T12564] Uninit was stored to memory at: [ 622.470095][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 622.475118][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 622.480117][T12560] __msan_chain_origin+0x50/0x90 [ 622.485812][T12564] __msan_chain_origin+0x50/0x90 [ 622.491507][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 622.496415][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 622.501326][T12560] get_compat_msghdr+0x108/0x2b0 [ 622.506415][T12564] get_compat_msghdr+0x108/0x2b0 [ 622.511500][T12560] do_recvmmsg+0xdbb/0x22c0 [ 622.516420][T12564] do_recvmmsg+0xdbb/0x22c0 [ 622.521331][T12560] __sys_recvmmsg+0x5dd/0x610 [ 622.525811][T12564] __sys_recvmmsg+0x5dd/0x610 [ 622.530290][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.534941][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.539592][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.545648][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.551689][T12560] __do_fast_syscall_32+0x2af/0x480 [ 622.557817][T12564] __do_fast_syscall_32+0x2af/0x480 [ 622.564036][T12560] do_fast_syscall_32+0x6b/0xd0 [ 622.569208][T12564] do_fast_syscall_32+0x6b/0xd0 [ 622.574484][T12560] do_SYSENTER_32+0x73/0x90 [ 622.579312][T12564] do_SYSENTER_32+0x73/0x90 [ 622.584144][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.588635][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.593102][T12560] [ 622.599400][T12564] [ 622.605719][T12560] Uninit was stored to memory at: [ 622.608033][T12564] Uninit was stored to memory at: [ 622.610357][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 622.615353][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 622.620354][T12560] __msan_chain_origin+0x50/0x90 [ 622.626060][T12564] __msan_chain_origin+0x50/0x90 [ 622.631753][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 622.636664][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 622.641575][T12560] get_compat_msghdr+0x108/0x2b0 [ 622.646659][T12564] get_compat_msghdr+0x108/0x2b0 [ 622.651746][T12560] do_recvmmsg+0xdbb/0x22c0 [ 622.656659][T12564] do_recvmmsg+0xdbb/0x22c0 [ 622.661572][T12560] __sys_recvmmsg+0x5dd/0x610 [ 622.666054][T12564] __sys_recvmmsg+0x5dd/0x610 [ 622.670534][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.675186][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.679840][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.685884][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.692125][T12560] __do_fast_syscall_32+0x2af/0x480 [ 622.698370][T12564] __do_fast_syscall_32+0x2af/0x480 [ 622.704498][T12560] do_fast_syscall_32+0x6b/0xd0 [ 622.709666][T12564] do_fast_syscall_32+0x6b/0xd0 [ 622.714839][T12560] do_SYSENTER_32+0x73/0x90 [ 622.719662][T12564] do_SYSENTER_32+0x73/0x90 [ 622.724486][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.728991][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.733454][T12560] [ 622.739760][T12564] [ 622.746075][T12560] Uninit was stored to memory at: [ 622.748381][T12564] Uninit was stored to memory at: [ 622.750707][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 622.755725][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 622.760726][T12560] __msan_chain_origin+0x50/0x90 [ 622.766432][T12564] __msan_chain_origin+0x50/0x90 [ 622.772124][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 622.777034][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 622.781946][T12560] get_compat_msghdr+0x108/0x2b0 [ 622.787029][T12564] get_compat_msghdr+0x108/0x2b0 [ 622.792121][T12560] do_recvmmsg+0xdbb/0x22c0 [ 622.797030][T12564] do_recvmmsg+0xdbb/0x22c0 [ 622.801943][T12560] __sys_recvmmsg+0x5dd/0x610 [ 622.806422][T12564] __sys_recvmmsg+0x5dd/0x610 [ 622.810899][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.815551][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.820204][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.826244][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.832282][T12560] __do_fast_syscall_32+0x2af/0x480 [ 622.838409][T12564] __do_fast_syscall_32+0x2af/0x480 [ 622.844538][T12560] do_fast_syscall_32+0x6b/0xd0 [ 622.849797][T12564] do_fast_syscall_32+0x6b/0xd0 [ 622.854972][T12560] do_SYSENTER_32+0x73/0x90 [ 622.859795][T12564] do_SYSENTER_32+0x73/0x90 [ 622.864619][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.869093][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.873557][T12560] [ 622.879856][T12564] [ 622.886155][T12560] Uninit was stored to memory at: [ 622.888466][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 622.890790][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 622.895786][T12564] do_recvmmsg+0xbf/0x22c0 [ 622.902434][T12560] __msan_chain_origin+0x50/0x90 [ 622.908122][T12564] do_recvmmsg+0xbf/0x22c0 [ 622.912516][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 622.926911][T12560] get_compat_msghdr+0x108/0x2b0 [ 622.931848][T12560] do_recvmmsg+0xdbb/0x22c0 [ 622.936346][T12560] __sys_recvmmsg+0x5dd/0x610 [ 622.941023][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 622.947104][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 622.953265][T12560] __do_fast_syscall_32+0x2af/0x480 [ 622.958465][T12560] do_fast_syscall_32+0x6b/0xd0 [ 622.963313][T12560] do_SYSENTER_32+0x73/0x90 [ 622.967815][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 622.974129][T12560] [ 622.976452][T12560] Uninit was stored to memory at: [ 622.981478][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 622.987195][T12560] __msan_chain_origin+0x50/0x90 [ 622.992132][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 622.997247][T12560] get_compat_msghdr+0x108/0x2b0 [ 623.002184][T12560] do_recvmmsg+0xdbb/0x22c0 [ 623.006688][T12560] __sys_recvmmsg+0x5dd/0x610 [ 623.011376][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.017444][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.023601][T12560] __do_fast_syscall_32+0x2af/0x480 [ 623.028816][T12560] do_fast_syscall_32+0x6b/0xd0 [ 623.033675][T12560] do_SYSENTER_32+0x73/0x90 [ 623.038196][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.044513][T12560] [ 623.046835][T12560] Uninit was stored to memory at: [ 623.051864][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 623.057582][T12560] __msan_chain_origin+0x50/0x90 [ 623.062518][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 623.067628][T12560] get_compat_msghdr+0x108/0x2b0 [ 623.072561][T12560] do_recvmmsg+0xdbb/0x22c0 [ 623.077059][T12560] __sys_recvmmsg+0x5dd/0x610 [ 623.080215][T12564] not chained 1770000 origins [ 623.081737][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.086398][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 623.092439][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.101073][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.107206][T12560] __do_fast_syscall_32+0x2af/0x480 [ 623.117228][T12564] Call Trace: [ 623.122403][T12560] do_fast_syscall_32+0x6b/0xd0 [ 623.122425][T12560] do_SYSENTER_32+0x73/0x90 [ 623.125711][T12564] dump_stack+0x21c/0x280 [ 623.130538][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.135017][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 623.139308][T12560] [ 623.145621][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 623.151304][T12560] Uninit was stored to memory at: [ 623.153622][T12564] ? kmsan_get_metadata+0x116/0x180 [ 623.159659][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 623.164660][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 623.169828][T12560] __msan_chain_origin+0x50/0x90 [ 623.175525][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 623.181307][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 623.186219][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 623.192275][T12560] get_compat_msghdr+0x108/0x2b0 [ 623.197361][T12564] ? kmsan_get_metadata+0x116/0x180 [ 623.202792][T12560] do_recvmmsg+0xdbb/0x22c0 [ 623.207807][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 623.213012][T12560] __sys_recvmmsg+0x5dd/0x610 [ 623.217494][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 623.223015][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.227666][T12564] ? _copy_from_user+0x201/0x310 [ 623.233706][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.239848][T12564] ? kmsan_get_metadata+0x116/0x180 [ 623.244848][T12560] __do_fast_syscall_32+0x2af/0x480 [ 623.250976][T12564] __msan_chain_origin+0x50/0x90 [ 623.256148][T12560] do_fast_syscall_32+0x6b/0xd0 [ 623.261322][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 623.266234][T12560] do_SYSENTER_32+0x73/0x90 [ 623.271072][T12564] get_compat_msghdr+0x108/0x2b0 [ 623.276165][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.280642][T12564] do_recvmmsg+0xdbb/0x22c0 [ 623.285557][T12560] [ 623.291866][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 623.296333][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 623.298652][T12564] ? kmsan_get_metadata+0x116/0x180 [ 623.304426][T12560] do_recvmmsg+0xbf/0x22c0 [ 623.311079][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 623.316253][T12560] do_recvmmsg+0xbf/0x22c0 [ 623.320646][T12564] ? kmsan_get_metadata+0x116/0x180 [ 623.336213][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 623.341882][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 623.347176][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 623.351941][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 623.356711][T12564] __sys_recvmmsg+0x5dd/0x610 [ 623.361408][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.367491][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.373648][T12564] __do_fast_syscall_32+0x2af/0x480 [ 623.378858][T12564] do_fast_syscall_32+0x6b/0xd0 [ 623.383725][T12564] do_SYSENTER_32+0x73/0x90 [ 623.388239][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.394567][T12564] RIP: 0023:0xf7fc1549 [ 623.398632][T12564] Code: Bad RIP value. [ 623.402693][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 623.411106][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 623.419078][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 623.427050][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.435019][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 623.442990][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.450970][T12564] Uninit was stored to memory at: [ 623.456006][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 623.461727][T12564] __msan_chain_origin+0x50/0x90 [ 623.466934][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 623.472045][T12564] get_compat_msghdr+0x108/0x2b0 [ 623.477330][T12564] do_recvmmsg+0xdbb/0x22c0 [ 623.481831][T12564] __sys_recvmmsg+0x5dd/0x610 [ 623.486512][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.492583][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.498740][T12564] __do_fast_syscall_32+0x2af/0x480 [ 623.503945][T12564] do_fast_syscall_32+0x6b/0xd0 [ 623.508795][T12564] do_SYSENTER_32+0x73/0x90 [ 623.513296][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.519717][T12564] [ 623.522039][T12564] Uninit was stored to memory at: [ 623.527068][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 623.532786][T12564] __msan_chain_origin+0x50/0x90 [ 623.537731][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 623.542873][T12564] get_compat_msghdr+0x108/0x2b0 [ 623.547811][T12564] do_recvmmsg+0xdbb/0x22c0 [ 623.552334][T12564] __sys_recvmmsg+0x5dd/0x610 [ 623.557015][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.563118][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.569370][T12564] __do_fast_syscall_32+0x2af/0x480 [ 623.574571][T12564] do_fast_syscall_32+0x6b/0xd0 [ 623.579424][T12564] do_SYSENTER_32+0x73/0x90 [ 623.583934][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.590251][T12564] [ 623.592574][T12564] Uninit was stored to memory at: [ 623.597599][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 623.603316][T12564] __msan_chain_origin+0x50/0x90 [ 623.608255][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 623.613365][T12564] get_compat_msghdr+0x108/0x2b0 [ 623.618301][T12564] do_recvmmsg+0xdbb/0x22c0 [ 623.622800][T12564] __sys_recvmmsg+0x5dd/0x610 [ 623.627484][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.633554][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.639715][T12564] __do_fast_syscall_32+0x2af/0x480 [ 623.644920][T12564] do_fast_syscall_32+0x6b/0xd0 [ 623.649770][T12564] do_SYSENTER_32+0x73/0x90 [ 623.654289][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.660601][T12564] [ 623.662927][T12564] Uninit was stored to memory at: [ 623.667955][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 623.673681][T12564] __msan_chain_origin+0x50/0x90 [ 623.679147][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 623.684259][T12564] get_compat_msghdr+0x108/0x2b0 [ 623.689192][T12564] do_recvmmsg+0xdbb/0x22c0 [ 623.693690][T12564] __sys_recvmmsg+0x5dd/0x610 [ 623.698373][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.704443][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.710599][T12564] __do_fast_syscall_32+0x2af/0x480 [ 623.715800][T12564] do_fast_syscall_32+0x6b/0xd0 [ 623.720652][T12564] do_SYSENTER_32+0x73/0x90 [ 623.725157][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.731471][T12564] [ 623.733791][T12564] Uninit was stored to memory at: [ 623.738820][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 623.744537][T12564] __msan_chain_origin+0x50/0x90 [ 623.749472][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 623.754587][T12564] get_compat_msghdr+0x108/0x2b0 [ 623.759522][T12564] do_recvmmsg+0xdbb/0x22c0 [ 623.764037][T12564] __sys_recvmmsg+0x5dd/0x610 [ 623.768714][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.774780][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.780954][T12564] __do_fast_syscall_32+0x2af/0x480 [ 623.786162][T12564] do_fast_syscall_32+0x6b/0xd0 [ 623.791015][T12564] do_SYSENTER_32+0x73/0x90 [ 623.795521][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.801834][T12564] [ 623.804153][T12564] Uninit was stored to memory at: [ 623.809183][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 623.814904][T12564] __msan_chain_origin+0x50/0x90 [ 623.819851][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 623.824962][T12564] get_compat_msghdr+0x108/0x2b0 [ 623.829897][T12564] do_recvmmsg+0xdbb/0x22c0 [ 623.834402][T12564] __sys_recvmmsg+0x5dd/0x610 [ 623.839081][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.845156][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.851314][T12564] __do_fast_syscall_32+0x2af/0x480 [ 623.856518][T12564] do_fast_syscall_32+0x6b/0xd0 [ 623.861372][T12564] do_SYSENTER_32+0x73/0x90 [ 623.865879][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.872190][T12564] [ 623.874511][T12564] Uninit was stored to memory at: [ 623.879557][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 623.885276][T12564] __msan_chain_origin+0x50/0x90 [ 623.890238][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 623.895351][T12564] get_compat_msghdr+0x108/0x2b0 [ 623.900344][T12564] do_recvmmsg+0xdbb/0x22c0 [ 623.904849][T12564] __sys_recvmmsg+0x5dd/0x610 [ 623.909531][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 623.915607][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 623.921760][T12564] __do_fast_syscall_32+0x2af/0x480 [ 623.926961][T12564] do_fast_syscall_32+0x6b/0xd0 [ 623.931811][T12564] do_SYSENTER_32+0x73/0x90 [ 623.936316][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 623.942632][T12564] [ 623.944955][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 623.951626][T12564] do_recvmmsg+0xbf/0x22c0 [ 623.956039][T12564] do_recvmmsg+0xbf/0x22c0 [ 624.217524][T12564] not chained 1780000 origins [ 624.222241][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 624.230903][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.240980][T12564] Call Trace: [ 624.244279][T12564] dump_stack+0x21c/0x280 [ 624.248620][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 624.254344][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 624.260538][T12564] ? kmsan_get_metadata+0x116/0x180 [ 624.265741][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 624.271564][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 624.277635][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 624.283021][T12564] ? kmsan_get_metadata+0x116/0x180 [ 624.288229][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 624.293782][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 624.299856][T12564] ? _copy_from_user+0x201/0x310 [ 624.304801][T12564] ? kmsan_get_metadata+0x116/0x180 [ 624.310003][T12564] __msan_chain_origin+0x50/0x90 [ 624.314969][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 624.320100][T12564] get_compat_msghdr+0x108/0x2b0 [ 624.325054][T12564] do_recvmmsg+0xdbb/0x22c0 [ 624.329565][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 624.335384][T12564] ? kmsan_get_metadata+0x116/0x180 [ 624.340591][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 624.346491][T12564] ? kmsan_get_metadata+0x116/0x180 [ 624.351711][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 624.357363][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 624.362651][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 624.367413][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 624.372191][T12564] __sys_recvmmsg+0x5dd/0x610 [ 624.376889][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 624.382971][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 624.389131][T12564] __do_fast_syscall_32+0x2af/0x480 [ 624.394334][T12564] do_fast_syscall_32+0x6b/0xd0 [ 624.399201][T12564] do_SYSENTER_32+0x73/0x90 [ 624.403718][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.410048][T12564] RIP: 0023:0xf7fc1549 [ 624.414154][T12564] Code: Bad RIP value. [ 624.418217][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 624.426628][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 624.434601][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 624.442572][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.450543][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 624.458513][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.466501][T12564] Uninit was stored to memory at: [ 624.471533][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 624.477254][T12564] __msan_chain_origin+0x50/0x90 [ 624.482195][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 624.487306][T12564] get_compat_msghdr+0x108/0x2b0 [ 624.492242][T12564] do_recvmmsg+0xdbb/0x22c0 [ 624.496745][T12564] __sys_recvmmsg+0x5dd/0x610 [ 624.501423][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 624.507491][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 624.513647][T12564] __do_fast_syscall_32+0x2af/0x480 [ 624.518852][T12564] do_fast_syscall_32+0x6b/0xd0 [ 624.523705][T12564] do_SYSENTER_32+0x73/0x90 [ 624.528212][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.534543][T12564] [ 624.536874][T12564] Uninit was stored to memory at: [ 624.541905][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 624.547627][T12564] __msan_chain_origin+0x50/0x90 [ 624.552570][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 624.557685][T12564] get_compat_msghdr+0x108/0x2b0 [ 624.562625][T12564] do_recvmmsg+0xdbb/0x22c0 [ 624.567128][T12564] __sys_recvmmsg+0x5dd/0x610 [ 624.571811][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 624.577887][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 624.584037][T12564] __do_fast_syscall_32+0x2af/0x480 [ 624.589356][T12564] do_fast_syscall_32+0x6b/0xd0 [ 624.594213][T12564] do_SYSENTER_32+0x73/0x90 [ 624.598721][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.605038][T12564] [ 624.607360][T12564] Uninit was stored to memory at: [ 624.612389][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 624.618112][T12564] __msan_chain_origin+0x50/0x90 [ 624.623055][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 624.628194][T12564] get_compat_msghdr+0x108/0x2b0 [ 624.633141][T12564] do_recvmmsg+0xdbb/0x22c0 [ 624.637658][T12564] __sys_recvmmsg+0x5dd/0x610 [ 624.642339][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 624.648409][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 624.654566][T12564] __do_fast_syscall_32+0x2af/0x480 [ 624.659766][T12564] do_fast_syscall_32+0x6b/0xd0 [ 624.664619][T12564] do_SYSENTER_32+0x73/0x90 [ 624.669127][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.675442][T12564] [ 624.677763][T12564] Uninit was stored to memory at: [ 624.682792][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 624.688513][T12564] __msan_chain_origin+0x50/0x90 [ 624.693457][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 624.698569][T12564] get_compat_msghdr+0x108/0x2b0 [ 624.703508][T12564] do_recvmmsg+0xdbb/0x22c0 [ 624.708022][T12564] __sys_recvmmsg+0x5dd/0x610 [ 624.712699][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 624.718767][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 624.724923][T12564] __do_fast_syscall_32+0x2af/0x480 [ 624.730128][T12564] do_fast_syscall_32+0x6b/0xd0 [ 624.734982][T12564] do_SYSENTER_32+0x73/0x90 [ 624.739510][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.745831][T12564] [ 624.748156][T12564] Uninit was stored to memory at: [ 624.753184][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 624.758906][T12564] __msan_chain_origin+0x50/0x90 [ 624.763877][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 624.769078][T12564] get_compat_msghdr+0x108/0x2b0 [ 624.774013][T12564] do_recvmmsg+0xdbb/0x22c0 [ 624.778520][T12564] __sys_recvmmsg+0x5dd/0x610 [ 624.783216][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 624.789284][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 624.795441][T12564] __do_fast_syscall_32+0x2af/0x480 [ 624.800642][T12564] do_fast_syscall_32+0x6b/0xd0 [ 624.805495][T12564] do_SYSENTER_32+0x73/0x90 [ 624.810006][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.816319][T12564] [ 624.818641][T12564] Uninit was stored to memory at: [ 624.823671][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 624.829402][T12564] __msan_chain_origin+0x50/0x90 [ 624.834340][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 624.839561][T12564] get_compat_msghdr+0x108/0x2b0 [ 624.844497][T12564] do_recvmmsg+0xdbb/0x22c0 [ 624.849003][T12564] __sys_recvmmsg+0x5dd/0x610 [ 624.853680][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 624.859751][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 624.865906][T12564] __do_fast_syscall_32+0x2af/0x480 [ 624.871401][T12564] do_fast_syscall_32+0x6b/0xd0 [ 624.876354][T12564] do_SYSENTER_32+0x73/0x90 [ 624.880859][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.887169][T12564] [ 624.889486][T12564] Uninit was stored to memory at: [ 624.894518][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 624.900233][T12564] __msan_chain_origin+0x50/0x90 [ 624.905170][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 624.910281][T12564] get_compat_msghdr+0x108/0x2b0 [ 624.915218][T12564] do_recvmmsg+0xdbb/0x22c0 [ 624.919804][T12564] __sys_recvmmsg+0x5dd/0x610 [ 624.924478][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 624.930545][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 624.936695][T12564] __do_fast_syscall_32+0x2af/0x480 [ 624.941893][T12564] do_fast_syscall_32+0x6b/0xd0 [ 624.946739][T12564] do_SYSENTER_32+0x73/0x90 [ 624.951241][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 624.957554][T12564] [ 624.959876][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 624.966547][T12564] do_recvmmsg+0xbf/0x22c0 [ 624.970956][T12564] do_recvmmsg+0xbf/0x22c0 [ 625.006725][T12560] not chained 1790000 origins [ 625.011428][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 625.020092][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.030142][T12560] Call Trace: [ 625.033448][T12560] dump_stack+0x21c/0x280 [ 625.037791][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 625.043519][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 625.049592][T12560] ? kmsan_get_metadata+0x116/0x180 [ 625.054794][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 625.060604][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 625.066676][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 625.072056][T12560] ? kmsan_get_metadata+0x116/0x180 [ 625.077271][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 625.082833][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 625.088920][T12560] ? _copy_from_user+0x201/0x310 [ 625.093865][T12560] ? kmsan_get_metadata+0x116/0x180 [ 625.099073][T12560] __msan_chain_origin+0x50/0x90 [ 625.104022][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 625.109154][T12560] get_compat_msghdr+0x108/0x2b0 [ 625.114105][T12560] do_recvmmsg+0xdbb/0x22c0 [ 625.118625][T12560] ? kmsan_get_metadata+0x116/0x180 [ 625.123837][T12560] ? kmsan_get_metadata+0x116/0x180 [ 625.129047][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 625.134953][T12560] ? kmsan_get_metadata+0x116/0x180 [ 625.140160][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 625.145800][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 625.151087][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 625.155850][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 625.160620][T12560] __sys_recvmmsg+0x5dd/0x610 [ 625.165316][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.171411][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.177568][T12560] __do_fast_syscall_32+0x2af/0x480 [ 625.182781][T12560] do_fast_syscall_32+0x6b/0xd0 [ 625.187638][T12560] do_SYSENTER_32+0x73/0x90 [ 625.192150][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.198486][T12560] RIP: 0023:0xf7fc1549 [ 625.202544][T12560] Code: Bad RIP value. [ 625.206605][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 625.215017][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 625.222989][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 625.232002][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.239969][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 625.247940][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.255919][T12560] Uninit was stored to memory at: [ 625.260949][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 625.266665][T12560] __msan_chain_origin+0x50/0x90 [ 625.267421][T12564] not chained 1800000 origins [ 625.271600][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 625.276260][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 625.281345][T12560] get_compat_msghdr+0x108/0x2b0 [ 625.290090][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.295008][T12560] do_recvmmsg+0xdbb/0x22c0 [ 625.305043][T12564] Call Trace: [ 625.309530][T12560] __sys_recvmmsg+0x5dd/0x610 [ 625.312797][T12564] dump_stack+0x21c/0x280 [ 625.317445][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.321756][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 625.327800][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.333497][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 625.339625][T12560] __do_fast_syscall_32+0x2af/0x480 [ 625.345667][T12564] ? kmsan_get_metadata+0x116/0x180 [ 625.350839][T12560] do_fast_syscall_32+0x6b/0xd0 [ 625.356014][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 625.360836][T12560] do_SYSENTER_32+0x73/0x90 [ 625.366618][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 625.371096][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.377133][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 625.383422][T12560] [ 625.388781][T12564] ? __msan_get_context_state+0x9/0x20 [ 625.391075][T12560] Uninit was stored to memory at: [ 625.396520][T12564] ? kmsan_get_metadata+0x116/0x180 [ 625.401517][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 625.406688][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 625.412381][T12560] __msan_chain_origin+0x50/0x90 [ 625.417908][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 625.422825][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 625.428959][T12564] ? _copy_from_user+0x201/0x310 [ 625.434038][T12560] get_compat_msghdr+0x108/0x2b0 [ 625.438956][T12564] ? kmsan_get_metadata+0x116/0x180 [ 625.443862][T12560] do_recvmmsg+0xdbb/0x22c0 [ 625.449036][T12564] __msan_chain_origin+0x50/0x90 [ 625.453512][T12560] __sys_recvmmsg+0x5dd/0x610 [ 625.458426][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 625.463079][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.468175][T12564] get_compat_msghdr+0x108/0x2b0 [ 625.474218][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.479132][T12564] do_recvmmsg+0xdbb/0x22c0 [ 625.485261][T12560] __do_fast_syscall_32+0x2af/0x480 [ 625.489739][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 625.494911][T12560] do_fast_syscall_32+0x6b/0xd0 [ 625.500901][T12564] ? kmsan_get_metadata+0x116/0x180 [ 625.505724][T12560] do_SYSENTER_32+0x73/0x90 [ 625.510896][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 625.515374][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.521241][T12564] ? kmsan_get_metadata+0x116/0x180 [ 625.527528][T12560] [ 625.532709][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 625.535004][T12560] Uninit was stored to memory at: [ 625.540622][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 625.545621][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 625.550878][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 625.556570][T12560] __msan_chain_origin+0x50/0x90 [ 625.561308][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 625.566220][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 625.570958][T12564] __sys_recvmmsg+0x5dd/0x610 [ 625.576052][T12560] get_compat_msghdr+0x108/0x2b0 [ 625.580715][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.585635][T12560] do_recvmmsg+0xdbb/0x22c0 [ 625.591683][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.596154][T12560] __sys_recvmmsg+0x5dd/0x610 [ 625.602300][T12564] __do_fast_syscall_32+0x2af/0x480 [ 625.606953][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.612132][T12564] do_fast_syscall_32+0x6b/0xd0 [ 625.618172][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.623007][T12564] do_SYSENTER_32+0x73/0x90 [ 625.629138][T12560] __do_fast_syscall_32+0x2af/0x480 [ 625.633622][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.638798][T12560] do_fast_syscall_32+0x6b/0xd0 [ 625.645095][T12564] RIP: 0023:0xf7fc1549 [ 625.649926][T12560] do_SYSENTER_32+0x73/0x90 [ 625.653957][T12564] Code: Bad RIP value. [ 625.658445][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.662484][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 625.668779][T12560] [ 625.677171][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 625.679475][T12560] Uninit was stored to memory at: [ 625.687428][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 625.692446][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 625.700387][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.706088][T12560] __msan_chain_origin+0x50/0x90 [ 625.714032][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 625.718950][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 625.726914][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.732006][T12560] get_compat_msghdr+0x108/0x2b0 [ 625.739970][T12564] Uninit was stored to memory at: [ 625.744881][T12560] do_recvmmsg+0xdbb/0x22c0 [ 625.749880][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 625.754355][T12560] __sys_recvmmsg+0x5dd/0x610 [ 625.760045][T12564] __msan_chain_origin+0x50/0x90 [ 625.764701][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.769609][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 625.775652][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.780735][T12564] get_compat_msghdr+0x108/0x2b0 [ 625.786867][T12560] __do_fast_syscall_32+0x2af/0x480 [ 625.791784][T12564] do_recvmmsg+0xdbb/0x22c0 [ 625.796974][T12560] do_fast_syscall_32+0x6b/0xd0 [ 625.801451][T12564] __sys_recvmmsg+0x5dd/0x610 [ 625.806280][T12560] do_SYSENTER_32+0x73/0x90 [ 625.811056][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.815535][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.821671][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.827947][T12560] [ 625.827960][T12560] Uninit was stored to memory at: [ 625.834096][T12564] __do_fast_syscall_32+0x2af/0x480 [ 625.836404][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 625.841402][T12564] do_fast_syscall_32+0x6b/0xd0 [ 625.846590][T12560] __msan_chain_origin+0x50/0x90 [ 625.852281][T12564] do_SYSENTER_32+0x73/0x90 [ 625.857104][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 625.862015][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.866492][T12560] get_compat_msghdr+0x108/0x2b0 [ 625.871578][T12564] [ 625.877976][T12560] do_recvmmsg+0xdbb/0x22c0 [ 625.882998][T12564] Uninit was stored to memory at: [ 625.885313][T12560] __sys_recvmmsg+0x5dd/0x610 [ 625.889789][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 625.894789][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.899446][T12564] __msan_chain_origin+0x50/0x90 [ 625.905143][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.911177][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 625.916090][T12560] __do_fast_syscall_32+0x2af/0x480 [ 625.922214][T12564] get_compat_msghdr+0x108/0x2b0 [ 625.927305][T12560] do_fast_syscall_32+0x6b/0xd0 [ 625.932474][T12564] do_recvmmsg+0xdbb/0x22c0 [ 625.937388][T12560] do_SYSENTER_32+0x73/0x90 [ 625.942212][T12564] __sys_recvmmsg+0x5dd/0x610 [ 625.946707][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 625.951185][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 625.955840][T12560] [ 625.962152][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 625.968180][T12560] Uninit was stored to memory at: [ 625.970496][T12564] __do_fast_syscall_32+0x2af/0x480 [ 625.976623][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 625.981624][T12564] do_fast_syscall_32+0x6b/0xd0 [ 625.986814][T12560] __msan_chain_origin+0x50/0x90 [ 625.992504][T12564] do_SYSENTER_32+0x73/0x90 [ 625.997327][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 626.002246][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.006721][T12560] get_compat_msghdr+0x108/0x2b0 [ 626.011802][T12564] [ 626.018108][T12560] do_recvmmsg+0xdbb/0x22c0 [ 626.023012][T12564] Uninit was stored to memory at: [ 626.025328][T12560] __sys_recvmmsg+0x5dd/0x610 [ 626.029814][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 626.034812][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.039466][T12564] __msan_chain_origin+0x50/0x90 [ 626.045160][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.051199][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 626.056111][T12560] __do_fast_syscall_32+0x2af/0x480 [ 626.062235][T12564] get_compat_msghdr+0x108/0x2b0 [ 626.067321][T12560] do_fast_syscall_32+0x6b/0xd0 [ 626.072489][T12564] do_recvmmsg+0xdbb/0x22c0 [ 626.077397][T12560] do_SYSENTER_32+0x73/0x90 [ 626.082220][T12564] __sys_recvmmsg+0x5dd/0x610 [ 626.086699][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.091175][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.095833][T12560] [ 626.102146][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.108194][T12560] Uninit was stored to memory at: [ 626.110511][T12564] __do_fast_syscall_32+0x2af/0x480 [ 626.116634][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 626.121631][T12564] do_fast_syscall_32+0x6b/0xd0 [ 626.127759][T12560] __msan_chain_origin+0x50/0x90 [ 626.133453][T12564] do_SYSENTER_32+0x73/0x90 [ 626.138278][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 626.143276][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.147767][T12560] get_compat_msghdr+0x108/0x2b0 [ 626.152840][T12564] [ 626.159152][T12560] do_recvmmsg+0xdbb/0x22c0 [ 626.164054][T12564] Uninit was stored to memory at: [ 626.166370][T12560] __sys_recvmmsg+0x5dd/0x610 [ 626.170849][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 626.175847][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.180496][T12564] __msan_chain_origin+0x50/0x90 [ 626.186187][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.192229][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 626.197158][T12560] __do_fast_syscall_32+0x2af/0x480 [ 626.203285][T12564] get_compat_msghdr+0x108/0x2b0 [ 626.208368][T12560] do_fast_syscall_32+0x6b/0xd0 [ 626.213539][T12564] do_recvmmsg+0xdbb/0x22c0 [ 626.218450][T12560] do_SYSENTER_32+0x73/0x90 [ 626.223293][T12564] __sys_recvmmsg+0x5dd/0x610 [ 626.227858][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.232334][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.236972][T12560] [ 626.243282][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.249325][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 626.251640][T12564] __do_fast_syscall_32+0x2af/0x480 [ 626.257766][T12560] do_recvmmsg+0xbf/0x22c0 [ 626.264429][T12564] do_fast_syscall_32+0x6b/0xd0 [ 626.269698][T12560] do_recvmmsg+0xbf/0x22c0 [ 626.274089][T12564] do_SYSENTER_32+0x73/0x90 [ 626.287813][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.294124][T12564] [ 626.296446][T12564] Uninit was stored to memory at: [ 626.301475][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 626.307191][T12564] __msan_chain_origin+0x50/0x90 [ 626.312133][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 626.317247][T12564] get_compat_msghdr+0x108/0x2b0 [ 626.322182][T12564] do_recvmmsg+0xdbb/0x22c0 [ 626.326687][T12564] __sys_recvmmsg+0x5dd/0x610 [ 626.331358][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.337425][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.343577][T12564] __do_fast_syscall_32+0x2af/0x480 [ 626.348773][T12564] do_fast_syscall_32+0x6b/0xd0 [ 626.353621][T12564] do_SYSENTER_32+0x73/0x90 [ 626.358122][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.364435][T12564] [ 626.366755][T12564] Uninit was stored to memory at: [ 626.371951][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 626.377667][T12564] __msan_chain_origin+0x50/0x90 [ 626.382600][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 626.387713][T12564] get_compat_msghdr+0x108/0x2b0 [ 626.392646][T12564] do_recvmmsg+0xdbb/0x22c0 [ 626.397147][T12564] __sys_recvmmsg+0x5dd/0x610 [ 626.401825][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.408002][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.414161][T12564] __do_fast_syscall_32+0x2af/0x480 [ 626.419366][T12564] do_fast_syscall_32+0x6b/0xd0 [ 626.424216][T12564] do_SYSENTER_32+0x73/0x90 [ 626.428720][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.435031][T12564] [ 626.437353][T12564] Uninit was stored to memory at: [ 626.442376][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 626.448095][T12564] __msan_chain_origin+0x50/0x90 [ 626.453033][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 626.458144][T12564] get_compat_msghdr+0x108/0x2b0 [ 626.463089][T12564] do_recvmmsg+0xdbb/0x22c0 [ 626.467592][T12564] __sys_recvmmsg+0x5dd/0x610 [ 626.472276][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.478348][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.484505][T12564] __do_fast_syscall_32+0x2af/0x480 [ 626.489705][T12564] do_fast_syscall_32+0x6b/0xd0 [ 626.494556][T12564] do_SYSENTER_32+0x73/0x90 [ 626.499063][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.505376][T12564] [ 626.507703][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 626.514384][T12564] do_recvmmsg+0xbf/0x22c0 [ 626.518817][T12564] do_recvmmsg+0xbf/0x22c0 [ 626.524721][T12560] not chained 1810000 origins [ 626.529510][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 626.538205][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.548256][T12560] Call Trace: [ 626.551555][T12560] dump_stack+0x21c/0x280 [ 626.555897][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 626.561619][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 626.567693][T12560] ? kmsan_get_metadata+0x116/0x180 [ 626.573024][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 626.578839][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 626.584914][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 626.590295][T12560] ? kmsan_get_metadata+0x116/0x180 [ 626.595494][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 626.601044][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 626.607117][T12560] ? _copy_from_user+0x201/0x310 [ 626.612068][T12560] ? kmsan_get_metadata+0x116/0x180 [ 626.617267][T12560] __msan_chain_origin+0x50/0x90 [ 626.622209][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 626.627336][T12560] get_compat_msghdr+0x108/0x2b0 [ 626.632286][T12560] do_recvmmsg+0xdbb/0x22c0 [ 626.636808][T12560] ? kmsan_get_metadata+0x116/0x180 [ 626.642012][T12560] ? kmsan_get_metadata+0x116/0x180 [ 626.647213][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 626.653106][T12560] ? kmsan_get_metadata+0x116/0x180 [ 626.658304][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 626.663938][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 626.669229][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 626.673992][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 626.678760][T12560] __sys_recvmmsg+0x5dd/0x610 [ 626.683453][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.689534][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.695692][T12560] __do_fast_syscall_32+0x2af/0x480 [ 626.700900][T12560] do_fast_syscall_32+0x6b/0xd0 [ 626.705755][T12560] do_SYSENTER_32+0x73/0x90 [ 626.706832][T12564] not chained 1820000 origins [ 626.710259][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.721209][T12560] RIP: 0023:0xf7fc1549 [ 626.725254][T12560] Code: Bad RIP value. [ 626.729299][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 626.737695][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 626.745649][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 626.753627][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.761581][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 626.769565][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.777546][T12560] Uninit was stored to memory at: [ 626.777558][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 626.777590][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.782596][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 626.791228][T12564] Call Trace: [ 626.801268][T12560] __msan_chain_origin+0x50/0x90 [ 626.806963][T12564] dump_stack+0x21c/0x280 [ 626.810221][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 626.815131][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 626.819434][T12560] get_compat_msghdr+0x108/0x2b0 [ 626.824524][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 626.830212][T12560] do_recvmmsg+0xdbb/0x22c0 [ 626.835128][T12564] ? kmsan_get_metadata+0x116/0x180 [ 626.841168][T12560] __sys_recvmmsg+0x5dd/0x610 [ 626.845665][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 626.850838][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 626.855492][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 626.861273][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 626.867313][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 626.873359][T12560] __do_fast_syscall_32+0x2af/0x480 [ 626.879489][T12564] ? sysvec_apic_timer_interrupt+0x11e/0x130 [ 626.884835][T12560] do_fast_syscall_32+0x6b/0xd0 [ 626.890009][T12564] ? kmsan_get_metadata+0x116/0x180 [ 626.895961][T12560] do_SYSENTER_32+0x73/0x90 [ 626.900785][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 626.905958][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 626.910524][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 626.916028][T12560] [ 626.922344][T12564] ? _copy_from_user+0x201/0x310 [ 626.928371][T12560] Uninit was stored to memory at: [ 626.930691][T12564] ? kmsan_get_metadata+0x116/0x180 [ 626.935603][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 626.940608][T12564] __msan_chain_origin+0x50/0x90 [ 626.945776][T12560] __msan_chain_origin+0x50/0x90 [ 626.951473][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 626.956384][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 626.961306][T12564] get_compat_msghdr+0x108/0x2b0 [ 626.966382][T12560] get_compat_msghdr+0x108/0x2b0 [ 626.971484][T12564] do_recvmmsg+0xdbb/0x22c0 [ 626.976398][T12560] do_recvmmsg+0xdbb/0x22c0 [ 626.981322][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 626.985800][T12560] __sys_recvmmsg+0x5dd/0x610 [ 626.990283][T12564] ? kmsan_get_metadata+0x116/0x180 [ 626.996059][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.000710][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 627.005881][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.011921][T12564] ? kmsan_get_metadata+0x116/0x180 [ 627.017789][T12560] __do_fast_syscall_32+0x2af/0x480 [ 627.023917][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 627.029094][T12560] do_fast_syscall_32+0x6b/0xd0 [ 627.034269][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 627.039878][T12560] do_SYSENTER_32+0x73/0x90 [ 627.044705][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 627.049967][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.054443][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 627.059169][T12560] [ 627.065477][T12564] __sys_recvmmsg+0x5dd/0x610 [ 627.070202][T12560] Uninit was stored to memory at: [ 627.072525][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.077169][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 627.082172][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.088207][T12560] __msan_chain_origin+0x50/0x90 [ 627.094001][T12564] __do_fast_syscall_32+0x2af/0x480 [ 627.100124][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 627.105038][T12564] do_fast_syscall_32+0x6b/0xd0 [ 627.110207][T12560] get_compat_msghdr+0x108/0x2b0 [ 627.115302][T12564] do_SYSENTER_32+0x73/0x90 [ 627.120126][T12560] do_recvmmsg+0xdbb/0x22c0 [ 627.125043][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.129526][T12560] __sys_recvmmsg+0x5dd/0x610 [ 627.134015][T12564] RIP: 0023:0xf7fc1549 [ 627.140322][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.144963][T12564] Code: Bad RIP value. [ 627.149034][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.155065][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 627.159117][T12560] __do_fast_syscall_32+0x2af/0x480 [ 627.165239][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 627.173626][T12560] do_fast_syscall_32+0x6b/0xd0 [ 627.178791][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 627.186742][T12560] do_SYSENTER_32+0x73/0x90 [ 627.191558][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.199516][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.203988][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 627.211931][T12560] [ 627.218237][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 627.226180][T12560] Uninit was stored to memory at: [ 627.228506][T12564] Uninit was stored to memory at: [ 627.236462][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 627.241462][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 627.246460][T12560] __msan_chain_origin+0x50/0x90 [ 627.252152][T12564] __msan_chain_origin+0x50/0x90 [ 627.257845][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 627.262761][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 627.267668][T12560] get_compat_msghdr+0x108/0x2b0 [ 627.272747][T12564] get_compat_msghdr+0x108/0x2b0 [ 627.277828][T12560] do_recvmmsg+0xdbb/0x22c0 [ 627.282739][T12564] do_recvmmsg+0xdbb/0x22c0 [ 627.287645][T12560] __sys_recvmmsg+0x5dd/0x610 [ 627.292124][T12564] __sys_recvmmsg+0x5dd/0x610 [ 627.296599][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.301253][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.305903][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.311944][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.317980][T12560] __do_fast_syscall_32+0x2af/0x480 [ 627.324116][T12564] __do_fast_syscall_32+0x2af/0x480 [ 627.330243][T12560] do_fast_syscall_32+0x6b/0xd0 [ 627.335414][T12564] do_fast_syscall_32+0x6b/0xd0 [ 627.340584][T12560] do_SYSENTER_32+0x73/0x90 [ 627.345408][T12564] do_SYSENTER_32+0x73/0x90 [ 627.350241][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.354717][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.359181][T12560] [ 627.365481][T12564] [ 627.371780][T12560] Uninit was stored to memory at: [ 627.374086][T12564] Uninit was stored to memory at: [ 627.376398][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 627.381394][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 627.386393][T12560] __msan_chain_origin+0x50/0x90 [ 627.392085][T12564] __msan_chain_origin+0x50/0x90 [ 627.397779][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 627.402692][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 627.407612][T12560] get_compat_msghdr+0x108/0x2b0 [ 627.412694][T12564] get_compat_msghdr+0x108/0x2b0 [ 627.417802][T12560] do_recvmmsg+0xdbb/0x22c0 [ 627.422713][T12564] do_recvmmsg+0xdbb/0x22c0 [ 627.427624][T12560] __sys_recvmmsg+0x5dd/0x610 [ 627.432103][T12564] __sys_recvmmsg+0x5dd/0x610 [ 627.436587][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.441236][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.445888][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.451929][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.457970][T12560] __do_fast_syscall_32+0x2af/0x480 [ 627.464101][T12564] __do_fast_syscall_32+0x2af/0x480 [ 627.470234][T12560] do_fast_syscall_32+0x6b/0xd0 [ 627.475407][T12564] do_fast_syscall_32+0x6b/0xd0 [ 627.480579][T12560] do_SYSENTER_32+0x73/0x90 [ 627.485408][T12564] do_SYSENTER_32+0x73/0x90 [ 627.490236][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.494712][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.499188][T12560] [ 627.505488][T12564] [ 627.511790][T12560] Uninit was stored to memory at: [ 627.514094][T12564] Uninit was stored to memory at: [ 627.516413][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 627.521425][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 627.526423][T12560] __msan_chain_origin+0x50/0x90 [ 627.532116][T12564] __msan_chain_origin+0x50/0x90 [ 627.537811][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 627.542724][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 627.547635][T12560] get_compat_msghdr+0x108/0x2b0 [ 627.552718][T12564] get_compat_msghdr+0x108/0x2b0 [ 627.557804][T12560] do_recvmmsg+0xdbb/0x22c0 [ 627.562715][T12564] do_recvmmsg+0xdbb/0x22c0 [ 627.567624][T12560] __sys_recvmmsg+0x5dd/0x610 [ 627.572099][T12564] __sys_recvmmsg+0x5dd/0x610 [ 627.576578][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.581239][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.585892][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.591931][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.597969][T12560] __do_fast_syscall_32+0x2af/0x480 [ 627.604197][T12564] __do_fast_syscall_32+0x2af/0x480 [ 627.610327][T12560] do_fast_syscall_32+0x6b/0xd0 [ 627.615587][T12564] do_fast_syscall_32+0x6b/0xd0 [ 627.620758][T12560] do_SYSENTER_32+0x73/0x90 [ 627.630098][T12564] do_SYSENTER_32+0x73/0x90 [ 627.634926][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.639404][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.643879][T12560] [ 627.650183][T12564] [ 627.656482][T12560] Uninit was stored to memory at: [ 627.658788][T12564] Uninit was stored to memory at: [ 627.661105][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 627.666102][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 627.671100][T12560] __msan_chain_origin+0x50/0x90 [ 627.676795][T12564] __msan_chain_origin+0x50/0x90 [ 627.682492][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 627.687400][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 627.692309][T12560] get_compat_msghdr+0x108/0x2b0 [ 627.697394][T12564] get_compat_msghdr+0x108/0x2b0 [ 627.702479][T12560] do_recvmmsg+0xdbb/0x22c0 [ 627.707389][T12564] do_recvmmsg+0xdbb/0x22c0 [ 627.712300][T12560] __sys_recvmmsg+0x5dd/0x610 [ 627.716773][T12564] __sys_recvmmsg+0x5dd/0x610 [ 627.721262][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.725911][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.730563][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.736601][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.742641][T12560] __do_fast_syscall_32+0x2af/0x480 [ 627.748768][T12564] __do_fast_syscall_32+0x2af/0x480 [ 627.754898][T12560] do_fast_syscall_32+0x6b/0xd0 [ 627.760094][T12564] do_fast_syscall_32+0x6b/0xd0 [ 627.765264][T12560] do_SYSENTER_32+0x73/0x90 [ 627.770094][T12564] do_SYSENTER_32+0x73/0x90 [ 627.774916][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.779392][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.783857][T12560] [ 627.790168][T12564] [ 627.796469][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 627.798774][T12564] Uninit was stored to memory at: [ 627.801086][T12560] do_recvmmsg+0xbf/0x22c0 [ 627.807765][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 627.812770][T12560] do_recvmmsg+0xbf/0x22c0 [ 627.817158][T12564] __msan_chain_origin+0x50/0x90 [ 627.832174][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 627.837293][T12564] get_compat_msghdr+0x108/0x2b0 [ 627.842252][T12564] do_recvmmsg+0xdbb/0x22c0 [ 627.846763][T12564] __sys_recvmmsg+0x5dd/0x610 [ 627.851442][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.857512][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.863684][T12564] __do_fast_syscall_32+0x2af/0x480 [ 627.868905][T12564] do_fast_syscall_32+0x6b/0xd0 [ 627.873753][T12564] do_SYSENTER_32+0x73/0x90 [ 627.878262][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.884577][T12564] [ 627.886950][T12564] Uninit was stored to memory at: [ 627.891973][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 627.897685][T12564] __msan_chain_origin+0x50/0x90 [ 627.902615][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 627.907723][T12564] get_compat_msghdr+0x108/0x2b0 [ 627.912658][T12564] do_recvmmsg+0xdbb/0x22c0 [ 627.917157][T12564] __sys_recvmmsg+0x5dd/0x610 [ 627.921837][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.927910][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 627.934065][T12564] __do_fast_syscall_32+0x2af/0x480 [ 627.939268][T12564] do_fast_syscall_32+0x6b/0xd0 [ 627.944137][T12564] do_SYSENTER_32+0x73/0x90 [ 627.948644][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 627.954956][T12564] [ 627.957278][T12564] Uninit was stored to memory at: [ 627.962307][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 627.968026][T12564] __msan_chain_origin+0x50/0x90 [ 627.972964][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 627.978078][T12564] get_compat_msghdr+0x108/0x2b0 [ 627.983017][T12564] do_recvmmsg+0xdbb/0x22c0 [ 627.987518][T12564] __sys_recvmmsg+0x5dd/0x610 [ 627.992198][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 627.998268][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.004425][T12564] __do_fast_syscall_32+0x2af/0x480 [ 628.009623][T12564] do_fast_syscall_32+0x6b/0xd0 [ 628.014475][T12564] do_SYSENTER_32+0x73/0x90 [ 628.018979][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 628.025291][T12564] [ 628.027613][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 628.034286][T12564] do_recvmmsg+0xbf/0x22c0 [ 628.038703][T12564] do_recvmmsg+0xbf/0x22c0 [ 628.281594][T12564] not chained 1830000 origins [ 628.286307][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 628.294971][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.305022][T12564] Call Trace: [ 628.308318][T12564] dump_stack+0x21c/0x280 [ 628.312658][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 628.318388][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 628.324462][T12564] ? kmsan_get_metadata+0x116/0x180 [ 628.329667][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 628.335475][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 628.341546][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 628.346926][T12564] ? kmsan_get_metadata+0x116/0x180 [ 628.352125][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 628.357676][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 628.363751][T12564] ? _copy_from_user+0x201/0x310 [ 628.368696][T12564] ? kmsan_get_metadata+0x116/0x180 [ 628.373899][T12564] __msan_chain_origin+0x50/0x90 [ 628.378844][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 628.383977][T12564] get_compat_msghdr+0x108/0x2b0 [ 628.388938][T12564] do_recvmmsg+0xdbb/0x22c0 [ 628.393449][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 628.399272][T12564] ? kmsan_get_metadata+0x116/0x180 [ 628.404477][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 628.410382][T12564] ? kmsan_get_metadata+0x116/0x180 [ 628.415592][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 628.421239][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 628.426536][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 628.431316][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 628.436086][T12564] __sys_recvmmsg+0x5dd/0x610 [ 628.440782][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 628.446864][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.453029][T12564] __do_fast_syscall_32+0x2af/0x480 [ 628.458240][T12564] do_fast_syscall_32+0x6b/0xd0 [ 628.463098][T12564] do_SYSENTER_32+0x73/0x90 [ 628.467611][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 628.473942][T12564] RIP: 0023:0xf7fc1549 [ 628.478008][T12564] Code: Bad RIP value. [ 628.482070][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 628.490479][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 628.498447][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 628.506418][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.514394][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 628.522374][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.530360][T12564] Uninit was stored to memory at: [ 628.535413][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 628.541141][T12564] __msan_chain_origin+0x50/0x90 [ 628.546085][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 628.551195][T12564] get_compat_msghdr+0x108/0x2b0 [ 628.556138][T12564] do_recvmmsg+0xdbb/0x22c0 [ 628.560644][T12564] __sys_recvmmsg+0x5dd/0x610 [ 628.565333][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 628.571405][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.577596][T12564] __do_fast_syscall_32+0x2af/0x480 [ 628.582796][T12564] do_fast_syscall_32+0x6b/0xd0 [ 628.587652][T12564] do_SYSENTER_32+0x73/0x90 [ 628.592164][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 628.598475][T12564] [ 628.600798][T12564] Uninit was stored to memory at: [ 628.605827][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 628.611544][T12564] __msan_chain_origin+0x50/0x90 [ 628.616485][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 628.621599][T12564] get_compat_msghdr+0x108/0x2b0 [ 628.626539][T12564] do_recvmmsg+0xdbb/0x22c0 [ 628.631041][T12564] __sys_recvmmsg+0x5dd/0x610 [ 628.635723][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 628.641795][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.647956][T12564] __do_fast_syscall_32+0x2af/0x480 [ 628.653154][T12564] do_fast_syscall_32+0x6b/0xd0 [ 628.658003][T12564] do_SYSENTER_32+0x73/0x90 [ 628.662506][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 628.668819][T12564] [ 628.671146][T12564] Uninit was stored to memory at: [ 628.676170][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 628.681889][T12564] __msan_chain_origin+0x50/0x90 [ 628.686828][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 628.691956][T12564] get_compat_msghdr+0x108/0x2b0 [ 628.696894][T12564] do_recvmmsg+0xdbb/0x22c0 [ 628.701396][T12564] __sys_recvmmsg+0x5dd/0x610 [ 628.706074][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 628.712137][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.718301][T12564] __do_fast_syscall_32+0x2af/0x480 [ 628.723502][T12564] do_fast_syscall_32+0x6b/0xd0 [ 628.728352][T12564] do_SYSENTER_32+0x73/0x90 [ 628.732855][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 628.739175][T12564] [ 628.741495][T12564] Uninit was stored to memory at: [ 628.746526][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 628.752245][T12564] __msan_chain_origin+0x50/0x90 [ 628.757184][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 628.762294][T12564] get_compat_msghdr+0x108/0x2b0 [ 628.767229][T12564] do_recvmmsg+0xdbb/0x22c0 [ 628.771734][T12564] __sys_recvmmsg+0x5dd/0x610 [ 628.776414][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 628.782481][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.788636][T12564] __do_fast_syscall_32+0x2af/0x480 [ 628.793836][T12564] do_fast_syscall_32+0x6b/0xd0 [ 628.798688][T12564] do_SYSENTER_32+0x73/0x90 [ 628.803205][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 628.809520][T12564] [ 628.811840][T12564] Uninit was stored to memory at: [ 628.816897][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 628.822619][T12564] __msan_chain_origin+0x50/0x90 [ 628.827558][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 628.832673][T12564] get_compat_msghdr+0x108/0x2b0 [ 628.837611][T12564] do_recvmmsg+0xdbb/0x22c0 [ 628.842227][T12564] __sys_recvmmsg+0x5dd/0x610 [ 628.846912][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 628.852980][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.859137][T12564] __do_fast_syscall_32+0x2af/0x480 [ 628.864339][T12564] do_fast_syscall_32+0x6b/0xd0 [ 628.869191][T12564] do_SYSENTER_32+0x73/0x90 [ 628.873698][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 628.880011][T12564] [ 628.882332][T12564] Uninit was stored to memory at: [ 628.887367][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 628.893093][T12564] __msan_chain_origin+0x50/0x90 [ 628.898035][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 628.903143][T12564] get_compat_msghdr+0x108/0x2b0 [ 628.908075][T12564] do_recvmmsg+0xdbb/0x22c0 [ 628.912570][T12564] __sys_recvmmsg+0x5dd/0x610 [ 628.917244][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 628.923312][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.929464][T12564] __do_fast_syscall_32+0x2af/0x480 [ 628.934728][T12564] do_fast_syscall_32+0x6b/0xd0 [ 628.939580][T12564] do_SYSENTER_32+0x73/0x90 [ 628.944088][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 628.950404][T12564] [ 628.952724][T12564] Uninit was stored to memory at: [ 628.957753][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 628.963473][T12564] __msan_chain_origin+0x50/0x90 [ 628.968409][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 628.973519][T12564] get_compat_msghdr+0x108/0x2b0 [ 628.978455][T12564] do_recvmmsg+0xdbb/0x22c0 [ 628.982955][T12564] __sys_recvmmsg+0x5dd/0x610 [ 628.987633][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 628.993707][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 628.999861][T12564] __do_fast_syscall_32+0x2af/0x480 [ 629.005065][T12564] do_fast_syscall_32+0x6b/0xd0 [ 629.009920][T12564] do_SYSENTER_32+0x73/0x90 [ 629.014431][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 629.020743][T12564] [ 629.023065][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 629.029738][T12564] do_recvmmsg+0xbf/0x22c0 [ 629.034154][T12564] do_recvmmsg+0xbf/0x22c0 [ 629.262239][T12564] not chained 1840000 origins [ 629.266960][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 629.275627][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.285673][T12564] Call Trace: [ 629.288972][T12564] dump_stack+0x21c/0x280 [ 629.293315][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 629.299040][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 629.305111][T12564] ? kmsan_get_metadata+0x116/0x180 [ 629.310312][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 629.316123][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 629.322211][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 629.327605][T12564] ? kmsan_get_metadata+0x116/0x180 [ 629.332813][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 629.338360][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 629.344433][T12564] ? _copy_from_user+0x201/0x310 [ 629.349371][T12564] ? kmsan_get_metadata+0x116/0x180 [ 629.354569][T12564] __msan_chain_origin+0x50/0x90 [ 629.359513][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 629.364649][T12564] get_compat_msghdr+0x108/0x2b0 [ 629.369604][T12564] do_recvmmsg+0xdbb/0x22c0 [ 629.374120][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 629.379941][T12564] ? kmsan_get_metadata+0x116/0x180 [ 629.385145][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 629.391043][T12564] ? kmsan_get_metadata+0x116/0x180 [ 629.396245][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 629.401878][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 629.407276][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 629.412039][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 629.416815][T12564] __sys_recvmmsg+0x5dd/0x610 [ 629.421510][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 629.427590][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 629.433747][T12564] __do_fast_syscall_32+0x2af/0x480 [ 629.438952][T12564] do_fast_syscall_32+0x6b/0xd0 [ 629.443809][T12564] do_SYSENTER_32+0x73/0x90 [ 629.448325][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 629.454647][T12564] RIP: 0023:0xf7fc1549 [ 629.458707][T12564] Code: Bad RIP value. [ 629.462765][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 629.471201][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 629.479171][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 629.487139][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.495107][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 629.501321][T12560] not chained 1850000 origins [ 629.503078][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.515688][T12564] Uninit was stored to memory at: [ 629.515701][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 629.515717][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.520726][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 629.529354][T12560] Call Trace: [ 629.539399][T12564] __msan_chain_origin+0x50/0x90 [ 629.545102][T12560] dump_stack+0x21c/0x280 [ 629.548362][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 629.553363][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 629.557664][T12564] get_compat_msghdr+0x108/0x2b0 [ 629.562754][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 629.568444][T12564] do_recvmmsg+0xdbb/0x22c0 [ 629.573357][T12560] ? kmsan_get_metadata+0x116/0x180 [ 629.579395][T12564] __sys_recvmmsg+0x5dd/0x610 [ 629.583889][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 629.589065][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 629.593720][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 629.599501][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 629.605545][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 629.611583][T12564] __do_fast_syscall_32+0x2af/0x480 [ 629.617710][T12560] ? kmsan_get_metadata+0x116/0x180 [ 629.623058][T12564] do_fast_syscall_32+0x6b/0xd0 [ 629.628232][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 629.633405][T12564] do_SYSENTER_32+0x73/0x90 [ 629.638233][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 629.643754][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 629.648233][T12560] ? _copy_from_user+0x201/0x310 [ 629.654261][T12564] [ 629.660574][T12560] ? kmsan_get_metadata+0x116/0x180 [ 629.665472][T12564] Uninit was stored to memory at: [ 629.667788][T12560] __msan_chain_origin+0x50/0x90 [ 629.672980][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 629.677981][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 629.682897][T12564] __msan_chain_origin+0x50/0x90 [ 629.688602][T12560] get_compat_msghdr+0x108/0x2b0 [ 629.693682][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 629.698596][T12560] do_recvmmsg+0xdbb/0x22c0 [ 629.703504][T12564] get_compat_msghdr+0x108/0x2b0 [ 629.708593][T12560] ? kmsan_get_metadata+0x116/0x180 [ 629.713065][T12564] do_recvmmsg+0xdbb/0x22c0 [ 629.717978][T12560] ? kmsan_get_metadata+0x116/0x180 [ 629.723149][T12564] __sys_recvmmsg+0x5dd/0x610 [ 629.727630][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 629.732806][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 629.737476][T12560] ? kmsan_get_metadata+0x116/0x180 [ 629.743343][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 629.749384][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 629.754554][T12564] __do_fast_syscall_32+0x2af/0x480 [ 629.760680][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 629.766288][T12564] do_fast_syscall_32+0x6b/0xd0 [ 629.771453][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 629.776711][T12564] do_SYSENTER_32+0x73/0x90 [ 629.781536][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 629.786272][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 629.790748][T12560] __sys_recvmmsg+0x5dd/0x610 [ 629.795474][T12564] [ 629.801793][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 629.806422][T12564] Uninit was stored to memory at: [ 629.808741][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 629.814778][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 629.819783][T12560] __do_fast_syscall_32+0x2af/0x480 [ 629.825904][T12564] __msan_chain_origin+0x50/0x90 [ 629.831598][T12560] do_fast_syscall_32+0x6b/0xd0 [ 629.836769][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 629.841703][T12560] do_SYSENTER_32+0x73/0x90 [ 629.846527][T12564] get_compat_msghdr+0x108/0x2b0 [ 629.851615][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 629.856088][T12564] do_recvmmsg+0xdbb/0x22c0 [ 629.860998][T12560] RIP: 0023:0xf7fc1549 [ 629.867304][T12564] __sys_recvmmsg+0x5dd/0x610 [ 629.871771][T12560] Code: Bad RIP value. [ 629.875842][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 629.880486][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 629.884536][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 629.890571][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 629.898954][T12564] __do_fast_syscall_32+0x2af/0x480 [ 629.912103][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 629.920055][T12564] do_fast_syscall_32+0x6b/0xd0 [ 629.925221][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.933192][T12564] do_SYSENTER_32+0x73/0x90 [ 629.938014][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 629.945968][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 629.950440][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.958383][T12564] [ 629.964689][T12560] Uninit was stored to memory at: [ 629.972630][T12564] Uninit was stored to memory at: [ 629.974950][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 629.979942][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 629.984941][T12560] __msan_chain_origin+0x50/0x90 [ 629.990629][T12564] __msan_chain_origin+0x50/0x90 [ 629.996325][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 630.001236][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 630.006146][T12560] get_compat_msghdr+0x108/0x2b0 [ 630.011231][T12564] get_compat_msghdr+0x108/0x2b0 [ 630.016315][T12560] do_recvmmsg+0xdbb/0x22c0 [ 630.021226][T12564] do_recvmmsg+0xdbb/0x22c0 [ 630.026138][T12560] __sys_recvmmsg+0x5dd/0x610 [ 630.030616][T12564] __sys_recvmmsg+0x5dd/0x610 [ 630.035095][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.039747][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.044396][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.050434][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.056505][T12560] __do_fast_syscall_32+0x2af/0x480 [ 630.062631][T12564] __do_fast_syscall_32+0x2af/0x480 [ 630.068760][T12560] do_fast_syscall_32+0x6b/0xd0 [ 630.073926][T12564] do_fast_syscall_32+0x6b/0xd0 [ 630.079097][T12560] do_SYSENTER_32+0x73/0x90 [ 630.083923][T12564] do_SYSENTER_32+0x73/0x90 [ 630.088746][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.093221][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.097684][T12560] [ 630.103983][T12564] [ 630.110295][T12560] Uninit was stored to memory at: [ 630.112597][T12564] Uninit was stored to memory at: [ 630.114914][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 630.119912][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 630.124907][T12560] __msan_chain_origin+0x50/0x90 [ 630.130617][T12564] __msan_chain_origin+0x50/0x90 [ 630.136308][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 630.141219][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 630.146148][T12560] get_compat_msghdr+0x108/0x2b0 [ 630.151232][T12564] get_compat_msghdr+0x108/0x2b0 [ 630.156320][T12560] do_recvmmsg+0xdbb/0x22c0 [ 630.161228][T12564] do_recvmmsg+0xdbb/0x22c0 [ 630.166154][T12560] __sys_recvmmsg+0x5dd/0x610 [ 630.170631][T12564] __sys_recvmmsg+0x5dd/0x610 [ 630.175115][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.179769][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.184421][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.190476][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.196514][T12560] __do_fast_syscall_32+0x2af/0x480 [ 630.202643][T12564] __do_fast_syscall_32+0x2af/0x480 [ 630.208772][T12560] do_fast_syscall_32+0x6b/0xd0 [ 630.213941][T12564] do_fast_syscall_32+0x6b/0xd0 [ 630.219109][T12560] do_SYSENTER_32+0x73/0x90 [ 630.223933][T12564] do_SYSENTER_32+0x73/0x90 [ 630.228761][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.233238][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.237705][T12560] [ 630.244004][T12564] [ 630.250305][T12560] Uninit was stored to memory at: [ 630.252609][T12564] Uninit was stored to memory at: [ 630.254926][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 630.259943][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 630.266167][T12560] __msan_chain_origin+0x50/0x90 [ 630.271859][T12564] __msan_chain_origin+0x50/0x90 [ 630.277552][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 630.282468][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 630.287394][T12560] get_compat_msghdr+0x108/0x2b0 [ 630.292476][T12564] get_compat_msghdr+0x108/0x2b0 [ 630.297561][T12560] do_recvmmsg+0xdbb/0x22c0 [ 630.302472][T12564] do_recvmmsg+0xdbb/0x22c0 [ 630.307384][T12560] __sys_recvmmsg+0x5dd/0x610 [ 630.311858][T12564] __sys_recvmmsg+0x5dd/0x610 [ 630.316340][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.320992][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.325658][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.331805][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.337844][T12560] __do_fast_syscall_32+0x2af/0x480 [ 630.343971][T12564] __do_fast_syscall_32+0x2af/0x480 [ 630.350108][T12560] do_fast_syscall_32+0x6b/0xd0 [ 630.355286][T12564] do_fast_syscall_32+0x6b/0xd0 [ 630.360460][T12560] do_SYSENTER_32+0x73/0x90 [ 630.365287][T12564] do_SYSENTER_32+0x73/0x90 [ 630.370118][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.374595][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.379061][T12560] [ 630.385371][T12564] [ 630.391674][T12560] Uninit was stored to memory at: [ 630.393981][T12564] Uninit was stored to memory at: [ 630.396299][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 630.401297][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 630.406298][T12560] __msan_chain_origin+0x50/0x90 [ 630.411992][T12564] __msan_chain_origin+0x50/0x90 [ 630.417699][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 630.422612][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 630.427525][T12560] get_compat_msghdr+0x108/0x2b0 [ 630.432608][T12564] get_compat_msghdr+0x108/0x2b0 [ 630.437697][T12560] do_recvmmsg+0xdbb/0x22c0 [ 630.442610][T12564] do_recvmmsg+0xdbb/0x22c0 [ 630.447524][T12560] __sys_recvmmsg+0x5dd/0x610 [ 630.452001][T12564] __sys_recvmmsg+0x5dd/0x610 [ 630.456515][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.461167][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.465816][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.471858][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.477898][T12560] __do_fast_syscall_32+0x2af/0x480 [ 630.484023][T12564] __do_fast_syscall_32+0x2af/0x480 [ 630.490150][T12560] do_fast_syscall_32+0x6b/0xd0 [ 630.495325][T12564] do_fast_syscall_32+0x6b/0xd0 [ 630.500495][T12560] do_SYSENTER_32+0x73/0x90 [ 630.505319][T12564] do_SYSENTER_32+0x73/0x90 [ 630.510159][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.514639][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.519108][T12560] [ 630.525407][T12564] [ 630.531708][T12560] Uninit was stored to memory at: [ 630.534022][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 630.536341][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 630.541347][T12564] do_recvmmsg+0xbf/0x22c0 [ 630.547996][T12560] __msan_chain_origin+0x50/0x90 [ 630.553684][T12564] do_recvmmsg+0xbf/0x22c0 [ 630.558091][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 630.572563][T12560] get_compat_msghdr+0x108/0x2b0 [ 630.577552][T12560] do_recvmmsg+0xdbb/0x22c0 [ 630.582125][T12560] __sys_recvmmsg+0x5dd/0x610 [ 630.586836][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.592906][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.599049][T12560] __do_fast_syscall_32+0x2af/0x480 [ 630.604329][T12560] do_fast_syscall_32+0x6b/0xd0 [ 630.609167][T12560] do_SYSENTER_32+0x73/0x90 [ 630.613669][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.619974][T12560] [ 630.622287][T12560] Uninit was stored to memory at: [ 630.627302][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 630.633010][T12560] __msan_chain_origin+0x50/0x90 [ 630.637937][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 630.643039][T12560] get_compat_msghdr+0x108/0x2b0 [ 630.648058][T12560] do_recvmmsg+0xdbb/0x22c0 [ 630.652552][T12560] __sys_recvmmsg+0x5dd/0x610 [ 630.657308][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.663363][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.669505][T12560] __do_fast_syscall_32+0x2af/0x480 [ 630.674692][T12560] do_fast_syscall_32+0x6b/0xd0 [ 630.679534][T12560] do_SYSENTER_32+0x73/0x90 [ 630.684028][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.690334][T12560] [ 630.692652][T12560] Uninit was stored to memory at: [ 630.697665][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 630.703371][T12560] __msan_chain_origin+0x50/0x90 [ 630.708300][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 630.713401][T12560] get_compat_msghdr+0x108/0x2b0 [ 630.718322][T12560] do_recvmmsg+0xdbb/0x22c0 [ 630.722808][T12560] __sys_recvmmsg+0x5dd/0x610 [ 630.727475][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 630.733531][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 630.739671][T12560] __do_fast_syscall_32+0x2af/0x480 [ 630.744859][T12560] do_fast_syscall_32+0x6b/0xd0 [ 630.749698][T12560] do_SYSENTER_32+0x73/0x90 [ 630.754189][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.760494][T12560] [ 630.762807][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 630.769464][T12560] do_recvmmsg+0xbf/0x22c0 [ 630.773865][T12560] do_recvmmsg+0xbf/0x22c0 [ 631.070861][T12564] not chained 1860000 origins [ 631.075656][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 631.084321][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.094369][T12564] Call Trace: [ 631.097665][T12564] dump_stack+0x21c/0x280 [ 631.102004][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 631.107729][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 631.114840][T12564] ? kmsan_get_metadata+0x116/0x180 [ 631.120064][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 631.125887][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 631.131952][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 631.137346][T12564] ? kmsan_get_metadata+0x116/0x180 [ 631.142542][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 631.148097][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 631.154172][T12564] ? _copy_from_user+0x201/0x310 [ 631.159115][T12564] ? kmsan_get_metadata+0x116/0x180 [ 631.164325][T12564] __msan_chain_origin+0x50/0x90 [ 631.169301][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 631.174431][T12564] get_compat_msghdr+0x108/0x2b0 [ 631.179375][T12564] do_recvmmsg+0xdbb/0x22c0 [ 631.183885][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 631.189703][T12564] ? kmsan_get_metadata+0x116/0x180 [ 631.194909][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 631.200804][T12564] ? kmsan_get_metadata+0x116/0x180 [ 631.206007][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 631.211643][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 631.216929][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 631.221689][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 631.226458][T12564] __sys_recvmmsg+0x5dd/0x610 [ 631.231154][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 631.237234][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 631.243399][T12564] __do_fast_syscall_32+0x2af/0x480 [ 631.248699][T12564] do_fast_syscall_32+0x6b/0xd0 [ 631.253555][T12564] do_SYSENTER_32+0x73/0x90 [ 631.258065][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 631.264388][T12564] RIP: 0023:0xf7fc1549 [ 631.268445][T12564] Code: Bad RIP value. [ 631.272504][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 631.280912][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 631.288883][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 631.296850][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.304819][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 631.312794][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.320770][T12564] Uninit was stored to memory at: [ 631.325799][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 631.331519][T12564] __msan_chain_origin+0x50/0x90 [ 631.336458][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 631.341586][T12564] get_compat_msghdr+0x108/0x2b0 [ 631.346522][T12564] do_recvmmsg+0xdbb/0x22c0 [ 631.351024][T12564] __sys_recvmmsg+0x5dd/0x610 [ 631.355705][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 631.361773][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 631.367925][T12564] __do_fast_syscall_32+0x2af/0x480 [ 631.373131][T12564] do_fast_syscall_32+0x6b/0xd0 [ 631.377988][T12564] do_SYSENTER_32+0x73/0x90 [ 631.379527][T12560] not chained 1870000 origins [ 631.382495][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 631.387155][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 631.393450][T12564] [ 631.402100][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.404424][T12564] Uninit was stored to memory at: [ 631.414461][T12560] Call Trace: [ 631.419477][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 631.422744][T12560] dump_stack+0x21c/0x280 [ 631.428441][T12564] __msan_chain_origin+0x50/0x90 [ 631.432748][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 631.437679][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 631.443384][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 631.448484][T12564] get_compat_msghdr+0x108/0x2b0 [ 631.454528][T12560] ? kmsan_get_metadata+0x116/0x180 [ 631.459465][T12564] do_recvmmsg+0xdbb/0x22c0 [ 631.464640][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 631.469116][T12564] __sys_recvmmsg+0x5dd/0x610 [ 631.474900][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 631.479551][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 631.485592][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 631.491635][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 631.496985][T12560] ? kmsan_get_metadata+0x116/0x180 [ 631.503112][T12564] __do_fast_syscall_32+0x2af/0x480 [ 631.508282][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 631.513455][T12564] do_fast_syscall_32+0x6b/0xd0 [ 631.518975][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 631.523799][T12564] do_SYSENTER_32+0x73/0x90 [ 631.529841][T12560] ? _copy_from_user+0x201/0x310 [ 631.534343][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 631.539260][T12560] ? kmsan_get_metadata+0x116/0x180 [ 631.545549][T12564] [ 631.550731][T12560] __msan_chain_origin+0x50/0x90 [ 631.553029][T12564] Uninit was stored to memory at: [ 631.557953][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 631.562944][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 631.562967][T12564] __msan_chain_origin+0x50/0x90 [ 631.568061][T12560] get_compat_msghdr+0x108/0x2b0 [ 631.573746][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 631.578768][T12560] do_recvmmsg+0xdbb/0x22c0 [ 631.583689][T12564] get_compat_msghdr+0x108/0x2b0 [ 631.588783][T12560] ? kmsan_get_metadata+0x116/0x180 [ 631.593274][T12564] do_recvmmsg+0xdbb/0x22c0 [ 631.598189][T12560] ? kmsan_get_metadata+0x116/0x180 [ 631.603364][T12564] __sys_recvmmsg+0x5dd/0x610 [ 631.607849][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 631.613024][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 631.617676][T12560] ? kmsan_get_metadata+0x116/0x180 [ 631.623649][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 631.629702][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 631.634877][T12564] __do_fast_syscall_32+0x2af/0x480 [ 631.641004][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 631.646610][T12564] do_fast_syscall_32+0x6b/0xd0 [ 631.651783][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 631.657042][T12564] do_SYSENTER_32+0x73/0x90 [ 631.661865][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 631.666603][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 631.671080][T12560] __sys_recvmmsg+0x5dd/0x610 [ 631.675805][T12564] [ 631.682123][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 631.686754][T12564] Uninit was stored to memory at: [ 631.689074][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 631.695114][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 631.700113][T12560] __do_fast_syscall_32+0x2af/0x480 [ 631.706241][T12564] __msan_chain_origin+0x50/0x90 [ 631.711939][T12560] do_fast_syscall_32+0x6b/0xd0 [ 631.717105][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 631.722015][T12560] do_SYSENTER_32+0x73/0x90 [ 631.726837][T12564] get_compat_msghdr+0x108/0x2b0 [ 631.731942][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 631.736423][T12564] do_recvmmsg+0xdbb/0x22c0 [ 631.741325][T12560] RIP: 0023:0xf7fc1549 [ 631.747625][T12564] __sys_recvmmsg+0x5dd/0x610 [ 631.752094][T12560] Code: Bad RIP value. [ 631.756147][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 631.760790][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 631.764842][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 631.770873][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 631.779260][T12564] __do_fast_syscall_32+0x2af/0x480 [ 631.785380][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 631.793336][T12564] do_fast_syscall_32+0x6b/0xd0 [ 631.798500][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.806453][T12564] do_SYSENTER_32+0x73/0x90 [ 631.811271][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 631.819227][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 631.823698][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.831644][T12564] [ 631.837987][T12560] Uninit was stored to memory at: [ 631.845935][T12564] Uninit was stored to memory at: [ 631.848254][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 631.853268][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 631.858263][T12560] __msan_chain_origin+0x50/0x90 [ 631.863954][T12564] __msan_chain_origin+0x50/0x90 [ 631.869647][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 631.874557][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 631.879467][T12560] get_compat_msghdr+0x108/0x2b0 [ 631.884552][T12564] get_compat_msghdr+0x108/0x2b0 [ 631.889633][T12560] do_recvmmsg+0xdbb/0x22c0 [ 631.894543][T12564] do_recvmmsg+0xdbb/0x22c0 [ 631.899451][T12560] __sys_recvmmsg+0x5dd/0x610 [ 631.903928][T12564] __sys_recvmmsg+0x5dd/0x610 [ 631.908405][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 631.913060][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 631.917722][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 631.923762][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 631.929804][T12560] __do_fast_syscall_32+0x2af/0x480 [ 631.935928][T12564] __do_fast_syscall_32+0x2af/0x480 [ 631.942159][T12560] do_fast_syscall_32+0x6b/0xd0 [ 631.947331][T12564] do_fast_syscall_32+0x6b/0xd0 [ 631.952502][T12560] do_SYSENTER_32+0x73/0x90 [ 631.957328][T12564] do_SYSENTER_32+0x73/0x90 [ 631.962153][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 631.966645][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 631.971131][T12560] [ 631.977428][T12564] [ 631.983740][T12560] Uninit was stored to memory at: [ 631.986052][T12564] Uninit was stored to memory at: [ 631.988373][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 631.993372][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 631.998382][T12560] __msan_chain_origin+0x50/0x90 [ 632.004073][T12564] __msan_chain_origin+0x50/0x90 [ 632.009772][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 632.014683][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 632.019610][T12560] get_compat_msghdr+0x108/0x2b0 [ 632.024695][T12564] get_compat_msghdr+0x108/0x2b0 [ 632.029791][T12560] do_recvmmsg+0xdbb/0x22c0 [ 632.034710][T12564] do_recvmmsg+0xdbb/0x22c0 [ 632.039630][T12560] __sys_recvmmsg+0x5dd/0x610 [ 632.044107][T12564] __sys_recvmmsg+0x5dd/0x610 [ 632.044133][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 632.048616][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 632.053268][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 632.057919][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 632.063962][T12564] __do_fast_syscall_32+0x2af/0x480 [ 632.070002][T12560] __do_fast_syscall_32+0x2af/0x480 [ 632.076134][T12564] do_fast_syscall_32+0x6b/0xd0 [ 632.082257][T12560] do_fast_syscall_32+0x6b/0xd0 [ 632.087429][T12564] do_SYSENTER_32+0x73/0x90 [ 632.092606][T12560] do_SYSENTER_32+0x73/0x90 [ 632.097429][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 632.102253][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 632.106716][T12564] [ 632.111190][T12560] [ 632.117490][T12564] Uninit was stored to memory at: [ 632.123785][T12560] Uninit was stored to memory at: [ 632.126118][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 632.128442][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 632.133439][T12564] __msan_chain_origin+0x50/0x90 [ 632.138436][T12560] __msan_chain_origin+0x50/0x90 [ 632.144130][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 632.149828][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 632.154738][T12564] get_compat_msghdr+0x108/0x2b0 [ 632.159650][T12560] get_compat_msghdr+0x108/0x2b0 [ 632.164737][T12564] do_recvmmsg+0xdbb/0x22c0 [ 632.169826][T12560] do_recvmmsg+0xdbb/0x22c0 [ 632.174737][T12564] __sys_recvmmsg+0x5dd/0x610 [ 632.179647][T12560] __sys_recvmmsg+0x5dd/0x610 [ 632.184127][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 632.188622][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 632.193291][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 632.197943][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 632.203982][T12564] __do_fast_syscall_32+0x2af/0x480 [ 632.210060][T12560] __do_fast_syscall_32+0x2af/0x480 [ 632.216186][T12564] do_fast_syscall_32+0x6b/0xd0 [ 632.222312][T12560] do_fast_syscall_32+0x6b/0xd0 [ 632.227484][T12564] do_SYSENTER_32+0x73/0x90 [ 632.232660][T12560] do_SYSENTER_32+0x73/0x90 [ 632.237488][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 632.242319][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 632.251299][T12564] [ 632.255776][T12560] [ 632.262082][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 632.268379][T12560] Uninit was stored to memory at: [ 632.270695][T12564] do_recvmmsg+0xbf/0x22c0 [ 632.273007][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 632.279652][T12564] do_recvmmsg+0xbf/0x22c0 [ 632.284652][T12560] __msan_chain_origin+0x50/0x90 [ 632.304095][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 632.309209][T12560] get_compat_msghdr+0x108/0x2b0 [ 632.314147][T12560] do_recvmmsg+0xdbb/0x22c0 [ 632.318712][T12560] __sys_recvmmsg+0x5dd/0x610 [ 632.323420][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 632.329484][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 632.335629][T12560] __do_fast_syscall_32+0x2af/0x480 [ 632.340817][T12560] do_fast_syscall_32+0x6b/0xd0 [ 632.345670][T12560] do_SYSENTER_32+0x73/0x90 [ 632.350186][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 632.356493][T12560] [ 632.358809][T12560] Uninit was stored to memory at: [ 632.363829][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 632.369922][T12560] __msan_chain_origin+0x50/0x90 [ 632.374856][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 632.379961][T12560] get_compat_msghdr+0x108/0x2b0 [ 632.384890][T12560] do_recvmmsg+0xdbb/0x22c0 [ 632.389383][T12560] __sys_recvmmsg+0x5dd/0x610 [ 632.394053][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 632.400124][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 632.406271][T12560] __do_fast_syscall_32+0x2af/0x480 [ 632.411463][T12560] do_fast_syscall_32+0x6b/0xd0 [ 632.416303][T12560] do_SYSENTER_32+0x73/0x90 [ 632.420816][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 632.427127][T12560] [ 632.429438][T12560] Uninit was stored to memory at: [ 632.434457][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 632.440167][T12560] __msan_chain_origin+0x50/0x90 [ 632.445100][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 632.450200][T12560] get_compat_msghdr+0x108/0x2b0 [ 632.455158][T12560] do_recvmmsg+0xdbb/0x22c0 [ 632.459651][T12560] __sys_recvmmsg+0x5dd/0x610 [ 632.464321][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 632.470380][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 632.476524][T12560] __do_fast_syscall_32+0x2af/0x480 [ 632.481712][T12560] do_fast_syscall_32+0x6b/0xd0 [ 632.486551][T12560] do_SYSENTER_32+0x73/0x90 [ 632.491047][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 632.497357][T12560] [ 632.499670][T12560] Uninit was stored to memory at: [ 632.504684][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 632.510389][T12560] __msan_chain_origin+0x50/0x90 [ 632.515316][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 632.520416][T12560] get_compat_msghdr+0x108/0x2b0 [ 632.525340][T12560] do_recvmmsg+0xdbb/0x22c0 [ 632.529830][T12560] __sys_recvmmsg+0x5dd/0x610 [ 632.534502][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 632.540558][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 632.546702][T12560] __do_fast_syscall_32+0x2af/0x480 [ 632.551887][T12560] do_fast_syscall_32+0x6b/0xd0 [ 632.556727][T12560] do_SYSENTER_32+0x73/0x90 [ 632.561218][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 632.567522][T12560] [ 632.569840][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 632.576499][T12560] do_recvmmsg+0xbf/0x22c0 [ 632.580957][T12560] do_recvmmsg+0xbf/0x22c0 [ 632.856622][T12564] not chained 1880000 origins [ 632.861348][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 632.870011][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.880060][T12564] Call Trace: [ 632.883362][T12564] dump_stack+0x21c/0x280 [ 632.887702][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 632.893458][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 632.899530][T12564] ? kmsan_get_metadata+0x116/0x180 [ 632.904735][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 632.910547][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 632.916615][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 632.921993][T12564] ? kmsan_get_metadata+0x116/0x180 [ 632.927199][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 632.932746][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 632.938820][T12564] ? _copy_from_user+0x201/0x310 [ 632.943761][T12564] ? kmsan_get_metadata+0x116/0x180 [ 632.948974][T12564] __msan_chain_origin+0x50/0x90 [ 632.953922][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 632.959060][T12564] get_compat_msghdr+0x108/0x2b0 [ 632.964028][T12564] do_recvmmsg+0xdbb/0x22c0 [ 632.968550][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 632.974385][T12564] ? kmsan_get_metadata+0x116/0x180 [ 632.979592][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 632.985492][T12564] ? kmsan_get_metadata+0x116/0x180 [ 632.990695][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 632.996336][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 633.001623][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 633.006385][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 633.011147][T12564] __sys_recvmmsg+0x5dd/0x610 [ 633.015837][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.021910][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.028067][T12564] __do_fast_syscall_32+0x2af/0x480 [ 633.033278][T12564] do_fast_syscall_32+0x6b/0xd0 [ 633.038143][T12564] do_SYSENTER_32+0x73/0x90 [ 633.042657][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.048982][T12564] RIP: 0023:0xf7fc1549 [ 633.053038][T12564] Code: Bad RIP value. [ 633.057103][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 633.065526][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 633.073497][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 633.081467][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.089436][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 633.097407][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.105385][T12564] Uninit was stored to memory at: [ 633.110414][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 633.116132][T12564] __msan_chain_origin+0x50/0x90 [ 633.121073][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 633.126187][T12564] get_compat_msghdr+0x108/0x2b0 [ 633.131125][T12564] do_recvmmsg+0xdbb/0x22c0 [ 633.135632][T12564] __sys_recvmmsg+0x5dd/0x610 [ 633.140317][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.146390][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.152543][T12564] __do_fast_syscall_32+0x2af/0x480 [ 633.157742][T12564] do_fast_syscall_32+0x6b/0xd0 [ 633.162594][T12564] do_SYSENTER_32+0x73/0x90 [ 633.167106][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.173430][T12564] [ 633.175756][T12564] Uninit was stored to memory at: [ 633.180786][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 633.186509][T12564] __msan_chain_origin+0x50/0x90 [ 633.191446][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 633.196557][T12564] get_compat_msghdr+0x108/0x2b0 [ 633.201494][T12564] do_recvmmsg+0xdbb/0x22c0 [ 633.205994][T12564] __sys_recvmmsg+0x5dd/0x610 [ 633.210681][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.216744][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.222894][T12564] __do_fast_syscall_32+0x2af/0x480 [ 633.228111][T12564] do_fast_syscall_32+0x6b/0xd0 [ 633.232967][T12564] do_SYSENTER_32+0x73/0x90 [ 633.237469][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.243784][T12564] [ 633.246105][T12564] Uninit was stored to memory at: [ 633.251139][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 633.256860][T12564] __msan_chain_origin+0x50/0x90 [ 633.261797][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 633.266909][T12564] get_compat_msghdr+0x108/0x2b0 [ 633.271861][T12564] do_recvmmsg+0xdbb/0x22c0 [ 633.276364][T12564] __sys_recvmmsg+0x5dd/0x610 [ 633.281043][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.287371][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.293535][T12564] __do_fast_syscall_32+0x2af/0x480 [ 633.298732][T12564] do_fast_syscall_32+0x6b/0xd0 [ 633.303581][T12564] do_SYSENTER_32+0x73/0x90 [ 633.308086][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.314398][T12564] [ 633.316714][T12564] Uninit was stored to memory at: [ 633.321736][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 633.327451][T12564] __msan_chain_origin+0x50/0x90 [ 633.332414][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 633.337537][T12564] get_compat_msghdr+0x108/0x2b0 [ 633.342476][T12564] do_recvmmsg+0xdbb/0x22c0 [ 633.346978][T12564] __sys_recvmmsg+0x5dd/0x610 [ 633.351659][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.357726][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.363881][T12564] __do_fast_syscall_32+0x2af/0x480 [ 633.369083][T12564] do_fast_syscall_32+0x6b/0xd0 [ 633.373932][T12564] do_SYSENTER_32+0x73/0x90 [ 633.378439][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.384752][T12564] [ 633.387069][T12564] Uninit was stored to memory at: [ 633.392090][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 633.397803][T12564] __msan_chain_origin+0x50/0x90 [ 633.402737][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 633.407848][T12564] get_compat_msghdr+0x108/0x2b0 [ 633.412796][T12564] do_recvmmsg+0xdbb/0x22c0 [ 633.417310][T12564] __sys_recvmmsg+0x5dd/0x610 [ 633.421993][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.428060][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.434214][T12564] __do_fast_syscall_32+0x2af/0x480 [ 633.439413][T12564] do_fast_syscall_32+0x6b/0xd0 [ 633.444271][T12564] do_SYSENTER_32+0x73/0x90 [ 633.448775][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.455090][T12564] [ 633.457409][T12564] Uninit was stored to memory at: [ 633.462437][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 633.468157][T12564] __msan_chain_origin+0x50/0x90 [ 633.473107][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 633.478218][T12564] get_compat_msghdr+0x108/0x2b0 [ 633.483156][T12564] do_recvmmsg+0xdbb/0x22c0 [ 633.487668][T12564] __sys_recvmmsg+0x5dd/0x610 [ 633.492362][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.498438][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.504598][T12564] __do_fast_syscall_32+0x2af/0x480 [ 633.509796][T12564] do_fast_syscall_32+0x6b/0xd0 [ 633.514645][T12564] do_SYSENTER_32+0x73/0x90 [ 633.519146][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.525457][T12564] [ 633.527786][T12564] Uninit was stored to memory at: [ 633.532814][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 633.535183][T12560] not chained 1890000 origins [ 633.538533][T12564] __msan_chain_origin+0x50/0x90 [ 633.543199][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 633.548108][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 633.556742][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.561833][T12564] get_compat_msghdr+0x108/0x2b0 [ 633.571892][T12560] Call Trace: [ 633.576827][T12564] do_recvmmsg+0xdbb/0x22c0 [ 633.580095][T12560] dump_stack+0x21c/0x280 [ 633.584588][T12564] __sys_recvmmsg+0x5dd/0x610 [ 633.588898][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 633.593552][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.599247][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 633.605294][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.611338][T12560] ? kmsan_get_metadata+0x116/0x180 [ 633.617466][T12564] __do_fast_syscall_32+0x2af/0x480 [ 633.622637][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 633.627812][T12564] do_fast_syscall_32+0x6b/0xd0 [ 633.633594][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 633.638414][T12564] do_SYSENTER_32+0x73/0x90 [ 633.644454][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 633.648932][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.654278][T12560] ? kmsan_get_metadata+0x116/0x180 [ 633.660565][T12564] [ 633.665751][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 633.668045][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 633.673577][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 633.680228][T12564] do_recvmmsg+0xbf/0x22c0 [ 633.686274][T12560] ? _copy_from_user+0x201/0x310 [ 633.690663][T12564] do_recvmmsg+0xbf/0x22c0 [ 633.695575][T12560] ? kmsan_get_metadata+0x116/0x180 [ 633.705155][T12560] __msan_chain_origin+0x50/0x90 [ 633.710177][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 633.715336][T12560] get_compat_msghdr+0x108/0x2b0 [ 633.720286][T12560] do_recvmmsg+0xdbb/0x22c0 [ 633.724809][T12560] ? kmsan_get_metadata+0x116/0x180 [ 633.730015][T12560] ? kmsan_get_metadata+0x116/0x180 [ 633.735223][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 633.741121][T12560] ? kmsan_get_metadata+0x116/0x180 [ 633.746303][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 633.751925][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 633.757201][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 633.761952][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 633.766705][T12560] __sys_recvmmsg+0x5dd/0x610 [ 633.771397][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.777460][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.783605][T12560] __do_fast_syscall_32+0x2af/0x480 [ 633.788801][T12560] do_fast_syscall_32+0x6b/0xd0 [ 633.793645][T12560] do_SYSENTER_32+0x73/0x90 [ 633.798141][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.804450][T12560] RIP: 0023:0xf7fc1549 [ 633.808515][T12560] Code: Bad RIP value. [ 633.812566][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 633.820962][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 633.828918][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 633.836874][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.844835][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 633.852791][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.860758][T12560] Uninit was stored to memory at: [ 633.865771][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 633.871478][T12560] __msan_chain_origin+0x50/0x90 [ 633.876403][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 633.881502][T12560] get_compat_msghdr+0x108/0x2b0 [ 633.886427][T12560] do_recvmmsg+0xdbb/0x22c0 [ 633.890918][T12560] __sys_recvmmsg+0x5dd/0x610 [ 633.895586][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.901638][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.907798][T12560] __do_fast_syscall_32+0x2af/0x480 [ 633.913010][T12560] do_fast_syscall_32+0x6b/0xd0 [ 633.917854][T12560] do_SYSENTER_32+0x73/0x90 [ 633.922348][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.928652][T12560] [ 633.930986][T12560] Uninit was stored to memory at: [ 633.935999][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 633.941810][T12560] __msan_chain_origin+0x50/0x90 [ 633.946746][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 633.951843][T12560] get_compat_msghdr+0x108/0x2b0 [ 633.956768][T12560] do_recvmmsg+0xdbb/0x22c0 [ 633.961256][T12560] __sys_recvmmsg+0x5dd/0x610 [ 633.965921][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 633.971974][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 633.978116][T12560] __do_fast_syscall_32+0x2af/0x480 [ 633.983305][T12560] do_fast_syscall_32+0x6b/0xd0 [ 633.988143][T12560] do_SYSENTER_32+0x73/0x90 [ 633.992634][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 633.998953][T12560] [ 634.001266][T12560] Uninit was stored to memory at: [ 634.006278][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 634.011984][T12560] __msan_chain_origin+0x50/0x90 [ 634.016906][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 634.022004][T12560] get_compat_msghdr+0x108/0x2b0 [ 634.026943][T12560] do_recvmmsg+0xdbb/0x22c0 [ 634.031439][T12560] __sys_recvmmsg+0x5dd/0x610 [ 634.036103][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 634.042158][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 634.048298][T12560] __do_fast_syscall_32+0x2af/0x480 [ 634.053483][T12560] do_fast_syscall_32+0x6b/0xd0 [ 634.058320][T12560] do_SYSENTER_32+0x73/0x90 [ 634.062827][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 634.069130][T12560] [ 634.071439][T12560] Uninit was stored to memory at: [ 634.076454][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 634.082163][T12560] __msan_chain_origin+0x50/0x90 [ 634.087090][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 634.092227][T12560] get_compat_msghdr+0x108/0x2b0 [ 634.097148][T12560] do_recvmmsg+0xdbb/0x22c0 [ 634.101637][T12560] __sys_recvmmsg+0x5dd/0x610 [ 634.106303][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 634.112462][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 634.118605][T12560] __do_fast_syscall_32+0x2af/0x480 [ 634.123901][T12560] do_fast_syscall_32+0x6b/0xd0 [ 634.128738][T12560] do_SYSENTER_32+0x73/0x90 [ 634.133227][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 634.139528][T12560] [ 634.142011][T12560] Uninit was stored to memory at: [ 634.147022][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 634.152812][T12560] __msan_chain_origin+0x50/0x90 [ 634.157735][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 634.162831][T12560] get_compat_msghdr+0x108/0x2b0 [ 634.167760][T12560] do_recvmmsg+0xdbb/0x22c0 [ 634.172251][T12560] __sys_recvmmsg+0x5dd/0x610 [ 634.176917][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 634.182976][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 634.189119][T12560] __do_fast_syscall_32+0x2af/0x480 [ 634.194305][T12560] do_fast_syscall_32+0x6b/0xd0 [ 634.199153][T12560] do_SYSENTER_32+0x73/0x90 [ 634.203747][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 634.210051][T12560] [ 634.212359][T12560] Uninit was stored to memory at: [ 634.217372][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 634.223081][T12560] __msan_chain_origin+0x50/0x90 [ 634.228006][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 634.233107][T12560] get_compat_msghdr+0x108/0x2b0 [ 634.238032][T12560] do_recvmmsg+0xdbb/0x22c0 [ 634.242528][T12560] __sys_recvmmsg+0x5dd/0x610 [ 634.247192][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 634.253247][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 634.259396][T12560] __do_fast_syscall_32+0x2af/0x480 [ 634.264585][T12560] do_fast_syscall_32+0x6b/0xd0 [ 634.269423][T12560] do_SYSENTER_32+0x73/0x90 [ 634.273914][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 634.280216][T12560] [ 634.282526][T12560] Uninit was stored to memory at: [ 634.287537][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 634.293329][T12560] __msan_chain_origin+0x50/0x90 [ 634.298262][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 634.303358][T12560] get_compat_msghdr+0x108/0x2b0 [ 634.308284][T12560] do_recvmmsg+0xdbb/0x22c0 [ 634.312773][T12560] __sys_recvmmsg+0x5dd/0x610 [ 634.317439][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 634.323501][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 634.329644][T12560] __do_fast_syscall_32+0x2af/0x480 [ 634.334827][T12560] do_fast_syscall_32+0x6b/0xd0 [ 634.339687][T12560] do_SYSENTER_32+0x73/0x90 [ 634.344188][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 634.350490][T12560] [ 634.352803][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 634.359465][T12560] do_recvmmsg+0xbf/0x22c0 [ 634.363869][T12560] do_recvmmsg+0xbf/0x22c0 [ 634.598384][T12560] not chained 1900000 origins [ 634.603102][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 634.611761][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.621799][T12560] Call Trace: [ 634.625085][T12560] dump_stack+0x21c/0x280 [ 634.629410][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 634.635126][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 634.641186][T12560] ? kmsan_get_metadata+0x116/0x180 [ 634.646375][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 634.652170][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 634.658229][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 634.663602][T12560] ? kmsan_get_metadata+0x116/0x180 [ 634.668877][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 634.674501][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 634.680563][T12560] ? _copy_from_user+0x201/0x310 [ 634.685495][T12560] ? kmsan_get_metadata+0x116/0x180 [ 634.690687][T12560] __msan_chain_origin+0x50/0x90 [ 634.695634][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 634.700749][T12560] get_compat_msghdr+0x108/0x2b0 [ 634.705709][T12560] do_recvmmsg+0xdbb/0x22c0 [ 634.710208][T12560] ? kmsan_get_metadata+0x116/0x180 [ 634.715407][T12560] ? kmsan_get_metadata+0x116/0x180 [ 634.720602][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 634.726487][T12560] ? kmsan_get_metadata+0x116/0x180 [ 634.731699][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 634.737322][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 634.742603][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 634.747368][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 634.752122][T12560] __sys_recvmmsg+0x5dd/0x610 [ 634.756804][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 634.762869][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 634.769029][T12560] __do_fast_syscall_32+0x2af/0x480 [ 634.774223][T12560] do_fast_syscall_32+0x6b/0xd0 [ 634.779067][T12560] do_SYSENTER_32+0x73/0x90 [ 634.783565][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 634.789881][T12560] RIP: 0023:0xf7fc1549 [ 634.793932][T12560] Code: Bad RIP value. [ 634.797992][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 634.806389][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 634.814348][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 634.822306][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 634.830277][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 634.838238][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 634.846206][T12560] Uninit was stored to memory at: [ 634.851223][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 634.856934][T12560] __msan_chain_origin+0x50/0x90 [ 634.861862][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 634.866965][T12560] get_compat_msghdr+0x108/0x2b0 [ 634.871891][T12560] do_recvmmsg+0xdbb/0x22c0 [ 634.876384][T12560] __sys_recvmmsg+0x5dd/0x610 [ 634.881052][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 634.887110][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 634.893253][T12560] __do_fast_syscall_32+0x2af/0x480 [ 634.898454][T12560] do_fast_syscall_32+0x6b/0xd0 [ 634.903291][T12560] do_SYSENTER_32+0x73/0x90 [ 634.907783][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 634.914084][T12560] [ 634.916393][T12560] Uninit was stored to memory at: [ 634.921405][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 634.927108][T12560] __msan_chain_origin+0x50/0x90 [ 634.932030][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 634.937129][T12560] get_compat_msghdr+0x108/0x2b0 [ 634.942054][T12560] do_recvmmsg+0xdbb/0x22c0 [ 634.946543][T12560] __sys_recvmmsg+0x5dd/0x610 [ 634.951209][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 634.957265][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 634.963409][T12560] __do_fast_syscall_32+0x2af/0x480 [ 634.968594][T12560] do_fast_syscall_32+0x6b/0xd0 [ 634.973432][T12560] do_SYSENTER_32+0x73/0x90 [ 634.977924][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 634.984226][T12560] [ 634.986538][T12560] Uninit was stored to memory at: [ 634.991549][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 634.997254][T12560] __msan_chain_origin+0x50/0x90 [ 635.002181][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 635.007279][T12560] get_compat_msghdr+0x108/0x2b0 [ 635.012204][T12560] do_recvmmsg+0xdbb/0x22c0 [ 635.016693][T12560] __sys_recvmmsg+0x5dd/0x610 [ 635.021359][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.027437][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.033589][T12560] __do_fast_syscall_32+0x2af/0x480 [ 635.038774][T12560] do_fast_syscall_32+0x6b/0xd0 [ 635.043614][T12560] do_SYSENTER_32+0x73/0x90 [ 635.048118][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 635.054436][T12560] [ 635.056748][T12560] Uninit was stored to memory at: [ 635.061759][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 635.067463][T12560] __msan_chain_origin+0x50/0x90 [ 635.072387][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 635.077588][T12560] get_compat_msghdr+0x108/0x2b0 [ 635.082512][T12560] do_recvmmsg+0xdbb/0x22c0 [ 635.087002][T12560] __sys_recvmmsg+0x5dd/0x610 [ 635.091669][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.097725][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.103866][T12560] __do_fast_syscall_32+0x2af/0x480 [ 635.109052][T12560] do_fast_syscall_32+0x6b/0xd0 [ 635.113893][T12560] do_SYSENTER_32+0x73/0x90 [ 635.118383][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 635.124686][T12560] [ 635.127005][T12560] Uninit was stored to memory at: [ 635.132013][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 635.137720][T12560] __msan_chain_origin+0x50/0x90 [ 635.142648][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 635.147745][T12560] get_compat_msghdr+0x108/0x2b0 [ 635.152668][T12560] do_recvmmsg+0xdbb/0x22c0 [ 635.157161][T12560] __sys_recvmmsg+0x5dd/0x610 [ 635.161826][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.167879][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.174018][T12560] __do_fast_syscall_32+0x2af/0x480 [ 635.179205][T12560] do_fast_syscall_32+0x6b/0xd0 [ 635.184046][T12560] do_SYSENTER_32+0x73/0x90 [ 635.188539][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 635.194841][T12560] [ 635.197151][T12560] Uninit was stored to memory at: [ 635.202161][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 635.207868][T12560] __msan_chain_origin+0x50/0x90 [ 635.212794][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 635.217897][T12560] get_compat_msghdr+0x108/0x2b0 [ 635.222822][T12560] do_recvmmsg+0xdbb/0x22c0 [ 635.227310][T12560] __sys_recvmmsg+0x5dd/0x610 [ 635.231975][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.238032][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.244176][T12560] __do_fast_syscall_32+0x2af/0x480 [ 635.249364][T12560] do_fast_syscall_32+0x6b/0xd0 [ 635.254202][T12560] do_SYSENTER_32+0x73/0x90 [ 635.258692][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 635.264996][T12560] [ 635.267307][T12560] Uninit was stored to memory at: [ 635.272316][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 635.278016][T12560] __msan_chain_origin+0x50/0x90 [ 635.282954][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 635.288050][T12560] get_compat_msghdr+0x108/0x2b0 [ 635.292970][T12560] do_recvmmsg+0xdbb/0x22c0 [ 635.297465][T12560] __sys_recvmmsg+0x5dd/0x610 [ 635.302131][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.308190][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.314329][T12560] __do_fast_syscall_32+0x2af/0x480 [ 635.319514][T12560] do_fast_syscall_32+0x6b/0xd0 [ 635.324350][T12560] do_SYSENTER_32+0x73/0x90 [ 635.328838][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 635.335142][T12560] [ 635.337458][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 635.344120][T12560] do_recvmmsg+0xbf/0x22c0 [ 635.348524][T12560] do_recvmmsg+0xbf/0x22c0 [ 635.545629][T12564] not chained 1910000 origins [ 635.550343][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 635.559006][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.569057][T12564] Call Trace: [ 635.572445][T12564] dump_stack+0x21c/0x280 [ 635.576784][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 635.582520][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 635.588594][T12564] ? kmsan_get_metadata+0x116/0x180 [ 635.593798][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 635.599619][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 635.605689][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 635.611100][T12564] ? kmsan_get_metadata+0x116/0x180 [ 635.616302][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 635.621851][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 635.627926][T12564] ? _copy_from_user+0x201/0x310 [ 635.632877][T12564] ? kmsan_get_metadata+0x116/0x180 [ 635.638081][T12564] __msan_chain_origin+0x50/0x90 [ 635.643027][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 635.648156][T12564] get_compat_msghdr+0x108/0x2b0 [ 635.653108][T12564] do_recvmmsg+0xdbb/0x22c0 [ 635.657619][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 635.663440][T12564] ? kmsan_get_metadata+0x116/0x180 [ 635.668905][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 635.674895][T12564] ? kmsan_get_metadata+0x116/0x180 [ 635.680096][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 635.685748][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 635.691044][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 635.695806][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 635.700576][T12564] __sys_recvmmsg+0x5dd/0x610 [ 635.705380][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.711462][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.717620][T12564] __do_fast_syscall_32+0x2af/0x480 [ 635.722830][T12564] do_fast_syscall_32+0x6b/0xd0 [ 635.727688][T12564] do_SYSENTER_32+0x73/0x90 [ 635.732219][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 635.738542][T12564] RIP: 0023:0xf7fc1549 [ 635.742600][T12564] Code: Bad RIP value. [ 635.746657][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 635.755068][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 635.763036][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 635.771005][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.778972][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 635.786940][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.794935][T12564] Uninit was stored to memory at: [ 635.799974][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 635.805691][T12564] __msan_chain_origin+0x50/0x90 [ 635.810622][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 635.815741][T12564] get_compat_msghdr+0x108/0x2b0 [ 635.820691][T12564] do_recvmmsg+0xdbb/0x22c0 [ 635.825195][T12564] __sys_recvmmsg+0x5dd/0x610 [ 635.829874][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.835941][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.842097][T12564] __do_fast_syscall_32+0x2af/0x480 [ 635.847296][T12564] do_fast_syscall_32+0x6b/0xd0 [ 635.852146][T12564] do_SYSENTER_32+0x73/0x90 [ 635.856656][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 635.862971][T12564] [ 635.865293][T12564] Uninit was stored to memory at: [ 635.870320][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 635.876041][T12564] __msan_chain_origin+0x50/0x90 [ 635.880981][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 635.886087][T12564] get_compat_msghdr+0x108/0x2b0 [ 635.891019][T12564] do_recvmmsg+0xdbb/0x22c0 [ 635.895518][T12564] __sys_recvmmsg+0x5dd/0x610 [ 635.900211][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.906277][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.912424][T12564] __do_fast_syscall_32+0x2af/0x480 [ 635.917616][T12564] do_fast_syscall_32+0x6b/0xd0 [ 635.922463][T12564] do_SYSENTER_32+0x73/0x90 [ 635.926974][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 635.933283][T12564] [ 635.935620][T12564] Uninit was stored to memory at: [ 635.940663][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 635.946376][T12564] __msan_chain_origin+0x50/0x90 [ 635.951313][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 635.956424][T12564] get_compat_msghdr+0x108/0x2b0 [ 635.961570][T12564] do_recvmmsg+0xdbb/0x22c0 [ 635.966073][T12564] __sys_recvmmsg+0x5dd/0x610 [ 635.970749][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 635.976817][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 635.982980][T12564] __do_fast_syscall_32+0x2af/0x480 [ 635.988182][T12564] do_fast_syscall_32+0x6b/0xd0 [ 635.993029][T12564] do_SYSENTER_32+0x73/0x90 [ 635.997530][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.003838][T12564] [ 636.006160][T12564] Uninit was stored to memory at: [ 636.011190][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 636.016906][T12564] __msan_chain_origin+0x50/0x90 [ 636.021846][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 636.026956][T12564] get_compat_msghdr+0x108/0x2b0 [ 636.031890][T12564] do_recvmmsg+0xdbb/0x22c0 [ 636.036572][T12564] __sys_recvmmsg+0x5dd/0x610 [ 636.041250][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.047317][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.053470][T12564] __do_fast_syscall_32+0x2af/0x480 [ 636.058669][T12564] do_fast_syscall_32+0x6b/0xd0 [ 636.063520][T12564] do_SYSENTER_32+0x73/0x90 [ 636.068030][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.074343][T12564] [ 636.076673][T12564] Uninit was stored to memory at: [ 636.081701][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 636.087417][T12564] __msan_chain_origin+0x50/0x90 [ 636.092354][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 636.097475][T12564] get_compat_msghdr+0x108/0x2b0 [ 636.102413][T12564] do_recvmmsg+0xdbb/0x22c0 [ 636.106916][T12564] __sys_recvmmsg+0x5dd/0x610 [ 636.111592][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.117673][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.123826][T12564] __do_fast_syscall_32+0x2af/0x480 [ 636.129023][T12564] do_fast_syscall_32+0x6b/0xd0 [ 636.133869][T12564] do_SYSENTER_32+0x73/0x90 [ 636.138371][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.144681][T12564] [ 636.146997][T12564] Uninit was stored to memory at: [ 636.152016][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 636.157735][T12564] __msan_chain_origin+0x50/0x90 [ 636.162674][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 636.167791][T12564] get_compat_msghdr+0x108/0x2b0 [ 636.172724][T12564] do_recvmmsg+0xdbb/0x22c0 [ 636.177238][T12564] __sys_recvmmsg+0x5dd/0x610 [ 636.181911][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.187974][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.194123][T12564] __do_fast_syscall_32+0x2af/0x480 [ 636.199323][T12564] do_fast_syscall_32+0x6b/0xd0 [ 636.204176][T12564] do_SYSENTER_32+0x73/0x90 [ 636.208698][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.215007][T12564] [ 636.217326][T12564] Uninit was stored to memory at: [ 636.222349][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 636.228063][T12564] __msan_chain_origin+0x50/0x90 [ 636.232999][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 636.238107][T12564] get_compat_msghdr+0x108/0x2b0 [ 636.243045][T12564] do_recvmmsg+0xdbb/0x22c0 [ 636.247539][T12564] __sys_recvmmsg+0x5dd/0x610 [ 636.252226][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.258283][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.264432][T12564] __do_fast_syscall_32+0x2af/0x480 [ 636.266131][T12560] not chained 1920000 origins [ 636.269645][T12564] do_fast_syscall_32+0x6b/0xd0 [ 636.274310][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 636.279135][T12564] do_SYSENTER_32+0x73/0x90 [ 636.288207][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.292691][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.302826][T12560] Call Trace: [ 636.309122][T12564] [ 636.312395][T12560] dump_stack+0x21c/0x280 [ 636.314692][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 636.319007][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 636.325658][T12564] do_recvmmsg+0xbf/0x22c0 [ 636.331353][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 636.335740][T12564] do_recvmmsg+0xbf/0x22c0 [ 636.341797][T12560] ? kmsan_get_metadata+0x116/0x180 [ 636.351360][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 636.357168][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 636.363224][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 636.368600][T12560] ? kmsan_get_metadata+0x116/0x180 [ 636.373809][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 636.379354][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 636.385421][T12560] ? _copy_from_user+0x201/0x310 [ 636.390358][T12560] ? kmsan_get_metadata+0x116/0x180 [ 636.395552][T12560] __msan_chain_origin+0x50/0x90 [ 636.400490][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 636.405709][T12560] get_compat_msghdr+0x108/0x2b0 [ 636.410645][T12560] do_recvmmsg+0xdbb/0x22c0 [ 636.415154][T12560] ? kmsan_get_metadata+0x116/0x180 [ 636.420358][T12560] ? kmsan_get_metadata+0x116/0x180 [ 636.425555][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 636.431441][T12560] ? kmsan_get_metadata+0x116/0x180 [ 636.436632][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 636.442263][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 636.447546][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 636.452303][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 636.457064][T12560] __sys_recvmmsg+0x5dd/0x610 [ 636.461749][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.467818][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.473964][T12560] __do_fast_syscall_32+0x2af/0x480 [ 636.479160][T12560] do_fast_syscall_32+0x6b/0xd0 [ 636.484006][T12560] do_SYSENTER_32+0x73/0x90 [ 636.488509][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.494824][T12560] RIP: 0023:0xf7fc1549 [ 636.498872][T12560] Code: Bad RIP value. [ 636.502927][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 636.511420][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 636.519380][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 636.527340][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.535301][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 636.543263][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 636.551231][T12560] Uninit was stored to memory at: [ 636.556248][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 636.561956][T12560] __msan_chain_origin+0x50/0x90 [ 636.566882][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 636.571978][T12560] get_compat_msghdr+0x108/0x2b0 [ 636.576905][T12560] do_recvmmsg+0xdbb/0x22c0 [ 636.581410][T12560] __sys_recvmmsg+0x5dd/0x610 [ 636.586082][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.592144][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.598290][T12560] __do_fast_syscall_32+0x2af/0x480 [ 636.603582][T12560] do_fast_syscall_32+0x6b/0xd0 [ 636.608422][T12560] do_SYSENTER_32+0x73/0x90 [ 636.612950][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.619258][T12560] [ 636.621572][T12560] Uninit was stored to memory at: [ 636.626588][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 636.632295][T12560] __msan_chain_origin+0x50/0x90 [ 636.637227][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 636.642338][T12560] get_compat_msghdr+0x108/0x2b0 [ 636.647266][T12560] do_recvmmsg+0xdbb/0x22c0 [ 636.651759][T12560] __sys_recvmmsg+0x5dd/0x610 [ 636.656426][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.662482][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.669058][T12560] __do_fast_syscall_32+0x2af/0x480 [ 636.674247][T12560] do_fast_syscall_32+0x6b/0xd0 [ 636.679087][T12560] do_SYSENTER_32+0x73/0x90 [ 636.683582][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.689884][T12560] [ 636.692195][T12560] Uninit was stored to memory at: [ 636.697206][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 636.703004][T12560] __msan_chain_origin+0x50/0x90 [ 636.707938][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 636.713133][T12560] get_compat_msghdr+0x108/0x2b0 [ 636.718056][T12560] do_recvmmsg+0xdbb/0x22c0 [ 636.722544][T12560] __sys_recvmmsg+0x5dd/0x610 [ 636.727209][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.733265][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.739405][T12560] __do_fast_syscall_32+0x2af/0x480 [ 636.744594][T12560] do_fast_syscall_32+0x6b/0xd0 [ 636.749433][T12560] do_SYSENTER_32+0x73/0x90 [ 636.753926][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.760229][T12560] [ 636.762539][T12560] Uninit was stored to memory at: [ 636.767639][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 636.773347][T12560] __msan_chain_origin+0x50/0x90 [ 636.778270][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 636.783370][T12560] get_compat_msghdr+0x108/0x2b0 [ 636.788294][T12560] do_recvmmsg+0xdbb/0x22c0 [ 636.792782][T12560] __sys_recvmmsg+0x5dd/0x610 [ 636.797446][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.803503][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.809644][T12560] __do_fast_syscall_32+0x2af/0x480 [ 636.814831][T12560] do_fast_syscall_32+0x6b/0xd0 [ 636.819672][T12560] do_SYSENTER_32+0x73/0x90 [ 636.824172][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.830477][T12560] [ 636.832788][T12560] Uninit was stored to memory at: [ 636.837801][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 636.843508][T12560] __msan_chain_origin+0x50/0x90 [ 636.848431][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 636.853533][T12560] get_compat_msghdr+0x108/0x2b0 [ 636.858459][T12560] do_recvmmsg+0xdbb/0x22c0 [ 636.862953][T12560] __sys_recvmmsg+0x5dd/0x610 [ 636.867623][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.873684][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.879829][T12560] __do_fast_syscall_32+0x2af/0x480 [ 636.885019][T12560] do_fast_syscall_32+0x6b/0xd0 [ 636.889855][T12560] do_SYSENTER_32+0x73/0x90 [ 636.894350][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.900655][T12560] [ 636.902973][T12560] Uninit was stored to memory at: [ 636.907991][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 636.913699][T12560] __msan_chain_origin+0x50/0x90 [ 636.918643][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 636.923746][T12560] get_compat_msghdr+0x108/0x2b0 [ 636.928672][T12560] do_recvmmsg+0xdbb/0x22c0 [ 636.933164][T12560] __sys_recvmmsg+0x5dd/0x610 [ 636.937829][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 636.943885][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 636.950042][T12560] __do_fast_syscall_32+0x2af/0x480 [ 636.955233][T12560] do_fast_syscall_32+0x6b/0xd0 [ 636.960074][T12560] do_SYSENTER_32+0x73/0x90 [ 636.964568][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 636.970872][T12560] [ 636.973182][T12560] Uninit was stored to memory at: [ 636.978192][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 636.983898][T12560] __msan_chain_origin+0x50/0x90 [ 636.988826][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 636.994045][T12560] get_compat_msghdr+0x108/0x2b0 [ 636.998996][T12560] do_recvmmsg+0xdbb/0x22c0 [ 637.003489][T12560] __sys_recvmmsg+0x5dd/0x610 [ 637.008151][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 637.014205][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 637.020345][T12560] __do_fast_syscall_32+0x2af/0x480 [ 637.025530][T12560] do_fast_syscall_32+0x6b/0xd0 [ 637.030366][T12560] do_SYSENTER_32+0x73/0x90 [ 637.034859][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 637.041250][T12560] [ 637.043566][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 637.050227][T12560] do_recvmmsg+0xbf/0x22c0 [ 637.054633][T12560] do_recvmmsg+0xbf/0x22c0 [ 637.378158][T12564] not chained 1930000 origins [ 637.382913][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 637.391582][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.401631][T12564] Call Trace: [ 637.404938][T12564] dump_stack+0x21c/0x280 [ 637.409279][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 637.415005][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 637.421078][T12564] ? kmsan_get_metadata+0x116/0x180 [ 637.426285][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 637.432097][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 637.438173][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 637.443556][T12564] ? kmsan_get_metadata+0x116/0x180 [ 637.448754][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 637.454307][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 637.460382][T12564] ? _copy_from_user+0x201/0x310 [ 637.465321][T12564] ? kmsan_get_metadata+0x116/0x180 [ 637.470526][T12564] __msan_chain_origin+0x50/0x90 [ 637.475470][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 637.480598][T12564] get_compat_msghdr+0x108/0x2b0 [ 637.485545][T12564] do_recvmmsg+0xdbb/0x22c0 [ 637.490063][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 637.495883][T12564] ? kmsan_get_metadata+0x116/0x180 [ 637.501104][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 637.507000][T12564] ? kmsan_get_metadata+0x116/0x180 [ 637.512302][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 637.517939][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 637.523227][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 637.527989][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 637.532752][T12564] __sys_recvmmsg+0x5dd/0x610 [ 637.537444][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 637.543520][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 637.549678][T12564] __do_fast_syscall_32+0x2af/0x480 [ 637.554884][T12564] do_fast_syscall_32+0x6b/0xd0 [ 637.559746][T12564] do_SYSENTER_32+0x73/0x90 [ 637.564253][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 637.570572][T12564] RIP: 0023:0xf7fc1549 [ 637.574628][T12564] Code: Bad RIP value. [ 637.578689][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 637.587193][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 637.588584][T12560] not chained 1940000 origins [ 637.595169][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 637.607766][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.615730][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 637.623728][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.631700][T12564] Uninit was stored to memory at: [ 637.631715][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 637.631733][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.636744][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 637.645463][T12560] Call Trace: [ 637.655512][T12564] __msan_chain_origin+0x50/0x90 [ 637.661207][T12560] dump_stack+0x21c/0x280 [ 637.664471][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 637.669382][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 637.673686][T12564] get_compat_msghdr+0x108/0x2b0 [ 637.678774][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 637.684468][T12564] do_recvmmsg+0xdbb/0x22c0 [ 637.689384][T12560] ? kmsan_get_metadata+0x116/0x180 [ 637.695431][T12564] __sys_recvmmsg+0x5dd/0x610 [ 637.699912][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 637.705084][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 637.709735][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 637.715517][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 637.721557][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 637.727597][T12564] __do_fast_syscall_32+0x2af/0x480 [ 637.733727][T12560] ? kmsan_get_metadata+0x116/0x180 [ 637.739075][T12564] do_fast_syscall_32+0x6b/0xd0 [ 637.744246][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 637.749419][T12564] do_SYSENTER_32+0x73/0x90 [ 637.754270][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 637.759799][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 637.764278][T12560] ? _copy_from_user+0x201/0x310 [ 637.770305][T12564] [ 637.776620][T12560] ? kmsan_get_metadata+0x116/0x180 [ 637.781524][T12564] Uninit was stored to memory at: [ 637.783841][T12560] __msan_chain_origin+0x50/0x90 [ 637.789019][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 637.794027][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 637.798936][T12564] __msan_chain_origin+0x50/0x90 [ 637.804633][T12560] get_compat_msghdr+0x108/0x2b0 [ 637.809710][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 637.814624][T12560] do_recvmmsg+0xdbb/0x22c0 [ 637.819544][T12564] get_compat_msghdr+0x108/0x2b0 [ 637.824635][T12560] ? kmsan_get_metadata+0x116/0x180 [ 637.829103][T12564] do_recvmmsg+0xdbb/0x22c0 [ 637.834019][T12560] ? kmsan_get_metadata+0x116/0x180 [ 637.839190][T12564] __sys_recvmmsg+0x5dd/0x610 [ 637.843672][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 637.848846][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 637.853502][T12560] ? kmsan_get_metadata+0x116/0x180 [ 637.859369][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 637.865408][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 637.870579][T12564] __do_fast_syscall_32+0x2af/0x480 [ 637.876706][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 637.882315][T12564] do_fast_syscall_32+0x6b/0xd0 [ 637.887488][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 637.892741][T12564] do_SYSENTER_32+0x73/0x90 [ 637.897581][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 637.902332][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 637.906899][T12560] __sys_recvmmsg+0x5dd/0x610 [ 637.911624][T12564] [ 637.917949][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 637.922582][T12564] Uninit was stored to memory at: [ 637.924903][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 637.930943][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 637.935944][T12560] __do_fast_syscall_32+0x2af/0x480 [ 637.942068][T12564] __msan_chain_origin+0x50/0x90 [ 637.947765][T12560] do_fast_syscall_32+0x6b/0xd0 [ 637.952934][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 637.957842][T12560] do_SYSENTER_32+0x73/0x90 [ 637.962665][T12564] get_compat_msghdr+0x108/0x2b0 [ 637.967752][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 637.972226][T12564] do_recvmmsg+0xdbb/0x22c0 [ 637.977135][T12560] RIP: 0023:0xf7fc1549 [ 637.983435][T12564] __sys_recvmmsg+0x5dd/0x610 [ 637.987921][T12560] Code: Bad RIP value. [ 637.992005][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 637.996736][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 638.000788][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.006821][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 638.015227][T12564] __do_fast_syscall_32+0x2af/0x480 [ 638.021346][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 638.029298][T12564] do_fast_syscall_32+0x6b/0xd0 [ 638.034473][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.042424][T12564] do_SYSENTER_32+0x73/0x90 [ 638.047244][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 638.055199][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.059669][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.067612][T12564] [ 638.073918][T12560] Uninit was stored to memory at: [ 638.081950][T12564] Uninit was stored to memory at: [ 638.084268][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 638.089267][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 638.094266][T12560] __msan_chain_origin+0x50/0x90 [ 638.099972][T12564] __msan_chain_origin+0x50/0x90 [ 638.105661][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 638.110570][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 638.115484][T12560] get_compat_msghdr+0x108/0x2b0 [ 638.120570][T12564] get_compat_msghdr+0x108/0x2b0 [ 638.125653][T12560] do_recvmmsg+0xdbb/0x22c0 [ 638.130564][T12564] do_recvmmsg+0xdbb/0x22c0 [ 638.135477][T12560] __sys_recvmmsg+0x5dd/0x610 [ 638.139958][T12564] __sys_recvmmsg+0x5dd/0x610 [ 638.144436][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.149087][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.153739][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.159779][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.165818][T12560] __do_fast_syscall_32+0x2af/0x480 [ 638.171943][T12564] __do_fast_syscall_32+0x2af/0x480 [ 638.178072][T12560] do_fast_syscall_32+0x6b/0xd0 [ 638.183242][T12564] do_fast_syscall_32+0x6b/0xd0 [ 638.188415][T12560] do_SYSENTER_32+0x73/0x90 [ 638.193238][T12564] do_SYSENTER_32+0x73/0x90 [ 638.198061][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.202536][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.207011][T12560] [ 638.213312][T12564] [ 638.219620][T12560] Uninit was stored to memory at: [ 638.221942][T12564] Uninit was stored to memory at: [ 638.224262][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 638.229260][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 638.234269][T12560] __msan_chain_origin+0x50/0x90 [ 638.239963][T12564] __msan_chain_origin+0x50/0x90 [ 638.245654][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 638.250564][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 638.255480][T12560] get_compat_msghdr+0x108/0x2b0 [ 638.260565][T12564] get_compat_msghdr+0x108/0x2b0 [ 638.265646][T12560] do_recvmmsg+0xdbb/0x22c0 [ 638.270556][T12564] do_recvmmsg+0xdbb/0x22c0 [ 638.275470][T12560] __sys_recvmmsg+0x5dd/0x610 [ 638.279952][T12564] __sys_recvmmsg+0x5dd/0x610 [ 638.284425][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.289070][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.293723][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.299764][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.305805][T12560] __do_fast_syscall_32+0x2af/0x480 [ 638.311930][T12564] __do_fast_syscall_32+0x2af/0x480 [ 638.318053][T12560] do_fast_syscall_32+0x6b/0xd0 [ 638.323224][T12564] do_fast_syscall_32+0x6b/0xd0 [ 638.328394][T12560] do_SYSENTER_32+0x73/0x90 [ 638.333219][T12564] do_SYSENTER_32+0x73/0x90 [ 638.338041][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.342516][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.346979][T12560] [ 638.353277][T12564] [ 638.359587][T12560] Uninit was stored to memory at: [ 638.361884][T12564] Uninit was stored to memory at: [ 638.364199][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 638.369196][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 638.374209][T12560] __msan_chain_origin+0x50/0x90 [ 638.379901][T12564] __msan_chain_origin+0x50/0x90 [ 638.385613][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 638.390543][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 638.395455][T12560] get_compat_msghdr+0x108/0x2b0 [ 638.400544][T12564] get_compat_msghdr+0x108/0x2b0 [ 638.405632][T12560] do_recvmmsg+0xdbb/0x22c0 [ 638.410545][T12564] do_recvmmsg+0xdbb/0x22c0 [ 638.415458][T12560] __sys_recvmmsg+0x5dd/0x610 [ 638.419944][T12564] __sys_recvmmsg+0x5dd/0x610 [ 638.424427][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.429079][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.433732][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.439775][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.445824][T12560] __do_fast_syscall_32+0x2af/0x480 [ 638.451953][T12564] __do_fast_syscall_32+0x2af/0x480 [ 638.458083][T12560] do_fast_syscall_32+0x6b/0xd0 [ 638.463255][T12564] do_fast_syscall_32+0x6b/0xd0 [ 638.468426][T12560] do_SYSENTER_32+0x73/0x90 [ 638.473251][T12564] do_SYSENTER_32+0x73/0x90 [ 638.478080][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.482555][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.487040][T12560] [ 638.493339][T12564] [ 638.499649][T12560] Uninit was stored to memory at: [ 638.501955][T12564] Uninit was stored to memory at: [ 638.504271][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 638.509275][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 638.514273][T12560] __msan_chain_origin+0x50/0x90 [ 638.519978][T12564] __msan_chain_origin+0x50/0x90 [ 638.525682][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 638.530596][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 638.535508][T12560] get_compat_msghdr+0x108/0x2b0 [ 638.540593][T12564] get_compat_msghdr+0x108/0x2b0 [ 638.546372][T12560] do_recvmmsg+0xdbb/0x22c0 [ 638.551280][T12564] do_recvmmsg+0xdbb/0x22c0 [ 638.556190][T12560] __sys_recvmmsg+0x5dd/0x610 [ 638.560679][T12564] __sys_recvmmsg+0x5dd/0x610 [ 638.565156][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.569808][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.574460][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.580517][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.586563][T12560] __do_fast_syscall_32+0x2af/0x480 [ 638.592694][T12564] __do_fast_syscall_32+0x2af/0x480 [ 638.598824][T12560] do_fast_syscall_32+0x6b/0xd0 [ 638.603999][T12564] do_fast_syscall_32+0x6b/0xd0 [ 638.609187][T12560] do_SYSENTER_32+0x73/0x90 [ 638.614013][T12564] do_SYSENTER_32+0x73/0x90 [ 638.618843][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.623327][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.627787][T12560] [ 638.634088][T12564] [ 638.640391][T12560] Uninit was stored to memory at: [ 638.642699][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 638.645016][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 638.650015][T12564] do_recvmmsg+0xbf/0x22c0 [ 638.656662][T12560] __msan_chain_origin+0x50/0x90 [ 638.662353][T12564] do_recvmmsg+0xbf/0x22c0 [ 638.666749][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 638.681231][T12560] get_compat_msghdr+0x108/0x2b0 [ 638.686198][T12560] do_recvmmsg+0xdbb/0x22c0 [ 638.690702][T12560] __sys_recvmmsg+0x5dd/0x610 [ 638.695384][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.701453][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.707624][T12560] __do_fast_syscall_32+0x2af/0x480 [ 638.713947][T12560] do_fast_syscall_32+0x6b/0xd0 [ 638.718789][T12560] do_SYSENTER_32+0x73/0x90 [ 638.723287][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.729592][T12560] [ 638.731903][T12560] Uninit was stored to memory at: [ 638.736915][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 638.742621][T12560] __msan_chain_origin+0x50/0x90 [ 638.747548][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 638.752646][T12560] get_compat_msghdr+0x108/0x2b0 [ 638.757575][T12560] do_recvmmsg+0xdbb/0x22c0 [ 638.762065][T12560] __sys_recvmmsg+0x5dd/0x610 [ 638.766730][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.772800][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.778945][T12560] __do_fast_syscall_32+0x2af/0x480 [ 638.784134][T12560] do_fast_syscall_32+0x6b/0xd0 [ 638.788973][T12560] do_SYSENTER_32+0x73/0x90 [ 638.793469][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.799775][T12560] [ 638.802088][T12560] Uninit was stored to memory at: [ 638.807099][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 638.812802][T12560] __msan_chain_origin+0x50/0x90 [ 638.817729][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 638.822829][T12560] get_compat_msghdr+0x108/0x2b0 [ 638.827750][T12560] do_recvmmsg+0xdbb/0x22c0 [ 638.832241][T12560] __sys_recvmmsg+0x5dd/0x610 [ 638.836906][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 638.842965][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 638.849107][T12560] __do_fast_syscall_32+0x2af/0x480 [ 638.854296][T12560] do_fast_syscall_32+0x6b/0xd0 [ 638.859136][T12560] do_SYSENTER_32+0x73/0x90 [ 638.863630][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 638.869934][T12560] [ 638.872245][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 638.878908][T12560] do_recvmmsg+0xbf/0x22c0 [ 638.883311][T12560] do_recvmmsg+0xbf/0x22c0 [ 639.153736][T12564] not chained 1950000 origins [ 639.158445][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 639.167108][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.177154][T12564] Call Trace: [ 639.180449][T12564] dump_stack+0x21c/0x280 [ 639.184793][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 639.190514][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 639.196586][T12564] ? kmsan_get_metadata+0x116/0x180 [ 639.201785][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 639.207595][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 639.213662][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 639.219039][T12564] ? kmsan_get_metadata+0x116/0x180 [ 639.224239][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 639.229792][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 639.235866][T12564] ? _copy_from_user+0x201/0x310 [ 639.240808][T12564] ? kmsan_get_metadata+0x116/0x180 [ 639.246007][T12564] __msan_chain_origin+0x50/0x90 [ 639.250951][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 639.256081][T12564] get_compat_msghdr+0x108/0x2b0 [ 639.261031][T12564] do_recvmmsg+0xdbb/0x22c0 [ 639.265543][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 639.271363][T12564] ? kmsan_get_metadata+0x116/0x180 [ 639.276570][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 639.282469][T12564] ? kmsan_get_metadata+0x116/0x180 [ 639.287668][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 639.293307][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 639.298597][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 639.303363][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 639.308128][T12564] __sys_recvmmsg+0x5dd/0x610 [ 639.312821][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 639.318910][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 639.325071][T12564] __do_fast_syscall_32+0x2af/0x480 [ 639.330285][T12564] do_fast_syscall_32+0x6b/0xd0 [ 639.335140][T12564] do_SYSENTER_32+0x73/0x90 [ 639.339647][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 639.345968][T12564] RIP: 0023:0xf7fc1549 [ 639.350026][T12564] Code: Bad RIP value. [ 639.354088][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 639.361338][T12560] not chained 1960000 origins [ 639.362499][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 639.375095][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 639.383050][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 639.391021][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 639.398974][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 639.406933][T12564] Uninit was stored to memory at: [ 639.406946][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 639.406960][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.411984][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 639.420636][T12560] Call Trace: [ 639.430682][T12564] __msan_chain_origin+0x50/0x90 [ 639.436377][T12560] dump_stack+0x21c/0x280 [ 639.439664][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 639.444585][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 639.448889][T12564] get_compat_msghdr+0x108/0x2b0 [ 639.453975][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 639.459664][T12564] do_recvmmsg+0xdbb/0x22c0 [ 639.464580][T12560] ? kmsan_get_metadata+0x116/0x180 [ 639.470618][T12564] __sys_recvmmsg+0x5dd/0x610 [ 639.475100][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 639.480275][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 639.484929][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 639.490709][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 639.496755][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 639.502798][T12564] __do_fast_syscall_32+0x2af/0x480 [ 639.508923][T12560] ? kmsan_get_metadata+0x116/0x180 [ 639.514270][T12564] do_fast_syscall_32+0x6b/0xd0 [ 639.519446][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 639.524627][T12564] do_SYSENTER_32+0x73/0x90 [ 639.529453][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 639.534971][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 639.539449][T12560] ? _copy_from_user+0x201/0x310 [ 639.545493][T12564] [ 639.551808][T12560] ? kmsan_get_metadata+0x116/0x180 [ 639.556705][T12564] Uninit was stored to memory at: [ 639.559024][T12560] __msan_chain_origin+0x50/0x90 [ 639.564194][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 639.569205][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 639.574112][T12564] __msan_chain_origin+0x50/0x90 [ 639.579812][T12560] get_compat_msghdr+0x108/0x2b0 [ 639.584918][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 639.589827][T12560] do_recvmmsg+0xdbb/0x22c0 [ 639.594740][T12564] get_compat_msghdr+0x108/0x2b0 [ 639.599838][T12560] ? kmsan_get_metadata+0x116/0x180 [ 639.604319][T12564] do_recvmmsg+0xdbb/0x22c0 [ 639.609249][T12560] ? kmsan_get_metadata+0x116/0x180 [ 639.614419][T12564] __sys_recvmmsg+0x5dd/0x610 [ 639.618900][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 639.624072][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 639.628722][T12560] ? kmsan_get_metadata+0x116/0x180 [ 639.634593][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 639.640633][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 639.645809][T12564] __do_fast_syscall_32+0x2af/0x480 [ 639.651939][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 639.657553][T12564] do_fast_syscall_32+0x6b/0xd0 [ 639.662725][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 639.667985][T12564] do_SYSENTER_32+0x73/0x90 [ 639.672812][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 639.677553][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 639.682028][T12560] __sys_recvmmsg+0x5dd/0x610 [ 639.686757][T12564] [ 639.693253][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 639.697889][T12564] Uninit was stored to memory at: [ 639.700209][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 639.706244][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 639.711249][T12560] __do_fast_syscall_32+0x2af/0x480 [ 639.717473][T12564] __msan_chain_origin+0x50/0x90 [ 639.723170][T12560] do_fast_syscall_32+0x6b/0xd0 [ 639.728338][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 639.733250][T12560] do_SYSENTER_32+0x73/0x90 [ 639.738073][T12564] get_compat_msghdr+0x108/0x2b0 [ 639.743163][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 639.747645][T12564] do_recvmmsg+0xdbb/0x22c0 [ 639.752552][T12560] RIP: 0023:0xf7fc1549 [ 639.758850][T12564] __sys_recvmmsg+0x5dd/0x610 [ 639.763317][T12560] Code: Bad RIP value. [ 639.767386][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 639.772032][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 639.776087][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 639.782119][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 639.790505][T12564] __do_fast_syscall_32+0x2af/0x480 [ 639.796623][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 639.804578][T12564] do_fast_syscall_32+0x6b/0xd0 [ 639.809742][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 639.817696][T12564] do_SYSENTER_32+0x73/0x90 [ 639.822515][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 639.830470][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 639.834941][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 639.842889][T12564] [ 639.849197][T12560] Uninit was stored to memory at: [ 639.857145][T12564] Uninit was stored to memory at: [ 639.859475][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 639.865169][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 639.870173][T12560] __msan_chain_origin+0x50/0x90 [ 639.875864][T12564] __msan_chain_origin+0x50/0x90 [ 639.881561][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 639.886469][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 639.891381][T12560] get_compat_msghdr+0x108/0x2b0 [ 639.896464][T12564] get_compat_msghdr+0x108/0x2b0 [ 639.901553][T12560] do_recvmmsg+0xdbb/0x22c0 [ 639.906462][T12564] do_recvmmsg+0xdbb/0x22c0 [ 639.911372][T12560] __sys_recvmmsg+0x5dd/0x610 [ 639.915862][T12564] __sys_recvmmsg+0x5dd/0x610 [ 639.920340][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 639.924992][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 639.929641][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 639.935696][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 639.941740][T12560] __do_fast_syscall_32+0x2af/0x480 [ 639.947995][T12564] __do_fast_syscall_32+0x2af/0x480 [ 639.954124][T12560] do_fast_syscall_32+0x6b/0xd0 [ 639.959297][T12564] do_fast_syscall_32+0x6b/0xd0 [ 639.964470][T12560] do_SYSENTER_32+0x73/0x90 [ 639.969295][T12564] do_SYSENTER_32+0x73/0x90 [ 639.974123][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 639.978597][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 639.983064][T12560] [ 639.989361][T12564] [ 639.995660][T12560] Uninit was stored to memory at: [ 639.997963][T12564] Uninit was stored to memory at: [ 640.000282][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 640.005281][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 640.010277][T12560] __msan_chain_origin+0x50/0x90 [ 640.015969][T12564] __msan_chain_origin+0x50/0x90 [ 640.021679][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 640.026591][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 640.031501][T12560] get_compat_msghdr+0x108/0x2b0 [ 640.036585][T12564] get_compat_msghdr+0x108/0x2b0 [ 640.041669][T12560] do_recvmmsg+0xdbb/0x22c0 [ 640.046579][T12564] do_recvmmsg+0xdbb/0x22c0 [ 640.051493][T12560] __sys_recvmmsg+0x5dd/0x610 [ 640.055969][T12564] __sys_recvmmsg+0x5dd/0x610 [ 640.060451][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.065102][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.069751][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.075795][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.081835][T12560] __do_fast_syscall_32+0x2af/0x480 [ 640.087959][T12564] __do_fast_syscall_32+0x2af/0x480 [ 640.094108][T12560] do_fast_syscall_32+0x6b/0xd0 [ 640.099280][T12564] do_fast_syscall_32+0x6b/0xd0 [ 640.104453][T12560] do_SYSENTER_32+0x73/0x90 [ 640.109280][T12564] do_SYSENTER_32+0x73/0x90 [ 640.114122][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.118598][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.123065][T12560] [ 640.129366][T12564] [ 640.135665][T12560] Uninit was stored to memory at: [ 640.137971][T12564] Uninit was stored to memory at: [ 640.140287][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 640.145286][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 640.150282][T12560] __msan_chain_origin+0x50/0x90 [ 640.155978][T12564] __msan_chain_origin+0x50/0x90 [ 640.161670][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 640.166581][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 640.171492][T12560] get_compat_msghdr+0x108/0x2b0 [ 640.176579][T12564] get_compat_msghdr+0x108/0x2b0 [ 640.181661][T12560] do_recvmmsg+0xdbb/0x22c0 [ 640.186575][T12564] do_recvmmsg+0xdbb/0x22c0 [ 640.191485][T12560] __sys_recvmmsg+0x5dd/0x610 [ 640.195962][T12564] __sys_recvmmsg+0x5dd/0x610 [ 640.200444][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.205094][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.209746][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.215785][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.221824][T12560] __do_fast_syscall_32+0x2af/0x480 [ 640.227966][T12564] __do_fast_syscall_32+0x2af/0x480 [ 640.234093][T12560] do_fast_syscall_32+0x6b/0xd0 [ 640.239265][T12564] do_fast_syscall_32+0x6b/0xd0 [ 640.244438][T12560] do_SYSENTER_32+0x73/0x90 [ 640.249262][T12564] do_SYSENTER_32+0x73/0x90 [ 640.254199][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.258680][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.263145][T12560] [ 640.269444][T12564] [ 640.275758][T12560] Uninit was stored to memory at: [ 640.278064][T12564] Uninit was stored to memory at: [ 640.280379][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 640.285378][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 640.290376][T12560] __msan_chain_origin+0x50/0x90 [ 640.296064][T12564] __msan_chain_origin+0x50/0x90 [ 640.301756][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 640.306666][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 640.311576][T12560] get_compat_msghdr+0x108/0x2b0 [ 640.316659][T12564] get_compat_msghdr+0x108/0x2b0 [ 640.321744][T12560] do_recvmmsg+0xdbb/0x22c0 [ 640.326661][T12564] do_recvmmsg+0xdbb/0x22c0 [ 640.331567][T12560] __sys_recvmmsg+0x5dd/0x610 [ 640.336044][T12564] __sys_recvmmsg+0x5dd/0x610 [ 640.340523][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.345173][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.349826][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.355867][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.361908][T12560] __do_fast_syscall_32+0x2af/0x480 [ 640.368035][T12564] __do_fast_syscall_32+0x2af/0x480 [ 640.374170][T12560] do_fast_syscall_32+0x6b/0xd0 [ 640.379339][T12564] do_fast_syscall_32+0x6b/0xd0 [ 640.384511][T12560] do_SYSENTER_32+0x73/0x90 [ 640.389338][T12564] do_SYSENTER_32+0x73/0x90 [ 640.394423][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.398913][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.403380][T12560] [ 640.409808][T12564] [ 640.416117][T12560] Uninit was stored to memory at: [ 640.418428][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 640.420745][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 640.425743][T12564] do_recvmmsg+0xbf/0x22c0 [ 640.432390][T12560] __msan_chain_origin+0x50/0x90 [ 640.438081][T12564] do_recvmmsg+0xbf/0x22c0 [ 640.442484][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 640.456963][T12560] get_compat_msghdr+0x108/0x2b0 [ 640.461928][T12560] do_recvmmsg+0xdbb/0x22c0 [ 640.466435][T12560] __sys_recvmmsg+0x5dd/0x610 [ 640.471115][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.477182][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.483344][T12560] __do_fast_syscall_32+0x2af/0x480 [ 640.488540][T12560] do_fast_syscall_32+0x6b/0xd0 [ 640.493379][T12560] do_SYSENTER_32+0x73/0x90 [ 640.497871][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.504214][T12560] [ 640.506526][T12560] Uninit was stored to memory at: [ 640.511540][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 640.517368][T12560] __msan_chain_origin+0x50/0x90 [ 640.522297][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 640.527399][T12560] get_compat_msghdr+0x108/0x2b0 [ 640.532322][T12560] do_recvmmsg+0xdbb/0x22c0 [ 640.536815][T12560] __sys_recvmmsg+0x5dd/0x610 [ 640.541483][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.547538][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.553681][T12560] __do_fast_syscall_32+0x2af/0x480 [ 640.558867][T12560] do_fast_syscall_32+0x6b/0xd0 [ 640.563706][T12560] do_SYSENTER_32+0x73/0x90 [ 640.568197][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.574588][T12560] [ 640.576897][T12560] Uninit was stored to memory at: [ 640.581926][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 640.587641][T12560] __msan_chain_origin+0x50/0x90 [ 640.592573][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 640.597685][T12560] get_compat_msghdr+0x108/0x2b0 [ 640.602611][T12560] do_recvmmsg+0xdbb/0x22c0 [ 640.607122][T12560] __sys_recvmmsg+0x5dd/0x610 [ 640.611807][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 640.617866][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 640.624008][T12560] __do_fast_syscall_32+0x2af/0x480 [ 640.629197][T12560] do_fast_syscall_32+0x6b/0xd0 [ 640.634038][T12560] do_SYSENTER_32+0x73/0x90 [ 640.638558][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 640.644863][T12560] [ 640.647178][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 640.653840][T12560] do_recvmmsg+0xbf/0x22c0 [ 640.658247][T12560] do_recvmmsg+0xbf/0x22c0 [ 640.955568][T12560] not chained 1970000 origins [ 640.960273][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 640.968938][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.978976][T12560] Call Trace: [ 640.982263][T12560] dump_stack+0x21c/0x280 [ 640.986589][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 640.992298][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 640.998358][T12560] ? kmsan_get_metadata+0x116/0x180 [ 641.003548][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 641.009345][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 641.015403][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 641.020773][T12560] ? kmsan_get_metadata+0x116/0x180 [ 641.025961][T12560] ? kmsan_get_metadata+0x116/0x180 [ 641.031151][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 641.036686][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 641.042745][T12560] ? _copy_from_user+0x201/0x310 [ 641.047673][T12560] ? kmsan_get_metadata+0x116/0x180 [ 641.052858][T12560] __msan_chain_origin+0x50/0x90 [ 641.057790][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 641.062900][T12560] get_compat_msghdr+0x108/0x2b0 [ 641.067850][T12560] do_recvmmsg+0xdbb/0x22c0 [ 641.072616][T12560] ? kmsan_get_metadata+0x116/0x180 [ 641.077803][T12560] ? kmsan_get_metadata+0x116/0x180 [ 641.082999][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 641.088894][T12560] ? kmsan_get_metadata+0x116/0x180 [ 641.094085][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 641.099708][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 641.104985][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 641.109735][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 641.114497][T12560] __sys_recvmmsg+0x5dd/0x610 [ 641.119182][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 641.125251][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 641.131612][T12560] __do_fast_syscall_32+0x2af/0x480 [ 641.136809][T12560] do_fast_syscall_32+0x6b/0xd0 [ 641.141653][T12560] do_SYSENTER_32+0x73/0x90 [ 641.146152][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 641.152462][T12560] RIP: 0023:0xf7fc1549 [ 641.156507][T12560] Code: Bad RIP value. [ 641.160561][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 641.168960][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 641.176918][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 641.184876][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.192838][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 641.200798][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.208775][T12560] Uninit was stored to memory at: [ 641.213790][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 641.219497][T12560] __msan_chain_origin+0x50/0x90 [ 641.224422][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 641.229518][T12560] get_compat_msghdr+0x108/0x2b0 [ 641.234443][T12560] do_recvmmsg+0xdbb/0x22c0 [ 641.238934][T12560] __sys_recvmmsg+0x5dd/0x610 [ 641.243604][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 641.249659][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 641.255811][T12560] __do_fast_syscall_32+0x2af/0x480 [ 641.260998][T12560] do_fast_syscall_32+0x6b/0xd0 [ 641.265861][T12560] do_SYSENTER_32+0x73/0x90 [ 641.270354][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 641.276658][T12560] [ 641.278972][T12560] Uninit was stored to memory at: [ 641.283985][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 641.289691][T12560] __msan_chain_origin+0x50/0x90 [ 641.294615][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 641.299815][T12560] get_compat_msghdr+0x108/0x2b0 [ 641.304739][T12560] do_recvmmsg+0xdbb/0x22c0 [ 641.309230][T12560] __sys_recvmmsg+0x5dd/0x610 [ 641.313897][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 641.319961][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 641.326137][T12560] __do_fast_syscall_32+0x2af/0x480 [ 641.331323][T12560] do_fast_syscall_32+0x6b/0xd0 [ 641.336163][T12560] do_SYSENTER_32+0x73/0x90 [ 641.340654][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 641.346968][T12560] [ 641.349289][T12560] Uninit was stored to memory at: [ 641.354318][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 641.360030][T12560] __msan_chain_origin+0x50/0x90 [ 641.365318][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 641.370419][T12560] get_compat_msghdr+0x108/0x2b0 [ 641.375356][T12560] do_recvmmsg+0xdbb/0x22c0 [ 641.379859][T12560] __sys_recvmmsg+0x5dd/0x610 [ 641.384531][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 641.390589][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 641.396739][T12560] __do_fast_syscall_32+0x2af/0x480 [ 641.401932][T12560] do_fast_syscall_32+0x6b/0xd0 [ 641.406795][T12560] do_SYSENTER_32+0x73/0x90 [ 641.411290][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 641.417595][T12560] [ 641.419908][T12560] Uninit was stored to memory at: [ 641.424928][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 641.430638][T12560] __msan_chain_origin+0x50/0x90 [ 641.435567][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 641.440670][T12560] get_compat_msghdr+0x108/0x2b0 [ 641.445598][T12560] do_recvmmsg+0xdbb/0x22c0 [ 641.450090][T12560] __sys_recvmmsg+0x5dd/0x610 [ 641.454760][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 641.460815][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 641.466958][T12560] __do_fast_syscall_32+0x2af/0x480 [ 641.472143][T12560] do_fast_syscall_32+0x6b/0xd0 [ 641.476980][T12560] do_SYSENTER_32+0x73/0x90 [ 641.481470][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 641.487773][T12560] [ 641.490086][T12560] Uninit was stored to memory at: [ 641.495108][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 641.500832][T12560] __msan_chain_origin+0x50/0x90 [ 641.505762][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 641.510864][T12560] get_compat_msghdr+0x108/0x2b0 [ 641.515785][T12560] do_recvmmsg+0xdbb/0x22c0 [ 641.520273][T12560] __sys_recvmmsg+0x5dd/0x610 [ 641.524956][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 641.531102][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 641.537244][T12560] __do_fast_syscall_32+0x2af/0x480 [ 641.542428][T12560] do_fast_syscall_32+0x6b/0xd0 [ 641.547280][T12560] do_SYSENTER_32+0x73/0x90 [ 641.551772][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 641.558075][T12560] [ 641.560399][T12560] Uninit was stored to memory at: [ 641.565412][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 641.571202][T12560] __msan_chain_origin+0x50/0x90 [ 641.576146][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 641.581249][T12560] get_compat_msghdr+0x108/0x2b0 [ 641.586181][T12560] do_recvmmsg+0xdbb/0x22c0 [ 641.590677][T12560] __sys_recvmmsg+0x5dd/0x610 [ 641.595349][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 641.601407][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 641.607556][T12560] __do_fast_syscall_32+0x2af/0x480 [ 641.612747][T12560] do_fast_syscall_32+0x6b/0xd0 [ 641.617587][T12560] do_SYSENTER_32+0x73/0x90 [ 641.622084][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 641.628392][T12560] [ 641.630704][T12560] Uninit was stored to memory at: [ 641.635729][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 641.641438][T12560] __msan_chain_origin+0x50/0x90 [ 641.646368][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 641.651486][T12560] get_compat_msghdr+0x108/0x2b0 [ 641.656411][T12560] do_recvmmsg+0xdbb/0x22c0 [ 641.660900][T12560] __sys_recvmmsg+0x5dd/0x610 [ 641.665569][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 641.671624][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 641.677768][T12560] __do_fast_syscall_32+0x2af/0x480 [ 641.682980][T12560] do_fast_syscall_32+0x6b/0xd0 [ 641.687822][T12560] do_SYSENTER_32+0x73/0x90 [ 641.692315][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 641.698617][T12560] [ 641.700932][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 641.707593][T12560] do_recvmmsg+0xbf/0x22c0 [ 641.712001][T12560] do_recvmmsg+0xbf/0x22c0 [ 641.978398][T12560] not chained 1980000 origins [ 641.983111][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 641.991774][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.001822][T12560] Call Trace: [ 642.005119][T12560] dump_stack+0x21c/0x280 [ 642.009467][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 642.015191][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 642.021262][T12560] ? kmsan_get_metadata+0x116/0x180 [ 642.026463][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 642.032272][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 642.038338][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 642.043722][T12560] ? kmsan_get_metadata+0x116/0x180 [ 642.048955][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 642.054503][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 642.060569][T12560] ? _copy_from_user+0x201/0x310 [ 642.065499][T12560] ? kmsan_get_metadata+0x116/0x180 [ 642.070777][T12560] __msan_chain_origin+0x50/0x90 [ 642.075711][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 642.080825][T12560] get_compat_msghdr+0x108/0x2b0 [ 642.085762][T12560] do_recvmmsg+0xdbb/0x22c0 [ 642.090263][T12560] ? kmsan_get_metadata+0x116/0x180 [ 642.095475][T12560] ? kmsan_get_metadata+0x116/0x180 [ 642.100667][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 642.106553][T12560] ? kmsan_get_metadata+0x116/0x180 [ 642.111876][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 642.117497][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 642.122885][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 642.127652][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 642.132410][T12560] __sys_recvmmsg+0x5dd/0x610 [ 642.137090][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 642.143157][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 642.149309][T12560] __do_fast_syscall_32+0x2af/0x480 [ 642.154592][T12560] do_fast_syscall_32+0x6b/0xd0 [ 642.159455][T12560] do_SYSENTER_32+0x73/0x90 [ 642.163952][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 642.170277][T12560] RIP: 0023:0xf7fc1549 [ 642.174327][T12560] Code: Bad RIP value. [ 642.178380][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 642.186778][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 642.194734][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 642.202692][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 642.210648][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 642.218608][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 642.226573][T12560] Uninit was stored to memory at: [ 642.231592][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 642.237305][T12560] __msan_chain_origin+0x50/0x90 [ 642.242242][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 642.247338][T12560] get_compat_msghdr+0x108/0x2b0 [ 642.252258][T12560] do_recvmmsg+0xdbb/0x22c0 [ 642.256759][T12560] __sys_recvmmsg+0x5dd/0x610 [ 642.261423][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 642.267478][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 642.273625][T12560] __do_fast_syscall_32+0x2af/0x480 [ 642.278813][T12560] do_fast_syscall_32+0x6b/0xd0 [ 642.283652][T12560] do_SYSENTER_32+0x73/0x90 [ 642.288145][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 642.294448][T12560] [ 642.296758][T12560] Uninit was stored to memory at: [ 642.301768][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 642.307471][T12560] __msan_chain_origin+0x50/0x90 [ 642.312396][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 642.317486][T12560] get_compat_msghdr+0x108/0x2b0 [ 642.322405][T12560] do_recvmmsg+0xdbb/0x22c0 [ 642.326895][T12560] __sys_recvmmsg+0x5dd/0x610 [ 642.331558][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 642.337616][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 642.343757][T12560] __do_fast_syscall_32+0x2af/0x480 [ 642.348943][T12560] do_fast_syscall_32+0x6b/0xd0 [ 642.353780][T12560] do_SYSENTER_32+0x73/0x90 [ 642.358280][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 642.364583][T12560] [ 642.366896][T12560] Uninit was stored to memory at: [ 642.371907][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 642.377635][T12560] __msan_chain_origin+0x50/0x90 [ 642.382667][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 642.387770][T12560] get_compat_msghdr+0x108/0x2b0 [ 642.392695][T12560] do_recvmmsg+0xdbb/0x22c0 [ 642.397224][T12560] __sys_recvmmsg+0x5dd/0x610 [ 642.401892][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 642.407949][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 642.414094][T12560] __do_fast_syscall_32+0x2af/0x480 [ 642.419282][T12560] do_fast_syscall_32+0x6b/0xd0 [ 642.424122][T12560] do_SYSENTER_32+0x73/0x90 [ 642.430962][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 642.437265][T12560] [ 642.439580][T12560] Uninit was stored to memory at: [ 642.444597][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 642.450304][T12560] __msan_chain_origin+0x50/0x90 [ 642.455261][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 642.460360][T12560] get_compat_msghdr+0x108/0x2b0 [ 642.465287][T12560] do_recvmmsg+0xdbb/0x22c0 [ 642.469777][T12560] __sys_recvmmsg+0x5dd/0x610 [ 642.474446][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 642.480501][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 642.486644][T12560] __do_fast_syscall_32+0x2af/0x480 [ 642.491865][T12560] do_fast_syscall_32+0x6b/0xd0 [ 642.496718][T12560] do_SYSENTER_32+0x73/0x90 [ 642.501222][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 642.507532][T12560] [ 642.509851][T12560] Uninit was stored to memory at: [ 642.514873][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 642.520584][T12560] __msan_chain_origin+0x50/0x90 [ 642.525513][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 642.530617][T12560] get_compat_msghdr+0x108/0x2b0 [ 642.535637][T12560] do_recvmmsg+0xdbb/0x22c0 [ 642.540129][T12560] __sys_recvmmsg+0x5dd/0x610 [ 642.544797][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 642.550855][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 642.557001][T12560] __do_fast_syscall_32+0x2af/0x480 [ 642.562189][T12560] do_fast_syscall_32+0x6b/0xd0 [ 642.567029][T12560] do_SYSENTER_32+0x73/0x90 [ 642.571522][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 642.577827][T12560] [ 642.580147][T12560] Uninit was stored to memory at: [ 642.585173][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 642.590879][T12560] __msan_chain_origin+0x50/0x90 [ 642.595809][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 642.600908][T12560] get_compat_msghdr+0x108/0x2b0 [ 642.605835][T12560] do_recvmmsg+0xdbb/0x22c0 [ 642.610326][T12560] __sys_recvmmsg+0x5dd/0x610 [ 642.614991][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 642.621047][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 642.627190][T12560] __do_fast_syscall_32+0x2af/0x480 [ 642.632394][T12560] do_fast_syscall_32+0x6b/0xd0 [ 642.637232][T12560] do_SYSENTER_32+0x73/0x90 [ 642.641725][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 642.648041][T12560] [ 642.650351][T12560] Uninit was stored to memory at: [ 642.655366][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 642.661073][T12560] __msan_chain_origin+0x50/0x90 [ 642.666000][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 642.671096][T12560] get_compat_msghdr+0x108/0x2b0 [ 642.676033][T12560] do_recvmmsg+0xdbb/0x22c0 [ 642.680543][T12560] __sys_recvmmsg+0x5dd/0x610 [ 642.685208][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 642.691279][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 642.697421][T12560] __do_fast_syscall_32+0x2af/0x480 [ 642.702628][T12560] do_fast_syscall_32+0x6b/0xd0 [ 642.707466][T12560] do_SYSENTER_32+0x73/0x90 [ 642.711971][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 642.718277][T12560] [ 642.720590][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 642.727773][T12560] do_recvmmsg+0xbf/0x22c0 [ 642.732174][T12560] do_recvmmsg+0xbf/0x22c0 [ 642.954502][T12564] not chained 1990000 origins [ 642.959215][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 642.967878][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.977929][T12564] Call Trace: [ 642.981239][T12564] dump_stack+0x21c/0x280 [ 642.985591][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 642.991320][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 642.997394][T12564] ? kmsan_get_metadata+0x116/0x180 [ 643.002596][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 643.008408][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 643.014484][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 643.019864][T12564] ? kmsan_get_metadata+0x116/0x180 [ 643.025067][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 643.030617][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 643.036695][T12564] ? _copy_from_user+0x201/0x310 [ 643.041637][T12564] ? kmsan_get_metadata+0x116/0x180 [ 643.046840][T12564] __msan_chain_origin+0x50/0x90 [ 643.051784][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 643.056915][T12564] get_compat_msghdr+0x108/0x2b0 [ 643.061863][T12564] do_recvmmsg+0xdbb/0x22c0 [ 643.066465][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 643.072287][T12564] ? kmsan_get_metadata+0x116/0x180 [ 643.077490][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 643.083389][T12564] ? kmsan_get_metadata+0x116/0x180 [ 643.088589][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 643.094225][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 643.099515][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 643.104277][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 643.109046][T12564] __sys_recvmmsg+0x5dd/0x610 [ 643.113740][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.119818][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.125978][T12564] __do_fast_syscall_32+0x2af/0x480 [ 643.131200][T12564] do_fast_syscall_32+0x6b/0xd0 [ 643.136057][T12564] do_SYSENTER_32+0x73/0x90 [ 643.140563][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.146884][T12564] RIP: 0023:0xf7fc1549 [ 643.150942][T12564] Code: Bad RIP value. [ 643.155003][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 643.163413][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 643.171385][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 643.179363][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.187332][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 643.195297][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.203274][T12564] Uninit was stored to memory at: [ 643.208301][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 643.214017][T12564] __msan_chain_origin+0x50/0x90 [ 643.218956][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 643.224066][T12564] get_compat_msghdr+0x108/0x2b0 [ 643.228999][T12564] do_recvmmsg+0xdbb/0x22c0 [ 643.233498][T12564] __sys_recvmmsg+0x5dd/0x610 [ 643.238189][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.244260][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.250410][T12564] __do_fast_syscall_32+0x2af/0x480 [ 643.255628][T12564] do_fast_syscall_32+0x6b/0xd0 [ 643.260480][T12564] do_SYSENTER_32+0x73/0x90 [ 643.262834][T12560] not chained 2000000 origins [ 643.264985][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.269654][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 643.276063][T12564] [ 643.284724][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.287025][T12564] Uninit was stored to memory at: [ 643.297070][T12560] Call Trace: [ 643.302075][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 643.305339][T12560] dump_stack+0x21c/0x280 [ 643.311026][T12564] __msan_chain_origin+0x50/0x90 [ 643.315330][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 643.320243][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 643.325951][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 643.331041][T12564] get_compat_msghdr+0x108/0x2b0 [ 643.337177][T12560] ? kmsan_get_metadata+0x116/0x180 [ 643.342085][T12564] do_recvmmsg+0xdbb/0x22c0 [ 643.347258][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 643.351729][T12564] __sys_recvmmsg+0x5dd/0x610 [ 643.357510][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 643.362158][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.368197][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 643.374234][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.379583][T12560] ? kmsan_get_metadata+0x116/0x180 [ 643.385707][T12564] __do_fast_syscall_32+0x2af/0x480 [ 643.390878][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 643.396049][T12564] do_fast_syscall_32+0x6b/0xd0 [ 643.401568][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 643.406392][T12564] do_SYSENTER_32+0x73/0x90 [ 643.412489][T12560] ? _copy_from_user+0x201/0x310 [ 643.412515][T12560] ? kmsan_get_metadata+0x116/0x180 [ 643.417039][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.421959][T12560] __msan_chain_origin+0x50/0x90 [ 643.427121][T12564] [ 643.433439][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 643.438338][T12564] Uninit was stored to memory at: [ 643.440684][T12560] get_compat_msghdr+0x108/0x2b0 [ 643.445767][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 643.450770][T12560] do_recvmmsg+0xdbb/0x22c0 [ 643.455680][T12564] __msan_chain_origin+0x50/0x90 [ 643.461378][T12560] ? kmsan_get_metadata+0x116/0x180 [ 643.465853][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 643.470766][T12560] ? kmsan_get_metadata+0x116/0x180 [ 643.475939][T12564] get_compat_msghdr+0x108/0x2b0 [ 643.481026][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 643.486207][T12564] do_recvmmsg+0xdbb/0x22c0 [ 643.491116][T12560] ? kmsan_get_metadata+0x116/0x180 [ 643.496981][T12564] __sys_recvmmsg+0x5dd/0x610 [ 643.501482][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 643.506653][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.511303][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 643.516914][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.522953][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 643.528216][T12564] __do_fast_syscall_32+0x2af/0x480 [ 643.534339][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 643.539078][T12564] do_fast_syscall_32+0x6b/0xd0 [ 643.544247][T12560] __sys_recvmmsg+0x5dd/0x610 [ 643.548993][T12564] do_SYSENTER_32+0x73/0x90 [ 643.553831][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.558476][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.562959][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.568986][T12564] [ 643.575298][T12560] __do_fast_syscall_32+0x2af/0x480 [ 643.581426][T12564] Uninit was stored to memory at: [ 643.583751][T12560] do_fast_syscall_32+0x6b/0xd0 [ 643.588927][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 643.593930][T12560] do_SYSENTER_32+0x73/0x90 [ 643.598758][T12564] __msan_chain_origin+0x50/0x90 [ 643.604457][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.608932][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 643.613841][T12560] RIP: 0023:0xf7fc1549 [ 643.620162][T12564] get_compat_msghdr+0x108/0x2b0 [ 643.625236][T12560] Code: Bad RIP value. [ 643.629290][T12564] do_recvmmsg+0xdbb/0x22c0 [ 643.634196][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 643.638244][T12564] __sys_recvmmsg+0x5dd/0x610 [ 643.642718][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 643.651116][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.655764][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 643.663724][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.669759][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.677715][T12564] __do_fast_syscall_32+0x2af/0x480 [ 643.683864][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 643.691832][T12564] do_fast_syscall_32+0x6b/0xd0 [ 643.696996][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.704952][T12564] do_SYSENTER_32+0x73/0x90 [ 643.709773][T12560] Uninit was stored to memory at: [ 643.717727][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.722204][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 643.727189][T12564] [ 643.733498][T12560] __msan_chain_origin+0x50/0x90 [ 643.739206][T12564] Uninit was stored to memory at: [ 643.741521][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 643.746433][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 643.752909][T12560] get_compat_msghdr+0x108/0x2b0 [ 643.757994][T12564] __msan_chain_origin+0x50/0x90 [ 643.763686][T12560] do_recvmmsg+0xdbb/0x22c0 [ 643.768606][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 643.773525][T12560] __sys_recvmmsg+0x5dd/0x610 [ 643.778002][T12564] get_compat_msghdr+0x108/0x2b0 [ 643.783104][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.787755][T12564] do_recvmmsg+0xdbb/0x22c0 [ 643.792670][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.798731][T12564] __sys_recvmmsg+0x5dd/0x610 [ 643.803211][T12560] __do_fast_syscall_32+0x2af/0x480 [ 643.809339][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.814009][T12560] do_fast_syscall_32+0x6b/0xd0 [ 643.819199][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.825237][T12560] do_SYSENTER_32+0x73/0x90 [ 643.830072][T12564] __do_fast_syscall_32+0x2af/0x480 [ 643.836199][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.840676][T12564] do_fast_syscall_32+0x6b/0xd0 [ 643.845835][T12560] [ 643.852145][T12564] do_SYSENTER_32+0x73/0x90 [ 643.856958][T12560] Uninit was stored to memory at: [ 643.859274][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.863752][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 643.868740][T12564] [ 643.875051][T12560] __msan_chain_origin+0x50/0x90 [ 643.880734][T12564] Uninit was stored to memory at: [ 643.883053][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 643.887968][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 643.892983][T12560] get_compat_msghdr+0x108/0x2b0 [ 643.898066][T12564] __msan_chain_origin+0x50/0x90 [ 643.903758][T12560] do_recvmmsg+0xdbb/0x22c0 [ 643.908671][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 643.913584][T12560] __sys_recvmmsg+0x5dd/0x610 [ 643.918059][T12564] get_compat_msghdr+0x108/0x2b0 [ 643.923147][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.927794][T12564] do_recvmmsg+0xdbb/0x22c0 [ 643.932708][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.938745][T12564] __sys_recvmmsg+0x5dd/0x610 [ 643.943225][T12560] __do_fast_syscall_32+0x2af/0x480 [ 643.949352][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 643.954005][T12560] do_fast_syscall_32+0x6b/0xd0 [ 643.959176][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 643.965231][T12560] do_SYSENTER_32+0x73/0x90 [ 643.970056][T12564] __do_fast_syscall_32+0x2af/0x480 [ 643.976178][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 643.980655][T12564] do_fast_syscall_32+0x6b/0xd0 [ 643.985812][T12560] [ 643.992119][T12564] do_SYSENTER_32+0x73/0x90 [ 643.996931][T12560] Uninit was stored to memory at: [ 643.999250][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.003744][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 644.008729][T12564] [ 644.015037][T12560] __msan_chain_origin+0x50/0x90 [ 644.020717][T12564] Uninit was stored to memory at: [ 644.023042][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 644.027948][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 644.033033][T12560] get_compat_msghdr+0x108/0x2b0 [ 644.038143][T12564] __msan_chain_origin+0x50/0x90 [ 644.043835][T12560] do_recvmmsg+0xdbb/0x22c0 [ 644.048745][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 644.053658][T12560] __sys_recvmmsg+0x5dd/0x610 [ 644.058147][T12564] get_compat_msghdr+0x108/0x2b0 [ 644.063234][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 644.067871][T12564] do_recvmmsg+0xdbb/0x22c0 [ 644.067891][T12564] __sys_recvmmsg+0x5dd/0x610 [ 644.072807][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 644.078848][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 644.083347][T12560] __do_fast_syscall_32+0x2af/0x480 [ 644.088083][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 644.094209][T12560] do_fast_syscall_32+0x6b/0xd0 [ 644.100263][T12564] __do_fast_syscall_32+0x2af/0x480 [ 644.105436][T12560] do_SYSENTER_32+0x73/0x90 [ 644.111561][T12564] do_fast_syscall_32+0x6b/0xd0 [ 644.116386][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.121573][T12564] do_SYSENTER_32+0x73/0x90 [ 644.126039][T12560] [ 644.130879][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.137182][T12560] Uninit was stored to memory at: [ 644.141655][T12564] [ 644.143974][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 644.150264][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 644.155270][T12560] __msan_chain_origin+0x50/0x90 [ 644.157577][T12564] do_recvmmsg+0xbf/0x22c0 [ 644.163268][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 644.169911][T12564] do_recvmmsg+0xbf/0x22c0 [ 644.174822][T12560] get_compat_msghdr+0x108/0x2b0 [ 644.193610][T12560] do_recvmmsg+0xdbb/0x22c0 [ 644.198120][T12560] __sys_recvmmsg+0x5dd/0x610 [ 644.202803][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 644.208909][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 644.215065][T12560] __do_fast_syscall_32+0x2af/0x480 [ 644.220259][T12560] do_fast_syscall_32+0x6b/0xd0 [ 644.225099][T12560] do_SYSENTER_32+0x73/0x90 [ 644.229588][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.235890][T12560] [ 644.238200][T12560] Uninit was stored to memory at: [ 644.243215][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 644.248924][T12560] __msan_chain_origin+0x50/0x90 [ 644.253855][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 644.258955][T12560] get_compat_msghdr+0x108/0x2b0 [ 644.263881][T12560] do_recvmmsg+0xdbb/0x22c0 [ 644.268370][T12560] __sys_recvmmsg+0x5dd/0x610 [ 644.273037][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 644.279104][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 644.285248][T12560] __do_fast_syscall_32+0x2af/0x480 [ 644.290431][T12560] do_fast_syscall_32+0x6b/0xd0 [ 644.295284][T12560] do_SYSENTER_32+0x73/0x90 [ 644.299778][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.306081][T12560] [ 644.308391][T12560] Uninit was stored to memory at: [ 644.313405][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 644.319114][T12560] __msan_chain_origin+0x50/0x90 [ 644.324039][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 644.329164][T12560] get_compat_msghdr+0x108/0x2b0 [ 644.334089][T12560] do_recvmmsg+0xdbb/0x22c0 [ 644.338579][T12560] __sys_recvmmsg+0x5dd/0x610 [ 644.343246][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 644.349303][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 644.355445][T12560] __do_fast_syscall_32+0x2af/0x480 [ 644.360629][T12560] do_fast_syscall_32+0x6b/0xd0 [ 644.365470][T12560] do_SYSENTER_32+0x73/0x90 [ 644.369962][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.376265][T12560] [ 644.378576][T12560] Uninit was stored to memory at: [ 644.383587][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 644.389291][T12560] __msan_chain_origin+0x50/0x90 [ 644.394217][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 644.399316][T12560] get_compat_msghdr+0x108/0x2b0 [ 644.404239][T12560] do_recvmmsg+0xdbb/0x22c0 [ 644.408846][T12560] __sys_recvmmsg+0x5dd/0x610 [ 644.413518][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 644.419578][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 644.425724][T12560] __do_fast_syscall_32+0x2af/0x480 [ 644.431179][T12560] do_fast_syscall_32+0x6b/0xd0 [ 644.436025][T12560] do_SYSENTER_32+0x73/0x90 [ 644.440524][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.446917][T12560] [ 644.449230][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 644.455894][T12560] do_recvmmsg+0xbf/0x22c0 [ 644.460300][T12560] do_recvmmsg+0xbf/0x22c0 [ 644.649503][T12564] not chained 2010000 origins [ 644.654345][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 644.663009][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.673060][T12564] Call Trace: [ 644.676358][T12564] dump_stack+0x21c/0x280 [ 644.680700][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 644.686425][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 644.692529][T12564] ? kmsan_get_metadata+0x116/0x180 [ 644.697731][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 644.703544][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 644.709607][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 644.714988][T12564] ? kmsan_get_metadata+0x116/0x180 [ 644.720194][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 644.725748][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 644.731824][T12564] ? _copy_from_user+0x201/0x310 [ 644.736755][T12564] ? kmsan_get_metadata+0x116/0x180 [ 644.741946][T12564] __msan_chain_origin+0x50/0x90 [ 644.746879][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 644.751993][T12564] get_compat_msghdr+0x108/0x2b0 [ 644.756928][T12564] do_recvmmsg+0xdbb/0x22c0 [ 644.761428][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 644.767233][T12564] ? kmsan_get_metadata+0x116/0x180 [ 644.772423][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 644.778310][T12564] ? kmsan_get_metadata+0x116/0x180 [ 644.783500][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 644.789119][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 644.794408][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 644.799161][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 644.804005][T12564] __sys_recvmmsg+0x5dd/0x610 [ 644.808684][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 644.814750][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 644.820919][T12564] __do_fast_syscall_32+0x2af/0x480 [ 644.826126][T12564] do_fast_syscall_32+0x6b/0xd0 [ 644.830975][T12564] do_SYSENTER_32+0x73/0x90 [ 644.835473][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.841789][T12564] RIP: 0023:0xf7fc1549 [ 644.845837][T12564] Code: Bad RIP value. [ 644.849890][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 644.858289][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 644.866247][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 644.874207][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 644.882168][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 644.890125][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.898092][T12564] Uninit was stored to memory at: [ 644.903107][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 644.908812][T12564] __msan_chain_origin+0x50/0x90 [ 644.913738][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 644.918838][T12564] get_compat_msghdr+0x108/0x2b0 [ 644.923764][T12564] do_recvmmsg+0xdbb/0x22c0 [ 644.928258][T12564] __sys_recvmmsg+0x5dd/0x610 [ 644.932943][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 644.938998][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 644.945184][T12564] __do_fast_syscall_32+0x2af/0x480 [ 644.950398][T12564] do_fast_syscall_32+0x6b/0xd0 [ 644.955240][T12564] do_SYSENTER_32+0x73/0x90 [ 644.959733][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 644.966035][T12564] [ 644.968348][T12564] Uninit was stored to memory at: [ 644.973359][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 644.979106][T12564] __msan_chain_origin+0x50/0x90 [ 644.984030][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 644.989133][T12564] get_compat_msghdr+0x108/0x2b0 [ 644.994069][T12564] do_recvmmsg+0xdbb/0x22c0 [ 644.998558][T12564] __sys_recvmmsg+0x5dd/0x610 [ 645.003226][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 645.009279][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 645.015439][T12564] __do_fast_syscall_32+0x2af/0x480 [ 645.020715][T12564] do_fast_syscall_32+0x6b/0xd0 [ 645.025553][T12564] do_SYSENTER_32+0x73/0x90 [ 645.030046][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 645.036348][T12564] [ 645.038659][T12564] Uninit was stored to memory at: [ 645.043674][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 645.049378][T12564] __msan_chain_origin+0x50/0x90 [ 645.054305][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 645.059403][T12564] get_compat_msghdr+0x108/0x2b0 [ 645.064327][T12564] do_recvmmsg+0xdbb/0x22c0 [ 645.068818][T12564] __sys_recvmmsg+0x5dd/0x610 [ 645.073482][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 645.079537][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 645.085685][T12564] __do_fast_syscall_32+0x2af/0x480 [ 645.090874][T12564] do_fast_syscall_32+0x6b/0xd0 [ 645.095711][T12564] do_SYSENTER_32+0x73/0x90 [ 645.100200][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 645.106503][T12564] [ 645.108824][T12564] Uninit was stored to memory at: [ 645.113851][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 645.119563][T12564] __msan_chain_origin+0x50/0x90 [ 645.124491][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 645.129591][T12564] get_compat_msghdr+0x108/0x2b0 [ 645.134518][T12564] do_recvmmsg+0xdbb/0x22c0 [ 645.139010][T12564] __sys_recvmmsg+0x5dd/0x610 [ 645.143676][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 645.149731][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 645.155876][T12564] __do_fast_syscall_32+0x2af/0x480 [ 645.161071][T12564] do_fast_syscall_32+0x6b/0xd0 [ 645.165914][T12564] do_SYSENTER_32+0x73/0x90 [ 645.170406][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 645.176710][T12564] [ 645.179024][T12564] Uninit was stored to memory at: [ 645.184050][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 645.189757][T12564] __msan_chain_origin+0x50/0x90 [ 645.194684][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 645.199785][T12564] get_compat_msghdr+0x108/0x2b0 [ 645.204712][T12564] do_recvmmsg+0xdbb/0x22c0 [ 645.209217][T12564] __sys_recvmmsg+0x5dd/0x610 [ 645.213885][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 645.219961][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 645.226102][T12564] __do_fast_syscall_32+0x2af/0x480 [ 645.231310][T12564] do_fast_syscall_32+0x6b/0xd0 [ 645.236241][T12564] do_SYSENTER_32+0x73/0x90 [ 645.240742][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 645.247055][T12564] [ 645.249367][T12564] Uninit was stored to memory at: [ 645.254513][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 645.260227][T12564] __msan_chain_origin+0x50/0x90 [ 645.265155][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 645.270259][T12564] get_compat_msghdr+0x108/0x2b0 [ 645.275182][T12564] do_recvmmsg+0xdbb/0x22c0 [ 645.279671][T12564] __sys_recvmmsg+0x5dd/0x610 [ 645.284337][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 645.290391][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 645.296531][T12564] __do_fast_syscall_32+0x2af/0x480 [ 645.301727][T12564] do_fast_syscall_32+0x6b/0xd0 [ 645.306564][T12564] do_SYSENTER_32+0x73/0x90 [ 645.311056][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 645.317360][T12564] [ 645.319671][T12564] Uninit was stored to memory at: [ 645.324684][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 645.330392][T12564] __msan_chain_origin+0x50/0x90 [ 645.335492][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 645.340591][T12564] get_compat_msghdr+0x108/0x2b0 [ 645.345515][T12564] do_recvmmsg+0xdbb/0x22c0 [ 645.350007][T12564] __sys_recvmmsg+0x5dd/0x610 [ 645.354673][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 645.360728][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 645.366895][T12564] __do_fast_syscall_32+0x2af/0x480 [ 645.372080][T12564] do_fast_syscall_32+0x6b/0xd0 [ 645.376916][T12564] do_SYSENTER_32+0x73/0x90 [ 645.381408][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 645.387710][T12564] [ 645.390023][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 645.396705][T12564] do_recvmmsg+0xbf/0x22c0 [ 645.401109][T12564] do_recvmmsg+0xbf/0x22c0 [ 645.678959][T12564] not chained 2020000 origins [ 645.683673][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 645.692342][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.702392][T12564] Call Trace: [ 645.705711][T12564] dump_stack+0x21c/0x280 [ 645.710136][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 645.716010][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 645.722075][T12564] ? kmsan_get_metadata+0x116/0x180 [ 645.727277][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 645.733089][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 645.739243][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 645.744623][T12564] ? kmsan_get_metadata+0x116/0x180 [ 645.749821][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 645.755367][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 645.761439][T12564] ? _copy_from_user+0x201/0x310 [ 645.766381][T12564] ? kmsan_get_metadata+0x116/0x180 [ 645.771580][T12564] __msan_chain_origin+0x50/0x90 [ 645.776522][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 645.781650][T12564] get_compat_msghdr+0x108/0x2b0 [ 645.786597][T12564] do_recvmmsg+0xdbb/0x22c0 [ 645.791104][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 645.796925][T12564] ? kmsan_get_metadata+0x116/0x180 [ 645.802129][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 645.808021][T12564] ? kmsan_get_metadata+0x116/0x180 [ 645.813216][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 645.818855][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 645.824142][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 645.828905][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 645.833670][T12564] __sys_recvmmsg+0x5dd/0x610 [ 645.838366][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 645.844445][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 645.850603][T12564] __do_fast_syscall_32+0x2af/0x480 [ 645.855804][T12564] do_fast_syscall_32+0x6b/0xd0 [ 645.860654][T12564] do_SYSENTER_32+0x73/0x90 [ 645.865163][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 645.871481][T12564] RIP: 0023:0xf7fc1549 [ 645.875532][T12564] Code: Bad RIP value. [ 645.879593][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 645.888008][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 645.895973][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 645.903974][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.911959][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 645.919925][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.927901][T12564] Uninit was stored to memory at: [ 645.932931][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 645.938651][T12564] __msan_chain_origin+0x50/0x90 [ 645.943593][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 645.949830][T12564] get_compat_msghdr+0x108/0x2b0 [ 645.954768][T12564] do_recvmmsg+0xdbb/0x22c0 [ 645.959267][T12564] __sys_recvmmsg+0x5dd/0x610 [ 645.963948][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 645.970100][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 645.976250][T12564] __do_fast_syscall_32+0x2af/0x480 [ 645.981450][T12564] do_fast_syscall_32+0x6b/0xd0 [ 645.986298][T12564] do_SYSENTER_32+0x73/0x90 [ 645.990800][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 645.997129][T12564] [ 645.999447][T12564] Uninit was stored to memory at: [ 646.004474][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 646.010189][T12564] __msan_chain_origin+0x50/0x90 [ 646.015238][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 646.020346][T12564] get_compat_msghdr+0x108/0x2b0 [ 646.025282][T12564] do_recvmmsg+0xdbb/0x22c0 [ 646.029783][T12564] __sys_recvmmsg+0x5dd/0x610 [ 646.034460][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.040525][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.046678][T12564] __do_fast_syscall_32+0x2af/0x480 [ 646.051875][T12564] do_fast_syscall_32+0x6b/0xd0 [ 646.056722][T12564] do_SYSENTER_32+0x73/0x90 [ 646.061222][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.067536][T12564] [ 646.069855][T12564] Uninit was stored to memory at: [ 646.074892][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 646.080612][T12564] __msan_chain_origin+0x50/0x90 [ 646.085547][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 646.090671][T12564] get_compat_msghdr+0x108/0x2b0 [ 646.095623][T12564] do_recvmmsg+0xdbb/0x22c0 [ 646.100120][T12564] __sys_recvmmsg+0x5dd/0x610 [ 646.104800][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.110863][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.117025][T12564] __do_fast_syscall_32+0x2af/0x480 [ 646.122220][T12564] do_fast_syscall_32+0x6b/0xd0 [ 646.127067][T12564] do_SYSENTER_32+0x73/0x90 [ 646.131567][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.137875][T12564] [ 646.140194][T12564] Uninit was stored to memory at: [ 646.145222][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 646.150937][T12564] __msan_chain_origin+0x50/0x90 [ 646.155877][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 646.160986][T12564] get_compat_msghdr+0x108/0x2b0 [ 646.165922][T12564] do_recvmmsg+0xdbb/0x22c0 [ 646.170419][T12564] __sys_recvmmsg+0x5dd/0x610 [ 646.175096][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.181161][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.187312][T12564] __do_fast_syscall_32+0x2af/0x480 [ 646.192527][T12564] do_fast_syscall_32+0x6b/0xd0 [ 646.197383][T12564] do_SYSENTER_32+0x73/0x90 [ 646.201888][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.208211][T12564] [ 646.210530][T12564] Uninit was stored to memory at: [ 646.215565][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 646.221280][T12564] __msan_chain_origin+0x50/0x90 [ 646.226212][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 646.231317][T12564] get_compat_msghdr+0x108/0x2b0 [ 646.236263][T12564] do_recvmmsg+0xdbb/0x22c0 [ 646.240765][T12564] __sys_recvmmsg+0x5dd/0x610 [ 646.245440][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.251514][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.257669][T12564] __do_fast_syscall_32+0x2af/0x480 [ 646.262866][T12564] do_fast_syscall_32+0x6b/0xd0 [ 646.267714][T12564] do_SYSENTER_32+0x73/0x90 [ 646.272212][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.278520][T12564] [ 646.280839][T12564] Uninit was stored to memory at: [ 646.285866][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 646.291579][T12564] __msan_chain_origin+0x50/0x90 [ 646.296532][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 646.301638][T12564] get_compat_msghdr+0x108/0x2b0 [ 646.306576][T12564] do_recvmmsg+0xdbb/0x22c0 [ 646.311069][T12564] __sys_recvmmsg+0x5dd/0x610 [ 646.315741][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.321805][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.327957][T12564] __do_fast_syscall_32+0x2af/0x480 [ 646.333152][T12564] do_fast_syscall_32+0x6b/0xd0 [ 646.338002][T12564] do_SYSENTER_32+0x73/0x90 [ 646.342503][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.348813][T12564] [ 646.351130][T12564] Uninit was stored to memory at: [ 646.356152][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 646.361869][T12564] __msan_chain_origin+0x50/0x90 [ 646.366805][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 646.371905][T12564] get_compat_msghdr+0x108/0x2b0 [ 646.376827][T12564] do_recvmmsg+0xdbb/0x22c0 [ 646.381315][T12564] __sys_recvmmsg+0x5dd/0x610 [ 646.385978][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.392030][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.398174][T12564] __do_fast_syscall_32+0x2af/0x480 [ 646.403362][T12564] do_fast_syscall_32+0x6b/0xd0 [ 646.408197][T12564] do_SYSENTER_32+0x73/0x90 [ 646.412699][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.419010][T12564] [ 646.421336][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 646.428013][T12564] do_recvmmsg+0xbf/0x22c0 [ 646.432418][T12564] do_recvmmsg+0xbf/0x22c0 [ 646.527997][T12560] not chained 2030000 origins [ 646.532707][T12560] CPU: 1 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 646.541371][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.551420][T12560] Call Trace: [ 646.554719][T12560] dump_stack+0x21c/0x280 [ 646.559058][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 646.564783][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 646.570852][T12560] ? kmsan_get_metadata+0x116/0x180 [ 646.576059][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 646.581872][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 646.587942][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 646.593326][T12560] ? kmsan_get_metadata+0x116/0x180 [ 646.598525][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 646.604335][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 646.610405][T12560] ? _copy_from_user+0x201/0x310 [ 646.615345][T12560] ? kmsan_get_metadata+0x116/0x180 [ 646.620544][T12560] __msan_chain_origin+0x50/0x90 [ 646.625491][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 646.630619][T12560] get_compat_msghdr+0x108/0x2b0 [ 646.635565][T12560] do_recvmmsg+0xdbb/0x22c0 [ 646.640081][T12560] ? kmsan_get_metadata+0x116/0x180 [ 646.645285][T12560] ? kmsan_get_metadata+0x116/0x180 [ 646.650577][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 646.656472][T12560] ? kmsan_get_metadata+0x116/0x180 [ 646.661669][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 646.667300][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 646.672582][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 646.677342][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 646.682108][T12560] __sys_recvmmsg+0x5dd/0x610 [ 646.686805][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.692883][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.699057][T12560] __do_fast_syscall_32+0x2af/0x480 [ 646.704266][T12560] do_fast_syscall_32+0x6b/0xd0 [ 646.709122][T12560] do_SYSENTER_32+0x73/0x90 [ 646.713628][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.719948][T12560] RIP: 0023:0xf7fc1549 [ 646.724003][T12560] Code: Bad RIP value. [ 646.728060][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 646.736462][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 646.744448][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 646.752433][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 646.760402][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 646.768368][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 646.776339][T12560] Uninit was stored to memory at: [ 646.781369][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 646.787088][T12560] __msan_chain_origin+0x50/0x90 [ 646.792024][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 646.797137][T12560] get_compat_msghdr+0x108/0x2b0 [ 646.802070][T12560] do_recvmmsg+0xdbb/0x22c0 [ 646.806569][T12560] __sys_recvmmsg+0x5dd/0x610 [ 646.811243][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.817306][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.823457][T12560] __do_fast_syscall_32+0x2af/0x480 [ 646.828738][T12560] do_fast_syscall_32+0x6b/0xd0 [ 646.833589][T12560] do_SYSENTER_32+0x73/0x90 [ 646.838091][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.844407][T12560] [ 646.846730][T12560] Uninit was stored to memory at: [ 646.851758][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 646.857475][T12560] __msan_chain_origin+0x50/0x90 [ 646.862415][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 646.867524][T12560] get_compat_msghdr+0x108/0x2b0 [ 646.872460][T12560] do_recvmmsg+0xdbb/0x22c0 [ 646.876961][T12560] __sys_recvmmsg+0x5dd/0x610 [ 646.881640][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.887708][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.893862][T12560] __do_fast_syscall_32+0x2af/0x480 [ 646.899059][T12560] do_fast_syscall_32+0x6b/0xd0 [ 646.903908][T12560] do_SYSENTER_32+0x73/0x90 [ 646.908412][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.914723][T12560] [ 646.917045][T12560] Uninit was stored to memory at: [ 646.922072][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 646.927792][T12560] __msan_chain_origin+0x50/0x90 [ 646.932728][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 646.937852][T12560] get_compat_msghdr+0x108/0x2b0 [ 646.942786][T12560] do_recvmmsg+0xdbb/0x22c0 [ 646.947312][T12560] __sys_recvmmsg+0x5dd/0x610 [ 646.951986][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 646.958051][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 646.964206][T12560] __do_fast_syscall_32+0x2af/0x480 [ 646.969402][T12560] do_fast_syscall_32+0x6b/0xd0 [ 646.974249][T12560] do_SYSENTER_32+0x73/0x90 [ 646.978754][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 646.985068][T12560] [ 646.987502][T12560] Uninit was stored to memory at: [ 646.992531][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 646.998254][T12560] __msan_chain_origin+0x50/0x90 [ 647.003194][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 647.008328][T12560] get_compat_msghdr+0x108/0x2b0 [ 647.013264][T12560] do_recvmmsg+0xdbb/0x22c0 [ 647.017764][T12560] __sys_recvmmsg+0x5dd/0x610 [ 647.022449][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.028509][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.034657][T12560] __do_fast_syscall_32+0x2af/0x480 [ 647.039862][T12560] do_fast_syscall_32+0x6b/0xd0 [ 647.044709][T12560] do_SYSENTER_32+0x73/0x90 [ 647.049213][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.055523][T12560] [ 647.057857][T12560] Uninit was stored to memory at: [ 647.062886][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 647.068601][T12560] __msan_chain_origin+0x50/0x90 [ 647.073538][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 647.078645][T12560] get_compat_msghdr+0x108/0x2b0 [ 647.083668][T12560] do_recvmmsg+0xdbb/0x22c0 [ 647.088166][T12560] __sys_recvmmsg+0x5dd/0x610 [ 647.092855][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.098926][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.105077][T12560] __do_fast_syscall_32+0x2af/0x480 [ 647.110285][T12560] do_fast_syscall_32+0x6b/0xd0 [ 647.115135][T12560] do_SYSENTER_32+0x73/0x90 [ 647.119641][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.125953][T12560] [ 647.128283][T12560] Uninit was stored to memory at: [ 647.133309][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 647.139027][T12560] __msan_chain_origin+0x50/0x90 [ 647.144067][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 647.149178][T12560] get_compat_msghdr+0x108/0x2b0 [ 647.154113][T12560] do_recvmmsg+0xdbb/0x22c0 [ 647.158614][T12560] __sys_recvmmsg+0x5dd/0x610 [ 647.163290][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.169351][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.175587][T12560] __do_fast_syscall_32+0x2af/0x480 [ 647.180784][T12560] do_fast_syscall_32+0x6b/0xd0 [ 647.185634][T12560] do_SYSENTER_32+0x73/0x90 [ 647.190134][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.196443][T12560] [ 647.200489][T12560] Uninit was stored to memory at: [ 647.205503][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 647.211206][T12560] __msan_chain_origin+0x50/0x90 [ 647.216132][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 647.221230][T12560] get_compat_msghdr+0x108/0x2b0 [ 647.226151][T12560] do_recvmmsg+0xdbb/0x22c0 [ 647.230637][T12560] __sys_recvmmsg+0x5dd/0x610 [ 647.235302][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.241357][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.247499][T12560] __do_fast_syscall_32+0x2af/0x480 [ 647.252815][T12560] do_fast_syscall_32+0x6b/0xd0 [ 647.257650][T12560] do_SYSENTER_32+0x73/0x90 [ 647.262141][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.268441][T12560] [ 647.270752][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 647.277427][T12560] do_recvmmsg+0xbf/0x22c0 [ 647.281842][T12560] do_recvmmsg+0xbf/0x22c0 [ 647.477590][T12564] not chained 2040000 origins [ 647.482383][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 647.494591][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.504628][T12564] Call Trace: [ 647.507913][T12564] dump_stack+0x21c/0x280 [ 647.512240][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 647.517952][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 647.524010][T12564] ? kmsan_get_metadata+0x116/0x180 [ 647.529198][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 647.534994][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 647.541048][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 647.546416][T12564] ? kmsan_get_metadata+0x116/0x180 [ 647.551623][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 647.557158][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 647.563216][T12564] ? _copy_from_user+0x201/0x310 [ 647.568147][T12564] ? kmsan_get_metadata+0x116/0x180 [ 647.573335][T12564] __msan_chain_origin+0x50/0x90 [ 647.578267][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 647.583395][T12564] get_compat_msghdr+0x108/0x2b0 [ 647.588333][T12564] do_recvmmsg+0xdbb/0x22c0 [ 647.592831][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 647.598721][T12564] ? kmsan_get_metadata+0x116/0x180 [ 647.603915][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 647.609802][T12564] ? kmsan_get_metadata+0x116/0x180 [ 647.614996][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 647.620622][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 647.625903][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 647.630657][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 647.635412][T12564] __sys_recvmmsg+0x5dd/0x610 [ 647.640091][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.646158][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.652303][T12564] __do_fast_syscall_32+0x2af/0x480 [ 647.657496][T12564] do_fast_syscall_32+0x6b/0xd0 [ 647.662334][T12564] do_SYSENTER_32+0x73/0x90 [ 647.666831][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.673140][T12564] RIP: 0023:0xf7fc1549 [ 647.677187][T12564] Code: Bad RIP value. [ 647.681240][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 647.689632][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 647.697598][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 647.705561][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.713523][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 647.721484][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.729457][T12564] Uninit was stored to memory at: [ 647.734484][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 647.740190][T12564] __msan_chain_origin+0x50/0x90 [ 647.745118][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 647.750217][T12564] get_compat_msghdr+0x108/0x2b0 [ 647.755144][T12564] do_recvmmsg+0xdbb/0x22c0 [ 647.759636][T12564] __sys_recvmmsg+0x5dd/0x610 [ 647.764304][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.770360][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.776502][T12564] __do_fast_syscall_32+0x2af/0x480 [ 647.781689][T12564] do_fast_syscall_32+0x6b/0xd0 [ 647.786530][T12564] do_SYSENTER_32+0x73/0x90 [ 647.791028][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.797333][T12564] [ 647.799654][T12564] Uninit was stored to memory at: [ 647.804669][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 647.810375][T12564] __msan_chain_origin+0x50/0x90 [ 647.815299][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 647.820395][T12564] get_compat_msghdr+0x108/0x2b0 [ 647.825317][T12564] do_recvmmsg+0xdbb/0x22c0 [ 647.829803][T12564] __sys_recvmmsg+0x5dd/0x610 [ 647.834468][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.840519][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.846658][T12564] __do_fast_syscall_32+0x2af/0x480 [ 647.851845][T12564] do_fast_syscall_32+0x6b/0xd0 [ 647.856680][T12564] do_SYSENTER_32+0x73/0x90 [ 647.861169][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.867479][T12564] [ 647.869791][T12564] Uninit was stored to memory at: [ 647.874804][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 647.880511][T12564] __msan_chain_origin+0x50/0x90 [ 647.885436][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 647.890532][T12564] get_compat_msghdr+0x108/0x2b0 [ 647.895459][T12564] do_recvmmsg+0xdbb/0x22c0 [ 647.899946][T12564] __sys_recvmmsg+0x5dd/0x610 [ 647.904611][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.910661][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.916796][T12564] __do_fast_syscall_32+0x2af/0x480 [ 647.921981][T12564] do_fast_syscall_32+0x6b/0xd0 [ 647.926823][T12564] do_SYSENTER_32+0x73/0x90 [ 647.931311][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.937617][T12564] [ 647.939926][T12564] Uninit was stored to memory at: [ 647.944939][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 647.950641][T12564] __msan_chain_origin+0x50/0x90 [ 647.955562][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 647.960661][T12564] get_compat_msghdr+0x108/0x2b0 [ 647.965580][T12564] do_recvmmsg+0xdbb/0x22c0 [ 647.970067][T12564] __sys_recvmmsg+0x5dd/0x610 [ 647.974734][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 647.980805][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 647.986955][T12564] __do_fast_syscall_32+0x2af/0x480 [ 647.992143][T12564] do_fast_syscall_32+0x6b/0xd0 [ 647.996977][T12564] do_SYSENTER_32+0x73/0x90 [ 648.001493][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.007794][T12564] [ 648.010104][T12564] Uninit was stored to memory at: [ 648.015114][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 648.020819][T12564] __msan_chain_origin+0x50/0x90 [ 648.025739][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 648.030835][T12564] get_compat_msghdr+0x108/0x2b0 [ 648.035761][T12564] do_recvmmsg+0xdbb/0x22c0 [ 648.040250][T12564] __sys_recvmmsg+0x5dd/0x610 [ 648.044914][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 648.050981][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 648.057122][T12564] __do_fast_syscall_32+0x2af/0x480 [ 648.062306][T12564] do_fast_syscall_32+0x6b/0xd0 [ 648.067141][T12564] do_SYSENTER_32+0x73/0x90 [ 648.071629][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.077932][T12564] [ 648.080241][T12564] Uninit was stored to memory at: [ 648.085253][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 648.090957][T12564] __msan_chain_origin+0x50/0x90 [ 648.095879][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 648.100974][T12564] get_compat_msghdr+0x108/0x2b0 [ 648.105900][T12564] do_recvmmsg+0xdbb/0x22c0 [ 648.110387][T12564] __sys_recvmmsg+0x5dd/0x610 [ 648.115052][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 648.121106][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 648.127244][T12564] __do_fast_syscall_32+0x2af/0x480 [ 648.132425][T12564] do_fast_syscall_32+0x6b/0xd0 [ 648.137259][T12564] do_SYSENTER_32+0x73/0x90 [ 648.141745][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.148046][T12564] [ 648.150355][T12564] Uninit was stored to memory at: [ 648.155363][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 648.161065][T12564] __msan_chain_origin+0x50/0x90 [ 648.166022][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 648.171118][T12564] get_compat_msghdr+0x108/0x2b0 [ 648.176041][T12564] do_recvmmsg+0xdbb/0x22c0 [ 648.180528][T12564] __sys_recvmmsg+0x5dd/0x610 [ 648.185192][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 648.191243][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 648.197379][T12564] __do_fast_syscall_32+0x2af/0x480 [ 648.202562][T12564] do_fast_syscall_32+0x6b/0xd0 [ 648.207483][T12564] do_SYSENTER_32+0x73/0x90 [ 648.211976][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.218283][T12564] [ 648.220593][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 648.227271][T12564] do_recvmmsg+0xbf/0x22c0 [ 648.231669][T12564] do_recvmmsg+0xbf/0x22c0 [ 648.525689][T12564] not chained 2050000 origins [ 648.530429][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 648.539091][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.549137][T12564] Call Trace: [ 648.552431][T12564] dump_stack+0x21c/0x280 [ 648.556768][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 648.562492][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 648.568559][T12564] ? kmsan_get_metadata+0x116/0x180 [ 648.573764][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 648.579591][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 648.585671][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 648.591049][T12564] ? kmsan_get_metadata+0x116/0x180 [ 648.596252][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 648.601800][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 648.607879][T12564] ? _copy_from_user+0x201/0x310 [ 648.612843][T12564] ? kmsan_get_metadata+0x116/0x180 [ 648.618071][T12564] __msan_chain_origin+0x50/0x90 [ 648.623018][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 648.628147][T12564] get_compat_msghdr+0x108/0x2b0 [ 648.633094][T12564] do_recvmmsg+0xdbb/0x22c0 [ 648.637603][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 648.643423][T12564] ? kmsan_get_metadata+0x116/0x180 [ 648.648623][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 648.654515][T12564] ? kmsan_get_metadata+0x116/0x180 [ 648.659734][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 648.665365][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 648.670648][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 648.675409][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 648.680166][T12564] __sys_recvmmsg+0x5dd/0x610 [ 648.684847][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 648.690911][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 648.697060][T12564] __do_fast_syscall_32+0x2af/0x480 [ 648.702255][T12564] do_fast_syscall_32+0x6b/0xd0 [ 648.707098][T12564] do_SYSENTER_32+0x73/0x90 [ 648.711617][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.717930][T12564] RIP: 0023:0xf7fc1549 [ 648.721980][T12564] Code: Bad RIP value. [ 648.726030][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 648.734424][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 648.742381][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 648.750339][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.758298][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 648.766604][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.774573][T12564] Uninit was stored to memory at: [ 648.779588][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 648.785294][T12564] __msan_chain_origin+0x50/0x90 [ 648.790233][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 648.795429][T12564] get_compat_msghdr+0x108/0x2b0 [ 648.800353][T12564] do_recvmmsg+0xdbb/0x22c0 [ 648.804841][T12564] __sys_recvmmsg+0x5dd/0x610 [ 648.809502][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 648.815556][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 648.821697][T12564] __do_fast_syscall_32+0x2af/0x480 [ 648.826880][T12564] do_fast_syscall_32+0x6b/0xd0 [ 648.831716][T12564] do_SYSENTER_32+0x73/0x90 [ 648.836205][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.842505][T12564] [ 648.844822][T12564] Uninit was stored to memory at: [ 648.849839][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 648.855543][T12564] __msan_chain_origin+0x50/0x90 [ 648.860465][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 648.865561][T12564] get_compat_msghdr+0x108/0x2b0 [ 648.870490][T12564] do_recvmmsg+0xdbb/0x22c0 [ 648.874979][T12564] __sys_recvmmsg+0x5dd/0x610 [ 648.879649][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 648.885703][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 648.891841][T12564] __do_fast_syscall_32+0x2af/0x480 [ 648.897027][T12564] do_fast_syscall_32+0x6b/0xd0 [ 648.901882][T12564] do_SYSENTER_32+0x73/0x90 [ 648.906376][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.912676][T12564] [ 648.914985][T12564] Uninit was stored to memory at: [ 648.919996][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 648.925699][T12564] __msan_chain_origin+0x50/0x90 [ 648.930621][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 648.935724][T12564] get_compat_msghdr+0x108/0x2b0 [ 648.940651][T12564] do_recvmmsg+0xdbb/0x22c0 [ 648.945143][T12564] __sys_recvmmsg+0x5dd/0x610 [ 648.949809][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 648.955868][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 648.962006][T12564] __do_fast_syscall_32+0x2af/0x480 [ 648.967190][T12564] do_fast_syscall_32+0x6b/0xd0 [ 648.972024][T12564] do_SYSENTER_32+0x73/0x90 [ 648.976514][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.982816][T12564] [ 648.985234][T12564] Uninit was stored to memory at: [ 648.990244][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 648.995946][T12564] __msan_chain_origin+0x50/0x90 [ 649.000868][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 649.005984][T12564] get_compat_msghdr+0x108/0x2b0 [ 649.010905][T12564] do_recvmmsg+0xdbb/0x22c0 [ 649.015391][T12564] __sys_recvmmsg+0x5dd/0x610 [ 649.020052][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 649.026105][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 649.032243][T12564] __do_fast_syscall_32+0x2af/0x480 [ 649.037439][T12564] do_fast_syscall_32+0x6b/0xd0 [ 649.042289][T12564] do_SYSENTER_32+0x73/0x90 [ 649.046780][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 649.053080][T12564] [ 649.055388][T12564] Uninit was stored to memory at: [ 649.060397][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 649.066100][T12564] __msan_chain_origin+0x50/0x90 [ 649.071022][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 649.076118][T12564] get_compat_msghdr+0x108/0x2b0 [ 649.081041][T12564] do_recvmmsg+0xdbb/0x22c0 [ 649.085546][T12564] __sys_recvmmsg+0x5dd/0x610 [ 649.090208][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 649.096258][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 649.102398][T12564] __do_fast_syscall_32+0x2af/0x480 [ 649.107581][T12564] do_fast_syscall_32+0x6b/0xd0 [ 649.112419][T12564] do_SYSENTER_32+0x73/0x90 [ 649.116906][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 649.123206][T12564] [ 649.125513][T12564] Uninit was stored to memory at: [ 649.130519][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 649.136222][T12564] __msan_chain_origin+0x50/0x90 [ 649.141145][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 649.146240][T12564] get_compat_msghdr+0x108/0x2b0 [ 649.151169][T12564] do_recvmmsg+0xdbb/0x22c0 [ 649.155657][T12564] __sys_recvmmsg+0x5dd/0x610 [ 649.160319][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 649.166372][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 649.172512][T12564] __do_fast_syscall_32+0x2af/0x480 [ 649.177714][T12564] do_fast_syscall_32+0x6b/0xd0 [ 649.182551][T12564] do_SYSENTER_32+0x73/0x90 [ 649.187043][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 649.193344][T12564] [ 649.195674][T12564] Uninit was stored to memory at: [ 649.200688][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 649.206393][T12564] __msan_chain_origin+0x50/0x90 [ 649.211317][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 649.216411][T12564] get_compat_msghdr+0x108/0x2b0 [ 649.221330][T12564] do_recvmmsg+0xdbb/0x22c0 [ 649.225838][T12564] __sys_recvmmsg+0x5dd/0x610 [ 649.230503][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 649.236555][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 649.242696][T12564] __do_fast_syscall_32+0x2af/0x480 [ 649.247880][T12564] do_fast_syscall_32+0x6b/0xd0 [ 649.252717][T12564] do_SYSENTER_32+0x73/0x90 [ 649.257205][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 649.263507][T12564] [ 649.265820][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 649.272483][T12564] do_recvmmsg+0xbf/0x22c0 [ 649.276908][T12564] do_recvmmsg+0xbf/0x22c0 [ 649.632194][T12560] not chained 2060000 origins [ 649.636992][T12560] CPU: 0 PID: 12560 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 649.645648][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.655687][T12560] Call Trace: [ 649.658972][T12560] dump_stack+0x21c/0x280 [ 649.665048][T12560] kmsan_internal_chain_origin+0x6f/0x130 [ 649.670762][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 649.676819][T12560] ? kmsan_get_metadata+0x116/0x180 [ 649.682007][T12560] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 649.687804][T12560] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 649.693860][T12560] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 649.699227][T12560] ? kmsan_get_metadata+0x116/0x180 [ 649.704417][T12560] ? kmsan_set_origin_checked+0x95/0xf0 [ 649.709952][T12560] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 649.716012][T12560] ? _copy_from_user+0x201/0x310 [ 649.720939][T12560] ? kmsan_get_metadata+0x116/0x180 [ 649.726128][T12560] __msan_chain_origin+0x50/0x90 [ 649.731148][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 649.736259][T12560] get_compat_msghdr+0x108/0x2b0 [ 649.741192][T12560] do_recvmmsg+0xdbb/0x22c0 [ 649.745696][T12560] ? kmsan_get_metadata+0x116/0x180 [ 649.750884][T12560] ? kmsan_get_metadata+0x116/0x180 [ 649.756099][T12560] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 649.761982][T12560] ? kmsan_get_metadata+0x116/0x180 [ 649.767173][T12560] ? kmsan_internal_set_origin+0x75/0xb0 [ 649.772797][T12560] ? __msan_poison_alloca+0xf0/0x120 [ 649.778072][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 649.782820][T12560] ? __sys_recvmmsg+0xbb/0x610 [ 649.787573][T12560] __sys_recvmmsg+0x5dd/0x610 [ 649.792249][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 649.798315][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 649.804458][T12560] __do_fast_syscall_32+0x2af/0x480 [ 649.809666][T12560] do_fast_syscall_32+0x6b/0xd0 [ 649.814515][T12560] do_SYSENTER_32+0x73/0x90 [ 649.819011][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 649.825324][T12560] RIP: 0023:0xf7fc1549 [ 649.829368][T12560] Code: Bad RIP value. [ 649.833412][T12560] RSP: 002b:00000000f55bb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 649.841811][T12560] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 649.849771][T12560] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 649.857726][T12560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 649.865681][T12560] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 649.873636][T12560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 649.881601][T12560] Uninit was stored to memory at: [ 649.886614][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 649.892316][T12560] __msan_chain_origin+0x50/0x90 [ 649.897237][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 649.902330][T12560] get_compat_msghdr+0x108/0x2b0 [ 649.907251][T12560] do_recvmmsg+0xdbb/0x22c0 [ 649.911738][T12560] __sys_recvmmsg+0x5dd/0x610 [ 649.916398][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 649.922447][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 649.928584][T12560] __do_fast_syscall_32+0x2af/0x480 [ 649.933766][T12560] do_fast_syscall_32+0x6b/0xd0 [ 649.938620][T12560] do_SYSENTER_32+0x73/0x90 [ 649.943110][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 649.949411][T12560] [ 649.951717][T12560] Uninit was stored to memory at: [ 649.956724][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 649.962428][T12560] __msan_chain_origin+0x50/0x90 [ 649.967346][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 649.972439][T12560] get_compat_msghdr+0x108/0x2b0 [ 649.977359][T12560] do_recvmmsg+0xdbb/0x22c0 [ 649.981848][T12560] __sys_recvmmsg+0x5dd/0x610 [ 649.986511][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 649.992564][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 649.998709][T12560] __do_fast_syscall_32+0x2af/0x480 [ 650.003896][T12560] do_fast_syscall_32+0x6b/0xd0 [ 650.008731][T12560] do_SYSENTER_32+0x73/0x90 [ 650.013218][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 650.019518][T12560] [ 650.021828][T12560] Uninit was stored to memory at: [ 650.026838][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 650.032540][T12560] __msan_chain_origin+0x50/0x90 [ 650.037464][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 650.042562][T12560] get_compat_msghdr+0x108/0x2b0 [ 650.047482][T12560] do_recvmmsg+0xdbb/0x22c0 [ 650.051966][T12560] __sys_recvmmsg+0x5dd/0x610 [ 650.056626][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 650.062679][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 650.068833][T12560] __do_fast_syscall_32+0x2af/0x480 [ 650.074032][T12560] do_fast_syscall_32+0x6b/0xd0 [ 650.078869][T12560] do_SYSENTER_32+0x73/0x90 [ 650.083360][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 650.089661][T12560] [ 650.091981][T12560] Uninit was stored to memory at: [ 650.096990][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 650.102695][T12560] __msan_chain_origin+0x50/0x90 [ 650.107619][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 650.112828][T12560] get_compat_msghdr+0x108/0x2b0 [ 650.117748][T12560] do_recvmmsg+0xdbb/0x22c0 [ 650.122234][T12560] __sys_recvmmsg+0x5dd/0x610 [ 650.126899][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 650.132985][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 650.139128][T12560] __do_fast_syscall_32+0x2af/0x480 [ 650.144311][T12560] do_fast_syscall_32+0x6b/0xd0 [ 650.149147][T12560] do_SYSENTER_32+0x73/0x90 [ 650.153637][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 650.159936][T12560] [ 650.162257][T12560] Uninit was stored to memory at: [ 650.167262][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 650.172981][T12560] __msan_chain_origin+0x50/0x90 [ 650.177906][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 650.183002][T12560] get_compat_msghdr+0x108/0x2b0 [ 650.187926][T12560] do_recvmmsg+0xdbb/0x22c0 [ 650.192414][T12560] __sys_recvmmsg+0x5dd/0x610 [ 650.197088][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 650.203142][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 650.209281][T12560] __do_fast_syscall_32+0x2af/0x480 [ 650.214468][T12560] do_fast_syscall_32+0x6b/0xd0 [ 650.219303][T12560] do_SYSENTER_32+0x73/0x90 [ 650.223797][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 650.230099][T12560] [ 650.232410][T12560] Uninit was stored to memory at: [ 650.237423][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 650.243128][T12560] __msan_chain_origin+0x50/0x90 [ 650.248066][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 650.253160][T12560] get_compat_msghdr+0x108/0x2b0 [ 650.258084][T12560] do_recvmmsg+0xdbb/0x22c0 [ 650.262573][T12560] __sys_recvmmsg+0x5dd/0x610 [ 650.267236][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 650.273292][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 650.279434][T12560] __do_fast_syscall_32+0x2af/0x480 [ 650.284617][T12560] do_fast_syscall_32+0x6b/0xd0 [ 650.289452][T12560] do_SYSENTER_32+0x73/0x90 [ 650.293944][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 650.300245][T12560] [ 650.302553][T12560] Uninit was stored to memory at: [ 650.307561][T12560] kmsan_internal_chain_origin+0xad/0x130 [ 650.313266][T12560] __msan_chain_origin+0x50/0x90 [ 650.318190][T12560] __get_compat_msghdr+0x6db/0x9d0 [ 650.323286][T12560] get_compat_msghdr+0x108/0x2b0 [ 650.328210][T12560] do_recvmmsg+0xdbb/0x22c0 [ 650.332700][T12560] __sys_recvmmsg+0x5dd/0x610 [ 650.337361][T12560] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 650.343414][T12560] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 650.349565][T12560] __do_fast_syscall_32+0x2af/0x480 [ 650.354861][T12560] do_fast_syscall_32+0x6b/0xd0 [ 650.359702][T12560] do_SYSENTER_32+0x73/0x90 [ 650.364195][T12560] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 650.370500][T12560] [ 650.372817][T12560] Local variable ----msg_sys@do_recvmmsg created at: [ 650.379483][T12560] do_recvmmsg+0xbf/0x22c0 [ 650.383887][T12560] do_recvmmsg+0xbf/0x22c0 [ 650.675172][T12564] not chained 2070000 origins [ 650.679874][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 650.688526][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.698563][T12564] Call Trace: [ 650.701849][T12564] dump_stack+0x21c/0x280 [ 650.706173][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 650.711882][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 650.717937][T12564] ? kmsan_get_metadata+0x116/0x180 [ 650.723126][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 650.728922][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 650.734994][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 650.740360][T12564] ? kmsan_get_metadata+0x116/0x180 [ 650.745548][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 650.751083][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 650.757142][T12564] ? _copy_from_user+0x201/0x310 [ 650.763377][T12564] ? kmsan_get_metadata+0x116/0x180 [ 650.768566][T12564] __msan_chain_origin+0x50/0x90 [ 650.773499][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 650.778617][T12564] get_compat_msghdr+0x108/0x2b0 [ 650.783553][T12564] do_recvmmsg+0xdbb/0x22c0 [ 650.788050][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 650.793855][T12564] ? kmsan_get_metadata+0x116/0x180 [ 650.799047][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 650.804934][T12564] ? kmsan_get_metadata+0x116/0x180 [ 650.810121][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 650.815760][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 650.821036][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 650.825784][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 650.830538][T12564] __sys_recvmmsg+0x5dd/0x610 [ 650.835214][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 650.841280][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 650.847427][T12564] __do_fast_syscall_32+0x2af/0x480 [ 650.852621][T12564] do_fast_syscall_32+0x6b/0xd0 [ 650.857481][T12564] do_SYSENTER_32+0x73/0x90 [ 650.861982][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 650.868295][T12564] RIP: 0023:0xf7fc1549 [ 650.872342][T12564] Code: Bad RIP value. [ 650.876390][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 650.884787][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 650.892744][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 650.900701][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.908658][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 650.916618][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 650.924583][T12564] Uninit was stored to memory at: [ 650.929598][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 650.935304][T12564] __msan_chain_origin+0x50/0x90 [ 650.940232][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 650.945332][T12564] get_compat_msghdr+0x108/0x2b0 [ 650.950262][T12564] do_recvmmsg+0xdbb/0x22c0 [ 650.954753][T12564] __sys_recvmmsg+0x5dd/0x610 [ 650.959421][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 650.965476][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 650.971615][T12564] __do_fast_syscall_32+0x2af/0x480 [ 650.976804][T12564] do_fast_syscall_32+0x6b/0xd0 [ 650.981639][T12564] do_SYSENTER_32+0x73/0x90 [ 650.986146][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 650.992447][T12564] [ 650.994763][T12564] Uninit was stored to memory at: [ 650.999776][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 651.005479][T12564] __msan_chain_origin+0x50/0x90 [ 651.010400][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.015499][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.020421][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.024908][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.029570][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.035626][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.041767][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.046964][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.051801][T12564] do_SYSENTER_32+0x73/0x90 [ 651.056289][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.062593][T12564] [ 651.064905][T12564] Uninit was stored to memory at: [ 651.069914][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 651.075617][T12564] __msan_chain_origin+0x50/0x90 [ 651.080542][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.085642][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.090567][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.095056][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.099737][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.105793][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.111951][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.117136][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.121971][T12564] do_SYSENTER_32+0x73/0x90 [ 651.126461][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.132764][T12564] [ 651.135077][T12564] Uninit was stored to memory at: [ 651.140091][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 651.145798][T12564] __msan_chain_origin+0x50/0x90 [ 651.150724][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.155822][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.160745][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.165242][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.169905][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.175957][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.182098][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.187281][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.192114][T12564] do_SYSENTER_32+0x73/0x90 [ 651.196626][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.202951][T12564] [ 651.205265][T12564] Uninit was stored to memory at: [ 651.210277][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 651.215981][T12564] __msan_chain_origin+0x50/0x90 [ 651.220924][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.226023][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.230944][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.235430][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.240095][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.246152][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.252293][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.257477][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.262350][T12564] do_SYSENTER_32+0x73/0x90 [ 651.266842][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.273145][T12564] [ 651.275455][T12564] Uninit was stored to memory at: [ 651.280465][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 651.286171][T12564] __msan_chain_origin+0x50/0x90 [ 651.291107][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.296206][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.301133][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.305624][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.310314][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.316369][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.322508][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.327693][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.332531][T12564] do_SYSENTER_32+0x73/0x90 [ 651.337020][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.343324][T12564] [ 651.345635][T12564] Uninit was stored to memory at: [ 651.350649][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 651.356351][T12564] __msan_chain_origin+0x50/0x90 [ 651.361295][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.366392][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.371315][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.375802][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.380469][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.386526][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.392677][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.397862][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.402701][T12564] do_SYSENTER_32+0x73/0x90 [ 651.407194][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.413509][T12564] [ 651.415828][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 651.422498][T12564] do_recvmmsg+0xbf/0x22c0 [ 651.426910][T12564] do_recvmmsg+0xbf/0x22c0 [ 651.622734][T12564] not chained 2080000 origins [ 651.627468][T12564] CPU: 0 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 651.636120][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.646163][T12564] Call Trace: [ 651.649446][T12564] dump_stack+0x21c/0x280 [ 651.653772][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 651.659485][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 651.665543][T12564] ? kmsan_get_metadata+0x116/0x180 [ 651.670747][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 651.676544][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 651.682603][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 651.687976][T12564] ? kmsan_get_metadata+0x116/0x180 [ 651.693197][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 651.698734][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 651.704793][T12564] ? _copy_from_user+0x201/0x310 [ 651.709734][T12564] ? kmsan_get_metadata+0x116/0x180 [ 651.714918][T12564] __msan_chain_origin+0x50/0x90 [ 651.719846][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.724958][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.729895][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.734389][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 651.740195][T12564] ? kmsan_get_metadata+0x116/0x180 [ 651.745388][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 651.751283][T12564] ? kmsan_get_metadata+0x116/0x180 [ 651.756477][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 651.762116][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 651.767392][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 651.772143][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 651.776911][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.781581][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.787640][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.793785][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.798981][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.803912][T12564] do_SYSENTER_32+0x73/0x90 [ 651.808417][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.814729][T12564] RIP: 0023:0xf7fc1549 [ 651.818777][T12564] Code: Bad RIP value. [ 651.822827][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 651.831241][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 651.839198][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 651.848110][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 651.856084][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 651.864041][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 651.872006][T12564] Uninit was stored to memory at: [ 651.877021][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 651.882730][T12564] __msan_chain_origin+0x50/0x90 [ 651.887672][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.892770][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.897696][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.902188][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.906855][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.912941][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.919085][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.924271][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.929210][T12564] do_SYSENTER_32+0x73/0x90 [ 651.933701][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.940003][T12564] [ 651.942313][T12564] Uninit was stored to memory at: [ 651.947326][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 651.953032][T12564] __msan_chain_origin+0x50/0x90 [ 651.957958][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 651.963055][T12564] get_compat_msghdr+0x108/0x2b0 [ 651.967975][T12564] do_recvmmsg+0xdbb/0x22c0 [ 651.972460][T12564] __sys_recvmmsg+0x5dd/0x610 [ 651.977143][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 651.983197][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 651.989335][T12564] __do_fast_syscall_32+0x2af/0x480 [ 651.994520][T12564] do_fast_syscall_32+0x6b/0xd0 [ 651.999358][T12564] do_SYSENTER_32+0x73/0x90 [ 652.003850][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.010420][T12564] [ 652.012732][T12564] Uninit was stored to memory at: [ 652.017744][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 652.023449][T12564] __msan_chain_origin+0x50/0x90 [ 652.028376][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 652.033473][T12564] get_compat_msghdr+0x108/0x2b0 [ 652.038406][T12564] do_recvmmsg+0xdbb/0x22c0 [ 652.042898][T12564] __sys_recvmmsg+0x5dd/0x610 [ 652.047581][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 652.053636][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 652.060921][T12564] __do_fast_syscall_32+0x2af/0x480 [ 652.066107][T12564] do_fast_syscall_32+0x6b/0xd0 [ 652.070940][T12564] do_SYSENTER_32+0x73/0x90 [ 652.075431][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.081735][T12564] [ 652.084135][T12564] Uninit was stored to memory at: [ 652.089147][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 652.094866][T12564] __msan_chain_origin+0x50/0x90 [ 652.099797][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 652.104899][T12564] get_compat_msghdr+0x108/0x2b0 [ 652.109825][T12564] do_recvmmsg+0xdbb/0x22c0 [ 652.114320][T12564] __sys_recvmmsg+0x5dd/0x610 [ 652.118991][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 652.125052][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 652.131196][T12564] __do_fast_syscall_32+0x2af/0x480 [ 652.136388][T12564] do_fast_syscall_32+0x6b/0xd0 [ 652.141236][T12564] do_SYSENTER_32+0x73/0x90 [ 652.145734][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.152039][T12564] [ 652.154354][T12564] Uninit was stored to memory at: [ 652.159372][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 652.165080][T12564] __msan_chain_origin+0x50/0x90 [ 652.170005][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 652.175117][T12564] get_compat_msghdr+0x108/0x2b0 [ 652.180040][T12564] do_recvmmsg+0xdbb/0x22c0 [ 652.184530][T12564] __sys_recvmmsg+0x5dd/0x610 [ 652.189197][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 652.195254][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 652.201400][T12564] __do_fast_syscall_32+0x2af/0x480 [ 652.206585][T12564] do_fast_syscall_32+0x6b/0xd0 [ 652.211419][T12564] do_SYSENTER_32+0x73/0x90 [ 652.215903][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.222203][T12564] [ 652.224517][T12564] Uninit was stored to memory at: [ 652.229542][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 652.235257][T12564] __msan_chain_origin+0x50/0x90 [ 652.240180][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 652.245279][T12564] get_compat_msghdr+0x108/0x2b0 [ 652.250201][T12564] do_recvmmsg+0xdbb/0x22c0 [ 652.254702][T12564] __sys_recvmmsg+0x5dd/0x610 [ 652.259408][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 652.265481][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 652.271623][T12564] __do_fast_syscall_32+0x2af/0x480 [ 652.276809][T12564] do_fast_syscall_32+0x6b/0xd0 [ 652.281651][T12564] do_SYSENTER_32+0x73/0x90 [ 652.286141][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.292442][T12564] [ 652.294752][T12564] Uninit was stored to memory at: [ 652.299764][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 652.305472][T12564] __msan_chain_origin+0x50/0x90 [ 652.310396][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 652.315495][T12564] get_compat_msghdr+0x108/0x2b0 [ 652.320420][T12564] do_recvmmsg+0xdbb/0x22c0 [ 652.324908][T12564] __sys_recvmmsg+0x5dd/0x610 [ 652.329573][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 652.335629][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 652.341772][T12564] __do_fast_syscall_32+0x2af/0x480 [ 652.346960][T12564] do_fast_syscall_32+0x6b/0xd0 [ 652.351798][T12564] do_SYSENTER_32+0x73/0x90 [ 652.356287][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.362590][T12564] [ 652.364904][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 652.371568][T12564] do_recvmmsg+0xbf/0x22c0 [ 652.375972][T12564] do_recvmmsg+0xbf/0x22c0 [ 652.645033][T12564] not chained 2090000 origins [ 652.649738][T12564] CPU: 1 PID: 12564 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 652.658420][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.668494][T12564] Call Trace: [ 652.671810][T12564] dump_stack+0x21c/0x280 [ 652.676149][T12564] kmsan_internal_chain_origin+0x6f/0x130 [ 652.681893][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 652.687962][T12564] ? kmsan_get_metadata+0x116/0x180 [ 652.693163][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 652.698972][T12564] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 652.705041][T12564] ? unix_dgram_recvmsg+0x19d4/0x1b20 [ 652.710421][T12564] ? kmsan_get_metadata+0x116/0x180 [ 652.715622][T12564] ? kmsan_set_origin_checked+0x95/0xf0 [ 652.721171][T12564] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 652.727240][T12564] ? _copy_from_user+0x201/0x310 [ 652.732180][T12564] ? kmsan_get_metadata+0x116/0x180 [ 652.737385][T12564] __msan_chain_origin+0x50/0x90 [ 652.742333][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 652.747468][T12564] get_compat_msghdr+0x108/0x2b0 [ 652.752437][T12564] do_recvmmsg+0xdbb/0x22c0 [ 652.756948][T12564] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 652.762777][T12564] ? kmsan_get_metadata+0x116/0x180 [ 652.767982][T12564] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 652.773881][T12564] ? kmsan_get_metadata+0x116/0x180 [ 652.779084][T12564] ? kmsan_internal_set_origin+0x75/0xb0 [ 652.784721][T12564] ? __msan_poison_alloca+0xf0/0x120 [ 652.790012][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 652.794779][T12564] ? __sys_recvmmsg+0xbb/0x610 [ 652.799550][T12564] __sys_recvmmsg+0x5dd/0x610 [ 652.804246][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 652.810322][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 652.816476][T12564] __do_fast_syscall_32+0x2af/0x480 [ 652.821680][T12564] do_fast_syscall_32+0x6b/0xd0 [ 652.826531][T12564] do_SYSENTER_32+0x73/0x90 [ 652.831059][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.837380][T12564] RIP: 0023:0xf7fc1549 [ 652.841439][T12564] Code: Bad RIP value. [ 652.845501][T12564] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 652.853928][T12564] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020002bc0 [ 652.861896][T12564] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 652.869924][T12564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.877894][T12564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 652.885863][T12564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.893841][T12564] Uninit was stored to memory at: [ 652.898872][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 652.904697][T12564] __msan_chain_origin+0x50/0x90 [ 652.909628][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 652.914717][T12564] get_compat_msghdr+0x108/0x2b0 [ 652.919631][T12564] do_recvmmsg+0xdbb/0x22c0 [ 652.924121][T12564] __sys_recvmmsg+0x5dd/0x610 [ 652.928777][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 652.934817][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 652.940950][T12564] __do_fast_syscall_32+0x2af/0x480 [ 652.946124][T12564] do_fast_syscall_32+0x6b/0xd0 [ 652.951159][T12564] do_SYSENTER_32+0x73/0x90 [ 652.955644][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.961941][T12564] [ 652.964245][T12564] Uninit was stored to memory at: [ 652.969369][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 652.975193][T12564] __msan_chain_origin+0x50/0x90 [ 652.980110][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 652.985200][T12564] get_compat_msghdr+0x108/0x2b0 [ 652.990118][T12564] do_recvmmsg+0xdbb/0x22c0 [ 652.994600][T12564] __sys_recvmmsg+0x5dd/0x610 [ 652.999256][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 653.005305][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 653.011444][T12564] __do_fast_syscall_32+0x2af/0x480 [ 653.016619][T12564] do_fast_syscall_32+0x6b/0xd0 [ 653.021586][T12564] do_SYSENTER_32+0x73/0x90 [ 653.026124][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 653.032422][T12564] [ 653.034726][T12564] Uninit was stored to memory at: [ 653.039729][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 653.045431][T12564] __msan_chain_origin+0x50/0x90 [ 653.050347][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 653.055437][T12564] get_compat_msghdr+0x108/0x2b0 [ 653.060350][T12564] do_recvmmsg+0xdbb/0x22c0 [ 653.064832][T12564] __sys_recvmmsg+0x5dd/0x610 [ 653.069486][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 653.075531][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 653.081675][T12564] __do_fast_syscall_32+0x2af/0x480 [ 653.086882][T12564] do_fast_syscall_32+0x6b/0xd0 [ 653.091724][T12564] do_SYSENTER_32+0x73/0x90 [ 653.096206][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 653.102509][T12564] [ 653.104815][T12564] Uninit was stored to memory at: [ 653.109870][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 653.115569][T12564] __msan_chain_origin+0x50/0x90 [ 653.120489][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 653.125584][T12564] get_compat_msghdr+0x108/0x2b0 [ 653.130499][T12564] do_recvmmsg+0xdbb/0x22c0 [ 653.134980][T12564] __sys_recvmmsg+0x5dd/0x610 [ 653.139636][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 653.145681][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 653.151820][T12564] __do_fast_syscall_32+0x2af/0x480 [ 653.156996][T12564] do_fast_syscall_32+0x6b/0xd0 [ 653.161826][T12564] do_SYSENTER_32+0x73/0x90 [ 653.166306][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 653.172600][T12564] [ 653.174900][T12564] Uninit was stored to memory at: [ 653.179901][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 653.185596][T12564] __msan_chain_origin+0x50/0x90 [ 653.190512][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 653.195596][T12564] get_compat_msghdr+0x108/0x2b0 [ 653.200509][T12564] do_recvmmsg+0xdbb/0x22c0 [ 653.204989][T12564] __sys_recvmmsg+0x5dd/0x610 [ 653.209644][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 653.215687][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 653.221820][T12564] __do_fast_syscall_32+0x2af/0x480 [ 653.226994][T12564] do_fast_syscall_32+0x6b/0xd0 [ 653.231822][T12564] do_SYSENTER_32+0x73/0x90 [ 653.236303][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 653.242599][T12564] [ 653.244901][T12564] Uninit was stored to memory at: [ 653.249921][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 653.255616][T12564] __msan_chain_origin+0x50/0x90 [ 653.260530][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 653.265619][T12564] get_compat_msghdr+0x108/0x2b0 [ 653.270550][T12564] do_recvmmsg+0xdbb/0x22c0 [ 653.275036][T12564] __sys_recvmmsg+0x5dd/0x610 [ 653.279882][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 653.285930][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 653.292078][T12564] __do_fast_syscall_32+0x2af/0x480 [ 653.297256][T12564] do_fast_syscall_32+0x6b/0xd0 [ 653.302084][T12564] do_SYSENTER_32+0x73/0x90 [ 653.306567][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 653.312863][T12564] [ 653.315168][T12564] Uninit was stored to memory at: [ 653.320169][T12564] kmsan_internal_chain_origin+0xad/0x130 [ 653.325866][T12564] __msan_chain_origin+0x50/0x90 [ 653.330778][T12564] __get_compat_msghdr+0x6db/0x9d0 [ 653.335868][T12564] get_compat_msghdr+0x108/0x2b0 [ 653.340783][T12564] do_recvmmsg+0xdbb/0x22c0 [ 653.345259][T12564] __sys_recvmmsg+0x5dd/0x610 [ 653.349911][T12564] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 653.355954][T12564] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 653.362105][T12564] __do_fast_syscall_32+0x2af/0x480 [ 653.367278][T12564] do_fast_syscall_32+0x6b/0xd0 [ 653.372105][T12564] do_SYSENTER_32+0x73/0x90 [ 653.376600][T12564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 653.382892][T12564] [ 653.385196][T12564] Local variable ----msg_sys@do_recvmmsg created at: [ 653.391842][T12564] do_recvmmsg+0xbf/0x22c0 [ 653.396230][T12564] do_recvmmsg+0xbf/0x22c0 17:55:37 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private1, 0x0, 0x4}, &(0x7f0000000280)=0x20) pwritev(r1, &(0x7f0000001280)=[{&(0x7f0000000000)="744ba0175e8fb93e934d05252cab23836601edecb23886ed666ba4df884775728bdbcf4e0c91f612259c348c165d97ffc25ef33d25ea5a62e5d59be3f93c88b2369e37fec4e7c139e12b1d1460f54b543c8b93a0b2e918187a27de5fe9cde3eed8a486cb24dd1c5d84fac6f91d62540a25f576abaa3dc733a2383d96c38799034e9b96", 0x83}, {&(0x7f00000000c0)="a72000b65613c77cb3ac7e405cdb8d884a93894f1b4ed9af9a8308e44ba2cc8051d84251f12b0d8123b96e799029c744d752fef177f60321c64024409ba86927672faa5657e38c9d7e352695f29d034845ae3e54da463ae08f19620968f17f606c4f57192ff6ac3f4f5761", 0x6b}, {&(0x7f0000000140)="37697c1f24ad4803c4f87ed96ee010bf", 0x10}, {&(0x7f0000000180)="70ddb2dd725c45d5afce60006f97a3e9ec17366e3923fe1d3d15cda2be8c00664a7f4eb84b266fc9007ba3ca28446f29eed98fd38a90a1b5f6d7955d76ba62bcf667b0000d154d29a92ce68253dfc95385634eff1717d9a5267150b88c695691e85c498376e7e1a4048720a2e11a0b5ec4b05b0d018bef86f814f90130d3155f0cb520e84d5b014398edee1f8642df90056c03561961208b9ae251a09b3d8d971612029d05d00f615822fc60e0be9483d6bcd49c5af15cd7e59af2e6e1a62f80cbd5b5fe6ffb28aaff9c7a2f559d4307a76e909def35e557fff615e1901466ba90603ca127058e58cd65e00b", 0xec}, {&(0x7f0000000280)="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", 0x1000}], 0x5, 0x0, 0x8) getsockname(r0, 0x0, 0x0) 17:55:37 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:55:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:55:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:55:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 17:55:37 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 654.066288][ T1209] tipc: TX() has been purged, node left! [ 654.249932][T12625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12625 comm=syz-executor.0 17:55:37 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:55:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 17:55:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 655.009417][T12619] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:38 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) [ 655.010531][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 17:55:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}], 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 655.853524][T12644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36236 sclass=netlink_route_socket pid=12644 comm=syz-executor.0 [ 656.065046][T12642] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 656.078627][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 656.881842][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 657.612270][ T1209] device hsr_slave_0 left promiscuous mode [ 657.619122][ T1209] device hsr_slave_1 left promiscuous mode [ 657.627921][ T1209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.635699][ T1209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.645857][ T1209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.654251][ T1209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.664171][ T1209] device bridge_slave_1 left promiscuous mode [ 657.670555][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.687076][ T1209] device bridge_slave_0 left promiscuous mode [ 657.693536][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.711061][ T1209] device veth1_macvtap left promiscuous mode [ 657.717233][ T1209] device veth0_macvtap left promiscuous mode [ 657.723686][ T1209] device veth1_vlan left promiscuous mode [ 657.729534][ T1209] device veth0_vlan left promiscuous mode [ 660.018579][ T1209] team0 (unregistering): Port device team_slave_1 removed [ 660.036642][ T1209] team0 (unregistering): Port device team_slave_0 removed [ 660.052596][ T1209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.070183][ T1209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.149550][ T1209] bond0 (unregistering): Released all slaves [ 660.225049][T12660] IPVS: ftp: loaded support on port[0] = 21 [ 660.427388][T12660] chnl_net:caif_netlink_parms(): no params data found [ 660.540384][T12660] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.547731][T12660] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.557567][T12660] device bridge_slave_0 entered promiscuous mode [ 660.574445][T12660] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.581876][T12660] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.591677][T12660] device bridge_slave_1 entered promiscuous mode [ 660.655597][T12660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.674668][T12660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.727442][T12660] team0: Port device team_slave_0 added [ 660.742508][T12660] team0: Port device team_slave_1 added [ 660.797024][T12660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.804448][T12660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.830796][T12660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.848090][T12660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.856018][T12660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.882502][T12660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.955413][T12660] device hsr_slave_0 entered promiscuous mode [ 660.965429][T12660] device hsr_slave_1 entered promiscuous mode [ 660.974328][T12660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.982621][T12660] Cannot create hsr debugfs directory [ 661.272735][T12660] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.279878][T12660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.287773][T12660] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.295152][T12660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.306115][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.316877][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.414600][T12660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.437515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.445949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.465166][T12660] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.483833][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 661.493683][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.503049][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.510252][ T9119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.552451][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 661.562352][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.571533][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.578790][ T9119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.587851][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 661.598843][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 661.609702][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 661.620167][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 661.651703][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 661.661600][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 661.670731][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 661.682027][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 661.691106][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 661.700387][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 661.710107][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 661.726308][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 661.766452][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 661.774216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.798127][T12660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.906006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 661.916545][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 661.972327][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 661.981762][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 661.997468][T12660] device veth0_vlan entered promiscuous mode [ 662.005625][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 662.015099][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 662.040085][T12660] device veth1_vlan entered promiscuous mode [ 662.095282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 662.104061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 662.113676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 662.123687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 662.141680][T12660] device veth0_macvtap entered promiscuous mode [ 662.157598][T12660] device veth1_macvtap entered promiscuous mode [ 662.192196][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.202729][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.212731][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.223363][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.233372][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.243969][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.254004][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.264615][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.277526][T12660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.286285][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 662.295879][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 662.305366][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 662.315586][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 662.334240][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.344872][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.355743][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.366374][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.376447][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.387029][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.397049][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.407623][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.420285][T12660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.429390][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 662.439490][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:55:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 17:55:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed6b52f99cfbf4c087f719b4d04fe7ff7fc6e5539b586e0e8b546a9b646e94370890e0878fdb1ac6e7049b63b4956c409a472a5b67f3988f7ef31952a981ffe8d178708c523c921b1b484b0a169b71d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4da0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71bfc31870262f5e801119242ca5b6bfc821e7e20002451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713cf39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987b67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b356f243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0004000000008000bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c13800000000492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5307000000d92dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cfffffffffffff001034ef655b253ca509383815b1b6fc6522d4e2d48604665fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b5f668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d767d9a7a508ae54a3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11dbe200000000000000bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f71c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cdcffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f362815687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bf0129165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b937fe43c06d21e35810d8fe98b0000ea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36de00bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad7084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b33ad61b4f65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 17:55:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000008c8d07050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001806866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00001040000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 17:55:47 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)) 17:55:47 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100000008000000"], 0x44}}, 0x0) 17:55:47 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = fcntl$dupfd(r5, 0x406, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) faccessat(r6, &(0x7f0000000040)='./file0\x00', 0x3) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000000)={0xe, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r10, 0x0, r11) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r12, 0xc0305602, &(0x7f00000000c0)={0x0, 0x4e53, 0x2013}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="f9ffff7f000000ebffff080000001c00048004000a"], 0x30}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x2b4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6832}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6fa, @dev={0xfe, 0x80, [], 0x2b}, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @ipv4={[], [], @broadcast}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5380, @ipv4={[], [], @rand_addr=0x64010101}, 0x451e}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @loopback, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x614600}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x2b4}}, 0x24040001) [ 664.210014][T12878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 664.259082][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:47 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f00000011c0)={'syz', 0x3}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) [ 664.628175][T12898] ===================================================== [ 664.635178][T12898] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 664.642646][T12898] CPU: 1 PID: 12898 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 664.651416][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.661468][T12898] Call Trace: [ 664.664773][T12898] dump_stack+0x21c/0x280 [ 664.669120][T12898] kmsan_report+0xf7/0x1e0 [ 664.673555][T12898] kmsan_internal_check_memory+0x238/0x3d0 [ 664.679375][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.684588][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.689821][T12898] kmsan_copy_to_user+0x81/0x90 [ 664.694678][T12898] _copy_to_user+0x18e/0x260 [ 664.699340][T12898] move_addr_to_user+0x3de/0x670 [ 664.704302][T12898] __sys_getsockname+0x407/0x5e0 [ 664.709291][T12898] ? put_old_timespec32+0x231/0x2d0 [ 664.714630][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.719849][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.725062][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.730273][T12898] __se_sys_getsockname+0x91/0xb0 [ 664.735313][T12898] __ia32_sys_getsockname+0x4a/0x70 [ 664.740524][T12898] __do_fast_syscall_32+0x2af/0x480 [ 664.745742][T12898] do_fast_syscall_32+0x6b/0xd0 [ 664.750615][T12898] do_SYSENTER_32+0x73/0x90 [ 664.755132][T12898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 664.761462][T12898] RIP: 0023:0xf7fb1549 [ 664.765524][T12898] Code: Bad RIP value. [ 664.769590][T12898] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016f [ 664.778514][T12898] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 664.786475][T12898] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.794437][T12898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.802403][T12898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 664.810364][T12898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.818333][T12898] [ 664.820653][T12898] Local variable ----address@__sys_getsockname created at: [ 664.827846][T12898] __sys_getsockname+0x91/0x5e0 [ 664.832690][T12898] __sys_getsockname+0x91/0x5e0 [ 664.837802][T12898] [ 664.840117][T12898] Bytes 2-3 of 20 are uninitialized [ 664.845298][T12898] Memory access of size 20 starts at ffff88802679fd50 [ 664.852042][T12898] Data copied to user address 0000000020000080 [ 664.858176][T12898] ===================================================== [ 664.865092][T12898] Disabling lock debugging due to kernel taint [ 664.871231][T12898] Kernel panic - not syncing: panic_on_warn set ... [ 664.877869][T12898] CPU: 1 PID: 12898 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 664.887913][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.897951][T12898] Call Trace: [ 664.901237][T12898] dump_stack+0x21c/0x280 [ 664.905613][T12898] panic+0x4d7/0xef7 [ 664.909512][T12898] ? add_taint+0x17c/0x210 [ 664.913925][T12898] kmsan_report+0x1df/0x1e0 [ 664.918430][T12898] kmsan_internal_check_memory+0x238/0x3d0 [ 664.924225][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.929413][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.934608][T12898] kmsan_copy_to_user+0x81/0x90 [ 664.939457][T12898] _copy_to_user+0x18e/0x260 [ 664.944049][T12898] move_addr_to_user+0x3de/0x670 [ 664.948987][T12898] __sys_getsockname+0x407/0x5e0 [ 664.953925][T12898] ? put_old_timespec32+0x231/0x2d0 [ 664.959116][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.964303][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.969491][T12898] ? kmsan_get_metadata+0x116/0x180 [ 664.974684][T12898] __se_sys_getsockname+0x91/0xb0 [ 664.979703][T12898] __ia32_sys_getsockname+0x4a/0x70 [ 664.984893][T12898] __do_fast_syscall_32+0x2af/0x480 [ 664.990086][T12898] do_fast_syscall_32+0x6b/0xd0 [ 664.994934][T12898] do_SYSENTER_32+0x73/0x90 [ 664.999433][T12898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.005745][T12898] RIP: 0023:0xf7fb1549 [ 665.009967][T12898] Code: Bad RIP value. [ 665.014019][T12898] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016f [ 665.022436][T12898] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 665.030396][T12898] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.038354][T12898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.046316][T12898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 665.054276][T12898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.063008][T12898] ------------[ cut here ]------------ [ 665.068445][T12898] kernel BUG at mm/kmsan/kmsan.h:87! [ 665.073709][T12898] invalid opcode: 0000 [#1] SMP [ 665.078545][T12898] CPU: 1 PID: 12898 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 665.088573][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.098610][T12898] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 665.105196][T12898] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 665.124776][T12898] RSP: 0018:ffff88802679f778 EFLAGS: 00010046 [ 665.130821][T12898] RAX: 0000000000000002 RBX: 0000000004d600b5 RCX: 0000000004d600b5 [ 665.138853][T12898] RDX: 0000000000000000 RSI: 0000000000000080 RDI: ffff88802679f85c [ 665.147234][T12898] RBP: ffff88802679f820 R08: ffffea000000000f R09: ffff88812fffa000 [ 665.155179][T12898] R10: 0000000000000002 R11: ffff88804d771e80 R12: 0000000000000000 [ 665.163126][T12898] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 665.171073][T12898] FS: 0000000000000000(0000) GS:ffff88812fd00000(0063) knlGS:00000000f55abb40 [ 665.179973][T12898] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 665.186534][T12898] CR2: 00007fbe01f87ef0 CR3: 000000005eaa5000 CR4: 00000000001406e0 [ 665.194481][T12898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 665.202427][T12898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 665.210389][T12898] Call Trace: [ 665.213681][T12898] kmsan_check_memory+0xd/0x10 [ 665.218529][T12898] iowrite8+0x99/0x300 [ 665.222634][T12898] pvpanic_panic_notify+0xb7/0xe0 [ 665.227650][T12898] ? pvpanic_mmio_remove+0x60/0x60 [ 665.232761][T12898] atomic_notifier_call_chain+0x123/0x290 [ 665.238463][T12898] panic+0x560/0xef7 [ 665.242341][T12898] ? add_taint+0x17c/0x210 [ 665.246734][T12898] kmsan_report+0x1df/0x1e0 [ 665.251226][T12898] kmsan_internal_check_memory+0x238/0x3d0 [ 665.257005][T12898] ? kmsan_get_metadata+0x116/0x180 [ 665.262179][T12898] ? kmsan_get_metadata+0x116/0x180 [ 665.267355][T12898] kmsan_copy_to_user+0x81/0x90 [ 665.272180][T12898] _copy_to_user+0x18e/0x260 [ 665.276754][T12898] move_addr_to_user+0x3de/0x670 [ 665.281674][T12898] __sys_getsockname+0x407/0x5e0 [ 665.286592][T12898] ? put_old_timespec32+0x231/0x2d0 [ 665.291765][T12898] ? kmsan_get_metadata+0x116/0x180 [ 665.296953][T12898] ? kmsan_get_metadata+0x116/0x180 [ 665.302131][T12898] ? kmsan_get_metadata+0x116/0x180 [ 665.307313][T12898] __se_sys_getsockname+0x91/0xb0 [ 665.312314][T12898] __ia32_sys_getsockname+0x4a/0x70 [ 665.317506][T12898] __do_fast_syscall_32+0x2af/0x480 [ 665.322687][T12898] do_fast_syscall_32+0x6b/0xd0 [ 665.327517][T12898] do_SYSENTER_32+0x73/0x90 [ 665.331998][T12898] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.338297][T12898] RIP: 0023:0xf7fb1549 [ 665.342331][T12898] Code: Bad RIP value. [ 665.346380][T12898] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016f [ 665.354778][T12898] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 665.362725][T12898] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.370676][T12898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.378619][T12898] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 665.386575][T12898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.394527][T12898] Modules linked in: [ 665.398414][T12898] ---[ end trace c79a164120592f6e ]--- [ 665.403850][T12898] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 665.410424][T12898] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 665.430111][T12898] RSP: 0018:ffff88802679f778 EFLAGS: 00010046 [ 665.436156][T12898] RAX: 0000000000000002 RBX: 0000000004d600b5 RCX: 0000000004d600b5 [ 665.444104][T12898] RDX: 0000000000000000 RSI: 0000000000000080 RDI: ffff88802679f85c [ 665.452050][T12898] RBP: ffff88802679f820 R08: ffffea000000000f R09: ffff88812fffa000 [ 665.459997][T12898] R10: 0000000000000002 R11: ffff88804d771e80 R12: 0000000000000000 [ 665.467986][T12898] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 665.475937][T12898] FS: 0000000000000000(0000) GS:ffff88812fd00000(0063) knlGS:00000000f55abb40 [ 665.484839][T12898] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 665.491397][T12898] CR2: 00007fbe01f87ef0 CR3: 000000005eaa5000 CR4: 00000000001406e0 [ 665.499365][T12898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 665.507313][T12898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 665.515260][T12898] Kernel panic - not syncing: Fatal exception [ 665.521955][T12898] Kernel Offset: disabled [ 665.526273][T12898] Rebooting in 86400 seconds..